PRIVACY POLICY
Privacy Policy
4YouandMe
Last Updated: October 12, 2026
Version: 1.1
1. Introduction
4YouandMe ("we," "us," or "our") is a nonprofit organization dedicated to advancing health research through digital technologies and partnerships.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our public website at https://4youandme.org (the "Website").
We are committed to protecting your privacy and being transparent about how information collected through our Website is used.
Scope of This Policy
This Privacy Policy applies specifically to our public-facing Website, including information collected through website analytics, cookies, and communications with visitors.
This policy does not govern personal or health-related information collected through 4YouandMe research studies, mobile applications, or participant platforms. These activities are governed by separate study-specific privacy policies, informed consent documents, and applicable research agreements.
If you participate in a 4YouandMe research study, please refer to the privacy documentation provided for that study.
2. Organization Information and Data Controller
4YouandMe is responsible for determining how and why personal information is processed through this Website.
Organization: 4YouandMe
Registered Address:
185 Great Neck Road, Suite 406
Great Neck, NY 11021
United States
Privacy Contact: dataportal@4youandme.org
For questions regarding this Privacy Policy or the processing of personal information through the Website, please contact us using the information above.
3. Information We Collect
Our Website is primarily informational. We collect limited information necessary to operate, maintain, secure, and understand how visitors use the Website.
3.1 Information Collected Automatically
When you visit our Website, certain technical information may be collected automatically, including:
- IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited and time spent on the Website
- Referring website or source
- Date and time of website access
- Cookie identifiers and similar technical information
This information may be collected through standard web server logs, cookies, and analytics technologies.
3.2 Information You Provide Voluntarily
If you contact us by email or through a communication feature available on the Website, we may collect:
- Your name
- Your email address
- The contents of your message
- Any additional information you choose to provide
We use this information to respond to your inquiry and maintain relevant communications.
3.3 Sensitive Personal Information
Our public Website is not intended to collect sensitive personal information, including medical records, health measurements, or research participant data.
Personal information collected in connection with research studies is handled separately under the applicable study's privacy policy and consent documentation.
We ask visitors not to submit sensitive personal or medical information through general website communication channels unless specifically instructed to do so through an appropriate, secure process.
4. How We Use Your Information
We use information collected through the Website for the following purposes:
Website Operations and Security
- Operating and maintaining the Website
- Ensuring website functionality and accessibility
- Identifying technical issues
- Protecting the Website against unauthorized access, misuse, and security threats
Website Analytics and Improvement
- Understanding how visitors interact with the Website
- Measuring website traffic and usage patterns
- Identifying opportunities to improve website content, navigation, and performance
Communications
- Responding to questions or requests
- Providing information requested by visitors
- Managing privacy-related inquiries
We do not sell or rent personal information collected through the Website to third parties.
Legal Bases for Processing
Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on the following legal bases, as appropriate:
- Legitimate interests: To operate, maintain, secure, and improve our Website and respond to inquiries, where those interests are not overridden by individuals' rights and freedoms.
- Consent: For optional analytics cookies and similar tracking technologies where consent is required by applicable law.
- Legal obligations: Where processing is necessary to comply with applicable legal requirements.
Where we rely on consent, you may withdraw that consent at any time.
5. Third-Party Services
We use third-party service providers to support the operation, maintenance, and analysis of our Website.
Google Analytics
We use Google Analytics, a web analytics service provided by Google, to understand how visitors interact with our Website.
Google Analytics may collect information such as pages visited, session duration, approximate geographic location, device information, and cookie-based identifiers.
We use this information to understand website traffic and improve the Website's content and functionality.
Information collected through Google Analytics may be processed by Google in accordance with its applicable terms and privacy practices.
For more information, please visit:
How Google Uses Information from Sites and Apps
Other Service Providers
We may also use third-party providers for website hosting, maintenance, security, and related technical services.
These providers may process limited technical or personal information as necessary to perform their services.
Where applicable, we seek to ensure that providers handle personal information in accordance with appropriate contractual, security, and privacy requirements.
We may also disclose information where required by applicable law or a valid legal process.
6. Cookies and Tracking Technologies
Our Website uses cookies and similar technologies to support website functionality and understand website usage.
Cookies are small text files stored on your device when you visit a website. They can help websites operate properly, remember preferences, and measure visitor activity.
Types of Cookies
Essential Cookies
These cookies are necessary for basic website functionality, security, and the operation of features such as remembering privacy preferences.
Analytics Cookies
We use analytics technologies, including Google Analytics, to understand how visitors use the Website. These technologies may collect information about page views, user interactions, device characteristics, and website navigation.
Analytics information may include pseudonymous identifiers and should not necessarily be considered fully anonymous.
Managing Your Cookie Preferences
Where required by applicable law, we request your consent before activating non-essential cookies or similar tracking technologies.
You can accept or reject optional cookies through the cookie consent controls provided on our Website. You may also change or withdraw your preferences using the Website's cookie settings controls.
You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect some website functionality.
For additional information about cookies, visit www.aboutcookies.org.
7. Data Retention
We retain personal information collected through the Website only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to applicable legal requirements.
Retention depends on the type of information and its purpose:
- Website analytics: Analytics information is retained according to the retention settings configured in our analytics services.
- Website technical and security logs: Records are retained for periods reasonably necessary for website operation, troubleshooting, security monitoring, and related administrative purposes.
- Communications: Information provided through inquiries is retained as needed to respond, maintain relevant records, and address follow-up requests.
- Cookie preferences: Preference information may be retained to remember your selections until the relevant cookie or stored setting expires, is cleared, or is updated.
We may retain information for longer periods where necessary to meet applicable legal obligations or resolve disputes.
When information is no longer required, we take appropriate steps to delete or anonymize it.
8. Data Security
We take reasonable technical and organizational measures to protect personal information collected through the Website against unauthorized access, disclosure, alteration, or loss.
These measures may include:
- Encrypted connections using HTTPS
- Access controls for website administration
- Website maintenance and security updates
- Monitoring and mitigation of potential security risks
Although we take appropriate precautions, no method of transmitting or storing information over the internet is completely secure.
If we become aware of a personal data breach, we will assess the incident and notify relevant authorities or affected individuals where required by applicable law.
If you believe there is a security concern involving your personal information, please contact dataportal@4youandme.org.
9. International Visitors and Data Transfers
4YouandMe is based in the United States, and our Website is accessible to visitors from other countries.
Personal information collected through the Website may be processed or stored in the United States or in other countries where our website service providers operate.
Privacy and data protection laws may differ between jurisdictions.
Where applicable law requires specific safeguards for international transfers of personal information, we will use an appropriate legal transfer mechanism.
Visitors may contact dataportal@4youandme.org for further information about applicable international data transfer arrangements.
Our international research activities are subject to separate study-specific privacy documentation and data protection arrangements.
10. Your Privacy Rights
Depending on your location and applicable data protection laws, you may have certain rights regarding your personal information.
These may include:
- Right of Access: Request information about the personal data we hold about you.
- Right to Correction: Request correction of inaccurate or incomplete personal information.
- Right to Deletion: Request deletion of personal information, subject to applicable legal exceptions.
- Right to Restrict Processing: Request that we limit certain uses of your personal information.
- Right to Data Portability: Where applicable, request personal information in a structured, commonly used, machine-readable format.
- Right to Withdraw Consent: Withdraw consent for processing activities that rely on your consent.
- Right to Object: Where applicable, object to certain processing activities based on legitimate interests.
If applicable data protection law provides you with a right to object to processing based on legitimate interests, you may exercise that right by contacting us using the details below.
We will review and respond to privacy requests in accordance with applicable legal requirements. Some rights are subject to limitations and exceptions.
Exercising Your Rights
To submit a privacy-related request, please contact:
We may need to verify your identity before responding to certain requests.
Complaints
If you have concerns about how your personal information is handled, we encourage you to contact us first so that we can address your inquiry.
Depending on your location and the applicable law, you may also have the right to submit a complaint to a relevant data protection authority, including the UK's Information Commissioner's Office (ICO) where UK data protection law applies.
Website: https://ico.org.uk
11. Children's Privacy
Our public Website is intended to provide general information about 4YouandMe and its activities and is not specifically directed toward children.
We do not knowingly solicit personal information from children through the Website.
If you believe a child has provided personal information through the Website in circumstances that may violate applicable law, please contact us so that we can review the matter and take appropriate action.
Research studies involving minors, where applicable, are governed by separate protocols, consent requirements, and privacy documentation.
12. External Websites and Research Platforms
Our Website may contain links to third-party websites, external services, and research-related applications or platforms.
These websites and services may have their own privacy policies and data processing practices.
We encourage visitors to review the applicable privacy policies before providing personal information to external services.
Where links lead to 4YouandMe research studies or participant platforms, the collection and processing of study-related personal information is governed by the relevant study's privacy documentation rather than this general Website Privacy Policy.
13. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our website operations, data processing practices, or applicable legal requirements.
When updates are made, we will revise the "Last Updated" date at the top of this page.
Where required by applicable law, we will provide additional notice of material changes.
We encourage visitors to review this page periodically for updates.
14. Contact Us
If you have questions about this Privacy Policy, the information collected through our Website, or your privacy rights, please contact us:
4YouandMe
Email: dataportal@4youandme.org
Mailing Address:
185 Great Neck Road, Suite 406
Great Neck, NY 11021
United States
Website: https://4youandme.org