Privacy Policy

Who we are

CGOS is the system CommonGood uses to run its volunteer and staff work at CommonGood Medical, our free clinic, and CommonGood Thrift. It lives at cgos.commongoodmedical.org. This policy covers CGOS only. It is separate from the CommonGood Medical and CommonGood Thrift websites, which have their own policies.

CGOS is not a medical record. We never put patient information in it.

What we collect, and why

We collect only what we need to run CGOS and keep CommonGood Medical and CommonGood Thrift working smoothly:

• About you: your name, date of birth, mailing address, email address, mobile phone number and emergency contact. We use these to know who you are and to reach you, or someone close to you in an emergency.
• Your background: your education, the kind of work you'd like to do, your usual availability and any skills or languages you tell us about. We use these to place you where you can help most.
• Your sign-in: your Username and, for staff, your password and authenticator setup. We record when you sign in and out, so we can keep your account safe.
• Documents you give us: for example a photo ID, licences and certificates, and health records the clinic requires of the people who work there, such as an immunization record or a TB test. We use these to confirm you can safely do the work you signed up for.
• Checks we run: a background check, with your written consent, and, for licensed clinicians, the credentialing the clinic needs before you can work in a clinical role.
• Your work with us: your training, the shifts you offer and are scheduled for, and the messages we send you and you send us.

What we never do

• We never sell your information.
• We never share it with anyone for their own use , such as marketing. We don't use it for advertising.
• We never collect more than CGOS needs.

Who helps us run CGOS

A few trusted services handle information for us, only to do the job we give them and under our instructions:

• Cloudflare hosts CGOS and stores its records and documents, and sends our emails.
• Twilio sends our text messages.
• A background screening company runs the background check you consent to.

When a licensed clinician is credentialed, our credentialing office shares what the law and our insurance require with the clinic's Clinical Services Committee, the CommonGood Board, and the Health Resources and Services Administration (HRSA), the federal agency that provides the clinic's malpractice coverage.

We share information with anyone else only when the law requires it.

How we protect it

• CGOS encrypts your personal information and every document before storing it.
• People see only what their job needs. A scheduler sees your name and availability, not your documents. Health records, background check results and credentialing files can be opened only by the few roles that need them.
• Staff sign in with a password and an authenticator code, and are signed out after 20 minutes without activity.

How long we keep it

• Your record and documents remain a part of CommonGood Medical and CommonGood Thrift's permanent records as required by law.
• Activity logs and message logs are kept for seven years , then deleted automatically.

Your choices

• You may review or update the information and documents you have provided us at any time through the CGOS portal.
• Choose how we reach you — email, text or both — in your Portal.
• Stop texts at any time by replying STOP . We'll email you instead.

Questions

Contact the Volunteer Coordinator if you volunteer, or Human Resources if you work for CommonGood. Replying to any text or email they send you reaches them.

Changes to this policy

When we change this policy, we post the new version here with its date.