Privacy Policy.

This Privacy Policy explains how SSG Management LLC collects, uses, discloses, and protects information through its websites, screening platform, communications, training resources, and related services. It applies to website visitors, screening participants, parents and guardians, authorized school and healthcare personnel, and organizational clients.

Information We Collect

The information we collect depends on how a person or organization uses the services. It may include:

Contact and account information, such as name, email address, telephone number, organization, role, login credentials, and communication preferences.

Screening information, such as answers, scores, risk indicators, completion status, referral information, and information entered by a participant, parent, guardian, teacher, staff member, clinician, or other authorized user.

Demographic and administrative information, such as date of birth, age range, grade, school, patient or student identifiers, appointment information, and the organization sponsoring or requesting the screening.

Health, behavioral, educational, developmental, safety, wellness, substance-use, pain, sleep, fall-risk, or related information provided through a screening or follow-up workflow.

Technical information, such as IP address, browser, device, operating system, log data, security events, pages viewed, approximate location derived from an IP address, and cookies or similar technologies.

Payment and transaction information when a person or organization purchases an eligible service. Payment-card information may be processed by a third-party payment processor rather than stored by SSG Management.

Communications, support requests, feedback, training records, consent records, and other information submitted to us.

How We Use Information

Provide, operate, configure, and support the screening platform and related services.

Score and organize screening responses and make authorized results available to the sponsoring organization or its designated personnel.

Support implementation, training, technical assistance, referrals, requested follow-up, and service communications.

Authenticate users, maintain security, prevent misuse, investigate incidents, and enforce agreements.

Process payments and maintain business, compliance, consent, and transaction records.

Improve platform reliability, accessibility, workflow, and user support using information that is aggregated or de-identified when reasonably practicable.

Comply with applicable law, valid legal process, contractual duties, and requests necessary to protect a person from a serious and imminent threat when permitted by law.

How We Disclose Information

We may disclose information to the organization that sponsored or requested the screening and to its authorized personnel, as described in the applicable consent, notice, agreement, or law. Depending on the setting, that may include a school, district, university, healthcare provider, clinic, hospital, correctional organization, employer wellness program, parent or guardian, or another designated recipient.

We may also disclose information to service providers that support hosting, security, communications, payment processing, analytics, technical support, or other business functions. Those providers may use information only for authorized services and subject to appropriate contractual restrictions. We may disclose information in a merger, financing, reorganization, or sale, subject to applicable privacy obligations. We may disclose information when required by law or when reasonably necessary to protect rights, safety, systems, or users.

SSG Management does not sell screening responses or protected student or health information. We do not use screening responses for targeted advertising.

Healthcare Information and HIPAA

HIPAA applies only when the information and parties fall within the scope of that law. When SSG Management provides services to a HIPAA-covered entity or business associate and receives protected health information on its behalf, SSG Management handles that information under the applicable business associate agreement and the covered entity's instructions. A healthcare provider's Notice of Privacy Practices controls the provider's use of protected health information. Website information that is not protected health information may be governed by this Privacy Policy and other applicable privacy laws.

Student Information and FERPA

When SSG Management handles education records for a school or educational agency, it does so under the school's instructions, the applicable agreement, and the Family Educational Rights and Privacy Act when FERPA applies. The school remains responsible for its annual FERPA notice, determining authorized access, responding to requests to inspect or amend education records, and obtaining consent when required. SSG Management does not use education records for independent advertising or unrelated commercial purposes.

Children and Minors

The services may be used by minors only through an authorized school, healthcare provider, parent, guardian, or other legally authorized arrangement. SSG Management does not knowingly invite children under 13 to create independent general website accounts. When parental consent is legally required, the sponsoring organization or SSG Management must obtain it before collecting the child's information. Age alone does not determine every consent rule; applicable law, the setting, the type of service, and the sponsoring organization's authority also matter.

Cookies and Analytics

We may use cookies, local storage, and similar technologies for sign-in, security, preferences, performance, and basic analytics. We do not place advertising cookies on screening-response pages. More information appears in the Cookie Policy.

Retention and Security

We retain information for the period required to provide services, satisfy the sponsoring organization's documented instructions, meet legal and contractual duties, resolve disputes, maintain security, and enforce agreements. Retention periods vary by data type and setting. At the end of the applicable period, information may be deleted, returned, or de-identified as required by contract and law.

We use administrative, technical, and physical safeguards designed to protect information. No system can guarantee absolute security. Users must protect credentials, use authorized devices and networks, and promptly report suspected unauthorized access.

Privacy Choices and Requests

Subject to applicable law and the role of the sponsoring organization, a person may request access, correction, deletion, or information about certain personal data. For student records or healthcare records maintained for an organization, contact that school or healthcare provider first because it controls the record and may need to verify and direct the request. We may verify identity, retain information required by law, and deny or limit a request when an exception applies.

Changes and Contact

We may update this Privacy Policy. The effective date will show when it was last revised. Material changes will be communicated as required by law. Questions or privacy requests may be sent to Sara@ssgwellness.com. SSG Management LLC is located in Canton, Texas.