Pathways Health

Privacy Policy

Last updated: 12/16/2025

Pathways Health ("Pathways", "we", "us", or "our"), an initiative by Fourbic, operates the website pathways.fourbic.com. We are committed to protecting your privacy and ensuring you have a positive experience on our website.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Site includes:

  • Personal Data: Personally identifiable information, such as your name, email address, and telephone number, that you voluntarily give to us when you register with the Site or when you choose to participate in various activities related to the Site.
  • Facility Data: Information related to your healthcare facility, including facility name, location, operational characteristics, and responses to climate resilience assessments. This data is collected to generate your resilience action plan and for aggregated analysis.
  • Derivative Data: Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.

2. Use of Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

  • Create and manage your account.
  • Generate and deliver your Facility Resilience Action Plan.
  • Compile anonymous statistical data and analysis for use internally or with third parties to improve climate resilience strategies.
  • Email you regarding your account, assessment results, or updates.
  • Respond to product and customer service requests.

3. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

  • By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
  • Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including:
    • Authentication: Clerk (Identity management)
    • Email Services: Resend (Transactional emails)
    • Database & CRM: Notion (Partner data management) and Supabase/Postgres (Application data)
    • Hosting & Analytics: Vercel (Web hosting and usage analytics)

4. GDPR Compliance (European Union)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Fourbic aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

Your rights include:

  • The right to access, update or to delete the information we have on you.
  • The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
  • The right to object. You have the right to object to our processing of your Personal Data.
  • The right of restriction. You have the right to request that we restrict the processing of your personal information.
  • The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
  • The right to withdraw consent. You also have the right to withdraw your consent at any time where Fourbic relied on your consent to process your personal information.

5. CCPA Compliance (United States)

Under the California Consumer Privacy Act (CCPA) and other state privacy laws, US residents may have specific rights regarding their personal information, including:

  • The right to know what personal information is being collected about them.
  • The right to know whether their personal information is sold or disclosed and to whom.
  • The right to say no to the sale of personal information.
  • The right to access their personal information.
  • The right to equal service and price, even if they exercise their privacy rights.

6. Privacy Act (Australia & New Zealand)

We adhere to the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and the Information Privacy Principles (IPPs) under the Privacy Act 2020 (NZ).

We will only collect personal information that is reasonably necessary for our functions or activities. We will take reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete and up-to-date. You have the right to request access to your personal information and to request its correction.

7. Kenya Data Protection Compliance (DPA 2019)

As a Kenyan-based entity, we are fully committed to compliance with the Data Protection Act, 2019. We process your personal data based on your consent and the necessity to provide our services.

Under the Act, you have the following rights:

  • Right to be informed: You have the right to be informed of the use to which your personal data is to be put.
  • Right of access: You have the right to access your personal data in our custody.
  • Right to object: You have the right to object to the processing of all or part of your personal data.
  • Right to correction: You have the right to correction of false or misleading data.
  • Right to deletion: You have the right to deletion of false or misleading data about you.

Cross-Border Data Transfer: Your data is stored on secure servers hosted by Vercel and Supabase, which may be located outside Kenya. We ensure appropriate safeguards are in place to protect your data during such transfers, in accordance with the Act.

You have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been infringed.

8. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

compliance@fourbic.com