Privacy Policy

National Veteran Health Survey | veteranhealthregistry.org 
A Program of Blue Ridge Mountain Foundation, Inc.
Effective Date: April 12, 2026

1. Introduction

The National Veteran Health Survey, a program of Blue Ridge Mountain Foundation, Inc. ("Foundation," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you visit veteranhealthregistry.org. By using the Site, you consent to these practices. If you do not agree, do not use the Site.

This Site is not operated by a covered entity as defined under the Health Insurance Portability and Accountability Act (HIPAA). Submissions to this registry are voluntary, self-reported, and non-clinical. HIPAA does not govern this Site or the data collected here.

2. Information We Collect

Voluntary Health Data: We collect military service details (unit, location) and health conditions. To protect identity, we use 3-year bands for dates and age groups. We do not intentionally collect names or Social Security Numbers. Free-text fields should not include any personally identifying information. Any personally identifiable information inadvertently submitted will be purged upon discovery.

Automatic Technical Data: We collect IP addresses, browser types, and session metadata strictly for security, diagnostic, and performance purposes. This technical data is maintained separately from health survey submissions and is never linked to or associated with any health data collected through this Site.

No Tracking Standard: We do not intentionally track individual identities, but we have no control over third-party internet intermediaries involved in web traffic.

Age Restriction: This Site is not directed at children under the age of 13. We do not knowingly collect information from anyone under 13. If you believe a minor has submitted information, contact us immediately via the form on this Site.

What We Do Not Store

The following are explicitly not stored in our registry database:

Your name, phone number, or mailing address.

Your Social Security Number or any government-issued identifier.

Any information that directly links your identity to your health or service data.

Email addresses are collected only in two limited contexts: (1) one-time submission verification, after which the address is permanently deleted, and (2) voluntary subscription to condition or location updates, which is stored in a database entirely separate from all health and service data and is never linked to any survey record.

The only persistent identifier linked to a health record is an anonymous token that is not connected to any personal information.

3. How We Use Information and Data Sharing

We use information to maintain the registry, generate advocacy reports, and prevent abuse. De-identified, aggregated survey results may be displayed publicly on this Site for informational and advocacy purposes. Any data shared with third parties, researchers, or partner organizations is shared in de-identified, aggregated form only, under written agreements prohibiting re-identification. We do not sell participant data. We reserve the right to utilize technical data, including but not limited to IP addresses and metadata, to identify, block, and take legal action against abuse.

4. Data Methodology and Statistical Transparency

All data in this registry is self-reported and is not clinically verified, peer-reviewed, or certified by any medical authority. The Foundation publishes a plain-language Data Methodology Statement at veteranhealthregistry.org/methodology that explains how data is collected, stored, banded, deduplicated, weighted, and presented in statistical reports. Key disclosures include:

Year banding: Birth year and service years are stored and reported in three-year bands, not exact years, to reduce re-identification risk.

Deduplication limitations: Because submissions are anonymous and token-based, exact deduplication is not possible. The registry may contain duplicate entries from participants who submitted more than once. Statistical outputs are presented with this limitation disclosed.

Weighting: Where applicable, statistical comparisons against general population data such as CDC or NHANES datasets are noted and the methodology for any weighting or normalization is described in the Data Methodology Statement.

Self-reported nature: No submission has been clinically verified. Data is presented as participant-reported and should be interpreted accordingly by researchers, attorneys, and advocates using this data to support claims or policy arguments.

5. Security

We implement reasonable administrative, technical, and physical safeguards to protect data collected through this Site, including encryption of data in transit (TLS), access controls limiting data access to authorized personnel only, and periodic security reviews. No system is completely secure, and we cannot guarantee absolute security, but we are committed to protecting the integrity of this registry.

6. Your Data Rights

Although submissions are anonymous, if you believe you submitted personally identifiable information and wish to request its review or deletion, you may contact us via the form on this Site. We will make reasonable efforts to locate and purge any such information. You also have the right to opt out of any future communications from us at any time by contacting us directly. Residents of California and other states with applicable privacy laws may have additional rights regarding their personal data. We will respond within 30 days.

7. Affiliate Programs and Third-Party Links

We may participate in affiliate programs and receive commissions for referrals. Interaction with third-party sites is subject to their own privacy policies. We do not endorse third-party services linked on this Site.

8. Medical and Legal Disclaimer

Data on this Site is for informational and advocacy purposes only. It is not medical or legal advice. We are not a government agency, and this survey does not constitute a formal VA claim.

9. Data Retention and Log Management

Participant Data: De-identified health data is retained indefinitely, or until the Foundation dissolves or the program concludes, for research and advocacy purposes.

Technical Logs: IP addresses and session metadata are collected for security purposes only and are not linked to health submissions. We do not retain technical logs beyond what is necessary to ensure security and prosecute Bad Actors. Logs are periodically purged when no longer required for investigative or security purposes.

10. Accuracy of Comparative Data

The Foundation utilizes third-party datasets such as CDC and NHANES for context. We do not warrant that these external datasets are error-free or current. Comparative results are for advocacy purposes and are not definitive medical conclusions.

11. Governing Law

This Privacy Policy is governed by the laws of the State of North Carolina.

12. Contact Us

For questions, data requests, or to report suspicious activity, please contact us via the form on veteranhealthregistry.org.

National Veteran Health Survey is a program of Blue Ridge Mountain Foundation, Inc., a North Carolina 501(c)(3) public charity (EIN: 88-2645356).