Privacy policy

DRP's GapLens fit form, hosted on DRP's secure intake site, collects a short, limited set of information:

• Contact name and email address.
• Relationship category, such as self, parent or caregiver, family member, advocate, or professional.
• State or territory.
• Review type, such as a service plan, notice, education plan, or insurance decision.
• Limited yes or no answers about timing and whether a written notice exists, and an optional deadline date.

The public site instructs people not to submit protected health information, diagnoses, case or member numbers, medical narratives, or documents. The fit form does not accept uploads and does not include a narrative field. If sensitive details are sent anyway, DRP will handle them with care but the public site is not designed for them and is not represented as a HIPAA-compliant environment.

Contact and operational data submitted through this site may be processed and stored through the website host and through DRP’s Supabase workflow database, which DRP uses to track incoming requests and evaluate service fit.

Payment for GapLens is processed by Stripe. DRP does not receive or store full card numbers. Stripe processes payment details under its own terms and privacy practices.

Sensitive client documents are requested only after fit and scope have been reviewed and a written service agreement is in place. Those documents are handled through DRP’s approved secure Dropbox workflow, not through this public website or ordinary email.

DRP uses the information it collects to:

• Respond to requests and questions.
• Evaluate whether GapLens is a fit and define the scope of a review.
• Provide the agreed service and deliver the written report.
• Maintain reasonable operational, billing, and security records.
• Comply with applicable law.

DRP does not sell personal information. DRP shares information only with the service providers needed to operate the service, such as the website host, the workflow database provider, the secure document platform, and the payment processor, and when required by law or to protect legal rights and safety.

DRP uses reasonable administrative and technical safeguards appropriate to a small professional service. No website, email system, or online service can be guaranteed to be completely secure, and DRP does not promise absolute security. The public site is not a clinical or HIPAA-covered environment.

To ask a question about this policy, request a copy of the information DRP holds about you, or ask DRP to delete it, email Contact@disabilityresourcepartners.org. Please do not include records, diagnoses, or case numbers in that email.

DRP may update this policy as the service develops. The effective date at the top of this page shows when the current version took effect.