Security & Privacy
Last updated: May 27, 2026
This page explains how the Harris Health Careers website (harrishealthjobs.org) handles your information when you browse job listings, watch employee videos, or interact with the site. We aim to follow practices informed by the SOC 2 Trust Services Criteria and aligned with the principles of the GDPR. We do not claim formal SOC 2 certification or legal GDPR compliance for this careers microsite.
1. What data we collect
Information you give us
- If you choose Continue with Google, we receive your name, email address, and profile picture from Google to display a personalized session on the site.
- If you email [email protected] for hiring-process assistance, that email is handled by Harris Health Talent Acquisition.
Information collected automatically
- Standard web-server log data: IP address, browser/user-agent, referring URL, requested page, and timestamp.
- Analytics events via Google Tag Manager / Google Analytics (page views, link clicks).
- Short-lived PHP session cookie used to keep you signed in if you used Google login.
2. How we use the information
- To deliver the website (render pages, play videos, display job listings).
- To measure how visitors use the site so we can improve content and performance.
- To respond to support and accessibility requests sent to Harris Health Talent Acquisition.
We do not sell visitor data. We do not run advertising on this site.
3. How credentials and secrets are handled
- API credentials for third-party services (job listings, video listings) live in server-side PHP code and are never sent to the browser.
- Google OAuth client secrets are stored server-side and used only during the login callback.
- Session data is server-side; only an opaque session ID is set as a cookie.
- The site is served over HTTPS and redirects HTTP requests to HTTPS at the web-server level.
4. Access controls
- Production access to the hosting environment is limited to authorized site administrators.
- Source code changes are reviewed before deployment.
- Cache files and configuration directories are protected from public access at the web-server layer.
5. Third-party services and vendors
This site relies on the following vendors. Each operates under its own privacy policy.
- Vimeo — hosts and serves the employee testimonial videos and thumbnails.
- Resumator (Jazz HR) — provides the open-positions feed used on the Featured Jobs page.
- Google — Google Tag Manager / Analytics for usage measurement, and Google Sign-In for optional login.
- Cloudflare — DNS and edge security in front of the site.
- Adobe Typekit — web fonts.
- jsDelivr / Cloudflare CDN / Google APIs — public CDN delivery of common front-end libraries.
6. Your choices and rights
Depending on your location, you may have the right to access, correct, or delete personal information held about you, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights for data processed by this careers site, contact us using the support path below.
- Cookies / analytics: use your browser settings or a browser extension to block cookies or analytics scripts.
- Google login: sign out at any time using the Logout link in the header.
- Job applications: requests about data submitted through the application system should be directed to Harris Health (the application system lives on jobs.harrishealth.org).
7. Data retention
Server logs and analytics events are retained for operational and security purposes for a limited period, then aggregated or removed. Login session data is removed when you log out or when your session expires.
8. Children
This site is intended for adults exploring employment with Harris Health. It is not directed to children under 16.
9. Changes to this page
We may update this page as the site or its vendor list changes. The Last updated date at the top reflects the most recent revision.
10. Contact
Questions about this site, accessibility, or this page can be sent to [email protected].