Privacy policy

Last Updated: December 17, 2025

At Heart in Hand ("we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our services.

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Make a donation or financial contribution
• Register as a volunteer or member
• Subscribe to our newsletter or communications
• Fill out contact forms or surveys
• Participate in our programs or events
• Communicate with us via email, phone, or social media

This personal information may include:

• Name and contact information (email address, phone number, mailing address)
• Date of birth (for volunteer applications)
• Payment and billing information
• School or organizational affiliation
• Emergency contact information (for volunteers)
• Any other information you choose to provide

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing behavior, including:

• IP address and location data
• Browser type and version
• Device type and operating system
• Pages visited and time spent on our site
• Referring website or source
• Clickstream data and navigation patterns

2. How We Use Your Information

We use the information we collect for various purposes, including:

• Processing Donations: To process and acknowledge your financial contributions, provide tax receipts, and maintain accurate donation records
• Volunteer Management: To coordinate volunteer activities, communicate opportunities, and manage our volunteer programs
• Communications: To send newsletters, updates about our programs, event invitations, and fundraising campaigns
• Program Delivery: To organize and deliver our healthcare education workshops and care kit assembly events
• Website Improvement: To analyze website usage, improve user experience, and enhance our digital presence
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Safety and Security: To protect the safety of our volunteers, participants, and organization

3. Information Sharing and Disclosure

We respect your privacy and do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We may share your information with trusted third-party service providers who assist us in operating our website, processing donations, managing communications, or conducting our programs. These providers are contractually obligated to maintain the confidentiality and security of your information.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

Partner Organizations

With your explicit consent, we may share limited information with hospitals, schools, and community organizations we partner with to deliver our programs.

Business Transfers

If Heart in Hand is involved in a merger, acquisition, or asset sale, your personal information may be transferred as part of that transaction, with advance notice provided to you.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. Cookies are small data files stored on your device that help us:

• Remember your preferences and settings
• Understand which pages are most visited
• Improve website functionality and performance
• Provide relevant content and communications

You can control cookie preferences through your browser settings. However, disabling cookies may limit your ability to use certain features of our website.

5. Third-Party Links and Services

Our website may contain links to third-party websites, including social media platforms, payment processors, and partner organizations. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

6. Children's Privacy

As a student-led organization serving children and families, we take children's privacy seriously. We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13 without verifiable parental consent.

For our educational programs and volunteer activities involving minors:

• We obtain parental consent before collecting any personal information from children
• We collect only the minimum information necessary for program participation
• Parents and guardians can review, modify, or request deletion of their child's information at any time

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure SSL encryption for data transmission
• Regular security assessments and updates
• Restricted access to personal information
• Secure payment processing through PCI-compliant providers

However, no method of electronic storage or internet transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

9. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Opt-Out: Unsubscribe from marketing communications at any time
• Portability: Request a copy of your data in a commonly used format
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us using the information provided below.

10. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information is collected, used, and shared
• The right to delete personal information held by us
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising CCPA rights

11. International Users

Heart in Hand is based in the United States, and your information will be processed and stored in the United States. If you are accessing our services from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us