Privacy Policy
Upholding Trust Through Unwavering Commitment to Confidentiality and Data Security
1. Introduction and Scope of Policy
Our Foundation is Trust: Defining the Commitment to Every Stakeholder
At HEARTS OF HELPING HANDS (HOHH), we recognize that the core of our mission—engaging with local communities to provide essential resources and hands-on support—is fundamentally built upon a foundation of absolute trust and confidentiality. This Privacy Policy is a comprehensive declaration of our commitment to protecting the privacy and security of the personal information entrusted to us by all of our stakeholders, including: the vulnerable Clients who rely on our support services; the generous Donors who fuel our mission through financial and in-kind contributions; the dedicated Volunteers who give their time; the Community Partners who collaborate with us; and all visitors to our digital properties, including our website and social media channels (collectively, “Users”). This Policy outlines the types of information we collect, the specific methods by which we collect it, the necessary purposes for its use, the strict conditions under which it may be shared, and the robust measures we employ to keep it secure, all in strict compliance with applicable federal, state, and local laws governing non-profit organizations and personal data protection. By engaging with HOHH in any capacity—whether by enrolling in a workshop, making a donation, signing up for mentorship, or simply browsing our website—you acknowledge and agree to the policies and practices described herein. We are committed to transparency, ensuring that you understand your rights regarding your personal data and how we handle this sensitive information with the utmost care, ethical rigor, and professionalism that our community deserves. We have tailored this extensive policy to reflect the specific, often highly sensitive nature of the information we manage, such as health needs, financial struggles, and employment status, recognizing that confidentiality is not just a legal requirement but a moral imperative central to the success of our helping hands approach and the preservation of client dignity.
2. The Categories of Information We Collect
Systematic and Intentional Data Collection for Focused Service Delivery and Mission Success
HEARTS OF HELPING HANDS collects information that is directly necessary and relevant to the fulfillment of our core mission: providing targeted resource allocation, ensuring responsible financial stewardship, and maintaining effective communication with our community. The information collected varies significantly depending on your relationship with HOHH, and we commit to collecting only the minimum amount of data required for the specific purpose.
2.1. Client and Participant Data (Highly Sensitive PII)
For individuals and families who enroll in or receive services from HOHH (including our mentorship program, resource pantry, and financial assistance programs), the data we collect is often highly personal and critically sensitive to ensure appropriate and effective support. This category includes: (a) Identifying Information: Full legal names, date of birth, current address, phone numbers, and email addresses for all members of the household being served. (b) Economic and Financial Data: Detailed household income information, employment status and history, records of financial hardship, documentation related to emergency aid requests (e.g., eviction notices, utility bills), and data related to budgeting and financial literacy workshop participation. (c) Health and Need-Based Information: Non-diagnostic data related to dietary restrictions, specific health or mobility limitations, familial compositions, or other contextual details necessary to assess the nature and urgency of the need (e.g., need for specialized formula, specific clothing sizes, or mobility aids). (d) Service Records: Detailed records of services provided, dates of pantry visits, mentorship session summaries, program participation, and outcomes data used to measure the effectiveness of our intervention, all of which are maintained with the highest levels of access restriction and compartmentalization, ensuring that this sensitive data is only reviewed by the necessary case management staff directly involved in service provision. We obtain explicit, informed consent from clients before collecting and processing this highly sensitive PII, clearly outlining how the data will be used to facilitate support and for mandated reporting.
2.2. Donor and Financial Data
For individuals and organizations who contribute financially or through in-kind donations, we collect data necessary for processing the contribution, providing tax receipts, and maintaining accurate financial records that ensure transparent operations. This data includes: (a) Contact and Identification: Donor name, mailing address, email address, and phone number, which are used for acknowledgment and communication. (b) Financial Transaction Details: The amount of the donation, date of the transaction, and, for online transactions, necessary payment processing information such as credit card number (though this is typically handled by a secure, PCI-compliant third-party processor and is not stored directly on HOHH servers) or bank account details for recurring electronic fund transfers (EFTs). (c) Giving History: Records of past donations, pledges, and event attendance, which assist us in budgeting, planning future campaigns, and providing the accurate tax documentation required by the IRS for charitable contributions. We may also collect public information regarding corporate matching gift eligibility or foundation giving criteria. We utilize industry-standard encryption and security protocols for all financial data to ensure that the generosity of our donors is matched by our commitment to their financial security and privacy, recognizing that accurate donor records are vital for the long-term sustainability and accountability of our organization’s mission.
2.3. Volunteer and Personnel Data
Individuals who offer their time to our hands-on support mission must provide data essential for safety, training, and effective placement within our various programs. This includes: (a) Identifying and Contact Information: Name, address, phone number, and emergency contact details. (b) Background Check Data: Information necessary to conduct mandated background checks, particularly for volunteers working directly with vulnerable populations (e.g., in youth mentorship programs), which involves sensitive PII provided to authorized third-party screening agencies. (c) Skill and Availability Data: Records detailing volunteer skills, professional experience (e.g., financial expertise for workshops), preferred roles, and scheduling availability, used exclusively for optimized assignment and ensuring volunteer activities align with their capabilities. (d) Training and Commitment Records: Documentation of completed mandatory training (e.g., trauma-informed care, confidentiality protocols) and records of hours volunteered and duration of service. This information is vital not only for safety and regulatory compliance but also for recognizing and celebrating the profound contribution of our volunteer base, ensuring a mutually rewarding and secure experience for both the volunteer and the clients they serve.
2.4. Website and Digital Usage Data
When Users visit our website, we automatically collect non-personally identifiable information (non-PII) that assists us in optimizing our digital outreach, improving site functionality, and ensuring broad accessibility. This includes: (a) Technical Data: IP address, browser type and version, operating system, and referral sources. (b) Usage Metrics: Pages visited, duration of visits, clickstream data, search queries, and information about how users interact with online forms or embedded content. We utilize technologies such as cookies (small text files stored on your device) and web server logs to gather this data. This information is primarily used in an aggregated and anonymous form to analyze trends, administer the site, track user movement, and gather broad demographic information for internal use, enabling us to enhance the user experience and ensure the functionality of our online resources. Users have the option to manage their cookie preferences through their browser settings, and our website respects the user’s right to limit the collection of non-essential digital tracking data.
3. How and Why We Use Your Information (Purpose Limitation)
Every Data Point Serves a Purpose: Direct Service, Accountability, and Community Impact
The personal information collected by HEARTS OF HELPING HANDS is used strictly for the purposes detailed below, all of which are essential to our operations and mission effectiveness, adhering to the principle of purpose limitation.
3.1. Provision of Targeted Services and Program Administration
The core use of client data is the effective and compassionate provision of our support services. We use identifying and need-based information to accurately assess eligibility for our resource programs, to tailor the assistance provided (e.g., ensuring dietary needs are met in the pantry), and to assign clients to the most appropriate empowerment workshops or mentorship pairings, ensuring a personalized continuum of care. Service records and outcome data are essential for continuous case management, allowing our team to monitor client progress toward self-sufficiency goals, measure the effectiveness of specific interventions, and adapt support strategies in real-time to evolving needs. Furthermore, aggregate, anonymized client data is used for internal reporting and to inform our strategic planning, helping us to identify persistent community-wide resource gaps and advocate effectively for broader policy changes and resource allocation within the Tacoma area. We may use contact information to communicate important service delivery updates, appointment reminders, and follow-up checks, ensuring continuous client engagement and safety throughout their journey with HOHH, always maintaining the highest standards of confidentiality and respect for their vulnerable position. This usage is foundational to our mission and directly supports our goal of helping individuals overcome challenges with hands-on support.
3.2. Fundraising, Financial Transparency, and Donor Stewardship
Donor and financial data are used to process contributions securely, generate mandatory tax receipts, and maintain accurate internal accounting records, which are vital for our status as a fiscally responsible non-profit organization. We use contact information to acknowledge the generosity of our donors, communicate our programmatic impact, and provide updates on how their contributions are directly supporting our hands-on mission in the community. Unless a donor explicitly requests otherwise (see Section 6), we may use giving history to inform future fundraising appeals and donor stewardship efforts, ensuring that our requests are respectful of past contribution levels and relevant to the donor’s interests. We do not sell or trade donor lists. Financial data is retained for the legally mandated period required for tax and auditing purposes. Furthermore, we may use aggregated and anonymized giving data to present to grant-making foundations or potential corporate partners to demonstrate the broad community support we receive, which is crucial for securing large-scale funding. Every effort is made to ensure that our communication with donors is respectful, timely, and demonstrates the profound gratitude of the HEARTS OF HELPING HANDS organization for their commitment to our mission, utilizing their information solely to foster this essential philanthropic relationship.
3.3. Compliance with Legal, Regulatory, and Safety Requirements
HEARTS OF HELPING HANDS operates under strict legal and ethical obligations, and personal data is used when necessary to comply with these mandates. This includes using background check data to screen all volunteers and personnel to ensure the safety of our clients, particularly children and vulnerable adults, adhering to Washington State and federal requirements for organizations working with at-risk populations. Financial data is used to comply with IRS regulations regarding tax-exempt organizations, including the accurate filing of tax forms and maintaining auditable records. Client data, typically in an anonymized or aggregated format, may be used for required reporting to government agencies or funding bodies that stipulate outcome measurement as a condition of grants received, ensuring we maintain crucial funding streams. In the event of a legally binding subpoena, court order, or governmental request, we are obligated to disclose personal information as required by law, but we will take all reasonable legal steps to notify the affected individual before such disclosure, unless prohibited by law or deemed a risk to public safety. This use of data is non-negotiable and is essential to maintaining our legal standing and the continuity of our service provision, upholding the highest standards of accountability in the non-profit sector.
3.4. Organizational Development and Digital Improvement
Non-PII collected from our website users is vital for organizational development, allowing us to enhance our digital footprint and improve operational efficiency. We analyze website usage data to identify which programs and pages are most accessed, allowing us to prioritize the creation of content that meets community demand, such as improving the clarity of our “How to Enroll” page or providing more details on specific workshops. This data helps us optimize our website’s performance and accessibility across different devices and browsers, ensuring that critical information is available to everyone in the community, regardless of their technology access. Furthermore, we use feedback provided through contact forms, surveys, and anonymous suggestion boxes to continually evaluate and refine our program offerings and service delivery protocols, addressing any potential gaps or inefficiencies in our operations, demonstrating our commitment to continuous organizational improvement. Aggregate data on volunteer roles and training outcomes helps us refine our recruitment and retention strategies, ensuring we maintain a highly skilled and compassionate workforce ready to meet the community’s evolving needs, using information not to track individuals but to strengthen the collective efficiency of our helping hands.
4. Data Sharing and Disclosure Policies
Sharing is Limited and Strategic, Always Guided by Client Consent and Mission Necessity
HEARTS OF HELPING HANDS is resolute in its policy of never selling, renting, or trading the personal information of our clients, donors, or volunteers. Disclosure of personal data is limited to specific, necessary, and legally permissible circumstances, always guided by explicit consent whenever required.
4.1. Third-Party Service Providers and Data Processors
We utilize specialized third-party vendors and service providers to perform essential organizational functions on our behalf, and we may share the minimum necessary PII with them under strict contractual obligations. This includes: (a) Payment Processors: Secure, PCI-compliant vendors who handle online donations and recurring EFT payments, ensuring financial transactions are processed securely without HOHH directly storing sensitive credit card numbers. (b) Communication Platforms: Providers of secure cloud-based systems for email communication, mass mailings, and donor relationship management (CRM), used to manage our community outreach and fundraising campaigns efficiently. (c) Background Check Agencies: Authorized and legally compliant agencies that process volunteer and employee background screening, which is mandatory for safety. (d) IT and Data Storage Providers: Vendors who provide secure, encrypted cloud storage for our operational data and client records, maintaining high standards of data security and disaster recovery. All contracts with these third parties explicitly require them to use the shared personal information only for the services they are contracted to perform for HOHH and mandate that they maintain data security standards equivalent to our own. These third parties are explicitly forbidden from using the data for their own marketing, re-selling, or any purpose unrelated to our direct mission.
4.2. Disclosure to Community Partners and Referral Networks
In our commitment to providing holistic, wrap-around support, we often refer clients to specialized external community partners (e.g., housing placement agencies, advanced vocational training schools, specialized medical clinics). When making such referrals, we only disclose personal information with the client’s explicit, informed, and written consent. This disclosure is limited to the minimum information necessary for the partner organization to assess the client’s needs and initiate their service provision, ensuring continuity of care and avoiding the need for the client to repeat their story multiple times to different agencies during a stressful time. For data sharing not involving individual client referrals, we may share aggregated and anonymized demographic and outcome data with our Community Partners, grant-making foundations, and local government officials. This shared, non-identifiable data is essential for advocacy, community planning, demonstrating impact, securing large-scale funding for regional initiatives, and informing public policy decisions regarding resource allocation in the Tacoma area, thereby strengthening the entire safety net without ever compromising individual privacy.
4.3. Legal Compliance and Enforcement
As detailed previously, HOHH will disclose personal information when required to do so by law, such as in response to a court order, subpoena, or governmental regulatory request, ensuring our organization remains in full legal compliance. We may also disclose information when we believe, in good faith, that disclosure is necessary to protect the property or rights of HEARTS OF HELPING HANDS, to protect the safety of the public or individuals (e.g., in cases of imminent harm or mandated reporting), or to prevent fraud or abuse of our systems. This includes, but is not limited to, sharing information with law enforcement agencies or regulatory bodies in the context of official investigations, strictly adhering to all legal and procedural requirements before any release of data. We maintain internal legal counsel review for all such requests to ensure that only the minimum legally required information is disclosed, and that client and donor rights are protected to the fullest extent permitted under law, reserving the right to contest any overly broad or non-compliant legal requests for data disclosure.
5. Data Security, Retention, and Disposal
Multi-Layered Protection for Data Integrity and Perpetual Confidentiality
The integrity and security of the personal information entrusted to us are paramount. HEARTS OF HELPING HANDS employs a comprehensive, multi-layered security strategy encompassing physical, technical, and administrative safeguards to protect data from unauthorized access, disclosure, alteration, or destruction.
5.1. Technical and Digital Security Measures
All digital data, especially sensitive client and donor PII, is protected by robust technical safeguards. (a) Encryption: We utilize industry-standard SSL/TLS encryption for all data transmission across our website and digital forms, ensuring that information is encrypted during transfer. Sensitive data stored on our servers, including client records, is protected by encryption at rest, rendering it unintelligible to unauthorized parties. (b) Access Control: Access to our secure internal databases is strictly limited to authorized personnel (staff and designated senior volunteers) on a “need-to-know” basis, enforced through strong, regularly updated passwords, two-factor authentication (2FA) where available, and automated logging and monitoring of access attempts and data activity. (c) Network Security: Our network infrastructure is protected by firewalls, intrusion detection systems, and up-to-date anti-malware software, with regular vulnerability scans and penetration testing conducted by external IT security specialists to proactively identify and mitigate any potential security weaknesses in our digital environment, maintaining perpetual vigilance against evolving cyber threats.
5.2. Physical and Administrative Safeguards
Security extends beyond digital systems to encompass physical premises and staff conduct. (a) Physical Security: Paper records containing sensitive client or financial data are stored in locked filing cabinets within restricted-access areas of our 1427 S 58TH STREET facility, accessible only to essential administrative and case management staff. Visitor access to these areas is strictly controlled and logged. (b) Staff Training and Confidentiality: All HEARTS OF HELPING HANDS employees, including our Executive Director, and all essential volunteers are required to complete mandatory, recurring training on data privacy protocols, ethical standards, and our specific confidentiality policy, ensuring that the human element of our operation is a strong defense against data breach. All personnel are required to sign a legally binding Confidentiality Agreement that explicitly addresses the sensitive nature of the information they handle and the severe consequences of any breach of privacy, reinforcing an organizational culture where data security is a shared, continuous responsibility.
5.3. Data Retention and Secure Disposal
HEARTS OF HELPING HANDS adheres to strict policies governing the retention and secure disposal of personal information, recognizing that data should not be kept longer than absolutely necessary. (a) Retention Guidelines: We retain client service records for a period necessary to meet regulatory requirements (e.g., grant accountability), audit demands, and to allow for effective continuity of care should a client re-engage with our services within a reasonable timeframe. Donor financial records are retained for the minimum period required by the IRS and state laws governing non-profit financial reporting, typically seven years. (b) Disposal Methods: Once data reaches the end of its mandatory retention period or is no longer required for legitimate organizational purposes (e.g., a volunteer leaves the organization), we ensure its secure disposal. Physical paper records are destroyed via cross-shredding or incineration, rendering them completely illegible. Digital records are permanently deleted using secure wiping methods that prevent forensic recovery, ensuring that the personal information entrusted to us is completely and irrevocably destroyed when its purpose has been fulfilled, upholding our commitment to perpetual confidentiality.
6. Your Rights and Choices Regarding Your Personal Information (User Control)
Empowering You with Control Over Your Data and Communication Preferences
HEARTS OF HELPING HANDS is committed to empowering every individual with control over the personal information they share with us. We respect your rights to access, correct, and manage your data preferences, offering clear mechanisms for exercising these rights.
6.1. Right to Access and Correction
You have the right to request access to the personal information that HEARTS OF HELPING HANDS holds about you, which includes a summary of the data we have collected, how it is being used, and with whom it may have been shared (subject to legal or privacy limitations that may restrict the disclosure of confidential third-party information). Furthermore, you have the right to request the correction of any inaccuracies in your personal data, such as an outdated address or incorrect financial details, ensuring that our records are always current and accurate. To exercise your right to access or correction, please submit a written request to our Data Compliance Officer via the email address provided in Section 7. We will process all valid requests promptly and provide the requested information or make the necessary corrections within a reasonable timeframe, typically within 30 days of receiving your authenticated request, ensuring that the data we rely on to provide services or communicate with you is always precise and up-to-date.
6.2. Opting Out of Communications and Marketing
We respect your communication preferences completely. Donors, volunteers, and general community members have the absolute right to opt out of receiving fundraising appeals, general marketing materials, and non-essential programmatic updates from HEARTS OF HELPING HANDS at any time. Every electronic communication we send includes a clear and easy-to-use “unsubscribe” link, allowing you to manage your email preferences instantly. Alternatively, you may submit a formal request via email to our Data Compliance Officer to be removed from specific or all communication lists, which we will honor within a commercially reasonable period. Please note that opting out of marketing communications may not remove you from essential service-related communications, such as tax receipt confirmation emails, emergency service updates if you are an enrolled client, or critical safety announcements related to a specific program you are currently volunteering for, as these are necessary for the integrity of our service provision and your safety.
6.3. Restrictions on Sensitive Client Information Use
For enrolled clients, the use and disclosure of your highly sensitive PII, including service and financial records, is strictly managed. You have the right to request restrictions on how your non-mandated PII is used, particularly regarding internal case studies, photography (if applicable), or any non-essential disclosure for fundraising narratives. While HOHH uses aggregated, anonymized client success stories to demonstrate impact, any testimonial or story that could potentially identify you is only used with your separate, voluntary, explicit, and revocable written consent, which you can withdraw at any time without penalty or impact on your eligibility for HOHH services. Our case managers are trained to discuss these rights with you upon enrollment and to document your preferences accurately in your confidential client file, ensuring that your right to privacy and self-determination is honored throughout your engagement with HEARTS OF HELPING HANDS.
7. Data Compliance, Policy Updates, and Contact Information
Accountability and Transparency Through Dedicated Compliance and Open Communication
7.1. Policy Changes and Notification
HEARTS OF HELPING HANDS reserves the right to amend or update this Privacy Policy periodically to reflect changes in our organizational practices, evolving legal or regulatory requirements, or technological advancements in data security. When we make material changes to this Policy—particularly changes that affect the way we collect, use, or share your highly sensitive personal information—we will take reasonable steps to notify affected users through prominent notice on our website homepage, and potentially via email communication for our active clients and major donors, ensuring that transparency is maintained. We encourage all stakeholders to review this Policy regularly to stay informed about how we are protecting your information. Any updated policy will include a clearly marked “Effective Date” at the beginning of the document, and your continued use of our services or website following the posting of an updated policy will constitute your acceptance of those changes, demonstrating a mutual understanding of our commitment to your privacy.
7.2. Children’s Privacy (COPPA Compliance Reference)
HEARTS OF HELPING HANDS is deeply committed to protecting the privacy of children, particularly those under the age of 13, who may interact with our programs, such as youth mentorship or after-school activities. In compliance with the Children’s Online Privacy Protection Act (COPPA) and similar regulations, we do not knowingly collect any Personal Identifiable Information (PII) from children under 13 through our website or online platforms without verifiable parental or guardian consent. For services involving minors (e.g., mentorship, educational support), we require explicit, informed consent from the parent or legal guardian for the collection and use of the child’s PII necessary for program participation (e.g., name, age, dietary needs). If we become aware that we have inadvertently collected PII from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information from our records, ensuring that the safety and privacy of minors remain a foremost priority in all our operations.
7.3. Data Compliance and Contact Information
For any questions, concerns, or requests regarding this Privacy Policy, the use of your personal information, or to report a suspected breach of privacy or confidentiality, please contact our designated Data Compliance Officer (DCO). The DCO is responsible for overseeing our compliance with this policy, managing data access requests, and leading all internal privacy training initiatives. We treat all privacy inquiries with the utmost seriousness and urgency, and we are committed to promptly investigating and resolving any concerns or complaints related to our data handling practices, ensuring accountability at the highest organizational level.
Data Compliance Officer Contact:
Organization: HEARTS OF HELPING HANDS Address: 1427 S 58TH STREET, TACOMA, WA 98408-2319 Email: privacy@hohh.life (
