Privacy Policy

When you use our contact form or our volunteer-interest form, we collect the information you choose to provide directly: name, email address, phone (optional), the reason for your message or your areas of interest as a volunteer, and the content of your message or comments.

We use this information solely to respond to your request, understand how we can help, and — if you applied as a volunteer — evaluate and follow up on your interest in serving with us. We do not use this information for unsolicited marketing.

Messages submitted through our forms are delivered to an organizational Google Workspace mailbox via a transactional email provider compatible with Cloudflare Workers. Your email address is set as the reply-to address, so we can respond to you directly; it is never used as the authenticated sender of our outgoing emails.

Our website is hosted on Cloudflare Workers and uses Cloudflare’s network, security, and Cloudflare Turnstile (“I’m not a robot” verification) services to protect our forms from automated abuse. Cloudflare may process technical metadata about your request (as described below) as part of operating these services, subject to Cloudflare’s privacy policy.

To protect our forms and prevent spam, we apply several layers of protection:

• Cloudflare Turnstile verification on every submission.
• A hidden (“honeypot”) field invisible to people, designed to detect bots.
• A minimum form-fill time, to detect automated submissions.
• Size and length limits on every form field.
• Basic duplicate-submission detection.
• Submission rate limiting.

As part of Turnstile verification and our rate-limiting controls, we briefly process your IP address, basic browser information, and the timestamp of your submission. Your IP address is not stored in plain text: it is used only transiently (in server memory, for minutes) to compute a hashed identifier (SHA-256) used for rate limiting, and is then discarded. We do not maintain a permanent database of IP addresses.

There is currently no independent database of form submissions: the primary record of your message is the email delivered to our Google Workspace mailbox, whose retention follows the organization’s Google Workspace administration settings. [Specific retention period — pending confirmation by the organization.]

We do not sell your personal information. We do not use it for targeted advertising or share it with advertising networks.

We only share your information when necessary to respond to your request (for example, with staff or volunteers responsible for a specific area), when required by law, or to protect the safety of our organization, our volunteers, or the people we serve. [Applicable legal jurisdiction — pending confirmation by the organization.]

You can request access to, correction of, or deletion of the information you sent us by writing through our contact form or at [privacy email address — pending confirmation]. We will make a reasonable effort to address your request within a reasonable time.

Our forms are intended for adults — parents, guardians, volunteers, donors, and community members — not children. Please do not request or submit a child’s personal information through the general contact form. If you need to tell us something about a child in your care, please do so in general terms and avoid including medical records, diagnoses, official identification numbers, or other highly sensitive information.

We apply reasonable security measures, but no system of data transmission or storage over the internet is completely secure. We cannot guarantee the absolute security of information you submit.

We may update this Privacy Policy from time to time. We will post any changes on this page along with an updated effective date.

If you have questions about this Privacy Policy, you can write to us through our contact form. [Dedicated privacy email address and mailing address — pending confirmation by the organization.]