Privacy Policy
How we collect, use, and protect your personal information.
1. Who we are
This website, 15handsandhearts.org, is operated by 15 Hands & Hearts Inc., an Arizona nonprofit corporation recognized by the Internal Revenue Service as a 501(c)(3) public charity (EIN 84-4680671). In this policy, "we," "us," and "our" refer to 15 Hands & Hearts Inc.
Contact: 8380 N Fleming Dr, Flagstaff, AZ 86004 · paul@15handsandhearts.org · +1 (813) 566-1830
2. Information we collect
Information you give us
- Contact form: your name, email address, and message.
- Donations: your name, email address, billing postal code, and gift amount. We never see or store your full card number. Card data goes directly from your browser to Stripe, Inc.
- Client Intake & Therapy Records: When you or your child become a client, we collect health information, medical history, and therapy goals. This information is necessary to provide safe and effective treatment and is protected with strict confidentiality.
Information collected automatically
- Standard server logs: IP address, browser type, referring page, and timestamp. These are kept for security and troubleshooting and are retained for no more than 90 days.
- Essential cookies required for the site to function. See our Cookie Policy.
We do not sell, rent, or trade your personal information. We do not run advertising trackers, behavioral profiling, or cross-site retargeting pixels on this site.
3. Children's privacy (COPPA Compliance)
This website is intended for parents, guardians, donors, and adult clients. We do not knowingly collect personal information directly from anyone under 13 through this website.
All registrations for therapy programs for minors must be completed by a parent or legal guardian. Parents and guardians have the right to review their child's personal and health information, request that it be deleted, and refuse further collection or use of the information. To do so, please contact us at paul@15handsandhearts.org.
4. How we use your information
- To respond to your inquiry or process therapy registrations.
- To process your charitable gift and issue a tax receipt.
- To maintain financial and medical records we are legally required to keep.
- To protect the site against spam, fraud, and abuse.
- To comply with applicable law and respond to lawful requests from public authorities.
5. Payment processing
Online gifts are processed by Stripe, Inc. Stripe is PCI-DSS Level 1 certified. When you give, you are subject to Stripe's Privacy Policy in addition to ours. We do not receive or store your full payment card number, CVV, or bank account details at any point.
6. How long we keep information
| Record type | Retention | Reason |
|---|---|---|
| Donation & receipt records | 7 years | IRS recordkeeping and audit defense |
| Client therapy records | 7 years post-treatment (or until age 21 for minors) | Medical record retention laws |
| Contact form submissions | 24 months | Follow-up and continuity |
| Server access logs | 90 days | Security and troubleshooting |
7. When we share information
We share personal information only with:
- Service providers who help us operate — Stripe (payments), our email provider, and our hosting provider. Each is bound by contract to use your data only for the service they provide to us.
- Medical professionals involved in your care, only with your explicit written consent.
- Professional advisors — our accountant and attorney — where necessary and under confidentiality obligations.
- Legal authorities where required by law, subpoena, or court order, or where necessary to protect someone's safety.
8. Your rights
You may ask us at any time to:
- Confirm what personal information we hold about you (or your child);
- Correct inaccurate information;
- Delete information we are not legally required to keep;
- Receive a copy of your information in a portable format.
Send requests to paul@15handsandhearts.org with the subject line "Privacy Request." We will respond within 45 days and may need to verify your identity first.
9. Security
This site is served over HTTPS with TLS encryption. We apply industry-standard administrative and technical safeguards to protect the information we hold. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
10. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with a new effective date. Continued use of the site after a change constitutes acceptance of the revised policy.
11. Contact us
15 Hands & Hearts Inc.
Attn: Privacy
8380 N Fleming Dr
Flagstaff, AZ 86004
paul@15handsandhearts.org · +1 (813) 566-1830