Privacy Policy for Big Dreams Through Small Steps

Effective Date: January 1, 2025

Big Dreams Through Small Steps ("we," "our," or "us") is committed to protecting the privacy and security of our participants, donors, volunteers, and supporters. This Privacy Policy outlines how we collect, use, share, and protect personal information. We comply with relevant privacy laws, including the Children’s Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), and the Health Insurance Portability and Accountability Act (HIPAA), as well as applicable state privacy laws.

1. Information We Collect

We collect personal information through various means, including but not limited to our website, program registration, in-person events, and surveys. The types of information we may collect include:

Contact Information: Name, address, phone number, email address, and emergency contact details.
Demographic Information: Date of birth, gender, and other relevant details.
Educational Information: Attendance records, grades, and other information necessary to provide educational services.
Health Information: Medical history, health conditions, and emergency contact information (for certain programs that involve physical activities or health assessments).
Usage Data: Information about how our website and services are used, including cookies and IP addresses.

2. How We Use Information

We use personal information to:

Deliver our programs and services, including educational programs, community engagement, and job skills training.
Communicate with participants, guardians, and supporters about events, activities, and opportunities.
Ensure participant safety, especially for children in our care.
Monitor and improve our services and website.
Comply with legal and regulatory requirements.

3. Sharing of Information

We do not sell, rent, or lease your personal information to third parties. However, we may share personal information in the following circumstances:

With Service Providers: We may share information with third-party vendors who assist us with program delivery, website maintenance, and other operations. These vendors are obligated to maintain the confidentiality of the information and use it solely for the purposes specified by us.
For Legal Compliance: We may disclose information if required by law or in response to a subpoena, court order, or other legal process.
With Consent: We may share information with third parties if we have obtained explicit consent.

4. Protecting Children's Privacy (COPPA Compliance)

We are committed to protecting the privacy of children under 13 in accordance with COPPA. We do not knowingly collect personal information from children under 13 without verifiable parental consent. For any program involving children under 13, we obtain consent from parents or legal guardians before collecting or using a child's personal information.

5. Educational Privacy (FERPA Compliance)

For programs that involve educational services, we comply with FERPA by ensuring that any educational records we handle are kept private and are only disclosed with consent or under other circumstances permitted by FERPA. Parents or eligible students have the right to review educational records we maintain and request corrections if necessary.

6. Health Information Privacy (HIPAA Compliance)

For programs that require the collection of health information, we comply with HIPAA to ensure the confidentiality, integrity, and security of Protected Health Information (PHI). We only share health information with authorized individuals, such as medical professionals or in situations required by law. Participants have the right to access their health information and request corrections.

7. Security Measures

We implement reasonable physical, technical, and administrative safeguards to protect personal information from unauthorized access, use, or disclosure. These measures include encryption, secure servers, and restricted access to personal information.

8. Your Rights

Depending on your location and applicable privacy laws, you may have the following rights regarding your personal information:

Right to Access: You can request a copy of the personal information we have collected about you.
Right to Correction: You can request corrections to inaccurate information.
Right to Deletion: You can request the deletion of your personal information, subject to certain limitations.
Right to Restrict Processing: You can request that we limit our use of your information.
Right to Object: You can object to certain types of data processing.

To exercise these rights, please contact us at MistyRitch@bdtss.org.

9. Cookies and Online Tracking

We use cookies and similar tracking technologies to enhance user experience on our website. You can choose to accept or decline cookies through your browser settings. Disabling cookies may affect certain features of our website.

10. Updates to the Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this document. We encourage you to review this policy periodically to stay informed of how we protect your information.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Big Dreams Through Small Steps
941-289-2005
MistyRitch@bdtss.org