Rebuild Yourself Inc. Privacy Policy

Last updated: November 10, 2025

Rebuild Yourself Inc. ("RYI," "we," "us," or "our") is committed to protecting the privacy of the teens, caregivers, volunteers, donors, partners, and community members we serve. This Privacy Policy explains how we collect, use, share, and safeguard personal information when you interact with our website, programs, events, forms, and communications.

1. Information We Collect

1.1 Information You Provide Directly

Inquiry and Contact Forms: name, email address, phone number, role (e.g., teen, caregiver, volunteer), message details.
Program Registrations: participant/guardian names, contact details, age range, interests, emergency contacts, availability, consent acknowledgments.
Volunteer Applications: professional experience, background-check consent, references, skills, availability.
Testimonials and Story Submissions: narrative content, images, video recordings, consent for publication.
Donations: payment amount, billing information, postal address, employer details for corporate matching (processed by Stripe or other payment processors).
Event RSVP Forms: attendee information, accessibility needs, dietary preferences.

1.2 Information Collected Automatically

Usage Data: IP address, browser type, device information, referring/exit pages, timestamp, and pages viewed (captured via analytics tools such as Google Analytics 4).
Cookies and Similar Technologies: functional cookies, analytics cookies, and consent records (see Cookie Policy).

1.3 Information from Third Parties

Payment processors (e.g., Stripe) for transaction confirmations.
Email marketing platforms (e.g., Bloomerang, Mailchimp) for subscription status and engagement metrics.
Event platforms (e.g., Eventbrite) for ticketing and attendance data.
Social media platforms for interaction analytics when you engage with RYI content.

2. How We Use Information

Provide, personalize, and improve our programs and services.
Process and acknowledge donations, sponsorships, and volunteer commitments.
Communicate updates, newsletters, event information, and impact reports (with opt-out options).
Coordinate program scheduling, reminders, and follow-up support.
Maintain records for compliance, reporting, and risk management.
Produce anonymized statistics and impact metrics for stakeholders and grant reporting.
Protect our community members and comply with legal obligations.

3. Legal Basis for Processing (Where Applicable)

Consent: when you opt in to communications, provide testimonials, or submit personal stories.
Contractual necessity: when delivering programs or processing donations you initiate.
Legitimate interests: supporting operational communications, analytics, and program improvement while respecting your rights.
Legal obligations: maintaining financial records, honoring opt-out requests, and fulfilling regulatory requirements.

4. Sharing of Information

Vendors and Service Providers: trusted partners providing hosting (Supabase), payment processing (Stripe), email delivery (Resend, Bloomerang, Mailchimp), analytics (Google), and event management (Eventbrite). They access only the information needed to perform services and are bound by confidentiality agreements.
Program Partners: hospitals, schools, and community organizations may receive limited participant information with explicit consent to coordinate services.
Legal and Safety: when required by law or to protect the rights, safety, and security of participants, staff, or the public.
With Your Consent: for publishing stories, testimonials, or photos featuring you or your child.

We do not sell personal information. We do not knowingly share data for targeted advertising to minors.

5. Data Retention

Program and inquiry records: retained as long as needed to support active services and for a reasonable archival period (typically up to 5 years) unless you request deletion.
Donation records: retained for at least 7 years to meet financial and tax obligations.
Newsletter subscriptions: retained until you unsubscribe or request deletion.
Web analytics logs: retained according to vendor default retention (currently 26 months for GA4) and then aggregated or deleted.

6. Your Rights and Choices

Access and Update: request a copy of personal data or corrections by emailing privacy@rebuildyourself.org.
Delete: request deletion of personal data, subject to legal retention requirements.
Opt Out of Communications: use unsubscribe links or contact us directly.
Cookie Preferences: manage via the Cookie Settings tool.
Testimonial Consent: withdraw consent for future use; published materials already distributed offline may not be retractable.

We honor applicable rights under U.S. federal and Florida state laws. If you are located in another jurisdiction, you may have additional rights under local regulations.

7. Security

We use administrative, technical, and physical safeguards to protect personal information, including HTTPS encryption, role-based access, audit logging, and regular security reviews. No system is completely secure; we encourage you to share only necessary information.

8. Children’s Privacy

RYI programs support minors with parental or guardian involvement. We collect youth information only with appropriate consent. We do not knowingly collect personal information from children under 13 without verified parental authorization (COPPA). Contact us if you believe a child provided data without consent.

9. International Data Transfers

Our services are operated in the United States. If you access the site from outside the U.S., your information may be transferred to and processed in the U.S. by vendors and partners.

10. Changes to This Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. We will post the effective date at the top and, when material changes occur, provide additional notice via email or our website.

11. Contact Us

For privacy questions, requests, or concerns, contact:

Email: privacy@rebuildyourself.org
Mailing Address: Rebuild Yourself Inc., [Insert Address Upon Confirmation]
Phone: [Insert Primary Phone Number]

If we cannot resolve your concern, you may contact the Federal Trade Commission or your local data protection authority.