Contact us
Privacy Policy

Our Commitment to Your Trust and Confidentiality

GRACEFUL HEARTS AMADOR (GHAMA) is fundamentally dedicated to being a pillar of trust, grace, and integrity within the Amador County community, and this commitment extends fully and absolutely to safeguarding the privacy and confidentiality of every individual who connects with our vibrant network. This comprehensive Privacy Policy outlines the specific types of information we collect, the critical reasons why we collect it, how this information is carefully used to deliver our mission-critical services, and the stringent measures we take to protect it from unauthorized access or misuse. We recognize that the information you share with us, particularly given the sensitive nature of the challenges we help you navigate—be they related to economic hardship, personal development, or family well-being—is deeply personal, and we pledge to treat it with the highest level of professional discretion and ethical responsibility at all times. By engaging with our services, participating in our programs, or supporting our mission through donations, you are entrusting us with details of your life, and this policy serves as our formal, unwavering promise to uphold that trust, ensuring full transparency in all our data handling practices and providing you with clear control over your personal information. We encourage you to read this policy in its entirety to understand how our commitment to your privacy is deeply integrated into every facet of our compassionate guidance and resource delivery.

1. Scope and Application of this Policy

Defining Who and What This Policy Covers

This Privacy Policy applies universally to all forms of information collected by GRACEFUL HEARTS AMADOR, encompassing data gathered through various channels, including our official website (ghama.site), in-person interactions at our Ione community center, telephonic communications, digital correspondence (email), and all written documentation generated through program enrollment, volunteer applications, and donation processing. The policy is designed to cover all individuals interacting with GHAMA, including program participants and their family members, dedicated volunteers, generous financial donors, job applicants, and the general users of our digital platforms seeking informational resources. It is crucial to understand that GHAMA is committed to providing essential, mission-driven services; therefore, the information we collect is strictly limited to what is absolutely necessary to fulfill our core purposes, which are providing exceptional resources, offering compassionate guidance, and fostering a welcoming atmosphere to help you navigate challenges and achieve your dreams within Amador County. This policy operates in strict adherence to applicable federal and state privacy regulations concerning nonprofit operations and data security standards.

Data Security is a Mission-Critical Mandate

For GRACEFUL HEARTS AMADOR, the security of your data is not merely a legal requirement; it is a mission-critical mandate directly tied to our ability to deliver effective, trustworthy, and compassionate services to the individuals and families of Amador County. The confidentiality of your information is paramount because the trust built between our staff and the participants in our network is the foundation upon which empowerment and successful navigation of challenges are achieved. If that trust is compromised, our ability to provide meaningful support collapses. Therefore, every measure detailed within this policy—from data encryption to rigorous staff training—is implemented with the core objective of preserving the sanctity of your shared information, ensuring that you feel entirely secure when utilizing our resources, participating in mentorship, or discussing sensitive personal needs with our dedicated team in Ione.

2. Information We Collect and Why We Collect It

The collection of personal information by GRACEFUL HEARTS AMADOR is always guided by the principle of necessity, ensuring that we only gather the details absolutely required to verify eligibility for services, personalize our guidance, track outcomes for program improvement, and comply with grant reporting requirements. We categorize the information we collect into several distinct types, each serving a specific, defined purpose within our service delivery model.

2.1. Personal Identification Information (PII)

PII includes data that can be used to directly or indirectly identify you. We collect this information primarily for enrollment, communication, and basic verification purposes.

  • Identifiers and Contact Details: We collect your full legal name, current address (804 AVALON DRIVE, IONE, CA 95640 is our center, but we collect residential addresses for service delivery within Amador County), telephone number, and personal email address. This PII is essential for maintaining accurate service records, communicating important program updates, scheduling consultations with our staff, and verifying your identity upon accessing secure resources.
  • Demographic Data: We may collect basic demographic details such as date of birth, age, and family composition. This data is vital for tailoring our programs to specific age groups (e.g., Youth, Adult Services, Senior Outreach) and understanding the overall needs and population segments we are serving for grant reporting and strategic program planning.
  • Proof of Residency/Eligibility: For certain resource programs funded by external grants, we may require proof of residency within Amador County or documentation verifying specific eligibility criteria. This collection is non-negotiable when external funding mandates specific service areas or recipient qualifications, and these documents are handled with extreme sensitivity and are retained only for the mandatory period required by the funding source.

2.2. Sensitive Personal Information (SPI) for Service Delivery

Due to the nature of our mission—helping individuals navigate significant life challenges—GRACEFUL HEARTS AMADOR necessarily collects and processes certain types of Sensitive Personal Information (SPI). This is done with explicit participant consent and is strictly limited to the data required to provide effective, customized, and holistic support.

  • Socioeconomic and Financial Status: We collect information pertaining to household income, employment status, housing stability (e.g., current living situation), and specific resource needs (e.g., need for food assistance, housing aid). This highly sensitive data is the core input for our Resource Navigation services, allowing our specialists to determine eligibility for tailored support programs, prioritize immediate crisis intervention, and effectively refer participants to the correct external agencies, ensuring the compassionate guidance we offer is accurate and impactful.
  • Program Assessment and Progress: During participation in our mentorship or educational programs (like Workforce Development or Social & Emotional Development), we collect information on personal goals, challenges encountered, skills gained, and measured outcomes (e.g., successful job placement, completion of a financial literacy course). This information is crucial for tracking the individual’s journey toward stability, measuring the efficacy of our guidance, and ensuring our programs are continuously adapted to meet the real-world needs of the Amador County community.
  • Health and Wellness Context: While GHAMA does not provide clinical medical care, we may record general context related to health or emotional wellness if it directly impacts a participant’s ability to engage with programs (e.g., scheduling needs due to chronic illness, a need for referrals to mental health services). This is always voluntary and is used solely to provide trauma-informed care and make appropriate, supportive referrals to our network partners, never for diagnostic purposes.

2.3. Donor and Financial Information

For individuals who generously support our mission, we collect data required for processing donations and maintaining legal compliance.

  • Donation Records: We collect the donor’s name, contact information, the amount donated, and the date of the transaction. This is necessary for generating accurate tax receipts, thanking our contributors, and maintaining accurate financial records as legally required for non-profit organizations.
  • Payment Details: For online donations, payment information (such as credit card details or bank account information) is collected by secure, PCI DSS-compliant third-party payment processors. GRACEFUL HEARTS AMADOR does not directly store sensitive credit card or banking information on our servers or databases. We only retain the transaction ID and basic identifying PII necessary to reconcile the payment with the donation record.

2.4. Non-Personal and Usage Data

When you visit the GHAMA website, we automatically collect certain Non-Personal or Usage Data to help us improve our digital outreach and ensure the functionality of our online resource hub.

  • Technical Information: This includes your Internet Protocol (IP) address, browser type, operating system, and referral source. This is standard web server data used to diagnose technical issues, protect our website from malicious activity, and understand basic user technology profiles.
  • Website Analytics: We use anonymous analytical tools to track how users navigate our site, which pages are most frequently visited (e.g., the Programs/Services page vs. the Volunteer Section), and the time spent viewing key resources. This aggregated data helps us understand community information needs and optimize our site structure to make our digital resources more accessible and effective for the residents of Amador County.

3. How and Why We Utilize Your Information

The information collected by GRACEFUL HEARTS AMADOR is utilized strictly to fulfill our mission, deliver promised services, ensure legal compliance, and continually enhance our capacity to provide compassionate guidance and effective resources to the Amador County community.

3.1. Direct Service Delivery and Customization

The primary use of your PII and SPI is to ensure the effective and personalized delivery of our core programs. We use the collected data to:

  • Tailor Support Plans: Utilize socioeconomic data, personal goals, and educational background to create customized, actionable support plans for participants, ensuring that the guidance and resources provided are precisely aligned with the individual’s unique pathway to success.
  • Resource Mapping and Referral: Use eligibility data and stated needs to accurately map and connect individuals to specific, vetted external partners within our network, such as housing authorities, employment services, and healthcare providers, ensuring efficient and effective resource navigation.
  • Program Management: Utilize PII and progress assessments to manage workshop attendance, track mentorship hours, and ensure continuity of care within our various programs (Education & Learning, Workforce Development), maximizing the positive impact of our interventions.

3.2. Communication and Engagement

We use your contact information to maintain an active, supportive, and informative relationship with all members of our network.

  • Service Communication: Send personalized emails, phone calls, or texts regarding scheduled appointments, program changes, or specific resources now available to you based on your eligibility profile.
  • Community Updates: Share general organizational news, success stories (always anonymized unless explicit consent is given), and invitations to large, non-sensitive community events (like our annual Community Resource Fair).
  • Fundraising and Outreach: For donors and those who have opted in, we use PII to acknowledge contributions, issue tax receipts, share impact reports detailing how donations are utilized, and invite participation in future fundraising campaigns crucial for sustaining our presence and growth in Ione.

3.3. Program Assessment, Improvement, and Reporting

To maintain our non-profit status, secure essential grant funding, and continuously improve our service excellence, we must meticulously assess and report on our impact.

  • Outcomes Measurement: We aggregate and analyze non-identifiable, statistical data (derived from SPI) to measure the effectiveness of our Workforce Development or Youth Mentorship programs (e.g., calculating average job retention rates, improvement in financial literacy scores). This critical analysis allows us to refine our methodologies and ensure our compassionate guidance is always leading to tangible results.
  • Grant and Funder Reporting: We are often required by external funders to report on the demographics and outcomes of the populations served. All data shared with external funding partners for reporting purposes is rigorously anonymized, aggregated, and stripped of all Personal Identification Information (PII) to ensure that the privacy of our participants is maintained while fulfilling our commitment to accountability and transparency in resource utilization.
  • Internal Quality Control: Staff uses program assessment data to review case management practices, ensure adherence to our ethical and confidentiality protocols, and identify areas where additional staff training or resource allocation is needed to enhance the quality of our service delivery.

4. Disclosure and Sharing of Your Information

GRACEFUL HEARTS AMADOR treats all participant data as highly confidential; however, as a central resource network, sharing information is sometimes necessary to fulfill a request for help or to comply with a legal mandate. We limit sharing to specific, necessary scenarios and always strive to obtain explicit consent whenever feasible, particularly for Sensitive Personal Information.

4.1. Sharing with Third-Party Service Providers

We utilize trusted third-party service providers who assist us in operating our organization and delivering specific technical functions.

  • Technology Providers: This includes secure cloud hosting services, database management providers, and encrypted email communication platforms, all of whom are required by contract to adhere to strict confidentiality and security protocols consistent with this policy.
  • Payment Processors: As noted in Section 2.3, financial donation processing is handled by secure, compliant payment platforms that receive only the data necessary to complete the transaction and issue receipts.
  • Auditors and Accountants: External professionals may access financial records, which may contain donor PII, strictly for the purpose of conducting required annual audits or maintaining tax compliance.

4.2. Sharing with Resource Network Partners

A core component of the GHAMA mission is acting as a crucial bridge, connecting individuals to essential services provided by external resource network partners across Amador County (e.g., local job training centers, community health clinics, housing agencies).

  • With Consent: When you enroll in a program, you provide explicit, informed consent for us to share the minimum necessary information required to facilitate a successful referral. For instance, to refer a participant to an employment agency, we may share their name, contact information, and relevant employment background, but never unnecessary health or highly sensitive personal details.
  • Purpose Limitation: Information shared with partners is strictly limited to the purpose of the specific referral and is accompanied by an agreement that the partner will also maintain the confidentiality and security of the shared data, reinforcing the protective barrier around your private information.

4.3. Legal Compliance and Protection of Rights

We may be required to disclose personal information in limited, specific circumstances as required by law.

  • Legal Mandates: Disclosure may occur in response to a valid court order, subpoena, search warrant, or governmental request (e.g., child protection services). In such situations, GRACEFUL HEARTS AMADOR will only disclose the minimum amount of information legally required and will, whenever legally permissible, notify the affected individual of the request.
  • Protection of Safety: We reserve the right to disclose information we believe is necessary to protect the safety, rights, property, or security of GHAMA, its staff, its participants, or the public, particularly in cases involving suspected harm, neglect, or mandated reporting requirements specific to our work with youth in Amador County.

5. Data Security and Protection Measures

The security of your personal data is a constant, evolving priority at GRACEFUL HEARTS AMADOR, and we employ a multi-layered, rigorous approach to protect information against unauthorized access, disclosure, alteration, or destruction, both within our physical center and across our digital platforms.

5.1. Technical Security Safeguards

We implement industry-standard technical controls to ensure data integrity and confidentiality in all digital storage and transmission.

  • Encryption: All sensitive data (SPI) stored in our secure databases is encrypted both at rest and in transit (using SSL/TLS protocols for online submissions) to render it unreadable to unauthorized parties, ensuring that even if data is intercepted, it remains secured.
  • Access Control: Access to databases containing PII and SPI is strictly controlled and limited only to GHAMA staff and dedicated management volunteers who require the information to perform their specific job functions. This access is protected by multi-factor authentication (MFA) and regularly updated, complex passwords.
  • Regular Audits and Monitoring: Our systems are subject to regular internal and external security assessments and monitoring to detect vulnerabilities, prevent breaches, and ensure our security posture is constantly updated to meet emerging threats and maintain the integrity of our support network.

5.2. Organizational and Personnel Security

Technical measures are complemented by rigorous personnel training and strict organizational policies.

  • Staff Training: All GRACEFUL HEARTS AMADOR staff and key volunteers undergo mandatory, comprehensive training on privacy protection, confidentiality protocols, and trauma-informed data handling practices upon hiring and on an annual basis, ensuring that every individual understands their legal and ethical responsibility regarding participant data.
  • Physical Security: The physical premises of our Ione community center, where hard-copy documents (rarely used, but sometimes necessary) and physical computer terminals are located, are secured with locked storage cabinets, restricted access protocols, and monitored entry points, protecting the physical integrity of our records.
  • Clear Desk/Clean Screen Policy: We enforce a strict policy requiring staff to secure or shred confidential documents when not in use and to ensure computer screens showing sensitive information are locked when unattended, preventing accidental or opportunistic viewing of private data.

6. Data Retention Policy

GRACEFUL HEARTS AMADOR retains personal information only for as long as is strictly necessary to fulfill the purposes for which it was collected, to provide continuous, effective service to participants in our network, and to comply with legal, accounting, and funding requirements.

  • Active Participant Data: Information for active participants receiving services or mentorship is retained for the duration of their engagement with GHAMA and for a reasonable period thereafter (typically 3-5 years) to facilitate seamless re-enrollment, track long-term outcomes, and prepare necessary reports for grant compliance and organizational sustainability.
  • Donor Records: Financial records and donor PII are typically retained for a minimum of seven (7) years to comply with federal and state tax and audit laws, regardless of whether the donor is an active participant in our other programs.
  • Deletion: When information is no longer required for any defined purpose—be it service delivery, legal compliance, or historical reporting—it is securely destroyed using methods such as physical shredding for hard copies and cryptographic erasure or permanent deletion from all digital storage and backup systems, upholding our commitment to your privacy.

7. Your Privacy Rights and Choices

GRACEFUL HEARTS AMADOR is committed to empowering you with control over your personal information and ensuring you can exercise your privacy rights easily and effectively.

7.1. Access, Correction, and Portability

You have the right to request access to the personal information that GRACEFUL HEARTS AMADOR holds about you, allowing you to review the data we have collected for service delivery. You also have the right to request that any inaccuracies in your PII or SPI be promptly corrected or updated. Furthermore, you may have the right to request a copy of your data in a structured, commonly used, and machine-readable format, facilitating its transfer (portability) to another service provider if necessary.

7.2. The Right to Withdraw Consent and Opt-Out

You maintain the right to withdraw your consent for the processing of your data at any time, especially concerning non-essential uses such as general marketing communications or participation in voluntary studies. Specifically:

  • Marketing/Fundraising Opt-Out: You can easily opt out of receiving general fundraising or marketing communications from GRACEFUL HEARTS AMADOR by following the “unsubscribe” link located at the bottom of all email communications or by contacting the Privacy Officer directly (see Section 11). Please note that even if you opt out of marketing, we will continue to send you essential service-related communications regarding your appointments or eligibility for core resources.
  • Program Data Withdrawal: If you withdraw consent for the use of your data collected specifically for a program, we may be unable to continue providing you with certain personalized resources or support that rely on that data (e.g., if you withdraw consent to share employment background, we cannot provide Workforce Development referrals). We will clearly explain the necessary data requirements and the impact of withdrawal before acting on your request.

7.3. Requests for Deletion (The Right to Be Forgotten)

You have the right to request the deletion of your personal data held by GRACEFUL HEARTS AMADOR. We will honor all valid requests for deletion, unless the retention of the data is necessary for a compelling, lawful purpose, such as:

  • Legal Obligation: Retaining data required to comply with our legal or regulatory tax obligations (e.g., donor records).
  • Service Integrity: Retaining data necessary to complete a transaction or provide a service you have specifically requested.
  • Safety and Fraud: Retaining data necessary to prevent fraud, protect the safety of our staff or other participants, or resolve disputes.

To exercise any of these rights, please submit a formal, written request to the Privacy Officer at the contact details provided in the final section of this policy.

8. Children’s Privacy (COPPA Compliance)

GRACEFUL HEARTS AMADOR offers programs specifically tailored for youth (Ages 6-18), and we are deeply committed to protecting the privacy of children in full compliance with the Children’s Online Privacy Protection Act (COPPA) and related regulations.

  • Direct Collection Prohibition: We do not knowingly collect Personal Identification Information directly from children under the age of 13 without the explicit, verifiable consent of their parent or legal guardian.
  • Parental Consent: Enrollment in all GHAMA youth programs requires the completion and signing of a comprehensive parental/guardian consent form. This form explicitly outlines the limited types of information we will collect from the child (e.g., academic progress, peer feedback) and how that information will be used to provide mentorship and educational support.
  • Access and Control: Parents or legal guardians have the right to review the personal information collected from their child, revoke their consent for further collection and use of that information, and request the deletion of that information, which can be done by submitting a written request to the GHAMA Privacy Officer.

9. Third-Party Websites and External Links

The GRACEFUL HEARTS AMADOR website and our staff communications often contain links to external, third-party websites and resources (e.g., links to the Amador County Social Services portal, local job boards, or healthcare sites). These links are provided purely for your convenience as part of our resource navigation services.

  • Independent Policies: We want to be unequivocally clear that we have no control over the privacy practices, content, or security of these external sites. Once you leave the GHAMA network, your interaction with those third parties is governed by their own respective privacy policies.
  • Due Diligence: We strongly encourage all users to exercise due diligence and review the privacy policy of any external website before providing any personal information or engaging with their services. GRACEFUL HEARTS AMADOR cannot be held responsible for the practices or policies of any linked third-party resources.

10. Changes and Updates to this Policy

GRACEFUL HEARTS AMADOR is a dynamic organization that constantly adapts its services to meet the evolving needs of the Amador County community, and as such, this Privacy Policy may be updated periodically to reflect changes in our data processing practices or new legal requirements.

  • Notification: We will notify you of any significant or material changes to this policy by posting the revised version prominently on our website (ghama.site) with a new “Last Updated” date at the top of the document, ensuring that the information is readily available to all members of our network.
  • Continued Use: Your continued use of our services or website following the posting of an updated policy will signify your acceptance of those changes. We encourage all participants, volunteers, and donors to review this policy regularly to stay informed about how we are protecting your privacy and upholding our commitment to trust and transparency.

11. Contacting Our Privacy Officer

If you have any questions, concerns, complaints, or formal requests related to this Privacy Policy, the handling of your personal information, or wish to exercise any of the rights outlined in Section 7, please direct your inquiry to our dedicated Privacy Officer. Our officer is responsible for overseeing compliance with this policy and ensuring that our commitment to compassionate guidance extends to the stewardship of your data.

Privacy Officer Contact Details:

Attention: Privacy Officer, GRACEFUL HEARTS AMADOR

Physical Address: 804 AVALON DRIVE, IONE, CA 95640

Email for Privacy Requests Only: privacy@ghama.site (Please use this dedicated address for the quickest response to confidential privacy matters.)

We are committed to acknowledging your privacy-related query within ten (10) business days and resolving your concern promptly and professionally. Thank you for placing your trust in GRACEFUL HEARTS AMADOR; your privacy is our solemn promise.