Your information deserves thoughtful care.

We collect information you choose to provide, such as your name, email address, phone number, reason for contacting us, and message. Staff-only areas may also process account and authentication information.

On public pages, limited analytics are on by default where permitted. The categories of information measured are page paths and titles, broad referral source, general browser and device category, approximate geographic area, site-assigned public content identifiers, and selected interactions such as a contact-form completion or a careers, services, phone, donation, or application-link click.

We use information to answer inquiries, route requests to the right team, deliver confirmation emails, operate and secure the website, maintain staff tools, understand aggregate website performance, and improve our services and communications.

We use trusted providers for website hosting, email delivery, authentication, analytics, databases, and media storage. They process information only to provide those services. We do not sell personal information. We may disclose information when required by law, to protect safety or rights, or as part of a lawful organizational transaction.

We use Google Analytics, PostHog, and a limited first-party event log to understand aggregate website use. Google Analytics reports broad traffic patterns. PostHog receives manually selected page views and high-level actions. Our first-party log stores a sanitized event name and limited event properties so staff can see totals for important website actions.

PostHog remains cookieless. Where analytics storage is permitted, Google Analytics may set first-party _ga cookies and use a pseudonymous browser identifier to distinguish visits and sessions. We limit those cookies to 90 days and do not send names, email addresses, phone numbers, contact-form messages, health or disability information, payment information, authentication information, user IDs, or staff-portal activity to analytics. Form fields, ordinary query strings, URL fragments, campaign labels, and free-form link text are excluded from analytics page identity and event properties.

Automatic click capture, heatmaps, session recordings, person profiles, surveys, and experimentation are disabled in PostHog. Google Signals, advertising personalization, and advertising storage are disabled in Google Analytics. Like any internet service, an analytics provider can receive technical request information such as an IP address and user-agent while delivering the request. We do not add IP addresses to analytics events or use them to identify people; a provider may process an IP address transiently for security, delivery, and approximate geographic reporting. PostHog's cookieless mode uses request data such as the IP address, user agent, and site hostname to create an irreversible server-side hash with a salt that changes daily. The IP address is then stripped before enrichment, and the hash is not stored in the browser or used to identify a person across days.

To protect the first-party analytics endpoint from abuse, our server briefly uses a salted, one-way hash derived from the requesting network address and browser user-agent for rate limiting. That hash remains in server memory only and is not written to the analytics event log.

Google and PostHog may process this limited technical information in the United States and other locations where they or their service providers operate. Google Analytics uses regional consent defaults: analytics storage remains denied in the European Economic Area, the United Kingdom, and Switzerland unless a visitor explicitly allows it. Elsewhere, first-party analytics storage may be enabled. Google Signals, advertising storage, advertising user data, and advertising personalization remain denied everywhere. When analytics storage is denied, Google receives limited cookieless signals that can include a timestamp, page and referrer information, browser or device information, consent state, and a random number generated for the page load.

Learn more about how Google processes information from sites that use its services in Google's privacy information for partner sites, and review PostHog's privacy policy. Google also provides an optional Analytics opt-out browser add-on.

We keep information only as long as reasonably necessary for the purpose for which it was collected, our operational records, or legal obligations. Our system checks for and removes first-party aggregate analytics events older than 13 months whenever a new analytics event or staff analytics report is processed. If the site has no analytics activity, an older event may remain until that next processing occurs. Google Analytics and PostHog retain information according to the retention settings in our accounts and their applicable policies.

We use administrative and technical safeguards designed to protect information, but no internet transmission or storage system can be guaranteed completely secure.

You may ask about, correct, or request deletion of information you submitted through this website, subject to applicable recordkeeping requirements. You can turn analytics off at any time with the control below or the permanent “Analytics choices” control in the website footer. When analytics are off, we stop sending new analytics events from your browser and clear any analytics storage we control.

We also honor supported browser Global Privacy Control and Do Not Track signals as requests to turn analytics off. Depending on where you live, applicable law may provide additional access, deletion, correction, portability, or opt-out rights. Contact us to exercise a right that applies to you; we may need to verify your request.

The public contact form is not intended for protected health information, confidential service records, or emergency requests. Do not submit highly sensitive information through the form. If there is an emergency, call 911 or the appropriate emergency service.

We may update this notice as our website or practices change. The effective date below shows when this version became active.