Privacy Policy

Last updated: 09/01/2025

This Privacy Policy explains how TLHMH.org (“TLHMH,” “we,” “us,” or “our”) collects, uses, shares, and safeguards personal information when you visit our website, participate in our community, submit stories, or interact with our services. We design our practices to be trauma‑informed, dignity‑centered, and transparent.

By using TLHMH.org, you agree to the terms of this Privacy Policy.

Who we are and scope

• TLHMH.org is a care-centered, trauma‑informed nonprofit initiative providing resources, community storytelling, and supportive tools.

• This policy applies to TLHMH.org and any subdomains, emails, forms, or events we manage (collectively, the “Services”).

• If you access third‑party links, tools, or embeds (e.g., YouTube, payment processors), their policies govern your use of those services.

Key definitions

• “Personal information” means information that identifies, relates to, describes, or could reasonably be linked to you (e.g., name, email, IP address).

• “Sensitive information” includes details like health data, religious beliefs, sexual orientation, government IDs, precise location, or information about minors.

• “Processing” means any operation performed on personal information (collecting, storing, using, sharing, or deleting).

What we collect

We collect information in three ways: directly from you, automatically, and from third parties (when you authorize or when needed to operate the Services).

Information you provide

• Account and contact details: name or alias, email address, optional profile information.

• Story submissions and community posts: content you write/share, consent forms, attribution preferences.

• Support requests: messages, attachments, preferred contact method.

• Event participation: RSVPs, attendance, time zone, accessibility needs (optional).

• Donations and payments: We do not store full payment card details; payment processors collect and process those directly.

• Consent and preferences: communication choices, cookie settings, story visibility settings.

Information we collect automatically

• Device and usage data: IP address, browser type/version, device IDs, pages visited, time on site, referral URLs, date/time.

• Cookies and similar technologies: session tokens, preferences, analytics cookies. You can manage cookies in your browser settings.

Information from third parties

• Payment processors (for donation confirmations).

• Email delivery services (for subscription status).

• Social platforms (if you choose to interact through embedded widgets).

We intentionally avoid collecting sensitive information unless you choose to share it (e.g., within a story) and give clear consent for its handling.

How we use information

We use information to:

• Provide and maintain the Services, including accounts, content hosting, story moderation, and feature delivery.

• Communicate with you (service notices, community updates, responses to inquiries).

• Support trauma‑informed moderation and safety, enforce community standards, and prevent misuse or fraud.

• Improve accessibility, performance, and usability through aggregated analytics.

• Honor your preferences and consent settings (e.g., story attribution or anonymity).

• Comply with legal obligations and protect the rights, safety, and security of our community.

We rely on lawful bases such as your consent, our legitimate interests in operating a safe community, performance of a contract (e.g., providing requested services), and legal compliance.

Cookies and analytics

• We use strictly necessary cookies for core functionality (e.g., session continuity, security).

• With your consent (where required), we may use analytics cookies to understand site performance and improve design and accessibility.

• You can disable non‑essential cookies at any time in your browser or via our cookie banner (if present). Disabling may affect some features.

How we share information

We do not sell your personal information. We share information only as needed to operate the Services:

• Service providers (processors): hosting, email delivery, analytics, content moderation tools, payment processing. They act under contract, follow confidentiality and security requirements, and may process data only as instructed by us.

• Legal and safety: to comply with laws, respond to lawful requests, or protect the rights, safety, and security of individuals and our community.

• With your consent: e.g., publishing a story with your chosen attribution or partnering on a community event.

We require recipients to safeguard personal information and to use it only for the stated purpose.

User content, stories, and community safety

• Story submissions are voluntary and published only with informed consent and your selected attribution (name, alias, or anonymous).

• You can request edits, removal, or changes to attribution preferences at any time (see “Your rights”).

• We reserve the right to decline or remove content that violates community standards or risks harm.

• Do not share others’ personal information without permission. Do not post medical, legal, or crisis claims as fact; this space is supportive, not diagnostic.

Data retention

• We retain personal information only as long as necessary for the purposes described in this Policy or as required by law.

• Account/contact data: retained while your account is active and as needed to provide Services.

• Story content: retained while published and for archival/record‑keeping where you have consented; removed or anonymized upon verified request.

• Logs and analytics: retained for limited periods sufficient for security, performance, and audit.

When data is no longer needed, we securely delete or anonymize it.

Security

We use administrative, technical, and physical safeguards proportionate to the sensitivity of the information, including:

• TLS encryption in transit where applicable.

• Access controls and least‑privilege practices for administrators.

• Vendor due diligence and contractual data protection terms.

• Regular review of permissions, logging, and backups.

No method of transmission or storage is 100% secure; we work to reduce risk and respond promptly to issues.

Children’s privacy

Our Services are not directed to children under 13 (or under 16 in some regions). We do not knowingly collect personal information from children. If you believe a child provided information without appropriate consent, contact us and we will take steps to delete it.

Your choices and rights

Depending on your location, you may have rights to:

• Access and receive a copy of your personal information.

• Correct inaccurate or incomplete information.

• Delete your information (“right to be forgotten”).

• Restrict or object to certain processing.

• Withdraw consent at any time (this won’t affect prior lawful processing).

• Port data to another service (where technically feasible).

• Opt out of non‑essential cookies and certain analytics.

You can exercise these rights by contacting us (see “Contact us”). We may verify your identity to protect your privacy. Authorized agents may submit requests where permitted by law.

Region‑specific disclosures

• European Economic Area/UK/Switzerland (GDPR/UK GDPR): TLHMH.org acts as a controller for the personal information we process. Our lawful bases are consent, contract, legal obligation, and legitimate interests (e.g., site safety, service improvement). You have the right to lodge a complaint with your local data protection authority.

• California (CCPA/CPRA): We do not “sell” personal information as defined by the CCPA/CPRA. We honor rights to know, delete, correct, and limit use of sensitive information where applicable. You may designate an authorized agent to make requests on your behalf.

Contact us for a region‑specific summary if needed.

International data transfers

If we transfer personal information across borders, we do so in compliance with applicable laws and use appropriate safeguards (e.g., Standard Contractual Clauses, vendor certifications, and contractual commitments).

Third‑party services and links

Our Services may include links to third‑party websites, embeds, or tools (e.g., video players, social widgets, payment platforms). Their privacy practices are governed by their own policies. Review those policies before sharing information with them.

Community communications

• Email and messages: You can opt out of non‑essential communications at any time using unsubscribe links or by contacting us.

• Transactional communications (e.g., consent confirmations, service notices) are necessary to provide the Services and may continue even if you opt out of marketing or updates.

Data subject request process

To submit a privacy request:

1. Send your request to the contact below with the subject “Privacy Request.”

2. Specify the right you wish to exercise (access, correction, deletion, etc.).

3. Provide enough information for us to verify your identity (we will ask only for what is necessary).

4. We will respond within the legally required timeframe and inform you of outcomes or reasons we cannot fulfill a request.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will post an updated “Last updated” date and, when appropriate, notify you through the Services or by email.

Contact us

If you have questions, concerns, or requests about this Privacy Policy or your personal information, contact:

• Email: privacy@tlhmh.org

• Web: tlhmh.org/privacy (for updates and notices)

If you are in the EEA/UK and wish to contact a data protection authority, you can find your local authority at: [Insert link to supervisory authority directory].

Trauma‑informed commitments

• Consent first: We publish stories only with explicit consent and your chosen attribution. You can request edits or removal at any time.

• Least data necessary: We ask only for what’s needed to provide the Services.

• Respect for boundaries: We avoid collecting sensitive information unless you choose to share it and consent to its handling.

• Dignity and safety: Moderation prioritizes preventing harm, harassment, and retraumatization.

• Transparency: We communicate plainly about how your information is used and honor your choices.

Thank you for trusting TLHMH.org. Your safety, dignity, and privacy matter here.