Privacy Policy

Last Updated: March 2026

BrightRoots ("we," "us," or "our") is committed to protecting the privacy of every individual who interacts with our organization, with special care and attention given to the privacy of children. This Privacy Policy explains what information we collect, how we use it, how we protect it, and what choices you have regarding your personal data. By using our website, enrolling in our programs, or engaging with our services, you agree to the practices described in this policy.

Our Commitment to Privacy

As an organization that works with young children and families, we take privacy seriously. We collect only the information necessary to deliver our programs and services effectively, and we handle all personal data with the care and respect it deserves. We never sell personal information to third parties, and we limit data sharing to the minimum required to fulfill our mission.

Information We Collect

Information You Provide Directly

When you enroll in a program, register for a workshop, make a donation, sign up for our newsletter, volunteer, or contact us, you may provide information such as:

• Names of parents, caregivers, and children
• Mailing address, email address, and phone number
• Child's date of birth and age
• Emergency contact information
• Health or allergy information relevant to program participation
• Donation and payment information
• Volunteer application details

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including your IP address, browser type, operating system, referring URL, pages visited, and the dates and times of your visits. This information is collected through cookies and similar technologies and is used to improve our website and understand how visitors use it.

How We Use Your Information

We use the information we collect for the following purposes:

• To enroll children and families in programs and manage participation
• To communicate with you about programs, events, and organizational news
• To process donations and provide tax receipts
• To manage volunteer applications and assignments
• To conduct developmental screenings and track program outcomes
• To improve our programs, website, and services
• To comply with legal obligations and organizational policies

We do not use personal information for commercial marketing purposes, and we do not sell, rent, or trade personal information to third parties.

Children's Privacy and COPPA Compliance

Protecting the privacy of children is a core priority for BrightRoots. We are committed to compliance with the Children's Online Privacy Protection Act (COPPA) and applicable state laws regarding children's data.

• We do not knowingly collect personal information online from children under the age of 13 without verifiable parental consent. Our website is not directed at children, and any information about children is provided by their parents or legal guardians during the program enrollment process.
• Parental consent is required before we collect, use, or disclose any personal information about a child participating in our programs. Parents and guardians provide this consent through our enrollment forms.
• Parents have the right to review the personal information we have collected about their child, request corrections, and request that the information be deleted. To exercise these rights, contact us using the information provided below.
• We limit the collection of children's information to what is reasonably necessary to support program participation, health and safety, and developmental tracking.
• Children's information is stored securely and accessible only to authorized staff members who need it to deliver programs and services.
• We do not publish photographs or identifying information about children without explicit written parental consent. When consent is granted, parents may revoke it at any time.

Data Sharing and Disclosure

We may share personal information only in the following limited circumstances:

• Service providers: With trusted vendors who help us operate our programs and website, such as payment processors and email service providers, under strict confidentiality agreements
• Program partners: With schools, libraries, or other partner organizations when necessary to coordinate services, and only with your prior consent
• Legal requirements: When required to comply with applicable laws, regulations, court orders, or legal proceedings
• Safety: When we believe disclosure is necessary to protect the safety of a child, family member, staff member, or the public

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, use, alteration, and destruction. These measures include encrypted data transmission, secure storage systems, access controls, and regular security assessments. While no system can guarantee absolute security, we are committed to maintaining strong protections for every piece of information entrusted to us.

Your Choices and Rights

• Access and correction: You may request access to the personal information we hold about you or your child and ask us to correct any inaccuracies
• Deletion: You may request that we delete your personal information, subject to any legal or operational requirements to retain certain records
• Opt out: You may unsubscribe from our email communications at any time by clicking the unsubscribe link in any email or contacting us directly
• Cookies: You may adjust your browser settings to refuse cookies or alert you when cookies are being sent. Some features of our website may not function properly without cookies

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, programs, or legal requirements. When we make significant changes, we will post the updated policy on our website and update the "Last Updated" date above. We encourage you to review this policy periodically.

Contact Us

If you have questions or concerns about this Privacy Policy, our data practices, or your rights regarding personal information, please contact us:

BrightRoots 450 Sunshine Way, Suite 200 Phone: (555) 789-1234 Email: hello@brightroots.org

We will respond to all privacy-related inquiries within 30 days.