Privacy Policy
You can use this as the main content of a dedicated Privacy Policy page (e.g., /privacy-policy). Modern guidance recommends a dedicated page, clearly linked site-wide.
Privacy Policy — Project Heal of Santa Barbara County (Project Heal SBC™)
Effective Date: January 1, 2025This Privacy Policy explains how Project Heal of Santa Barbara County (“Project Heal SBC,” “we,” “us,” or “our”) collects, uses, shares, and safeguards information when you visit our website at https://www.projecthealsbc.org or interact with our services. We are committed to protecting your privacy and complying with applicable laws, including the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), the General Data Protection Regulation (GDPR), the Children’s Online Privacy Protection Act (COPPA), and other relevant privacy regulations as they apply to our activities.
If you do not agree with the terms of this Privacy Policy, please do not use our website or provide personal information.
1. Information we collect
We may collect the following categories of information:
Personal information:
Name, email address, mailing address, phone number, and other contact details you voluntarily provide (for example, when you complete a form, sign up for updates, request support, or schedule a consultation).Health-related information:
Limited health-related or advocacy information that you voluntarily submit through forms related to advocacy, consultation, or support services. We do not use this information for advertising, and we treat it as sensitive.Technical and usage information:
IP address, browser type, device identifiers, pages viewed, referring URLs, and general website usage data collected through cookies or similar technologies to help us understand how our site is used and to improve performance.
We collect information directly from you, automatically through your use of the site, and, in limited cases, from third-party tools or service providers (for example, website analytics or email service providers).
2. How we use your information
We use the information described above to:
Provide, operate, and improve our advocacy, consulting, membership, and digital hub services.
Respond to your inquiries, requests, and support needs.
Communicate with you, including sending newsletters, program updates, community notices, and service-related announcements (you can opt out of non-essential communications at any time).
Maintain the security and integrity of our website, systems, and services.
Comply with legal obligations, public health reporting requirements (where applicable), and other regulatory or contractual requirements.
We do not sell your personal information. If this changes in the future, we will update this policy and provide any required “Do Not Sell or Share My Personal Information” options.
3. Legal bases for processing (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or another region where GDPR-style laws apply, we process your personal data under one or more of the following legal bases:
Consent: When you have clearly permitted us (for example, subscribing to a newsletter or submitting a form).
Performance of a contract: When processing is necessary to provide services you have requested.
Legal obligations: When we must comply with legal or regulatory requirements.
Legitimate interests: When we have a legitimate organizational interest that is not overridden by your privacy rights, such as improving our services or ensuring website security.
4. How we share information
We do not sell personal information. We may share information as follows:
Service providers: With trusted third-party vendors who provide services on our behalf, such as website hosting, email delivery, analytics, or secure form processing. These providers are contractually required to protect your information and use it only for our specified purposes.
Legal and safety: With courts, regulators, law enforcement, or other authorities when required by law, legal process, or to protect our rights, safety, or the rights and safety of others.
Healthcare or advocacy partners (with your consent): In limited cases, and only with your explicit permission, we may share information with healthcare, community, or advocacy partners directly involved in the services you request.
We do not permit our service providers to use your information for their own marketing purposes.
5. Your privacy rights
Your rights will depend on where you live, but may include:
California residents (CCPA/CPRA):
Subject to certain exceptions, you may have the right to:Know the categories of personal information we collect, use, and disclose.
Request access to specific pieces of personal information we hold about you.
Request deletion of certain personal information.
Correct inaccurate personal information.
Opt out of certain types of data sharing or “sale” (we do not currently sell personal information).
Be free from unlawful discrimination for exercising your privacy rights.
EU/UK residents (GDPR):
You may have the right to:Access the personal data we hold about you.
Request correction (rectification) of inaccurate data.
Request deletion (erasure) of your data in certain circumstances.
Restrict or object to certain processing.
Request data portability.
Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, or to submit a privacy-related request, contact us at info@projecthealofsbc.org and tell us which right you would like to exercise and how we can locate your records.
We may need to verify your identity before fulfilling your request, as allowed or required by law.
6. Cookies and similar technologies
Our service providers, and we may use cookies and similar technologies to operate our website, understand usage patterns, and improve performance. Where required by law, we will provide appropriate notices and obtain consent for non-essential cookies. You can adjust your browser settings to manage cookies, but some features of the website may not function properly without them.
7. Data security
We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. These measures may include secure transmission, access controls, and limited retention periods.
However, no method of transmission or storage over the Internet is completely secure, and we cannot guarantee absolute security.
8. Data retention
We retain personal information only for as long as necessary to:
Fulfill the purposes described in this Privacy Policy.
Provide the services you have requested.
Comply with legal, accounting, or reporting requirements.
When information is no longer needed, we will delete it or de-identify it in accordance with applicable law.
9. Children’s privacy
Our website and services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13 without verifiable parental consent, consistent with COPPA.verasafe+1
If you believe that a child under 13 has provided us with personal information without parental consent, please contact us at info@projecthealofsbc.org so we can take appropriate steps to delete the information and, if needed, update our practices.
10. International data transfers
If you access our website or provide information from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States or other jurisdictions where our service providers operate.
By using our website or providing information, you acknowledge that your information may be transferred to countries that may have different data protection laws than your country of residence, and you consent to those transfers as permitted by applicable law.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the “Effective Date” at the top of this page and, where appropriate, provide additional notice (such as a banner on the website or email notice).
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your
12. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you can contact us at:
Project Heal of Santa Barbara County (Project Heal SBC™)
351 Paseo Nuevo, 2nd Floor
Santa Barbara, CA 93101
📧 info@projecthealofsbc.org
📞 (805) 539-7534
Contact form: https://www.projecthealsbc.org/contact