Give

Privacy Policy

Hearts to Hands CLT • Effective date: May 18, 2026
Our commitment to you: Hearts to Hands CLT collects only the information necessary to operate our volunteer portal and fundraising events. We do not sell, rent, or share your personal information with third parties for marketing or commercial purposes, and we never will.

1. Who We Are

Hearts to Hands CLT is a nonprofit organization based in Charlotte, North Carolina. We operate a volunteer management portal at heartstohandsclt.org/volunteer/ and fundraising events at heartstohandsclt.org/fundraiser/. This Privacy Policy applies to all information collected through those platforms and any communications we send in connection with them.

Questions about this policy can be directed to us at info@heartstohandsclt.org.

2. Information We Collect

We collect information you provide directly to us:

  • Volunteer registration: first and last name, email address, phone number, and a password (stored as a one-way cryptographic hash — we never store or see your actual password).
  • Volunteer activity: event sign-ups, shift assignments, volunteer hours, and attendance history.
  • Guest book: names of family members or friends you add to bring to events. You control this list entirely and can delete entries at any time from your profile.
  • Profile photo: an optional photo you may upload to your volunteer profile.
  • Raffle ticket purchases: first and last name, email address, phone number, and ticket quantity. Payment card details are processed exclusively by Stripe and are never transmitted to or stored on our servers.
  • Prize assignments: your selection of which raffle prize boxes to enter your tickets into.

We also collect limited technical data automatically:

  • Session cookies: a temporary cookie that keeps you logged in during your visit. It expires when you close your browser or log out.
  • Remember-me cookies: if you choose "Remember me" at login, a secure token is stored so you don't have to log in again on that device. You can revoke remembered devices at any time under Security settings.
  • Standard server logs: IP address, browser type, and pages visited, retained briefly for security and error monitoring.

3. How We Use Your Information

We use the information we collect solely to:

  • Create and manage your volunteer account and authenticate your identity.
  • Send one-time verification codes (OTP) to confirm your phone number at login.
  • Coordinate volunteer event sign-ups, shift scheduling, and attendance tracking.
  • Send transactional SMS and email confirmations for volunteer sign-ups, raffle ticket purchases, and prize assignments.
  • Process raffle ticket purchases and record prize selections.
  • Calculate and display your volunteer hours and milestones.
  • Communicate important updates about events or your account (not promotional marketing).
  • Maintain the security and integrity of our systems.

We do not use your information for targeted advertising, behavioral profiling, or any automated decision-making that affects your rights.

4. What We Do Not Do

  • We do not sell or rent your personal information to anyone.
  • We do not share your information with third parties for marketing or advertising purposes.
  • We do not send unsolicited marketing emails or text messages.
  • We do not build advertising profiles or track you across other websites.
  • We do not store your payment card number, CVV, or full billing details — those go directly to Stripe.

5. Third-Party Service Providers

To operate our platforms we use the following trusted service providers. Each handles data solely to provide us that specific service and is bound by their own privacy commitments:

  • Stripe — payment processing for raffle ticket purchases. Stripe processes your payment card details directly and we never receive or store them. See stripe.com/privacy.
  • Twilio — SMS delivery for verification codes and transactional confirmations. Phone numbers are transmitted to Twilio solely to deliver messages you have requested. See twilio.com/legal/privacy.
  • Bluehost — web hosting for our servers and databases. Your data is stored on servers operated by Bluehost in the United States. See bluehost.com/privacy-policy.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or advertising technology on our platforms.

6. Data Retention

We retain your volunteer account information for as long as your account is active or as needed to fulfill the purposes described in this policy. Raffle purchase records are retained for record-keeping and tax purposes consistent with nonprofit obligations.

You may request deletion of your account and associated personal data by contacting us at info@heartstohandsclt.org. We will honor deletion requests within 30 days except where retention is required by law. You may also manually delete your account on the My Profile page of the Volunteer Portal.

7. Security

We protect your information using industry-standard measures including HTTPS encryption for all data in transit, hashed password storage, secure session handling, and access controls that limit who within our organization can view personal data. While no system is perfectly secure, we take these obligations seriously and review our practices regularly.

8. Your Rights

You have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information via your profile settings or by contacting us.
  • Delete your account and personal data by contacting us.
  • Opt out of SMS messages by replying STOP to any message we send. Note that opting out of SMS will disable two-factor authentication and transactional confirmations for your account.
  • Revoke device access for remembered-device logins at any time under your Security settings.

To exercise any of these rights, contact us at info@heartstohandsclt.org.

9. Children's Privacy

Our volunteer portal is intended for users aged 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes we will notify registered volunteers by email. Continued use of our platforms after a policy update constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

This policy was last updated on May 18, 2026. Hearts to Hands CLT, Inc. is a registered nonprofit organization.

This policy was last updated on May 18, 2026. Hearts to Hands CLT is a registered nonprofit organization.