Effective Date: March 17, 2025

Introduction

TLC Fund is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you visit our website or interact with our services. By using our website, you agree to the terms of this Privacy Policy.

Who we are

TLC Fund is a nonprofit organization dedicated to providing financial assistance to individuals in need of essential healthcare services. Our mission is to ensure that everyone, regardless of financial circumstances, has access to the care they need. As a 501(c)(3) nonprofit organization, all donations made to TLC Fund are tax-deductible to the fullest extent allowed by law.

For more information about our mission and programs, visit our website at http://tlcfund.org/.

Information We Collect

We collect personal information in the following ways:

• Directly from You: When you make a donation, subscribe to our newsletter, or fill out a contact form, we collect information such as your name, email address, billing address, and payment details.
• Automatically: Our website may collect data such as IP addresses, browser type, and cookies to enhance your experience and analyze website performance.

Use of Information

Your information is used to:

• Process donations securely.
• Provide updates on our initiatives and programs.
• Improve our website and user experience.
• Respond to inquiries and support requests.

We do not sell, trade, or share your information with third parties without your explicit consent, except as necessary to fulfill legal obligations or process donations through payment processors.

Cookies and Embedded Content

• Cookies: Our website may use cookies to improve functionality and user experience. You can disable cookies through your browser settings, but some features may not function properly.
• Embedded Content: Our website may include embedded content (e.g., videos, images, articles) from third-party websites. These websites may collect data, use cookies, and track interactions as if you visited their site directly.

Data Security

We take data security seriously and implement industry-standard measures, including:

• SSL Encryption: Our website uses Secure Socket Layer (SSL) encryption to protect data transmission.
• Cloudflare Protection: We utilize Cloudflare to enhance website security and protect against threats.
• Restricted Access: Only authorized personnel have access to sensitive user data.

While we strive to protect your data, no system is 100% secure. We encourage users to take precautions when sharing personal information online.

Data Retention

• We retain personal information for as long as necessary to fulfill donation processing, legal, and administrative purposes.
• Users may request deletion of their personal information by contacting us at [email protected].

Your Rights Over Your Data

You have the right to:

• Request access to the personal data we hold about you.
• Request corrections or deletion of your personal information.
• Withdraw consent for communications.
• Restrict or object to certain types of data processing.

For data requests, please contact us at [email protected].

Third-Party Data Sharing

We may share data with third parties only in the following situations:

• Payment Processing: Your payment details are processed securely by Stripe, PayPal, or other payment processors.
• Legal Compliance: If required by law or in response to valid legal requests.

We do not store full credit card details on our servers.

Where Your Data is Sent

• Some data may be processed by third-party service providers, such as email marketing platforms, donation processors, and analytics services.
• Submissions made via forms may be checked through an automated spam detection service.

Data Breach Procedures

In the event of a data breach, we will:

• Investigate and assess the scope of the breach.
• Notify affected users as required by law.
• Take appropriate measures to mitigate further risks.

Automated Decision Making and Profiling

We do not use automated decision-making or profiling systems that have significant effects on users.

Industry Regulatory Compliance

TLC Fund operates in multiple states and complies with all applicable data protection laws, including:

• Oregon Consumer Privacy Act (OCPA): Effective July 1, 2024, and applicable to nonprofits starting July 1, 2025, this law governs how personal data is collected and processed in Oregon. While TLC Fund may not meet the law’s thresholds, we adhere to best practices for transparency and data security.We comply with applicable data protection regulations, including but not limited to GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act), as applicable.
• Nevada Privacy Laws: While primarily targeting commercial entities, Nevada’s privacy laws require businesses to allow consumers to opt out of data sales and provide clear data collection policies. TLC Fund does not sell user data but ensures compliance with all relevant regulations.
• Washington State’s My Health My Data Act: This law applies to organizations collecting consumer health data and mandates explicit consent, data transparency, and a published privacy policy. Although TLC Fund does not process health data, we maintain strict confidentiality and protection of all personal data.

We continuously monitor legal developments in these states to ensure ongoing compliance and maintain the highest standards of privacy protection.

• We comply with applicable data protection regulations, including but not limited to GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act), as applicable.

Updates to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page, and continued use of our website signifies acceptance of the updated terms.

Contact Information

If you have any questions regarding this Privacy Policy, please contact us at:
Email: [email protected]