Privacy & Data Handling Policy

Purpose

This Policy outlines how user data is collected, stored, processed, and protected in compliance with Florida privacy laws, federal regulations, and industry best practices.

Data Collected

We collect the following categories of data:

• Account information (name, email, role)
• Support requests
• Platform usage analytics
• Payment/donation information (where applicable)

Legal Basis for Processing

We process personal data under the following lawful bases:

• User consent
• Contractual necessity
• Compliance with legal obligations

Data Protection Measures

We implement industry-standard safeguards to protect user data:

• Encryption in transit and at rest
• Role-based access controls
• Secure authentication
• Regular security audits
• Vendor compliance verification

User Rights

Users may exercise the following rights regarding their personal data:

• Request access to their data
• Correction of inaccurate data
• Deletion where legally permissible
• Restriction of processing
• Copies of their records

Data Sharing

Data is not sold. Data may be shared with authorized staff, contracted service providers, and regulatory authorities when required by law.

Data Retention

Data is retained only as long as necessary for operational or legal purposes.

Breach Notification

In the event of a data breach, affected users will be notified in accordance with Florida Statutes §501.171 and applicable federal law.