Privacy Policy

1. Who We Are

WalkTogetherCare ("we," "our," or "us") is a 501(c)(3) nonprofit organization headquartered at 10232 Cove Hollow Dr., Papillion, NE 68046. We operate walktogethercare.org and provide free navigational support, practical care coordination, and faith-rooted encouragement to families navigating family crises, special needs care, elder care, and estate transitions.

This Privacy Policy describes how we collect, use, and protect personal information submitted through our website, including our care request intake form, volunteer application, vendor partnership inquiry, and partner organization inquiry.

2. Information We Collect

Information You Provide Directly

We collect information you voluntarily submit through our forms:

Care Request (Get Help) Form — submitted when a family requests support:

• First and last name
• Email address
• Phone number
• Home address
• Support category (Elder Care, Crisis, Special Needs, or Estate Transition)
• A description of your situation
• How you heard about us (optional)

Volunteer Application Form — submitted when someone applies to volunteer:

• First and last name
• Email address
• Phone number (optional)
• City or location
• Services you can help with
• Organization or church affiliation (optional)
• Availability and any additional notes

Vendor Partnership Inquiry Form — submitted by service providers wishing to partner:

• Business name, email, and phone
• Primary contact name and role
• Services offered and service area
• Additional notes

Partner Organization Inquiry Form — submitted by organizations seeking to collaborate:

• Organization name and type (e.g., church, shelter, legal aid, food pantry)
• Contact name, email, phone, and role
• City or location
• Additional comments

Information Collected Automatically

When you visit our website, certain information is collected automatically through Google Analytics (GA4), including pages visited, time spent on pages, browser type, device type, and general geographic region (city/country level, not precise location). This data is aggregated and anonymous and is used solely to improve our site.

Information We Do Not Collect

We do not collect payment information directly — donations are processed through Zeffy, a third-party platform with its own privacy policy. We do not collect Social Security numbers, government-issued ID numbers, or financial account information.

3. How We Use Your Information

We use the information you provide to:

• Respond to your care request and assign a WalkTogetherCare navigator to your case
• Coordinate practical support services on your behalf (meal delivery, transportation, home modifications, respite care, legal and financial referrals, and other services)
• Communicate case status updates and next steps through your secure requester portal
• Match volunteer applicants with appropriate families and service opportunities
• Onboard and coordinate vendor partners who provide services to families we serve
• Maintain our internal case management system to track the progress and outcomes of each family we support
• Improve our website and services through aggregated, anonymized analytics
• Comply with legal obligations as a 501(c)(3) nonprofit organization

We do not use your information for advertising, marketing to third parties, or any purpose unrelated to providing care and support to families in need.

4. How We Share Your Information

Your information may be shared in the following limited circumstances, always in service of caring for your family:

Volunteers & Vendor Partners

When coordinating specific services on your behalf, a WalkTogetherCare navigator may share relevant contact information and service details with a screened volunteer or vetted vendor partner. We will inform you before sharing your information with any third-party service provider, and you may decline at any time.

Partner Organizations

We may refer you to a partner organization (such as a church, legal aid office, food pantry, or shelter) when doing so is in your best interest and with your knowledge. We will not share your information with a partner organization without your consent.

Service Providers & Technology Platforms

We use a small number of trusted technology platforms to operate our services. These providers process data on our behalf and are contractually prohibited from using your data for their own purposes. See Section 5 for details.

Legal Requirements

We may disclose information if required by law, court order, or government regulation, or if we believe in good faith that disclosure is necessary to protect the safety of a person or prevent imminent harm.

5. Third-Party Services We Use

Our website and operations rely on the following third-party services:

Monday.com (Case Management)

We use Monday.com as our internal case management platform. Information submitted through our forms is stored as structured records on Monday.com's secure servers. Monday.com is SOC 2 Type II certified. monday.com Privacy Policy →

Supabase (Authentication)

Volunteer, vendor, and partner accounts are authenticated using Supabase. Supabase stores account credentials (email and hashed password) for registered members of our platform. Supabase Privacy Policy →

Netlify (Website Hosting)

Our website is hosted on Netlify. Netlify may collect standard server logs (IP addresses, request timestamps) as part of normal hosting operations. Netlify Privacy Policy →

Google Analytics (GA4)

We use Google Analytics to understand how visitors use our site. Data collected is aggregated and anonymized. You can opt out using the Google Analytics Opt-out Browser Add-on. Google Privacy Policy →

Google Fonts

Our website loads fonts from Google Fonts. This causes your browser to make a request to Google's servers, which may log your IP address. Google Fonts Privacy FAQ →

Zeffy (Donations)

Donations to WalkTogetherCare are processed through Zeffy. We do not receive or store your payment card information. All payment processing is governed by Zeffy's privacy policy. Zeffy Privacy Policy →

6. Data Retention

We retain personal information for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law.

• Care request records are retained for the duration of active case management and may be kept for up to 7 years thereafter for nonprofit accountability and reporting purposes.
• Volunteer and member account information is retained while your account is active. You may request deletion at any time.
• Vendor and partner records are retained while the partnership is active and for a reasonable period after it ends.
• Analytics data is retained per Google Analytics' default data retention settings (26 months).

When retention is no longer necessary, we delete or anonymize your data in accordance with our internal data management practices.

7. Security

We take the security of your personal information seriously. Our technical safeguards include:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• API endpoints are rate-limited to prevent abuse and unauthorized access.
• Admin and member access is protected by JWT-based authentication (Supabase Auth).
• Requester portal links are signed with HMAC-SHA256 tokens, ensuring only the intended recipient can access their case details.
• Authenticated API responses include headers that prevent browsers from caching personally identifiable information.

While we use reasonable technical and organizational measures to protect your information, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any known vulnerabilities.

8. Your Rights & Choices

You have the right to:

• Access — request a copy of the personal information we hold about you.
• Correct — ask us to update or correct inaccurate information.
• Delete — request that we delete your personal information from our records, subject to any legal retention obligations.
• Withdraw consent — decline to share your information with any volunteer, vendor, or partner organization at any time.
• Opt out of analytics — use the Google Analytics Opt-out Browser Add-on to prevent your site visits from being tracked.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe, and no later than 30 days.

If you are a resident of California, Nebraska, or another state with applicable data privacy laws, you may have additional rights under those laws. We honor all such requests to the best of our ability as a small nonprofit organization.

9. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If a parent or guardian believes their child has submitted information to us, please contact us immediately at [email protected] and we will promptly delete it.

We do recognize that many of the families we serve include children with special needs or in crisis situations. In these cases, information about a child may be provided by a parent or legal guardian as part of a care request, and is treated with the same care and confidentiality as all other personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time as our services evolve or legal requirements change. When we make material changes, we will update the "Effective Date" at the top of this page. We encourage you to review this page periodically.

Continued use of our website after an update to this policy constitutes your acceptance of the revised terms.

11. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please reach out: