Last Updated: September 29, 2025
1. Introduction
This Privacy Policy describes how h2fcp.org ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at https://www.h2fcp.org (the "Website").
We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other US state-level privacy laws.
2. Information We Collect
2.1 Information You Provide
We may collect personal information that you voluntarily provide to us, including:
- Contact Information: Name, email address, phone number, mailing address
- Account Information: Username, password, and other registration details
- Communications: Information you provide when contacting us, subscribing to newsletters, or participating in surveys
2.2 Automatically Collected Information
When you visit our Website, we automatically collect certain information, including:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, links clicked, referring website
- Location Data: General geographic location based on IP address
- Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies
3. How We Use Your Information
We use your personal information for the following purposes:
- Service Provision: To provide, maintain, and improve our services
- Communication: To respond to inquiries, send newsletters, and provide customer support
- Personalization: To customize your experience on our Website
- Analytics: To understand how visitors use our Website and improve functionality
- Legal Compliance: To comply with legal obligations and enforce our terms
- Security: To protect against fraud, unauthorized access, and other security issues
- Marketing: To send promotional materials (with your consent where required)
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), the UK, or Switzerland, we process your personal information based on the following legal grounds:
- Consent: When you have given explicit consent for specific processing activities
- Legitimate Interests: When we have legitimate business interests that do not override your rights
- Legal Obligation: When required by law
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience. Types of cookies we use include:
- Essential Cookies: Required for website functionality
- Analytics Cookies: Help us understand website usage
- Functional Cookies: Remember your preferences
- Marketing Cookies: Track your activity for advertising purposes
You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the website's functionality.
6. Information Sharing and Disclosure
We may share your personal information with:
- Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, email services)
- Business Transfers: In connection with mergers, acquisitions, or asset sales
- Legal Requirements: When required by law, court order, or governmental authority
- Protection of Rights: To protect our rights, property, safety, or that of others
- With Consent: When you have provided explicit consent
We do not sell your personal information to third parties.
7. Your Privacy Rights
7.1 Rights Under GDPR (EEA, UK, Switzerland residents)
You have the right to:
- Access: Request copies of your personal information
- Rectification: Correct inaccurate or incomplete information
- Erasure: Request deletion of your personal information ("right to be forgotten")
- Restriction: Limit how we process your information
- Data Portability: Receive your data in a structured, machine-readable format
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
- Lodge a Complaint: File a complaint with your supervisory authority
7.2 Rights Under US State Privacy Laws (California, Virginia, Colorado, Connecticut, Utah, etc.)
Depending on your state of residence, you may have the right to:
- Know: What personal information we collect, use, and disclose
- Access: Request access to your personal information
- Delete: Request deletion of your personal information
- Correct: Request correction of inaccurate information
- Opt-Out: Opt-out of the sale or sharing of personal information for targeted advertising
- Limit: Limit the use of sensitive personal information
- Non-Discrimination: Not be discriminated against for exercising your rights
7.3 Exercising Your Rights
To exercise any of these rights, please contact us at [INSERT CONTACT EMAIL]. We will respond to your request within the timeframe required by applicable law (typically 30-45 days). We may need to verify your identity before processing your request.
8. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy, unless a more extended retention period is required or permitted by law. Retention periods vary based on:
- The nature of the information
- The purposes for which it was collected
- Legal and regulatory requirements
- Legitimate business needs
9. International Data Transfers
If you are located outside the United States, please note that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions
- Other lawful transfer mechanisms
10. Children's Privacy
Our Website is not intended for children under 16 years of age. We do not knowingly collect personal information from individuals under the age of 16. If you believe we have collected information from a child under 16, please contact us immediately, and we will take steps to delete such information.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Employee training on data protection
However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
12. Third-Party Links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Do Not Track Signals
Some browsers have "Do Not Track" features. Our Website does not currently respond to Do Not Track signals. We will update this policy if we implement Do Not Track recognition in the future.
14. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending email notification (for significant changes)
Your continued use of the Website after the changes take effect constitutes acceptance of the updated Privacy Policy.
15. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: bxiong@h2fcp.org
Mailing Address: 3300 Industrial Blvd., Ste 200, West Sacramento, CA 95691
Phone: 916-375-8034
16. Supervisory Authority
If you are located in the EEA, UK, or Switzerland and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
Consent and Acknowledgment
By using our Website, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.