1. Introduction and Scope of this Policy
Commitment to the Privacy and Trust of Our Supporters
Heidi’s Village Animal Welfare Organization (HVAWO) is profoundly committed to the security, integrity, and lawful management of the personal data entrusted to us by our adopters, donors, volunteers, partners, and general website visitors. This comprehensive Privacy Policy outlines the practices HVAWO employs concerning the collection, usage, sharing, security, and retention of information gathered through our various touchpoints, including our website (hvawo.site), electronic communications, physical forms completed at our facility (600 N 40th Street, Phoenix, AZ 85008), and interactions with our designated third-party service providers. This document is designed to provide you with a transparent understanding of how your information is handled in accordance with applicable laws and ethical standards, reflecting our core values of integrity and stewardship, which apply equally to the animals we save and the data we manage. By engaging with our services, making a donation, applying to adopt, or simply browsing our website, you acknowledge and consent to the practices described within this Policy. This Policy applies solely to HVAWO and its official digital and physical operations; it does not extend to any third-party websites, even those that may be linked from our domain, and we strongly encourage all users to review the privacy policies of any external sites before providing personal data. This Policy is effective as of October 23, 2025, and supersedes all prior privacy policies and statements related to HVAWO’s data handling practices. We understand that the information you share is sensitive, and maintaining your confidence is paramount to our life-saving mission, ensuring that our focus can remain squarely on giving every animal a second chance at happiness without compromise.
2. Information We Collect and the Methods of Collection
Categorizing the Data Necessary to Fulfill Our Mission
HVAWO collects several types of information from and about users of our services and website, which can be broadly categorized into information you directly provide, information automatically collected, and information obtained from third-party sources, all of which are essential to conducting our animal welfare operations and community engagement efforts.
2.1 Information You Directly Provide to Us
This category includes any data you voluntarily submit to us through forms, applications, correspondence, or verbal interactions, constituting the majority of the personal information we process for service fulfillment. Identifying Information includes, but is not limited to, your full name, physical mailing address (required for adoption applications, donation receipts, and volunteer vetting), telephone numbers (both home and mobile, essential for scheduling and urgent contact), and email address (primary means of communication for newsletters, updates, and follow-ups). Financial Information is collected solely for the purpose of processing donations, purchases, or adoption fees and includes credit card numbers, bank account information, or other payment details; crucially, this data is generally processed by secure, PCI-compliant third-party payment processors (as detailed in Section 4.1), and HVAWO itself retains minimal, non-sensitive payment confirmation data for record-keeping and tax purposes. Adoption and Volunteer Application Information is highly sensitive and includes detailed background checks, personal references (contact information for non-family members), household details (including existing pets and human occupants), living situation (rentals often require landlord verification), and specific lifestyle questions related to an applicant’s ability to provide a safe, nurturing environment for an animal. Communication Records encompass any information exchanged with our staff, including content from emails, web contact forms, direct messaging through social media, and transcripts of customer service calls, all retained to ensure consistency, improve staff training, and resolve potential disputes or concerns regarding adoption matching or organizational policies. The granularity of this data is necessary to perform robust due diligence, which is foundational to our responsible adoption philosophy and legal obligations as a shelter.
2.2 Information Automatically Collected
When you interact with our website, certain data is automatically generated and collected through common tracking technologies to help us understand user behavior, improve site performance, and secure our online infrastructure. Log Data and Device Information is gathered by our web servers and includes your Internet Protocol (IP) address, browser type (e.g., Chrome, Safari), operating system (e.g., Windows, iOS), the pages or content you viewed, the dates and times of your access, and the referring website address; this data is used primarily for technical diagnostics, site security, and generalized traffic pattern analysis. Tracking Technologies and Cookies are small text files placed on your device by your browser when you visit our site; we utilize both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until deleted) to maintain user authentication during a single session, store user preferences, and facilitate analytics that inform our marketing strategies, ensuring we can appeal effectively for the donations needed to continue our work. Website Analytics Data is aggregated, non-personally identifiable information collected via third-party analytics services (such as Google Analytics) that helps us measure website traffic, identify popular content, and understand demographic information about our site visitors (e.g., age range, gender) at an aggregated, non-individualized level, which aids in strategic planning and optimizing our digital outreach efforts.
2.3 Information from Third Parties
We may receive information about you from external sources, which is primarily used to cross-reference the data you provide to us, ensuring the integrity and safety of our adoption and volunteer processes. Service Provider Data includes confirmation receipts and transaction details from payment processors, ensuring that donations and fees are accurately matched to the corresponding donor or applicant in our records. Reference Verification Data is critical to our due diligence; when you list personal or veterinary references on an application, we collect information from those third parties (e.g., a veterinarian confirming an existing pet’s vaccination status, or a landlord verifying pet allowances) to validate the suitability of the environment you intend to provide for an animal. Publicly Available Information may be collected or reviewed from social media profiles or public registries to verify identity, confirm employment details, or assess potential conflicts of interest related to organizational governance or high-level volunteer roles, all strictly in accordance with legal permissions and professional standards necessary to protect the reputation and integrity of HVAWO.
3. How We Use Your Information: The Purpose of Processing
Aligning Data Usage with Our Core Life-Saving Mission
The information collected by HVAWO is utilized exclusively to support the execution of our animal welfare mission, deliver high-quality services, maintain operational efficiency, and comply with all governing legal frameworks. Our uses are detailed across several key areas:
3.1 Service Delivery, Fulfillment, and Adoptions
The most vital use of your data is to facilitate the core services we offer. Your detailed application information is used by our Adoption Counselors to meticulously match animals with suitable homes, considering behavioral needs, health status, and household environment, a process requiring rigorous assessment to ensure a permanent, successful placement. Similarly, volunteer data is used for role assignment, scheduling, and training, ensuring volunteers are placed in positions where they can contribute effectively and safely, such as dog walking or cat socialization, aligning their skills with the animals’ specific needs. We use communication data to schedule critical appointments, including veterinary consultations, meet-and-greets, and adoption finalizations, ensuring smooth logistical flow within our busy facility.
3.2 Communication, Engagement, and Public Outreach
We rely on your contact information to keep you informed about our progress and engage you in our mission. We use email addresses to send our monthly newsletter, which includes success stories, educational tips on pet care, and detailed reports on our community impact. Physical addresses and email are used for targeted fundraising appeals and event invitations, ensuring our donors and supporters are aware of critical needs and opportunities to contribute to our financial stability. Communication data is also essential for providing necessary post-adoption support, allowing us to check in on adopted animals, offer behavioral advice, and provide resources to ensure the continued welfare of pets who have found their forever families.
3.3 Fundraising, Development, and Financial Integrity
As a non-profit organization, sustained fundraising is paramount. We use financial and identification data to process and receipt donations, ensuring compliance with all tax regulations and providing donors with accurate documentation of their generosity. We may analyze aggregated donor data to understand giving patterns and tailor our fundraising communications to be more effective, ensuring that every dollar spent on development maximizes the resources available for animal care. We also use contact information to issue formal acknowledgements and thank-you notes, expressing our gratitude and demonstrating transparent stewardship of contributed funds, a cornerstone of our integrity value.
3.4 Operational Efficiency, Security, and Quality Assurance
Data is used internally to maintain the health and reliability of our organization. Website log data and tracking information are used to monitor for security vulnerabilities, prevent fraud, and diagnose technical issues, protecting our digital assets and the security of all user data. Communication records and survey feedback are used for staff performance review and training, helping us to enhance the quality and consistency of the experience provided by our Adoption Counselors and Community Coordinators. Financial transaction data is utilized for auditing purposes, financial reporting, and compliance with all non-profit governance standards, ensuring transparency and accountability to our board and the public.
3.5 Legal and Regulatory Compliance
HVAWO is legally obligated to comply with various reporting and retention requirements. We use collected data to fulfill government reporting mandates, such as annual organizational reports and tax filings. We retain records of adoption contracts and vet checks as required by animal welfare laws to document the responsible transfer of custody. Data may be used or disclosed if required by a valid subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect the rights, property, or safety of HVAWO, our animals, our employees, or the public, acting always under the strict guidance of our legal counsel.
4. Sharing and Disclosure of Your Information
The Circumstances Under Which Your Data May Be Shared
HVAWO is committed to minimizing the sharing of your personal information, but certain disclosures are necessary to operate our complex mission effectively, ensure regulatory compliance, and deliver specialized services that we cannot perform internally. We never sell personal information to third parties for monetary gain, and any sharing is conducted under strict contractual agreements that mandate confidentiality and security.
4.1 Disclosure to Essential Service Providers
We engage select third-party companies to perform critical functions on our behalf, and these providers are only given the minimum amount of personal data necessary to execute their contracted services. This includes Payment Processors (e.g., credit card merchant services) who securely handle all donation and fee transactions; they never retain data beyond the scope of the transaction. We use CRM (Customer Relationship Management) Platforms to securely store and organize donor and adopter information, facilitating efficient communication and tracking of historical interactions. Email and Digital Marketing Providers utilize your contact information to distribute our newsletters and fundraising campaigns, but they are strictly prohibited from using this data for their own marketing purposes. Website Hosting and IT Support Partners may have access to technical log data necessary to maintain the uptime, security, and performance of our website infrastructure. All such providers are carefully vetted and bound by data processing agreements that align with our security and privacy standards.
4.2 Sharing with Affiliated Organizations and Partners
In the spirit of collaboration, HVAWO sometimes shares data with external entities directly supporting our mission, always with the intent of maximizing animal safety and recovery. Veterinary References and Clinics are contacted to verify the care history of existing pets in an applicant’s household, a critical step in our adoption vetting process; similarly, we share medical information about newly adopted pets with the adopter’s designated veterinarian to ensure continuity of care. We may share basic identifying information with Rescue and Shelter Partners when collaborating on a joint rescue effort or transferring animals between facilities, but this sharing is limited to what is essential for coordinating the transport and intake process. In the case of Foster Families, we share the animal’s medical and behavioral history, as well as necessary contact information for our medical staff, to enable the foster family to provide appropriate care and rapid intervention when needed.
4.3 Legal Compliance, Law Enforcement, and Protection of Rights
We reserve the right to disclose personal information if required by law or if we believe in good faith that such action is necessary to comply with legal processes (such as a valid subpoena or warrant), respond to requests from government authorities, or protect the rights, property, or personal safety of HVAWO, our users, or the public. This includes sharing information with law enforcement agencies in the event of suspected fraud, reporting suspected animal cruelty or neglect to the appropriate authorities as mandated by law, or defending against legal claims where the disclosure of specific records is deemed necessary to establish our position.
4.4 Public Forums and User-Generated Content
If you choose to submit content to public-facing areas of our website, such as testimonials, success stories, or comments on a blog, any personal information you choose to include in that content may become public. For testimonials, we will generally only use the provided name and city of residence, along with the child’s age group (as provided), unless you explicitly grant us permission to include additional information. Please exercise caution and discretion when deciding what information to share in any public forum, as HVAWO is not responsible for the privacy practices of other users who may view and use that publicly shared content.
5. Data Security and Retention Protocols
Protecting Your Information with Technical and Administrative Safeguards
5.1 Comprehensive Security Measures
HVAWO implements a robust combination of physical, technical, and administrative security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Technical Safeguards include the use of Secure Socket Layer (SSL) encryption technology to protect data during transmission over the internet, multi-factor authentication for access to sensitive internal systems, and regular vulnerability scanning and penetration testing conducted by external security experts. Administrative Safeguards involve strict internal policies that restrict access to personal data only to employees and volunteers who require it to perform their job functions (e.g., only Adoption Counselors have access to full application details), mandatory data privacy training for all staff, and comprehensive non-disclosure agreements with all third-party vendors. Physical Safeguards protect our facility’s data repositories, including secure, restricted-access server rooms at our Phoenix facility and secure archiving practices for all physical, paper-based adoption and financial records. While we strive to use commercially acceptable means to protect your personal information, it is important to remember that no method of transmission over the internet or method of electronic storage is 100% secure, and therefore, we cannot guarantee its absolute security against all potential breaches.
5.2 Data Retention Policies and Criteria
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The length of the retention period is determined by several factors, including the type of data, the nature of your relationship with HVAWO, and specific legal obligations:
- Adoption and Surrender Records are considered permanent records and are retained indefinitely to ensure continuous welfare tracking of the animal and for legal liability purposes.
- Donor Records are generally retained for a minimum of seven years following the last donation to comply with state and federal tax and auditing laws.
- Volunteer Application Data for unsuccessful or withdrawn applicants is generally purged after 12 months, while records for active and former volunteers are retained for the duration of their service plus two years.
- Website Log and Technical Data is typically retained for 90 days for security analysis, after which it is anonymized or deleted.
When personal data is no longer necessary or legally required, we will securely destroy or permanently anonymize the data to ensure it cannot be reconstructed or linked back to an individual, upholding our commitment to responsible data lifecycle management.
6. Your Rights and Choices Regarding Your Data
Empowering You to Control Your Personal Information
HVAWO respects your right to access and control your personal information, and we provide you with mechanisms to exercise these rights in accordance with applicable legal frameworks.
6.1 Access, Correction, and Deletion Requests
You have the right to request confirmation of whether we are processing personal data about you, access to that data, and a copy of the personal data we hold about you. You also have the right to request that we correct any inaccurate or incomplete personal information we maintain. Furthermore, you may have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent for processing, subject to our overriding legal and contractual obligations (e.g., we cannot delete legally required adoption records). To exercise any of these rights, please submit a formal, verifiable request in writing to the Privacy Contact specified in Section 10 of this Policy. We will respond to all legitimate requests within 30 days of verifiable receipt, though this period may be extended for complex requests.
6.2 Opting Out of Communications and Preferences
You maintain control over the types of communications you receive from HVAWO:
- Email Marketing: You can opt out of receiving our general email newsletters and digital fundraising appeals at any time by clicking the “unsubscribe” link provided at the bottom of every marketing email. Please note that opting out of marketing emails does not affect the delivery of essential, transactional emails related to your active application, adoption contract, or ongoing volunteer service.
- Direct Mail: If you wish to stop receiving physical fundraising letters or event invitations by mail, please contact us directly via email at info@hvawo.site with the subject line “Opt-Out Direct Mail” and provide your full name and mailing address for identification purposes.
- Third-Party Sharing: As noted, HVAWO does not sell your personal data. You may contact us to object to the sharing of your non-essential contact information with affiliated rescue partners for joint initiatives.
6.3 Cookie Management and Tracking Technologies
You have the ability to manage or disable certain tracking technologies through your web browser settings. Most browsers allow you to refuse all cookies or to indicate when a cookie is being sent. However, please be aware that disabling essential cookies may affect the functionality and performance of our website, potentially impacting your ability to complete online forms or navigate certain secure areas. Additionally, you may opt out of data collection by third-party analytics providers (like Google Analytics) by utilizing the opt-out mechanisms provided by those specific providers.
7. Geographic Specificity and International Data Transfers
Addressing Diverse Regulatory Requirements (CCPA/CPRA, GDPR)
HVAWO is based in Phoenix, Arizona, United States, and primarily serves the local community. However, we acknowledge that our website is accessible globally and we must address various international and state-level privacy regulations.
7.1 California Consumer Privacy Act (CCPA/CPRA) Compliance
If you are a resident of California, you may have additional rights concerning your personal information, including the right to know what personal information is being collected about you, the right to request deletion of your personal information (subject to exceptions), and the right to opt-out of the sale or sharing of your personal information. As HVAWO does not sell or share (as defined by the CPRA) personal information for cross-context behavioral advertising, the right to opt-out of the sale or sharing is not applicable. For any CCPA/CPRA-specific requests (Right to Know or Right to Delete), please submit a verifiable request via the contact details in Section 10, clearly referencing your California residency. We will verify your identity before processing the request, and we will not discriminate against you for exercising your privacy rights.
7.2 International Data Transfers (GDPR)
For users located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the processing of your data falls under the General Data Protection Regulation (GDPR). Your personal data will be transferred to, and processed in, the United States, where HVAWO operates. The United States has not been deemed to provide an adequate level of data protection by the European Commission. Therefore, HVAWO relies on contractual mechanisms, such as the implementation of standard contractual clauses (SCCs) where feasible, or relies on your explicit consent for specific processing activities, to lawfully transfer your data outside of the EEA. You retain all rights granted under the GDPR, including the rights to rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint with a supervisory authority.
8. Children’s Privacy Protection (COPPA)
Our Policy on Data from Minors Under the Age of Thirteen
Protecting the privacy of young children is a paramount concern for HVAWO. Our website, services, and adoption/volunteer application processes are not designed for, or intentionally directed at, children under the age of thirteen (13). We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If we learn that we have inadvertently collected personal information from a child under 13 without parental consent, we will take immediate steps to delete that information from our servers in compliance with the Children’s Online Privacy Protection Act (COPPA). We permit minors under the age of 18 to participate in volunteering activities only with the express written consent and under the supervision of a parent or legal guardian, and any information collected about the minor for this purpose is done solely with the parent’s explicit approval and knowledge. Parents or guardians who believe that their child has provided us with personal information without their consent should contact us immediately at the address provided in Section 10.
9. Changes and Updates to This Privacy Policy
Notification Procedures for Policy Modifications
HVAWO reserves the right to modify or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological advancements. When we make material changes to this Policy—particularly those that affect how we use or share your previously collected personal information—we will take proactive steps to notify you. We will revise the “Effective Date” at the top of this document, and for major revisions, we will post a prominent notification on our website’s homepage or send an email notification to the primary email address on file for our registered users and active donors prior to the changes becoming effective. We strongly encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information and how you can exercise your rights. Your continued use of the HVAWO website or services after any modifications to this Policy constitutes your acceptance of the new terms.
10. Contact Us: Privacy Inquiries and Data Requests
Formal Contact Information for Data Protection and Privacy Matters
If you have any questions, comments, or concerns regarding this Privacy Policy, our data handling practices, or if you wish to exercise any of your statutory rights (including the right to access, correct, or delete your data), please contact our designated Privacy Compliance Team. All requests must be submitted in writing to ensure accurate and traceable documentation:
Privacy Compliance Officer Heidi’s Village Animal Welfare Organization (HVAWO) Address: 600 N 40th Street, Phoenix, AZ 85008 Email: info@hvawo.site (Please include the subject line: “Attention: Privacy Compliance Request”)
We are dedicated to addressing your concerns promptly, transparently, and in accordance with all applicable privacy regulations.