Privacy policy

We collect only what our forms ask for, use it to answer you and to arrange the support you asked about, keep it no longer than we need to or than the law requires, and never sell it or share it for advertising.

The rest of this page explains that in detail, including the parts we cannot control, such as care delivered by a separate clinician or pharmacy.

The MindBridge Health is a nonprofit organization recognized as tax-exempt under section 501(c)(3) of the Internal Revenue Code, EIN 39-3224813. We are responsible for the information collected through this website.

You can reach us about anything on this page through the contact form on this site. Mark the message as a general question and say that it concerns privacy.

This policy covers information submitted through this website by people seeking support, people referring someone else, volunteers, partners, fundraisers, donors and anyone who contacts us with a question.

It does not cover care you receive from a separate clinician, pharmacy, hospital or provider organization. Each of those keeps its own records under its own policies and, where applicable, under health privacy laws that apply to them. It also does not cover other websites we link to.

We only collect what a form asks for. Depending on the form, that may include:

Forms on this site ask for the minimum we need to respond. You do not have to include a full medical history, records or documents, and we ask that you do not send more detail than is needed to understand your request. If we need more, we will ask.

Information about mental health, medication and treatment is sensitive. When you include it in a request, you are asking us to use it to help arrange support, and we treat it that way: it is restricted to authorized staff, used only for your request, and never used for marketing.

We are not asking you to make it public, and we never publish it. Where we describe our work publicly, we use general or anonymized descriptions that cannot be traced to an individual.

Card details are entered directly into our payment processor's secure form and are never stored on our systems or seen by our staff. We receive a confirmation of the payment, the amount, the frequency and a reference so we can issue your receipt and keep required financial records.

Recurring gifts are managed through the same processor. If you want a monthly gift changed or stopped, contact us and staff will handle it.

Our hosting and security systems record ordinary technical data such as the pages requested, the time of the request, the browser type and the network address it came from. This is used to keep the site running, to diagnose faults and to limit abuse of our forms, including repeated failed sign-in attempts.

We use only the cookies and similar storage needed for the site to work, such as keeping an authorized staff member signed in. We do not use advertising cookies or third-party tracking pixels, and we do not build advertising profiles.

We use what you submit to:

To be explicit, we do not:

Support requests are visible only to authorized staff who need them to do their work. Access is limited by role, staff accounts require a sign-in with a strong password, and changes to a request are recorded so we can see who did what.

Internal notes staff write about a request are for coordinating your support. They are never shown publicly.

We share information outside the organization only in these situations:

Running this site requires a small number of providers: website and database hosting, email delivery for receipts and staff alerts, and payment processing for donations. They may process your information only to provide those services to us, and they may not use it for their own purposes.

We are based in the United States and our providers may process and store information in the United States or other countries. Wherever it is handled, it stays subject to this policy and to our agreements with those providers.

Information is transmitted over an encrypted connection and stored in systems that restrict access by role, so staff can only reach the records their job requires. We limit the number of accounts with elevated access, protect sign-in against repeated guessing, and keep an activity record of changes.

No system is perfectly secure, and we will not claim otherwise. If a breach affects your information, we will act on it and notify affected people and authorities where the law requires.

Support and referral records are kept for as long as needed to provide and follow up on services, and then for the period required by applicable law. Donation records are kept as long as financial and tax rules require. Volunteer and partner applications are kept while the relationship is active or under consideration. General inquiries are kept only as long as needed to handle them.

Technical and security logs are kept for a short period and then discarded.

You can ask what we hold about you, ask for corrections, ask us to delete information we are not required to keep, ask for a copy of what you submitted, or withdraw a request you have submitted. Depending on where you live, local law may give you further rights; we apply these choices to everyone regardless.

Send the request through our contact form and tell us what you would like done. We may need to confirm your identity before acting, and we will explain if a legal obligation prevents us from deleting something. We will not treat you differently for exercising any of these rights.

We email you about the request you submitted and, if you donate, we send a receipt. We do not run a marketing mailing list, so there is nothing to unsubscribe from. If you would rather we contact you another way, say so in your request.

This website is not directed at children, and we do not knowingly collect information directly from anyone under 13. Where a request concerns someone under 18, it should be submitted by a parent, guardian or an authorized professional.

If you believe a child has submitted information to us directly, contact us and we will remove what we are not required to keep.

We link to crisis lines, government pages and other organizations because the information is useful. Once you follow a link, you are on their site under their privacy policy, not ours.

If this policy changes, the updated version is posted here with a new date at the top of the page. Where a change materially affects how we handle information already submitted, we will make that clear rather than relying on a quiet update.

Send questions about this policy through our contact form and mark the inquiry as a general question. If you are not satisfied with our answer, you may also raise the matter with the relevant authority where you live.