Privacy-first practice

Privacy and data minimization.

Default: collect the minimum, store the minimum, share the minimum. This page explains practical expectations for first contact and program participation.

Contact Scope

Please avoid identifying details in your first email. We can share safer next steps after initial routing.

Core principles

  • Consent-first: no sharing beyond what is needed, and only with clear consent.
  • Minimal data: preference for short summaries over attachments.
  • De-identification: pattern-level learning, not identity-level records.

Communication expectations

  • Email-first routing (funding / volunteer / participation).
  • Some website “forms” only prepare an email draft and do not submit data to the site.
  • If a safer method is needed, it will be proposed after initial contact.

What we may collect

  • Basic contact details you choose to share (email and a preferred name).
  • High-level context for routing (topic, general location, language needs).
  • Non-identifying notes needed to coordinate next steps (with consent).

What we avoid collecting

  • Unnecessary identifiers (full legal names, addresses, employer names in early stages).
  • Medical or legal records unless required for a specific, consented purpose.
  • Large “evidence dumps” by default.

How information is used

  • Route enquiries (funding / volunteer / participation).
  • Support readiness and safe referrals (with consent).
  • Improve program design using de-identified, pattern-level learning.

Sharing and referrals

  • No public exposure without explicit consent and safeguards.
  • Referrals are consent-based; only the minimum necessary information is shared.
  • Partners are expected to respect privacy-first pacing and intake.

Retention

  • Keep only what is needed to deliver the agreed support or coordination.
  • Remove or de-identify information when it is no longer needed.
  • Prefer short summaries and minimal attachments.

Security (practical)

  • Access is limited to people with a clear role need.
  • Use least-privilege practices and avoid unnecessary duplication.
  • Hosting providers may process basic logs for site delivery and abuse prevention.

Stories and public materials

  • Pattern-level education only (no identifying details).
  • No “trauma marketing” or sensationalization.
  • Consent and safety checks before publishing any survivor-informed material.

This page is an operational summary, not legal advice. If urgent or crisis support is needed, contact local emergency or crisis services.

Last updated: 2025-12-16