Privacy Policy
- Home
- Privacy Policy
Effective Date: November 03, 2025
Introduction
The Advocacy Circle (‘TAC’, ‘we’, ‘our’, or ‘us’) values your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, including compliance with FERPA, HIPAA, CCPA, and GDPR where applicable.
Definitions
‘Personal Data’ means any information that relates to an identified or identifiable individual. ‘Processing’ means any operation performed on personal data. ‘FERPA-covered data’ includes education records protected under the Family Educational Rights and Privacy Act.
Information We Collect
We collect personal information such as names, email addresses, education records, health-related data, payment details, and user-submitted documents. This includes data provided directly and automatically collected through cookies and analytics.
Use of Information
We use your information to provide and improve our services, respond to inquiries, personalize your experience, process payments, and meet legal obligations.
Disclosure of Information
We do not sell your personal information. We may share it with third-party providers (e.g., Stripe for payments, Google Cloud for storage) under strict confidentiality and data protection agreements. A full list of subprocessors is available upon request.
FERPA and HIPAA Compliance
We treat all educational and health records in compliance with FERPA and HIPAA.
Data Retention
We retain personal data only as long as necessary for service provision or compliance. After cancellation, data may be retained up to 12 months unless earlier deletion is requested.
Age Restrictions and COPPA
TAC does not knowingly collect information from children under 13. Information submitted regarding minors must be provided by a parent or legal guardian.
Sensitive and Biometric Data
We do not collect biometric data. If future features require voice, image, or similar data, we will seek explicit consent before collection.
Data Security
We use encryption, access controls, and secure cloud infrastructure to protect personal data from unauthorized access or disclosure.
User Rights
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what data we collect, request deletion, and opt out of sharing. Contact us to exercise these rights.
Do Not Track (DNT) Signals
Our website does not currently respond to ‘Do Not Track’ browser settings. We may update this if industry standards evolve.
Data Breach Notification
In the event of a data breach, we will notify affected users as required by law and within required timeframes.
Updates to This Policy
We may update this Privacy Policy periodically. Changes will be posted with an updated effective date. Continued use of our services after changes constitutes acceptance.
