Last updated: September 6, 2026
This policy explains what personal information the Healthy Start Coalition of Hardee, Highlands, and Polk Counties, Inc. collects when you use healthystarthhp.org, why we collect it, who else can receive it, and the choices you have. It also lists every cookie and tracking technology on the site, and how to switch them on or off at any time.
We have written this in plain English on purpose. If anything here is unclear, email info@healthystarthhp.org and we will explain it.
This policy covers the website. Health information we handle as part of our programs, for example once you are enrolled in Healthy Start or one of its services, is covered by our Notice of Privacy Practices, which explains your rights over that information in detail. Where the two overlap, the Notice of Privacy Practices applies to your program records.
1. Information we collect
Information you give us. When you fill in a form on our site, or email or call us, we collect what you choose to tell us. Which form you use decides what we ask for:
- Contact form: your name, phone number, email address, city and county, and your message.
- Connect enrollment form: your name, email address, phone number, city and county, your date of birth, your baby’s estimated due date or date of birth, and your message. We ask for the dates because eligibility for the Connect program depends on them.
- Coalition profile form: your name, email address, phone number, date of birth, agency and role, address, the counties you work in, and the committees you are interested in. Completing this form also adds you to our mailing list (see section 4).
Form messages sent through the site are stored on the site so our team can find and answer them. Please do not send medical records or other detailed health information through a website form unless the form asks for it. If you need to share something sensitive, call us on 863-534-9224.
Donations. When you donate, we collect your name, email address and the donation details. If you create a donor account, we also hold your login and your donation history so you can see it in your donor dashboard. Your card details go to Stripe, not to us. Card payments are handled by Stripe, our payment processor. Your card number goes directly from your browser to Stripe and is never stored on our site. We receive only confirmation that the payment succeeded, the amount, and the last four digits of the card.
Job applications. Our Careers page shows current openings through isolved Hire, the hiring system we use. When you apply, you are entering your information into isolved’s system, which is embedded in our page. Their privacy policy applies to what you enter there.
Information collected by measurement tools. With your consent, and only with it, Google Analytics and Microsoft Clarity collect information about your visit: the pages you view, roughly where you are visiting from, how you move around a page, and the device and browser you use. Section 3 explains how the consent works. Without your consent, these tools do not run and collect nothing.
Information the site collects on its own. Like most websites, ours keeps a simple count of which pages are viewed and, for security, a log of the internet addresses that connect to it. That information stays on our own site. No outside company receives it.
2. Why we use it
- To answer your inquiry and to connect you with the services you have asked about.
- To decide whether you are eligible for a program, and to enroll you if you are.
- To process your donation, thank you for it, and give you a receipt.
- To keep in touch with coalition members and committee volunteers.
- To understand, if you consent, how the site is used so we can improve it.
- To keep the site secure and to stop spam and abuse.
- To meet our legal, tax, accounting and grant reporting obligations.
3. Consent, and how we handle tracking
This is the part most website policies get wrong, so we want to be plain about it.
Nothing that measures you runs until you agree. When you first arrive, a banner asks for your choices. Until you make them, Google Analytics does not run, Microsoft Clarity does not run, Google Tag Manager does not load, and the embedded maps and video are replaced with a placeholder and a button. Nothing is sent to Google or Microsoft. This applies to every visitor, wherever you are, not only to visitors from places where the law demands it. A banner that appears while tracking loads behind it is worth nothing, and we have deliberately not built one of those.
You can change your mind at any time. A Manage cookies button sits in the bottom-left corner of every page. Open it to turn categories on or off, or to withdraw consent entirely. Withdrawing is exactly as easy as giving it.
We keep a record of your choice. When you decide, we store the date and time, which categories you agreed to, which version of this policy was in force, and the page you were on. That record is tied to a random reference generated in your browser. It contains no name, no email address and no IP address, and we cannot use it to work out who you are. We keep it so we can show, if we are ever asked, that consent was properly obtained.
Your choice is remembered in a cookie called gi_consent for 12 months, after which we ask again. Clearing your browser cookies clears it too, and the banner will reappear.
4. Who else can receive it
We do not sell your personal information, and we do not share it for advertising. No advertising company receives anything about your visit, because there is no advertising technology on this site.
These companies can receive information about your visit, and only if you agree:
- Google, for Google Analytics, Google Tag Manager, and the embedded maps on our contact and event pages. If you consent, Google receives your IP address, the pages you view and, for the maps, can set its own cookies in your browser.
- Microsoft, for Microsoft Clarity, which records how visitors move around a page (scrolling, clicking) so we can see what is hard to use. Clarity masks the text you type into forms. If you consent, Microsoft receives your IP address and a recording of your interaction with the page.
- YouTube, which is owned by Google, for the video on our Healthy Start Doula Program page. If you load the video, YouTube receives your IP address and can set its own cookies.
These companies receive information whether or not you consent, because they provide a service you have chosen to use:
- Stripe receives your payment details when you donate. Stripe also runs fraud-prevention checks on the donation page.
- isolved Hire receives what you enter into a job application.
- Cloudflare runs the bot check that protects our forms from spam. It does not build a profile of you.
- Constant Contact, our email newsletter service, receives your name and email address if you complete the coalition profile form or otherwise ask to receive our newsletters, event flyers and updates. Every email we send that way has an unsubscribe link.
Separately, we use trusted suppliers who handle information strictly on our behalf and on our instructions: our website host, our email provider and our accounting system. They are not permitted to use your information for their own purposes. We can tell you who they are on request.
We share information with our funders and partner agencies only as our grants and program rules require, and we describe that in our Notice of Privacy Practices. We may also disclose information where the law requires or permits it, or to establish or defend our legal rights.
5. How long we keep it
- Inquiries that do not lead to a service: up to 24 months, then deleted.
- Program and enrollment records: for as long as our funding, licensing and program rules require. Our Notice of Privacy Practices has the detail.
- Donation records: for as long as tax, accounting and audit rules require, currently seven years.
- Mailing list: until you unsubscribe or ask us to remove you.
- Consent records: at least 24 months from the date of the decision.
6. Your choices and your rights
Whether or not any particular privacy law applies to an organization our size, we will honor these requests from anyone who asks. You can ask us to:
- tell you what personal information we hold about you, and give you a copy;
- correct anything that is wrong or out of date;
- delete information we no longer have a good reason to keep;
- stop contacting you, or remove you from our mailing list.
Email info@healthystarthhp.org. We will respond within 45 days, at no charge. We may need to confirm who you are first. In limited cases the law allows us to withhold information, for example where releasing it would reveal information about someone else, or where program rules require us to keep a record, and if that happens we will tell you why. Requests about your program records are handled under our Notice of Privacy Practices.
You can also change your cookie choices at any time with the Manage cookies button, and control cookies through your browser settings (see Part 2).
7. How we protect it
Personal information is protected by safeguards appropriate to how sensitive it is. The site runs over an encrypted connection, access to our systems is limited to people who need it, and we take all reasonable precautions against loss, misuse and unauthorized access. No website can promise perfect security, and if something goes wrong that affects you, we will tell you promptly.
8. Children
Our services support pregnant women, parents and caregivers of young children, and our site is written for adults. We do not knowingly collect personal information directly from anyone under 13 through the website. Information about a child that a parent or caregiver gives us as part of a program is handled under our Notice of Privacy Practices. If you believe a child has given us information through the site, email us and we will delete it.
9. Other websites
Our site links to other websites, including partner agencies and resource directories, that this policy does not cover. Once you leave our site this policy stops applying and we are not responsible for how those sites handle your information. We suggest you read their privacy statements.
10. Changes to this policy
If we change this policy we will update the date at the top. If a change affects how we use your information, or adds a tracker of any kind, we will ask for your cookie choices again rather than relying on consent you gave to an older version.
11. How to contact us
Questions, requests or complaints about this policy or our privacy practices: info@healthystarthhp.org or 863-534-9224. Our office is at 650 E Davidson Street, Bartow, Florida 33830.
Part 2 — Cookies and similar technologies
What these are
A cookie is a small file stored on your device when you visit a website. Other technologies do the same job: tracking pixels, which are invisible images that report back that a page was loaded; scripts that store data in your browser; and embedded content such as videos and maps that set their own cookies the moment they load. Where this policy says “cookies”, it means all of these.
The three categories
The banner groups everything into three categories. The first is always on, because the site cannot work without it. The other two are off until you turn them on.
Strictly necessary — always on
Needed for the site to work, to keep it secure, and to remember your cookie choice. These are not used for tracking or advertising and cannot be switched off.
| What | Provided by | What it does | How long |
|---|---|---|---|
| gi_consent | Healthy Start Coalition | Remembers your cookie choices so we do not ask again on every page. | 12 months |
| WordPress session and security cookies | Healthy Start Coalition | Keep forms secure against tampering, and keep you signed in to your donor dashboard. | Session to 12 months |
| Stripe | Stripe | Takes your card payment securely and checks for fraud on the donation page. | Up to 12 months |
| Cloudflare Turnstile | Cloudflare | Checks that a form is being submitted by a person and not a spam program. | Session |
| Language selector | Healthy Start Coalition | Remembers the language you chose to read the site in. Nothing is sent to Google until you pick a language. | Session |
Statistics — off until you agree
Help us understand how the site is used so we can improve it. Nothing in this category runs until you agree.
| What | Provided by | What it does | How long |
|---|---|---|---|
| Google Analytics (_ga, _ga_*) | Counts visits and page views and tells us roughly where visitors come from. | Up to 2 years | |
| Google Tag Manager | A container used to manage measurement tags. It currently holds no tags of its own. | Session | |
| Microsoft Clarity (_clck, _clsk) | Microsoft | Records how visitors scroll and click so we can see which parts of a page are hard to use. Form text is masked. | Up to 12 months |
Marketing — off until you agree
We run no advertising and no advertising pixels. This category covers only embedded content that would otherwise set its own cookies as soon as a page loads.
| What | Provided by | What it does |
|---|---|---|
| Embedded maps | Show our office and event locations on our contact and event pages. Google sets its own cookies when a map loads, so we hold it back and show a click-to-load placeholder until you agree. | |
| Embedded video | YouTube | Shows the doula program video on our Healthy Start Doula Program page. Held back with a placeholder until you agree. |
Changing your choices
Use the Manage cookies button at the bottom-left of any page. The change takes effect immediately.
You can also control cookies through your browser settings, which let you block cookies, delete the ones already stored, or warn you before one is set. Most browsers accept cookies by default. Remember that browser settings apply to every site you visit, not only ours, and that blocking the strictly necessary cookies will stop parts of our site working, including our forms, donations, and our ability to remember that you asked us not to track you.
Do Not Track and Global Privacy Control
We hold every measurement tool back until you consent, so every visitor starts out opted out by default. That is a stronger protection than a Do Not Track or Global Privacy Control browser signal would give you here, and it applies whether or not your browser sends one.
