Who we are
Our website address is: https://www.graceofny.org
Privacy Policy
At The GRACE Foundation of New York (“GRACE Foundation,” “we,” “us,” or “our”), we are committed to protecting the privacy and personal information of our participants, supporters, donors, volunteers, staff, and website visitors. This Privacy Policy outlines how we collect, use, and safeguard your information in compliance with applicable laws and regulations, including those set by the Office for People With Developmental Disabilities (OPWDD) and the Health Insurance Portability and Accountability Act (HIPAA).
- Information We Collect
We collect information in a variety of ways, including:
- Personal Information
When you interact with us—through our website, programs, services, or events—we may collect personal information such as:
- Name, address, phone number, and email address
- Date of birth (for participants or minors enrolled in programs)
- Emergency contact and guardian information
- Medical, educational, or support-related information (as required for services)
- Payment or donation details (collected through secure third-party processors)
- Automatically Collected Information (Website)
When you visit our website, we may collect:
- IP address
- Browser type and device information
- Cookies and usage data to improve website functionality and analytics
- How We Use Your Information
We use your information to:
- Provide services, support, and programming to individuals with autism spectrum disorder
- Comply with OPWDD and HIPAA regulations in the handling of protected health and personal information
- Communicate updates, newsletters, and organizational news
- Process donations and issue tax receipts
- Register you for events, workshops, or volunteer opportunities
- Comply with legal and regulatory requirements
- Improve our website, communications, and outreach
- Compliance with OPWDD and HIPAA
We follow all applicable standards set by OPWDD for agencies providing services to individuals with developmental disabilities. We also comply with HIPAA guidelines for protecting health information. This includes:
- Secure handling and storage of protected health information (PHI)
- Use and disclosure of PHI only for permitted purposes (e.g., treatment, care coordination, billing)
- Staff training on confidentiality and HIPAA compliance
- Internal safeguards to prevent unauthorized access or disclosure of sensitive information
If you have any questions about our HIPAA or OPWDD compliance practices, please contact our office directly.
- How We Share Your Information
We do not sell, rent, or trade your personal information. We may share information:
- With trusted third-party service providers who assist in delivering services and processing information securely
- As required by law or regulatory agencies (e.g., OPWDD, auditors, legal authorities)
- With your explicit consent, or that of a legal guardian or authorized representative, where applicable
- Donor Privacy
We are committed to respecting our donors’ privacy. Donor information is used solely for internal purposes such as gift acknowledgment, donor stewardship, and financial recordkeeping. We do not sell or share donor data.
- Protecting Participant Privacy (Children and Adults)
The GRACE Foundation is dedicated to protecting the privacy of all individuals we serve, including children, teens, and adults with autism spectrum disorder and related developmental disabilities.
We require informed consent for the collection, use, and sharing of personal information:
- From a parent or legal guardian for minors under the age of 18
- From the participant themselves, when appropriate and capable
- From a legally authorized representative for adults who require support with decision-making
Information is collected only for purposes that directly support service provision and care, and is handled in full compliance with HIPAA, OPWDD, and applicable privacy regulations. We take great care to protect the dignity, rights, and confidentiality of every individual we serve.
- Data Security
We implement administrative, physical, and technological safeguards to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures meet both internal standards and external requirements under HIPAA and OPWDD.
- Your Choices and Rights
You have the right to:
- Access, update, or correct your personal information
- Request restrictions on how your data is used or shared
- Opt out of non-essential communications
- File a complaint if you believe your information has been misused
To exercise these rights, please contact us using the information below.
- External Links
Our website may link to third-party sites. These external sites operate independently, and we are not responsible for their privacy practices. We recommend reviewing their policies before providing personal information.
- Changes to This Privacy Policy
We may revise this Privacy Policy from time to time to reflect changes in the law or organizational practices. Any updates will be posted on this page with a new effective date.
- Contact Us
If you have any questions or concerns about this Privacy Policy, our data practices, or our compliance with HIPAA and OPWDD standards, please contact:
contact us@graceofny.org