US State Privacy Notice

1. Applicable Laws

• California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)
• Virginia Consumer Data Protection Act (VCDPA)
• Colorado Privacy Act (CPA)
• Connecticut Data Privacy Act (CTDPA)
• Utah Consumer Privacy Act (UCPA)
• Texas Data Privacy and Security Act (TDPSA)
• Health Insurance Portability and Accountability Act (HIPAA) — for protected health information
• Children's Online Privacy Protection Act (COPPA)
• Gramm-Leach-Bliley Act (GLBA) — where applicable to financial data
• Electronic Signatures in Global and National Commerce Act (E-SIGN), 15 U.S.C. § 7001

2. Categories of Personal Information Collected

• Identifiers (name, email, postal address, IP address).
• Government records you provide (adoption decree, birth records, jurisdiction, agency).
• Internet activity (portal usage, security logs).
• Sensitive personal information (family origin, biometric signature, health-related records).

3. Purposes & Sources

We collect data directly from you and from partner agencies and government offices that you have authorized. We use it solely to deliver adoption-search and family-reunification services.

4. 'Sale' or 'Sharing' of Personal Information

We do NOT sell personal information and we do NOT share it for cross-context behavioral advertising as defined under CCPA/CPRA.

5. Your Rights

• Right to know what we collect and how it is used.
• Right to access and obtain a copy.
• Right to correct inaccurate information.
• Right to delete personal information (subject to legal-retention exceptions).
• Right to limit use and disclosure of sensitive personal information.
• Right to opt-out of any future 'sale' or 'sharing' should our practices ever change.
• Right to non-discrimination for exercising any of these rights.

Submit a verifiable consumer request by emailing office@heartlineromania.org.

6. Authorized Agents

You may designate an authorized agent to act on your behalf. We will require written authorization and verification of the agent's identity.

7. Your Privacy Choices · Notice at Collection

Categories collected: identifiers, government records, internet activity, sensitive personal information (family origin, signature, health-related records). Purposes: deliver adoption-search and family-reunification services. Retention: 10 years post-case-closure, or until you request deletion (subject to legal obligations).

Do Not Sell or Share My Personal Information · Limit the Use of My Sensitive Personal Information

We do not sell or share personal information for cross-context behavioral advertising, and we use sensitive personal information only to deliver the service you requested. To formally exercise your CCPA/CPRA right to opt out or to limit sensitive-PI use, email office@heartlineromania.org with subject 'CCPA Privacy Choices'.

8. Children

Our portal is intended for users 18 and older. We do not knowingly collect personal information from children under 13 (COPPA) and require parental/guardian consent for users under 16 in jurisdictions that require it.

9. Registered Agent for Service of Process (Iowa)

10. Contact