Privacy at hopehaus.

The short version

We collect only the information you actively share with us — through purchase, consultation, inquiry, or newsletter signup. We do not track you across the web, build profiles on browsers, or share your data with third parties for marketing. Your story is yours to tell — and yours to keep.

What we collect

When you submit a form on hopehaus.org or make a purchase, we collect only the information you provide. This may include:

• Name, email address, phone number
• Shipping address (when you make a purchase)
• Payment information (handled directly by Stripe — see below)
• Information about your needs (e.g., medical context if you're applying for a grant or referral)
• How you heard about us (helps us understand what's working)
• Messages or descriptions you choose to share with us

What we do not collect

• We do not use Google Analytics, Facebook Pixel, or similar third-party tracking tools at launch
• We do not build behavioral profiles on visitors who haven't engaged with us
• We do not store your Fitting Room wizard answers — those live in your browser memory only and disappear when you close the page
• We do not collect your IP address, device fingerprint, or location data data beyond what payment processing legally requires for fraud prevention
• We do not buy data about you from third parties

Where your data lives

We use the following services to operate hopehaus, each with its own privacy practices:

• Hostinger — hosts the website. Hostinger receives no customer data; the site is static.
• Stripe — processes all payments and stores customer purchase records. Stripe is PCI-DSS compliant and handles all sensitive payment data directly. We never see your full card number.
• Airtable — stores form submissions (contact, grants, applications) for our internal use.
• Kit — manages newsletter subscriptions for those who opt in.
• Calendly — handles consultation scheduling for those who book.
• Zapier — routes form submissions from hopehaus.org to the services above.

How long we keep your data

• Newsletter subscribers: until you unsubscribe (then deleted within 7 days)
• Contact form submissions: 24 months, then archived offline
• Feedback submissions: 36 months for trend analysis, then archived
• Grant requests and physician referrals: 7 years (for tax and audit purposes)
• Atelier applications (active partners): retained while the partnership is active
• Atelier applications (declined): 24 months
• Customer purchase records: 7 years (legally required)
• Prescription documents (when shared): 7 years (medical record retention standard)

Your rights

You may at any time:

• Request a copy of all data we have about you
• Request correction of any inaccurate data
• Request deletion of your data (subject to legal retention requirements like tax records)
• Unsubscribe from newsletter emails (every email includes a one-click unsubscribe link)
• Opt out of any future communications

To exercise any of these rights, email hello@hopehaus.org. We respond within 7 business days.

Cookies

hopehaus.org uses minimal cookies — only those required for the website to function (e.g., remembering your shopping cart contents during a session). We do not use tracking cookies, advertising cookies, or third-party analytics cookies at launch.

If we ever change our practices

We may update this policy as the business grows. If we ever begin using analytics tools, retargeting pixels, or any data practice not described above, we will update this page, change the "Last updated" date at the top, and (for material changes) notify subscribers by email before the change takes effect.

For California residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act. You may request to know what personal information we have collected, request deletion of your information, and opt out of any sale of personal information (we do not sell personal information). Contact hello@hopehaus.org to exercise these rights.

For European Union residents (GDPR)

EU residents have rights under the General Data Protection Regulation including the right to access, rectify, erase, and port their personal data. To exercise these rights, email hello@hopehaus.org. The legal basis for our data processing is the consent you provide when submitting a form, the contractual necessity of fulfilling your purchase, or our legitimate interest in operating the business.

Children

hopehaus is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with information, contact hello@hopehaus.org and we will delete it.

Contact us

Questions about this policy or about your data:

hello@hopehaus.org
hopehaus
2708 E Lake St
Minneapolis, MN 55406