Privacy Policy

1. Information We Collect

Georgia Food for Health collects different categories of personal information depending on the program or service through which you interact with our organization. We are committed to collecting only the minimum information necessary to effectively deliver our services.

1.1 Mobile Produce Pantry

Our mobile produce pantry program does not require any personal information for participation. We do not collect names, addresses, identification documents, income verification, Social Security numbers, or any other personally identifiable information at distribution points. Participation is entirely anonymous. The only data collected at pantry stops is aggregate, non-identifying count data (total families served, total pounds distributed) used exclusively for program evaluation and grant reporting.

1.2 Medically-Tailored Meals Program

Enrollment in the Medically-Tailored Meals program requires collection of personal and medical information necessary for safe, individualized nutrition planning. This includes: full name and contact information, delivery address, date of birth, medical diagnoses relevant to meal planning, current medications, food allergies and intolerances, referring physician contact information, and relevant clinical lab values (such as hemoglobin A1C, eGFR, lipid panels). This information is provided through clinical referral forms submitted by your healthcare provider and supplemented during our dietitian intake assessment. All medical information is treated as Protected Health Information (PHI) under applicable privacy standards.

1.3 School Nutrition Education

Our school nutrition education program collects student first names and grade levels solely for classroom attendance tracking and pre/post assessment matching. This information is collected with parental consent through opt-in permission forms distributed by participating schools. No grades, disciplinary records, academic performance data, or family income information is collected by Georgia Food for Health. Student data is stored only for the duration of the six-week program cycle and is permanently deleted within 30 days of program completion.

1.4 Volunteer and Donor Information

When you volunteer with Georgia Food for Health, we collect your name, contact information, emergency contact, and availability preferences. When you make a financial donation, we collect your name, email address, mailing address (for receipt purposes), and payment information. Payment processing is handled by our third-party payment processor; Georgia Food for Health does not store credit card numbers, bank account numbers, or other financial account details on our systems.

1.5 Website Usage

Our website (georgiafoodforhealth.org) does not use cookies for tracking, behavioral advertising, or user profiling. We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts. Basic server logs may record IP addresses and page request timestamps for security and performance monitoring; these logs are automatically purged every 14 days and are never shared with third parties.

2. How We Use Your Information

Personal information collected by Georgia Food for Health is used exclusively for the following purposes: delivering program services (meal planning, delivery scheduling, dietary accommodations), communicating with you about your program enrollment or volunteer activities, processing and acknowledging donations and issuing tax receipts, program evaluation and outcome measurement using aggregated and de-identified data, compliance with federal and state grant reporting requirements using aggregated and de-identified data, and responding to your direct inquiries and support requests. We do not use personal information for marketing, promotional campaigns, or solicitation unless you have explicitly opted in to receive communications.

3. Data Sharing — Our Zero-Selling Guarantee

Georgia Food for Health will never sell, rent, lease, trade, or otherwise commercially transfer your personal information to any third party, for any purpose, under any circumstances. This is an absolute, unconditional commitment. Your personal information may be shared only in the following limited circumstances: with your referring healthcare provider as part of your Medically-Tailored Meals care coordination (with your explicit written consent), with our payment processor for donation transaction processing, in response to a valid court order or legal subpoena, or in anonymized, aggregated form for grant reporting and program evaluation purposes where no individual can be identified.

4. Data Security

Georgia Food for Health maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal information. All electronic records containing personal or medical information are stored in encrypted databases with access restricted to authorized personnel on a need-to-know basis. Paper records are maintained in locked filing cabinets within a secured office area. Staff members with access to personal information complete annual privacy and data security training. We conduct periodic security assessments and promptly address identified vulnerabilities. In the event of a data breach involving personal information, we will notify affected individuals in accordance with Georgia's Personal Identity Protection Act (O.C.G.A. 10-1-912) and any other applicable state or federal notification requirements.

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. Medically-Tailored Meals records are retained for seven years following the last date of service, consistent with Georgia medical records retention requirements. Volunteer records are retained for three years following the last volunteer activity. Donor records are retained for seven years consistent with IRS substantiation requirements for charitable contributions. School Nutrition Education student data is deleted within 30 days of program cycle completion. Website inquiry form submissions are deleted after 12 months unless they relate to an ongoing service relationship.

6. Your Rights

You have the right to request access to the personal information we hold about you, to request correction of inaccurate information, to request deletion of your information (subject to legal retention requirements), and to opt out of any non-essential communications. To exercise any of these rights, contact our Privacy Officer at privacy@georgiafoodforhealth.org or call (404) 555-0318 and request the privacy team. We will respond to all verified requests within 30 calendar days.

6.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion of your personal information, and the right to opt out of the sale of personal information. As stated above, Georgia Food for Health never sells personal information, so the right to opt out of sale is automatically satisfied.

6.2 European Residents (GDPR)

If you are a resident of the European Economic Area, you have rights under the General Data Protection Regulation (GDPR) including the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing. Our lawful basis for processing personal data is either your explicit consent or the legitimate interest of delivering nonprofit food assistance services. To exercise GDPR rights, contact our Privacy Officer at the address above.

7. Children's Privacy

Georgia Food for Health does not knowingly collect personal information from children under the age of 13 without parental consent. Our School Nutrition Education program collects limited student information (first name, grade level) solely with parental consent obtained through school-distributed permission forms. If we become aware that we have inadvertently collected personal information from a child under 13 without parental consent, we will promptly delete that information.

8. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, programs, or legal requirements. Any material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

9. Contact Our Privacy Officer

For questions, concerns, or requests related to this privacy policy or your personal information, contact:

Privacy Officer
Georgia Food for Health, Inc.
477 Peachtree Center Avenue NE, Suite 205
Atlanta, GA 30308
Email: privacy@georgiafoodforhealth.org
Phone: (404) 555-0318