Privacy Policy
Effective date: November 2, 2026
The T1D Oral Health Foundation ("we," "us") is a California nonprofit public benefit corporation and 501(c)(3) organization, EIN 33-3024415. We exist to bring oral health into type 1 diabetes care. When families share their experiences with us, they trust us with personal health details. This policy explains what we collect, why we collect it, who sees it, and how to have it deleted.
The short version:
We never sell your information.
We don't use advertising trackers.
We never publish your story or name without your separate written permission.
You can ask us to delete your information at any time.
1. Who this policy covers
This policy covers www.t1doralhealthfoundation.org, our questionnaire, donations made through the site, and email you send us.
We are not a dental or medical practice. We do not treat patients or keep medical records, so HIPAA does not govern our website. We hold ourselves to the protections in this policy instead.
Survey responses are never shared with any dental or medical practice, including practices owned by members of our board.
2. What we collect
Name and email, from you on the questionnaire or by email: to reply if you ask us to, and to keep duplicate responses out of our results.
Current age of the person with T1D and age at diagnosis, from you on the questionnaire: to understand when families most need oral health information.
Your answers to survey statements and your written story, from you on the questionnaire: to document the gap in oral health information for advocacy with dental and diabetes organizations, and for research if you separately agree.
Donation details (name, email, billing address, gift amount), from you at checkout: to process your gift and send your tax receipt.
Technical data (IP address, browser type, pages visited), collected automatically by our website host: to keep the site running, secure and free of spam.
Health information. Questionnaire answers about type 1 diabetes are health information. We collect them only with your consent, given by checking the consent box before you submit. You can skip any question not marked required.
Card numbers. We never see or store your card number. Card payments are processed by Squarespace Payments, our website platform's payment service.
3. Children
The questionnaire is for adults: people with T1D who are 18 or older, and parents or guardians answering for a child. A child's age appears only as an answer given by the adult.
Children under 13 should not submit the form or email us. If we learn that a child under 13 sent us personal information, we will delete it. Parents can contact us to have a child's information removed.
4. How we use your information
To compile aggregate, de-identified results, such as "X% of parents received no oral health information at diagnosis." We use these in presentations, publications, advocacy and educational materials.
To respond to you, if you ask us to.
To process donations and send receipts.
To keep the site secure and block spam.
Research. The questionnaire includes an optional second checkbox. If you check it, your de-identified responses may be used in formal research studies on oral health and type 1 diabetes. If you leave it unchecked, your responses are used only as described above. You can withdraw research consent at any time for future use. Data already included in a completed analysis cannot be removed from that analysis.
Stories and quotes. We will not publish, quote or share your story in a way that could identify you or your child without first getting your separate written permission for that specific use. Without that permission, we use only short excerpts, stripped of names, ages, locations and other identifying details.
We do not use your information for advertising, and we do not build profiles of visitors.
5. Who we share it with
We never sell, rent, trade or exchange your personal information, including donor lists.
We share personal information only with:
Squarespace: website hosting, site analytics, the donation tool and Squarespace Payments.
Google Workspace for Nonprofits: email. Questionnaire responses are delivered to our foundation inbox.
Google reCAPTCHA: spam protection on the form.
Legal authorities, only when required by law.
These service providers may use your information only to provide their services to us.
De-identified, aggregate results may be shared with dental and medical organizations, professional societies, researchers, educators and the public. If de-identified data were ever linked back to you, we would treat it as personal information under this policy again.
6. Cookies and tracking
Our website host uses a small number of cookies needed to run the site and count visits. Google reCAPTCHA checks that form submissions come from a person.
We do not use advertising cookies, social-media pixels or tools that follow you across other websites. Because we don't track you across sites, browser "Do Not Track" signals don't change anything about how our site behaves.
7. How long we keep it
Questionnaire responses, including the emails that deliver them: 5 years from submission. After that we delete them or remove all identifying details. Aggregate statistics may be kept.
Other email correspondence: 3 years, unless it's needed longer to finish responding to a request.
Donation records: for as long as tax and nonprofit law require.
8. How we protect it
Only the foundation's founder can see questionnaire responses and donor records.
Data travels over encrypted connections (HTTPS).
Responses are kept in our Google Workspace and Squarespace accounts, not on personal devices.
No system is perfectly secure. If a breach affects your information, we will notify you as required by law.
9. Your rights
Anyone, wherever you live, can ask us to:
Confirm whether we hold your information, and see it, including a list of the service providers it has been shared with
Correct it
Delete it, including from backups (backup deletion can take up to six months)
Withdraw consent to further collection, sharing or research use
Stop any further emails from us
Email info@T1DOralHealthFoundation.org with "Privacy Request" in the subject line. We may ask you to confirm your identity.
We respond within 45 days. If we need more time, we will tell you why within that window and take no more than 45 more days. Requests are free up to twice a year.
Appeals. If we decline a request, you can appeal by replying with "Appeal" in the subject line. We will answer in writing within 45 days. If we deny your appeal, Washington residents may file a complaint with the Washington State Attorney General (atg.wa.gov), and California residents may contact the California Attorney General (oag.ca.gov).
We will never treat you differently for exercising these rights.
10. Washington residents
This policy is our consumer health data privacy policy under Washington's My Health My Data Act (RCW 19.373). Section 2 covers the health data we collect, where it comes from and how we use it. Section 5 covers who receives it. Section 9 covers how to exercise your rights.
We collect health data only with your consent. Our service providers process it only on our instructions.
11. Links to other sites
Our site links to Facebook, Instagram and other sites. Their privacy policies govern what happens there.
12. Changes to this policy
We will post any update here with a new effective date. If a change materially affects how we use information you already gave us, we will email you if we have your address, and we will ask for new consent before using your health information in a new way.
13. Contact us
T1D Oral Health Foundation
info@T1DOralHealthFoundation.org