Privacy Policy

Effective Date: January 1, 2024  ·  Last Updated: March 1, 2025  ·  Questions? Contact Us

1. About This Policy

Griffin Ambitions Ltd, operating as the Student Mental Health Policy Alliance ("we," "our," or "us"), is a 501(c)(3) nonprofit organization incorporated in Indiana and headquartered in Arlington, Virginia. We are committed to protecting the privacy of individuals who interact with our website, programs, and services.

This Privacy Policy applies to personal information collected through griffinlink.com, related subdomains, our programs, surveys, events, and communications. By using our website or services, you agree to the practices described in this policy.

2. Information We Collect

Information You Provide Directly

We collect personal information you voluntarily provide when you contact us, make a donation, subscribe to our newsletter, participate in surveys or self-assessments, register for events, submit anonymous reports, apply to volunteer or serve on the board, or request resources and toolkits. This may include your name, email, phone number, institutional affiliation, mailing address, and payment information (processed securely by our payment processor — we do not store card numbers).

Information Collected Automatically

When you visit our website we may automatically collect your IP address and general geographic location, browser type and version, pages visited and time on page, referring URLs, and device type. This data is collected via cookies and analytics tools described in Section 5.

Information from Third Parties

We may receive information from institutional collaborators, event co-sponsors, and grant-making organizations, used solely for program administration and compliance.

3. How We Use Your Information

We use collected information to deliver services and respond to inquiries; process donations and issue tax receipts; send newsletters and advocacy updates (with consent); analyze de-identified survey data for policy research; meet legal and grant reporting obligations; improve our website; and prevent fraud.

We will not use your information for purposes materially different from those above without your prior consent.

4. Information Sharing & Disclosure

We share information only in these limited circumstances:

• Service providers: Trusted vendors for email delivery, payment processing, and website hosting — bound by confidentiality obligations.
• Institutional partners: Relevant program data shared with your institution's designated contact under a data-sharing agreement, where applicable.
• Legal requirements: When required by law, court order, or governmental authority.
• Protection of rights: To enforce our terms, protect safety, or prevent fraud.
• Organizational successors: Privacy protections carry forward in any merger, acquisition, or reorganization.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to improve your experience and analyze site usage. You can manage preferences at any time. For full details, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as necessary for the purposes described here or as required by law. Donation records are kept 7 years per IRS requirements. Survey data is de-identified after analysis. Email subscriber records are kept until you unsubscribe. Contact form data is retained up to 3 years. Anonymous reports contain no personally identifiable information.

7. Data Security

We implement SSL/TLS encryption, access-controlled record storage, limited staff access on a need-to-know basis, and PCI-compliant payment processing. While we maintain strong safeguards, no internet transmission is 100% secure. If you believe your interaction with us has been compromised, please contact us immediately.

8. Your Rights & Choices

Email Communications

You may opt out of marketing emails at any time via the unsubscribe link or by contacting us. Transactional messages (donation receipts, etc.) will continue regardless.

Access, Correction & Deletion

You may request access to, correction of, or deletion of your personal information by emailing info@behavioralhealth.us. We will respond within 30 days.

California Residents (CCPA)

California residents have the right to know what personal information we have collected, the right to deletion, and the right to non-discrimination for exercising these rights. Submit a request at the contact information below.

9. Children's Privacy

Our website is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us personal information, contact us and we will promptly delete it. Users ages 13–17 should obtain parental or guardian consent before submitting personal information.

10. Policy Updates

We may update this policy periodically. Material changes will be reflected in the "Last Updated" date above and, where appropriate, communicated by email. Continued use of our website after changes take effect constitutes acceptance of the revised policy.

11. Contact Information