Privacy Policy

This Privacy Policy explains how HISPA Inc.(“HISPA,” “we,” “us”) collects, uses, shares, and protects personal information in connection with the HISPA Role Model Program (“HRMP”) and this platform (the “Platform”), including the staff CRM, the Role Model portal, and the School portal. We are based in New Jersey and this policy is written to reflect the New Jersey Data Privacy Act (“NJDPA”) and other applicable U.S. laws.

By using the Platform you agree to this Privacy Policy and our Terms of Service. If you do not agree, please do not use the Platform.

1. Who this policy covers

This policy applies to the people whose information we process to run the program, including volunteer role models, HISPA staff, and school contacts (administrators, liaisons, and coordinators). It does not create an employment or contractual relationship.

2. Information we collect

We collect the following categories of personal information:

• Identity & contact details — name, email address, phone number, employer/company, job title, LinkedIn URL, profile photo, languages spoken, and general region.
• Program & participation data — your lifecycle stage, onboarding checklist status, sessions you reserve and attend, volunteer hours, event participation, and related notes maintained by staff.
• School & session data — school names, districts, addresses, contacts, requested and scheduled session dates, grade levels, and logistics.
• Account & security data — login credentials (passwords are stored only as salted hashes), session cookies, and an activity log of actions taken in the Platform.

Student information

The Platform stores only aggregate, de-identified countsof students reached (for example, “28 students” for a session). We do not collect names or individual records of K–12 students through this Platform.

Sensitive information

Because HRMP centers Hispanic and Latino role models, some information you provide may indicate racial or ethnic origin, which is treated as sensitive data under the NJDPA. We process such information only where you have provided it to participate in the program and, where required, with your consent. You may decline to provide it.

3. How we use information

• Operate the program: match role models to school sessions, schedule visits, and track participation.
• Maintain volunteer profiles, onboarding readiness, and volunteer-hour records (credited to you and your employer).
• Communicate with you about sessions, onboarding, calendar invites, and program updates.
• Produce internal reporting and aggregate impact metrics.
• Secure the Platform, prevent abuse, and comply with legal obligations.

We do not sell personal information, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects about you.

4. How we share information

• With schools — when you reserve a session, your role-model profile (e.g., name, photo, employer, bio) may be shared with the hosting school so they know who is presenting.
• With service providers — vendors who host and support the Platform and program operations (for example, database/hosting, email, text messaging (Twilio), scheduling, forms, and analytics providers such as those used for Mailchimp, Jotform, SurveyMonkey, Looker Studio, and Google Workspace), acting under contract and only on our instructions.
• For legal reasons — to comply with law, enforce our Terms, or protect the rights, safety, and property of HISPA, participants, or the public.

5. Cookies

We use a single strictly-necessary cookie to keep you securely signed in. We do not use advertising or cross-site tracking cookies. Because the cookie is essential to the service, it is set when you log in; you can clear it by signing out or clearing your browser.

6. How long we keep information

We retain personal information for as long as needed to run the program, maintain accurate historical and volunteer-hour records, and meet legal, reporting, and audit obligations, after which it is deleted or de-identified. You may request deletion as described below.

7. How we protect information

We use reasonable administrative and technical safeguards, including encrypted connections, hashed passwords, role-based access controls, the ability to revoke access, and activity logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your New Jersey privacy rights

Subject to the NJDPA and verification of your identity, you have the right to:

• Confirm whether we process your personal data and access it;
• Correct inaccuracies in your personal data;
• Delete personal data we hold about you;
• Obtain a portable copy of data you provided to us; and
• Opt out of the sale of personal data, targeted advertising, or profiling with significant effects — note that we do not engage in any of these activities.

To exercise these rights, email anyelo@hispa.org. We will respond within the time required by law. If we decline your request, you may appeal by replying to our response; if you have concerns about the outcome, you may contact the New Jersey Division of Consumer Affairs. We will not discriminate against you for exercising these rights.

9. Children's privacy

The Platform is intended for adult volunteers, staff, and school personnel — not for children. While the HRMP serves K–12 students through in-person classroom visits, the Platform itself does not knowingly collect personal information from children. Role models participate under program safeguards, including a signed Code of Conduct.

10. Third-party links

The Platform may link to third-party sites and tools that we do not control. Their privacy practices are governed by their own policies.

11. Text messages (SMS)

With your express opt-in consent, we send automated text-message (SMS)event-reminder notifications to registered attendees — specifically, reminders about an event you have registered for (for example, three days before, the day before, and the morning of the event). You provide this consent by checking the SMS opt-in box when you give us your mobile number (for example, on an event RSVP or check-in form). These arerecurring messages: you will continue to receive reminders for each event you register for until you opt out. Message frequency varies depending on how many events you register for.

Opting in to texts is not a condition of registering for or attending any event. Message and data rates may apply. You can opt out at any time by replying STOP to any message; reply HELP for help. After you reply STOP we will not send further texts unless you opt in again.

We use a third-party messaging provider (Twilio) solely to deliver these messages on our behalf. We do not sell your mobile phone number, and we do not share mobile numbers or SMS opt-in consent with third parties or affiliates for their own marketing or promotional purposes. Mobile carriers are not liable for delayed or undelivered messages.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date. Material changes will be communicated as appropriate.

13. Contact us

Questions or requests about this policy or your personal data? Contact us at anyelo@hispa.org and we will respond promptly.