Privacy Policy

Effective Date: April 10, 2026

Last Updated: April 10, 2026

The Transgender Healthcare Access Fund ("THAF," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you visit our website at thafund.org (the "Website") or use our services (collectively, the "Services"). This Privacy Policy applies to all information collected through our Website, via email, through our application processes, and in connection with our funding programs, donation processes, and other activities. By accessing or using our Services, you consent to the collection, use, storage, and disclosure of your information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

1. Information We Collect

1.1 Personal Information You Provide to Us

We collect personal information that you voluntarily provide to us when you register for an account, apply for funding, make a donation, sign up to volunteer, subscribe to our newsletter, participate in surveys or contests, or otherwise contact us. The categories of personal information we may collect include, but are not limited to: personal identifiers such as your full name, email address, postal address, telephone number, and date of birth; demographic information such as age, gender identity, and location; financial information such as income documentation, bank account information for reimbursements, and credit or debit card information for donations; medical and health information such as healthcare needs, treatment plans, provider information, and insurance status; and professional information for volunteers and healthcare providers such as qualifications, licensure, and areas of expertise. The specific information we collect depends on the nature of your interaction with us and the services you request.

1.2 Information Collected Automatically

When you access or use our Website, we automatically collect certain information about your device and browsing activity. This information may include your device type, operating system, browser type, IP address, device identifiers, Internet service provider, referring/exit pages, the pages you visit on our Website, the time and date of your visits, the time spent on each page, and other diagnostic data. We collect this information through cookies, web beacons, pixels, and similar tracking technologies. A "cookie" is a small text file stored on your device that helps us recognize you and remember your preferences. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you disable or refuse cookies, some parts of our Website may not function properly or may become inaccessible.

1.3 Sensitive Personal Information

Given the nature of our mission and services, we may collect sensitive personal information, which includes information about your gender identity, transgender status, medical history, mental and physical health conditions, healthcare treatments and procedures, financial hardship information, and other health-related details. We collect this information only to the extent necessary to provide our services, evaluate funding applications, and comply with legal obligations. We recognize the sensitive nature of this information and have implemented enhanced security measures to protect it. We will never use your sensitive personal information for purposes other than those described in this Privacy Policy without your explicit consent, except as required by law.

2. How We Use Your Information

We use the information we collect for various purposes related to our charitable mission, including: processing and evaluating funding applications; processing donations and maintaining donor records; communicating with you about your application status, donation receipt, or inquiries; sending newsletters, updates, and informational materials (with your prior consent where required by law); improving our website, services, and user experience; analyzing usage patterns and trends to better understand our community's needs; complying with legal obligations, court orders, and regulatory requirements; detecting, preventing, and addressing fraud, security breaches, technical issues, and other prohibited or illegal activities; coordinating care with healthcare providers for approved applications; and administering our programs, events, and volunteer activities. We process your personal information based on your consent (where required), our legitimate interests in operating our charitable organization, compliance with legal obligations, and performance of our contractual obligations to you.

3. How We Protect Your Information

We implement and maintain appropriate technical, administrative, and physical security measures to protect the personal information we collect and store. These measures include, but are not limited to: encryption of sensitive data both in transit (using SSL/TLS protocols) and at rest; secure servers and databases protected by firewalls and access control systems; regular security assessments, vulnerability testing, and system updates; limited access to personal information by authorized personnel who have a legitimate business need to access such information; password protection, multi-factor authentication, and access logging for systems containing personal information; training for staff and volunteers on data protection, privacy best practices, and security awareness; and procedures for responding to suspected data breaches or security incidents. While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security, and you provide information at your own risk.

How We Protect Your Information

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of sensitive data in transit and at rest
• Secure servers and databases with access controls
• Regular security assessments and updates
• Limited access to personal information by authorized personnel only
• Training for staff and volunteers on data protection

4. Information Sharing and Disclosure

THAF does not sell, rent, trade, or otherwise transfer your personal information to third parties for monetary consideration. We may share your information in the following circumstances: with healthcare providers and medical professionals for the purpose of coordinating care, verifying eligibility, or processing approved funding applications, and only to the extent necessary for such coordination; with service providers, contractors, and vendors who perform services on our behalf, such as payment processing, website hosting, data analysis, email delivery, customer service, marketing assistance, and IT support, provided such parties agree to maintain the confidentiality and security of your information; to comply with applicable laws, regulations, legal processes, court orders, or governmental requests; to enforce our Terms of Service, Privacy Policy, and other agreements; to protect the rights, property, or safety of THAF, our users, volunteers, staff, or others; in connection with a merger, acquisition, reorganization, or sale of substantially all of our assets, provided the acquiring entity agrees to protect your information in a manner consistent with this Privacy Policy; and with your consent or at your direction.

4.1 Third-Party Service Providers

We engage third-party service providers to perform various functions on our behalf. These providers have access to personal information only to the extent necessary to perform their services and are contractually obligated to maintain the confidentiality and security of such information. We carefully select our service providers and require them to implement appropriate security measures and comply with applicable data protection laws.

5. Your Privacy Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. These rights may include: the right to access and obtain a copy of your personal information; the right to request correction or updating of inaccurate or incomplete information; the right to request deletion of your personal information, subject to certain exceptions and legal retention requirements; the right to object to or restrict certain processing of your information; the right to data portability; the right to withdraw consent where processing is based on consent; and the right to lodge a complaint with a supervisory authority. To exercise any of these rights, please contact us using the information provided in the Contact Us section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request, and we reserve the right to charge a reasonable fee where permitted by law for excessive or unfounded requests.

6. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience on our Website, analyze usage patterns, and improve our services. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you interact with our Website. You can control cookies through your browser settings. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. However, please note that disabling or refusing cookies may prevent you from taking full advantage of certain features of our Website, and some parts of our Website may become inaccessible or not function properly. We may use third-party analytics services that use cookies and similar technologies to collect and analyze information about use of the Website and report on activities and trends.

7. Children's Privacy

Our Services are not intended for individuals under the age of thirteen (13), and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe that your child under 13 has provided us with personal information, please contact us immediately at privacy@thafund.org, and we will take steps to delete such information from our systems. For individuals between the ages of 13 and 18, we may collect personal information only with verifiable parental or legal guardian consent, or as otherwise permitted by applicable law. Parents or guardians who provide consent on behalf of a minor acknowledge that they are responsible for the minor's use of our Services and compliance with these Terms.

8. International Data Transfers

Our Services are designed for users in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. The data protection laws of the United States may differ from those in your jurisdiction. By using our Services, you consent to the transfer of your information to our facilities in the United States and to those third parties with whom we share it as described in this Privacy Policy. If you are located in the European Union or other regions with laws governing data collection and use that differ from United States law, you expressly consent to the transfer of your personal information to the United States and the processing of your information in accordance with this Privacy Policy.

9. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. If we make material changes to this Privacy Policy, we will notify you by posting the updated Privacy Policy on our Website with a new effective date, and we may also notify you by email or through other means. The date at the top of this Privacy Policy indicates when it was last updated. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Privacy Policy, you should discontinue use of our Services and contact us to request deletion of your information where permitted by law.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, or if you would like to exercise any of your privacy rights, please contact us using the information below. We will make every effort to respond to your inquiries in a timely manner, typically within thirty (30) days of receipt.

By Email: privacy@thafund.org
By Mail: Transgender Healthcare Access Fund
Attn: Privacy Department
312 S 4th St
Louisville, KY 40202
United States

Last Updated: April 10, 2026