RCRC Privacy Policy
Updated 8/25/2025
At Redwood Coast Regional Center (RCRC), we are committed to protecting the privacy and confidentiality of the individuals and families we serve. As a nonprofit agency serving individuals with intellectual and developmental disabilities throughout Del Norte, Humboldt, Lake, and Mendocino Counties, we are guided by a strong sense of responsibility to treat your personal information with the utmost care. We comply with all applicable California privacy laws, including the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), the Confidentiality of Medical Information Act (CMIA), the Genetic Information Privacy Act (GIPA), and other state and federal privacy regulations.
We currently honor Global Privacy Control (GPC) signals received through your browser, as required under privacy laws in California. When a valid GPC signal is detected, we will treat it as a request to opt out of the sale or sharing of personal information, and to limit the use of sensitive personal data where applicable.
At this time, RCRC does not respond to “Do Not Track” (DNT) browser signals, as there is no industry standard for interpreting DNT signals. We will update our practices if such a standard is adopted.
What Information We Collect
We collect personal information when you complete an intake application, whether online, over the phone, or in person with a staff member. This information may include your name, address, phone number, email, and other personal or sensitive details that help us determine eligibility and provide services. In some cases, we may collect biometric information (such as under BIPA), consumer health data, or other protected information under laws such as HIPAA.
We also automatically collect certain data when you use our website, including IP addresses, device identifiers, and usage data, through cookies and similar technologies.
How We Use Your Information
Your information is used strictly for the purposes for which it was collected such as responding to your inquiries, providing services and support, managing appointments, or contacting you through your preferred communication method. We may also use your data for internal analytics, quality improvement, or to meet regulatory or legal obligations. We do not use your information for automated decision making with legal effects, and we take steps to de-identify data used for research or improvement of services, including any use in artificial intelligence or machine learning systems.
How We Protect Your Information
We implement a variety of physical, technical, and administrative security measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. This includes secure networks, encryption, access controls, and regular security audits. Only authorized personnel have access to your data, and only for legitimate, work, related purposes.
Third, Party Disclosure and Data Sharing
RCRC does not sell your personal information. We do not share it with third parties for advertising or marketing purposes. However, we may share your information with trusted service providers, vendors, or partner agencies who are contractually obligated to keep your information confidential and use it only as necessary to assist in delivering services to you. We may also disclose your information when required by law, court order, or in response to a legitimate request from a government agency.
Our website may contain links to third-party websites for your convenience or reference. Please be aware that RCRC has no control over these external sites or their content. If you click on a third-party link, you will be subject to that party’s own privacy policies and practices, which may differ from ours. We encourage you to read the privacy policy of any external website before providing any personal information. RCRC is not responsible for the privacy, security, or content of third-party websites.
Consent
By engaging with RCRC services, completing an intake form, or providing personal information through any of our communication channels, you are consenting to the collection, use, and disclosure of your information as described in this Privacy Policy. For sensitive categories of data, such as health, biometric, or genetic information, RCRC will obtain explicit written consent before collection, use, or disclosure, as required by California law. In cases where consent is required for communications (such as SMS), you may select your preferences by notifying your Service Coordinator.
Consent may be withdrawn at any time. To update or revoke your consent, you may contact your Service Coordinator. Please note that some services may be limited or unavailable if consent to use necessary personal information is withdrawn.
Your Rights
As a California resident and recipient of services through RCRC, you have rights under state and federal privacy laws, including the California Consumer Privacy Act (CCPA/CPRA) and, where applicable, the Health Insurance Portability and Accountability Act (HIPAA). RCRC does collect Protected Health Information (PHI) such as health history, diagnoses, or service plans however, it is handled in accordance with HIPAA and other applicable laws. We only collect and share PHI with your knowledge and consent, and only for purposes such as care coordination, as required by law, or with your written authorization.
You may also request limits on how your sensitive information is used or shared. We will never sell or use your health data for marketing. When required, we maintain Business Associate Agreements (BAAs) and Data Sharing Agreements with third-party providers to safeguard your information.
Children’s Privacy
We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn that we have collected such data in violation of COPPA or similar regulations, we will delete it promptly.
Video Content and Subscriber Privacy (VPPA Compliance)
If you access video content through our website or social media as a registered or logged-in user, please be aware that you may be considered a “subscriber” under the Video Privacy Protection Act (VPPA). This federal law protects your right to privacy in connection with the viewing of video materials.
We do not share, sell, or disclose information about your video viewing history or preferences with third parties, unless:
- You provide affirmative, written consent, or
- The disclosure is required by law, subpoena, court order, or other valid legal process.
Information that may be protected under the VPPA includes your name, user ID, video titles watched, and any associated metadata or usage logs that could link you to specific viewing activity.
We retain video usage data only as long as necessary to support your use of the platform and to comply with legal or operational requirements. Any video data that we collect is subject to the same privacy safeguards and access controls we apply to all personal data.
By continuing to use our site or access our social media pages to access video content, you acknowledge and agree to this handling of your information in compliance with the VPPA. If you have questions or would like to withdraw consent for any data-sharing related to video content, please contact us using the information provided in the “Contact Us” section of this policy.
SMS Terms & Conditions
RCRC is part of a network of 21 regional centers across California, serving 30 cities within Del Norte, Humboldt, Mendocino, and Lake Counties. As a nonprofit organization working in partnership with the California Department of Developmental Services, we may communicate with individuals via SMS (text messaging) when explicitly authorized.
SMS Consent and Use
We will only send you SMS messages if you have opted in by indicating this as a preferred method of communication on your intake application or by initiating a message to your Service Coordinator. Your phone number will only be used for specific purposes related to services such as scheduling, appointment reminders, or following up on previous conversations. We do not share your SMS consent or phone number with third parties for marketing or any other purpose.
Message Frequency and Charges
The number of messages you receive will vary based on your service needs, typically not exceeding one message per month. Standard message and data rates may apply, depending on your carrier’s pricing plan. RCRC does not charge for SMS messages.
How to Opt Out
To stop receiving SMS messages, you may:
- Reply “STOP” to any text message you receive from us
- Contact your Service Coordinator directly via text, phone call, or email
Once you opt out, we will cease SMS communication with you unless you opt in again.
Data Retention and Residency
We retain your data only as long as needed for service delivery, compliance with legal obligations, or internal recordkeeping. When no longer required, data is securely deleted or anonymized. Your data may be stored or processed in the United States or other jurisdictions with adequate data protection laws. We implement appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs) where applicable.
Privacy by Design and Mitigating Controls
RCRC incorporates Privacy by Design principles into all of its systems and services to ensure that privacy protections are built in from the outset. This approach includes data minimization and purpose limitation, meaning we only collect the information necessary to fulfill specific service needs. We use encryption and secure storage to protect data at rest and in transit and apply role-based access controls to limit data access to authorized personnel only. Additionally, RCRC provides regular privacy and security training for all staff and conducts impact assessments for any sensitive or high-risk data processing activities to evaluate and mitigate potential risks.
Changes to This Policy
We may update this Privacy Policy to reflect changes in legal requirements or our practices. Any changes will be posted on our website with an updated effective date. These updates apply only to data collected after the revision date unless otherwise stated.
Contact Us
If you have questions, concerns, or wish to exercise your privacy rights, please contact us:
Redwood Coast Regional Center
Attn: Privacy Officer
Email: amedina@redwoodcoastrc.org
Phone: 707-462-3832 x232
Mailing Address: 1116 Airport Park Blvd, Ukiah, CA 95482
♥