Privacy Policy

1. INTRODUCTION

 

Ohana Arts Foundation ("we," "us," "our," or "Ohana") is a nonprofit 501(c)(3) organization based in Marietta, Georgia (EIN: 92-3180922). We are committed to protecting the privacy of our students, families, donors, volunteers, and website visitors.

 

This Privacy Policy explains:

• What personal information we collect

• How we use and protect that information

• Your rights regarding your personal data

• Special protections for children under 13 years of age

Our Contact Information:

• Email: Info@ohanaartsfoundation.org

• Phone: 404-528-2191

• Address: 1860 Sandy Plains Rd Ste 204 #3308, Marietta, GA 30066

• Website: https://www.ohanaartsfoundation.org

 

2. WHO THIS POLICY APPLIES TO

 

This Privacy Policy applies to:

• Students and families enrolled in our arts education programs (ages 6–18)

• Donors who make financial contributions to our organization

• Website visitors who browse our site or submit contact forms

• Volunteers and staff who work with our organization

• Parents/guardians of children under 13 who participate in our programs

 

3. CHILDREN'S PRIVACY (COPPA COMPLIANCE)

 

3.1 Our Commitment to Children's Privacy

 

Ohana Arts Foundation serves students ages 6–18, which includes children under 13 years of age. We comply with the Children's Online Privacy Protection Act (COPPA) and the Georgia Student Data Privacy, Accessibility, and Transparency Act.

 

We will NEVER:

• Collect personal information from children under 13 without verifiable parental consent

• Share children's personal information with third parties for marketing purposes

• Require children to disclose more information than is reasonably necessary to participate in our programs

• Use student data for targeted advertising

 

3.2 Parental Consent Required

 

Before we collect any personal information from a child under 13, we obtain verifiable parental consent through one of these methods:

• Signed paper enrollment form submitted in person or by mail

• Electronically signed consent form with identity verification

• Phone call to our office with verification of parent/guardian identity

 

3.3 Information We Collect From Children Under 13

 

With parental consent, we collect only information necessary for program participation:

• Student's name, age, and date of birth

• Parent/guardian name and contact information (email, phone, address)

• Emergency contact information

• Medical information relevant to safe participation (allergies, health conditions)

• School name and grade level (for age-appropriate class placement)

• Photos/videos for program documentation (with separate photo consent)

 

3.4 Parental Rights Under COPPA

 

Parents/guardians of children under 13 have the right to:

• Review all personal information we have collected from their child

• Request deletion of their child's personal information at any time

• Refuse further collection or use of their child's information

• Revoke consent previously granted

 

To exercise these rights, contact us at Info@ohanaartsfoundation.org or 404-528-2191. We will respond within 10 business days.

 

3.5 Student Data Security (Georgia Law Compliance)

 

Under Georgia's Student Data Privacy Act (O.C.G.A. §20-2-666), we:

• Maintain administrative, physical, and technical safeguards to protect student data

• Restrict access to student information to authorized personnel only

• Do NOT sell, rent, or trade student data

• Do NOT use student data for marketing or advertising purposes

 

Data We Do NOT Collect:

• Political affiliations or beliefs of students or families

• Religious beliefs (except where voluntarily disclosed for accommodation purposes)

• Juvenile delinquency or criminal records

• Medical records beyond what is necessary for safe participation

 

4. INFORMATION WE COLLECT

 

4.1 From Students and Families

 

For program enrollment:

• Student name, age, date of birth

• Parent/guardian name, email, phone, address

• Emergency contact information

• Medical information (allergies, special needs)

• School name and grade level

• Prior arts education experience (optional)

With separate consent:

• Photos and videos during classes, rehearsals, and performances

• Student testimonials (ages 13+ with parental notice; under-13 requires parental consent)

 

4.2 From Donors

 

When you make a donation, we collect:

• Name and email address

• Billing address

• Payment information (processed securely through Wix Payments or PayPal)

• Donation amount and date

• Communication preferences

We do NOT store credit card numbers. All payment processing is handled by PCI-DSS compliant third-party processors.

 

4.3 From Website Visitors

 

Automatically collected:

• IP address

• Browser type and version

• Device type (mobile, desktop, tablet)

• Pages visited and time spent on site

• Referring website

• Geographic location (city/state level only)

When you submit a contact form, we collect:

• Name and email address

• Phone number (if provided)

• Message content

• Date and time of submission

 

4.4 From Volunteers and Staff

​

• Name, email, phone, address

• Background check results (as required by Georgia law for working with minors)

• Emergency contact information

• Availability and skills

 

5. HOW WE USE YOUR INFORMATION

 

5.1 Student and Family Information

​

• Enroll students in classes and programs

• Communicate about schedules, events, and updates

• Ensure student safety (medical info, emergency contacts)

• Evaluate program effectiveness

• Comply with legal requirements

• Process scholarship applications and financial aid

 

5.2 Donor Information

​

• Process donations and issue tax receipts

• Send donation confirmations and thank-you communications

• Provide updates on how donations are used

• Send newsletters (only if you opt in)

• Maintain records for IRS 501(c)(3) compliance

 

We do NOT:

• Sell or rent donor information to third parties

• Share donor information without explicit consent

• Use donor information for purposes outside our nonprofit mission

 

5.3 Website Visitor Information

​

• Understand how visitors use our site

• Improve website design and functionality

• Identify technical issues

• Measure effectiveness of online outreach

 

5.4 Marketing Communications

​

We only send marketing emails to individuals who have opted in or have an existing relationship with us. Every email includes an unsubscribe link.

 

6. HOW WE SHARE YOUR INFORMATION

 

6.1 Third-Party Service Providers

​

Payment processors:

• Wix Payments and PayPal — PCI-DSS compliant; do NOT share your payment data with other third parties

Website hosting:

• Wix.com — privacy policy at https://www.wix.com/about/privacy

Email communications:

• Wix Email Marketing (for newsletters, if applicable)

All third-party providers are contractually required to protect your data, use it only for their specific service, and comply with COPPA and Georgia student data privacy laws.

 

6.2 Legal Disclosures

 

We may disclose personal information when required by:

• Subpoena, court order, or legal process

• Protection of rights, property, or safety of our organization or students

• Investigation of fraud or security breaches

• IRS 501(c)(3) reporting requirements

 

6.3 Business Transfers

 

If Ohana Arts Foundation merges with or transfers operations to another organization, you will be notified at least 30 days before any personal data is transferred.

 

6.4 With Your Consent

 

We share information with third parties only when you explicitly consent — for example, sharing student achievements on social media with photo and name consent.

 

7. DATA SECURITY

 

7.1 How We Protect Your Information

 

Administrative: Access limited to authorized personnel; staff privacy training; regular policy reviews

Physical: Locked storage of paper records; restricted facility access

Technical: SSL/TLS encryption in transit; secure password-protected systems; regular software updates; firewall protection

 

7.2 Data Retention

​

• Student records: 7 years after last enrollment

• Donor records: 7 years (IRS compliance)

• Website analytics: 26 months

• Contact form submissions: 2 years

After the retention period ends, all personal information is securely deleted or anonymized.

 

7.3 Data Breaches

​

In the event of a data breach, we will:

• Notify affected individuals within 72 hours of discovery

• Report to relevant authorities as required by law

• Take immediate steps to contain and remediate the breach

• Provide guidance on protective measures

 

8. YOUR PRIVACY RIGHTS

 

8.1 Rights for All Individuals

​

• Access: Request a copy of the personal information we hold about you

• Correction: Request correction of inaccurate or incomplete information

• Deletion: Request deletion of your personal information

• Opt-out: Unsubscribe from marketing communications at any time

• Data portability: Request your data in a machine-readable format

To exercise any of these rights:

• Email: Info@ohanaartsfoundation.org

• Phone: 404-528-2191

• Mail: 1860 Sandy Plains Rd Ste 204 #3308, Marietta, GA 30066

We will respond within 30 days.

 

8.2 Additional Rights for Parents/Guardians (Under-13)

​

• Review all information collected from their child

• Request deletion at any time

• Refuse further collection or use

• Revoke previously given consent

 

8.3 Georgia Residents

 

Under the Georgia Student Data Privacy Act, parents have the right to:

• Inspect and review all education records about their child

• Request correction of inaccurate records

• Receive notification of any data breaches involving their child's information

 

9. COOKIES AND TRACKING TECHNOLOGIES

 

Types of cookies we use:

• Essential cookies: Required for basic site functionality

• Analytics cookies: Google Analytics and Wix Analytics to understand site usage

• Marketing cookies: To track ad campaign performance

How to control cookies:

• Chrome: Settings > Privacy and security > Cookies

• Firefox: Settings > Privacy & Security > Cookies

• Safari: Preferences > Privacy > Cookies

 

To opt out of Google Analytics, install the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout

 

Our website does not currently respond to "Do Not Track" (DNT) browser signals.

 

10. THIRD-PARTY LINKS

​

Our website may contain links to third-party websites including social media platforms and partner organizations. We are not responsible for the privacy practices of external sites. We encourage you to review their privacy policies before providing any personal information.

 

11. CHANGES TO THIS PRIVACY POLICY

 

We may update this Privacy Policy from time to time. When we make significant changes:

• The "Last Updated" date at the top will be updated

• We will notify users via email or a prominent notice on our website

• Continued use of our services after changes constitutes acceptance of the updated policy

 

12. CONTACT US

Ohana Arts Foundation
Email: Info@ohanaartsfoundation.org
Phone: 404-528-2191
Address: 1860 Sandy Plains Rd Ste 204 #3308, Marietta, GA 30066
Website: https://www.ohanaartsfoundation.org

For COPPA-related inquiries or parental consent questions, contact our Privacy Officer at the email or phone above.

 

13. COMPLAINTS

If you believe we have violated your privacy rights, you may file a complaint:

With us: Info@ohanaartsfoundation.org

 

With regulatory authorities:

• Federal Trade Commission (FTC) — https://www.ftc.gov/ (for COPPA violations)

• Georgia Department of Education — https://www.gadoe.org/ (for student data privacy issues)

 

By using our website or participating in our programs, you acknowledge that you have read and understood this Privacy Policy.

 

This Privacy Policy complies with COPPA, the Georgia Student Data Privacy, Accessibility, and Transparency Act, IRS 501(c)(3) requirements, and PCI-DSS payment processing standards.