Privacy Policy
Last updated: July 2, 2026
On this page
1. Who We Are
mysparkhouse.org is the website of Spark House LLC (“Spark House”), a New York limited liability company operating youth-arts programs, based in New York City, New York. We create programs, workshops, and creative opportunities for young people and the communities around them. For the purposes of data-protection law, Spark House is the “controller” of the personal information described here. Questions about this policy or your data: najee@mysparkhouse.org.
2. Information We Collect
We keep collection to the minimum needed to run our programs and respond to you. Here is exactly what we collect, why, and how long we keep it.
| Category | Examples | Why we collect it | Source |
|---|---|---|---|
| Contact details | Name, email, optional phone | To reply to you, schedule and run programs, and (if opted in) send updates | You, via a form / registration / newsletter |
| Inquiry & registration details | Messages, program interests, appointment or class registration info | To understand what you need and deliver the programs you ask for | You |
| Technical data | IP address, browser, referring page, timestamps | Security, diagnostics, and preventing abuse | Collected automatically (server logs) |
| Usage & analytics | Aggregate, non-identifying page/interaction data | To understand what’s useful and improve the site | Collected automatically (analytics) |
| Approximate location | General city/region inferred from IP (for relevant program info) | To show and route location-relevant program details on forms | Collected automatically (form geolocation) |
| Communications history | Emails, form submissions, registrations | Records of our contact and your participation | You / automatically |
We do not collect government IDs, financial account numbers, biometric data, precise GPS geolocation, or special-category / sensitive data (health, race, religion, sexual orientation, etc.), and we do not knowingly collect information from children in a way that is not permitted by law (see the Children & Youth section below).
3. How We Use Your Information
- Respond to your inquiry and schedule calls, sessions, classes, and program participation.
- Send transactional messages — registration confirmations, reminders, and program updates.
- Administer, staff, and run our youth-arts programs and events.
- Send newsletters or updates only if you have opted in.
- Maintain, secure, and improve the site and our programs, and prevent fraud or abuse.
- Comply with legal obligations and enforce our Terms of Use.
We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not sell it or use it for third-party advertising.
4. Legal Bases for Processing (EEA / UK)
If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of a contract or steps taken at your request (to deliver programs or respond to you), legitimate interests (to run, secure, and improve the organization, balanced against your rights), consent (for opt-in communications — which you may withdraw at any time), and legal obligation (where the law requires it).
5. Who We Share Information With
We do not sell your personal information and we do not “share” it for cross-context behavioral advertising. We disclose it only to the vetted service providers (“processors” / “sub-processors”) that help us run this organization, each bound by contract or their terms to protect it and use it only to provide their service to us:
| Provider | What it does | Data involved | Their policy |
|---|---|---|---|
| WPForms | Contact- & registration-form handling | Whatever you submit in a form | Runs on this site |
| Amelia | Appointment / program booking | Name, email, phone, booking details | Runs on this site |
| Resend | Transactional email delivery | Name, email, message content | resend.com/legal/privacy-policy |
| Notion | Contact / program records (CRM) | Contact & inquiry details | notion.so/Privacy-Policy |
| Google Analytics | Aggregate, non-identifying usage stats | Non-identifying usage data (IP handled per Google settings) | policies.google.com/privacy |
| SiteGround | Website hosting, security & CDN | All site data, server logs | siteground.com/privacy |
We may also disclose information where required by law (e.g. a valid subpoena), to enforce our Terms of Use, or to protect the rights, property, or safety of any person. In the unlikely event of a merger, reorganization, or transfer of the organization, records may transfer as part of that transaction, subject to this policy.
6. Cookies & Analytics
Cookies are small text files a website stores on your device so it can remember things and understand, in aggregate, how the site is used. “First-party” cookies are set by mysparkhouse.org; “third-party” cookies are set by a service we use. We use a small number of cookies for essential functions and aggregate analytics. Disabling cookies will not stop you browsing the site.
| Cookie / type | Purpose | Category | Typical duration |
|---|---|---|---|
| WordPress / session | Core site function, security, and (if you have an account) keeping you signed in | Strictly necessary | Session – 14 days |
| SiteGround / hosting | Security, performance, and load balancing | Strictly necessary | Session – 1 hour |
| Google Analytics | Aggregate, non-identifying usage stats to improve the site | Analytics | Up to 13 months |
We do not use advertising, retargeting, or cross-site tracking cookies, and we do not sell any data cookies collect. You can accept, block, or delete cookies through your browser settings (see the help pages for Chrome, Safari, Firefox, or Edge). You can also send a Global Privacy Control (GPC) signal, which we honor as an opt-out of any “sale” or “sharing” (we do neither). Because there is no industry-standard response to browser “Do Not Track” signals, the site does not respond to them; however, we already avoid the cross-site tracking those signals are meant to prevent.
7. Email & Messaging
Transactional and (opted-in) update email is delivered through Resend. If you provide a phone number, we may contact you about a registration or program you requested. Marketing consent is never a condition of participating in a program, and you can opt out of updates at any time using the unsubscribe link or by emailing us. We do not sell or share your contact details for anyone else’s marketing.
8. How Long We Keep It
| Data | Retention |
|---|---|
| Contact-form & inquiry data | Up to 24 months after last contact, then deleted |
| Program & registration records | For the program period + a reasonable records-keeping window, then deleted |
| Newsletter subscription | Until you unsubscribe |
| Server / security logs | Short-term (typically 30–90 days) |
9. Your Rights
Wherever you are, you may email najee@mysparkhouse.org to access, correct, delete, or receive a copy of your personal information, or to stop receiving communications. We will verify your request and respond within the time your law requires (generally 30–45 days). You will never be discriminated against for exercising a privacy right.
10. US State & Regional Privacy Rights
Several states and regions grant specific rights. The table shows what applies and how to use them. In every case we honor the same core rights for all users — the table simply names the legal source.
| If you are in… | Law | Key rights |
|---|---|---|
| New York | SHIELD Act | Reasonable security safeguards; breach notification |
| California | CCPA / CPRA | Know, access, delete, correct, opt out of sale/sharing (we do neither), limit sensitive data, non-discrimination, authorized agent |
| New Jersey | NJ Data Privacy Act | Access, correct, delete, portability, opt out of sale/targeted ads/profiling |
| Other US states (CO, CT, VA, etc.) | State privacy acts | Access, correct, delete, portability, opt-outs |
| Nevada | SB 220 | Opt out of the sale of covered information (we do not sell) |
| EEA / UK | GDPR / UK GDPR | Access, rectification, erasure, restriction, portability, objection; right to complain to your supervisory authority |
Do Not Sell or Share / Do Not Sell My Personal Information: We do not sell or share personal information as those terms are defined by these laws, so there is nothing to opt out of — but you may still email us to confirm.
11. International Transfers
We are based in the United States and our service providers may process data in the US and elsewhere. Where personal data is transferred out of the EEA/UK, we rely on appropriate safeguards (such as Standard Contractual Clauses) offered by those providers.
12. Data Security
We use reasonable administrative and technical safeguards — encryption in transit (HTTPS), access controls, reputable processors, and least-data collection — to protect your information. No method of transmission or storage is perfectly secure, but we will notify affected individuals and regulators of a breach as, and when, the law requires.
13. Children & Youth
Spark House runs youth-arts programs, so we sometimes work with young people through a parent, guardian, school, or partner organization. When a program involves a minor, we collect only the information reasonably needed to run that program and we look to the parent, guardian, or partnering organization to provide required permissions. We do not knowingly collect personal information directly from a child under 13 online without appropriate consent, and we do not use young people’s information for advertising or sell it. A parent or guardian may email najee@mysparkhouse.org at any time to review, correct, or delete a child’s information.
14. Changes to This Policy
If we update this policy we will revise the “Last updated” date above and, for material changes, provide a more prominent notice. Continued use of the site after a change indicates acceptance of the updated policy.
15. Contact
Spark House LLC
New York City, New York
najee@mysparkhouse.org
This Privacy Policy is provided for transparency and general information; it is not legal advice. It is governed by, and works alongside, our Terms of Use, Disclaimer, and Accessibility Statement.