Effective June 18, 2025 compliance@ctkc.org ctkc.org
Privacy Policy
This policy covers how Clear Tomorrow KC collects, uses, and safeguards the information you share with us — especially through legal navigation, expungement, and mental health support services.
Section 01
Confidentiality & legal protections
We collect and maintain certain personal, legal, and health-related information that may be protected by law. All confidential client information — Protected Health Information, or PHI — is governed by:
- HIPAA Health Insurance Portability and Accountability Act of 1996
- HITECH Health Information Technology for Economic and Clinical Health Act
- GINA Genetic Information Nondiscrimination Act
- CCPA California Consumer Privacy Act
- + Other applicable federal and state privacy laws
Section 02
What information we collect
Personal information
- Name, contact info, and address
- Criminal history, self-disclosed for expungement screening
- Age — users must be 18 or older
- Emergency contact, if enrolled in programs
Sensitive & health information (PHI)
- Medical history or treatment records you choose to provide
- Mental health referral data (non-diagnostic)
Automatically collected (log files)
- IP address, browser type, pages visited, and time on site
- Cookies, session tracking, and analytics — see Sections 06 & 07
Section 03
How we use your information
We use the information you provide to:
- Determine expungement eligibility
- Offer legal and mental health navigation support
- Refer you to third-party professionals or clinics, with consent
- Contact you for fundraising, updates, and advocacy efforts
- Meet legal and reporting obligations
- Improve our services and outreach
We may share it only:
- With trusted service providers — case management software, payment processors
- To comply with lawful subpoenas or legal orders
- In emergencies, with your designated emergency contacts only
- With health or legal authorities if required by law
Section 04
Your rights under HIPAA & CCPA
You have the right to:
- Access or request a copy of your personal or health data
- Request corrections to your information
- Limit what information we use or share
- Request confidential communications, such as a different mailing address
- File a complaint without retaliation
- Receive a list of disclosures made within the last six years
- Appoint someone to act on your behalf
- Get a printed copy of this notice at any time
California residents also have the right to
- Request deletion of personal data
- Know what categories of information we've collected or disclosed
- Opt out of certain data practices — we do not sell your data
To make a request, email compliance@ctkc.org.
Section 05
How we protect your information
- All sensitive data is transmitted via SSL (Secure Socket Layer) technology
- Data is encrypted and stored in secured systems, with access limited to authorized personnel
- Emails sent via our contact form are not encrypted — please avoid sharing sensitive information by email
- In the event of a security breach, affected users will be notified immediately and mitigation will begin promptly
Section 07
Notice of privacy practices
You have specific rights when it comes to your health information.
We may share your information
- With medical professionals treating you
- With your written permission
- In emergencies or when public health is at risk
- For law enforcement, legal actions, or government audits
- When legally required — for example, suspected abuse or safety threats
We will never share
- Psychotherapy notes or health data
- Fundraising contact, unless you opt in — you may opt out at any time
Your choices
- Share or restrict sharing with family or caregivers
- Opt in or out of fundraising communications
- Request alternate contact methods — for example, home vs. work
For more information: hhs.gov/ocr/privacy/hipaa/understanding/consumers
Section 08
Compliance & complaints
We are required by law to:
- Maintain confidentiality and security of PHI
- Provide timely notice of data breaches
- Comply with all applicable federal and state privacy laws
To file a complaint:
- With Clear Tomorrow KC — email compliance@ctkc.org
- Or with the U.S. Department of Health & Human Services
We will never retaliate against you for filing a privacy concern.
Section 09
Changes to this policy
Clear Tomorrow KC may revise this policy at any time. Updates will be posted on this page with a new effective date. Continued use of our services after a change means you accept the update.
Learn more
Where to go next
Section 10 — Contact us
Clear Tomorrow KC
compliance@ctkc.org2881 E 31st St, Kansas City, MO 64106 · ctkc.org