1. Introduction and Scope of this Policy

Protecting the Integrity of Your Most Sensitive Information

At SHAPE OF MY HEART ADOPTIONS, we recognize that the process of adoption involves the collection and handling of some of the most private, sensitive, and confidential personal information, including detailed medical histories, complex financial data, extensive criminal background checks, and intimate personal narratives. Our commitment to confidentiality and ethical data stewardship is not merely a legal obligation, but a foundational pillar of our organizational mission and the trust we build with every member of the adoption triad—hopeful adoptive parents, birth parents, and the child. This comprehensive Privacy Policy outlines the types of information we collect, the specific purposes for which we use this data, the rigorous security measures we employ to protect it, and your rights concerning your personal information. This policy applies to all data collected through our website, online forms, direct communication (including email and telephone), in-person consultations, and all documentation required as part of our adoption and support services. Given the permanent and transformative nature of adoption, we maintain stringent standards that often exceed typical requirements, particularly concerning the ethical and long-term retention of non-identifying health and history data crucial for the well-being of the adopted child. We urge you to read this policy entirely, as engaging with our services implies your understanding and acceptance of our data handling practices, which are designed to support a legal, ethical, and successful family-building journey.

The scope of this policy covers information collected digitally, physically, and verbally throughout the entire lifecycle of our relationship with you, extending from initial inquiry through post-placement reporting and the legally mandated retention period for adoption records. Specifically, this policy addresses data gathered for home study preparation, birth parent counseling and resource provision, legal filing and coordination (including state and Interstate Compact on the Placement of Children (ICPC) compliance), and the administration of open adoption agreements. It is essential to understand that, due to the regulatory nature of adoption, certain data collection and retention practices are mandated by state and federal law, and in those instances, our practices are strictly governed by these legal obligations, which may override an individual’s right to immediate deletion. We operate under the legal jurisdiction of Kansas, and all data processing activities are governed by the applicable laws of Kansas and the United States, with due consideration given to the rights of clients residing in other jurisdictions, including those protected by international data protection frameworks, where applicable and legally feasible within the adoption context.

2. Information We Collect and How We Collect It

A Detailed Categorization of Necessary Personal and Confidential Data

We collect various categories of information, depending on your relationship with SHAPE OF MY HEART ADOPTIONS, all of which are essential to fulfill our legal, ethical, and practical obligations in facilitating a secure and well-supported adoption.

A. Information Collected from Hopeful Adoptive Families

This category of data is arguably the most extensive, as it is required for the rigorous preparation of the Home Study Report, which is mandated by law to assess fitness and readiness to parent.

• Personal and Contact Information: Full legal names, dates of birth, social security numbers, current and past addresses, email addresses, and phone numbers for all adults residing in the home.
• Financial Documentation: Detailed evidence of income, current employment verification, tax returns, banking statements, and insurance coverage to demonstrate financial stability and ability to provide for a child’s long-term needs.
• Medical and Health Records: Comprehensive reports from licensed medical providers detailing the physical and mental health status of all prospective parents and household members, including verification of ability to parent and psychological evaluations if deemed necessary by the supervising social worker.
• Background and Legal History: Fingerprint-based criminal history checks, child abuse and neglect registry clearances in all states of residence, and documentation of all prior marriage, divorce, or civil proceedings, which are mandated by federal law (e.g., ICPC, Adam Walsh Act requirements).
• Narrative and Biographical Information: Detailed personal essays and statements outlining motivations for adoption, relationship history, parenting philosophy, life experiences, and cultural background, which form the core of the profile presented to birth parents.

B. Information Collected from Birth Parents

Data collected from birth parents is handled with the utmost sensitivity and is primarily used for immediate counseling, resource provision, and to create the essential non-identifying medical and social history required for the child’s file.

• Identifying Information (Confidential): Name, contact information, date of birth, and medical insurance details used strictly for immediate counseling, legal representation coordination, and hospital planning. This information is kept highly restricted and is only shared on a need-to-know basis with essential personnel.
• Non-Identifying Medical and Social History: Detailed pre-natal medical records, family medical history (including genetic conditions, mental health history, and substance exposure history), and social background information (education, hobbies, occupation) to provide the adopted child with a comprehensive understanding of their origins.
• Counseling Records: Private, confidential notes and records related to the therapeutic and decision-making process, maintained by our licensed social workers in strict adherence to clinical standards and state confidentiality laws.
• Contact Preferences: Documentation detailing the birth parent’s fully informed decision regarding the level of openness in the adoption, including preferences for future communication and contact with the adoptive family and the child.

C. Website Usage and Technical Information

When you visit our website or interact with our digital forms, we automatically collect certain technical information.

• Usage Data: IP addresses, browser type, operating system, referral sources, pages viewed, and the dates/times of access, primarily for security and to improve website functionality.
• Cookies and Tracking Technologies: We utilize cookies, web beacons, and similar technologies to track user activity, analyze site traffic, and support the functionality of our online inquiry and application portals. This data helps us understand user engagement and tailor our digital resources effectively.

3. How We Use the Information We Collect

The Specific Purposes of Data Processing within the Adoption Context

The information collected by SHAPE OF MY HEART ADOPTIONS is used exclusively for purposes directly related to the ethical, legal, and compassionate facilitation of adoption and the provision of support services. We do not sell or rent personal information to any third parties for marketing purposes.

A. Service Delivery and Legal Compliance

The primary use of your data is to fulfill our contractual obligations to you and to comply with the extensive regulatory framework governing adoption in the United States.

• Home Study Preparation and Approval: Adoptive family data (financial, medical, criminal) is meticulously reviewed and compiled into the Home Study Report, which is the mandatory legal document required by the state of Kansas and any receiving state (via ICPC) to approve the family for adoption. This includes cross-referencing information and verifying documentation to ensure accuracy and compliance.
• Matching and Placement: The non-identifying biographical and profile information provided by hopeful parents is used to create a profile that is shared with birth parents to aid in their selection decision. Birth parent medical and social history is utilized by the adoptive family and their medical providers to prepare for the child’s specific needs.
• Legal Filing and Court Processes: Personal data (names, dates of birth, addresses) is filed with various state agencies and courts, including the vital statistics office, the court handling the termination of parental rights, and the court for finalization of the adoption decree.
• Post-Placement Supervision: Adoptive family information is used to schedule and conduct mandated post-placement visits and reports, verifying the child’s well-being and adjustment until the adoption is legally finalized.

B. Counseling, Support, and Resource Provision

Data is utilized to ensure all parties receive appropriate emotional and practical support.

• Birth Parent Counseling: Confidential information shared during counseling sessions is used by the social worker to provide appropriate clinical support, process emotional decisions, and connect the birth parent with necessary external resources (e.g., housing, medical care, transportation assistance).
• Long-Term Medical History: The birth parent’s non-identifying medical and social history is permanently retained in the adoption file. This crucial historical information is used solely to provide the adopted child and their descendants with accurate health and background information upon request as they mature, consistent with state laws regarding access to non-identifying data.

C. Communication and Service Improvement

We use contact information to communicate critical updates and use aggregated data to improve our services.

• Client Communication: We use email and phone numbers to relay urgent placement updates, schedule appointments, send educational materials, and provide necessary documents related to the process.
• Internal Quality Control: Aggregated, anonymized data (e.g., wait times, client demographics, satisfaction survey responses) is analyzed internally to evaluate the efficiency and compassion of our programs and improve our outreach and support services.

4. Data Sharing and Disclosure to Third Parties

Confidentiality Maintained While Ensuring Legal and Ethical Compliance

Due to the heavily regulated nature of adoption, certain disclosures of your personal and confidential information are legally mandated or ethically required to fulfill our obligations. We commit to sharing only the minimum necessary information required for these specific purposes.

A. Legally Mandated and Essential Disclosures

• Governmental and Licensing Authorities: We are legally required to submit extensive data to the Kansas Department for Children and Families (DCF), state licensing boards, and local courts. This includes full Home Study Reports, background check results, placement notices, and Post-Placement Reports.
• Interstate Compact on the Placement of Children (ICPC): For placements across state lines, we must share confidential documents with the ICPC offices in both the sending and receiving states to obtain the legally required approval for the child to travel and reside in the adoptive home state.
• Attorneys and Legal Counsel: We share necessary identifying and legal documentation with independent attorneys representing the birth parents and the adoptive family to facilitate the legal termination of parental rights and the finalization of the adoption decree.
• Background Check Providers: We contract with accredited third-party vendors and state agencies to process required criminal background checks, fingerprinting, and child abuse registry searches, sharing only the identifying information necessary to conduct these essential safety screenings.

B. Professional and Non-Identifying Disclosures

• Medical Professionals: Birth parent medical history and pre-natal records are shared with the adoptive family’s medical provider to ensure the child receives appropriate and informed medical care immediately following birth. This sharing is done while preserving the birth parent’s anonymity unless an open adoption agreement dictates otherwise.
• Other Social Workers and Home Study Agencies: If you reside outside of Kansas, we share information with the licensed agency completing your Home Study to ensure consistency and compliance with both state laws.
• Non-Identifying Information: The birth parent’s non-identifying medical and social history, as detailed in Section 2.B, is shared with the adoptive family and retained permanently for the adopted child’s future access. This information is meticulously stripped of any current identifiers that could reasonably lead to the identity of the birth parent.

We strictly forbid any third party to use shared data for any purpose other than the specific, legally defined purpose for which it was disclosed. We do not sell any client data to advertising or marketing companies under any circumstances.

5. Data Security, Retention, and Disposal Protocols

Maintaining Trust Through Rigorous Physical and Digital Safeguards

Given the exceptionally sensitive nature of adoption records, we have implemented rigorous physical, administrative, and technical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

A. Security Measures

• Digital Security: All electronic client records are stored on secure servers utilizing industry-standard encryption protocols (e.g., AES-256) for data both in transit (via secure HTTPS connections) and at rest. Access to the client database is strictly limited by multi-factor authentication and role-based access control, ensuring staff only view information necessary for their specific duties (i.e., “need-to-know” access).
• Physical Security: Hard copy files, particularly original legal documents and confidential birth parent counseling records, are stored in locked, fire-resistant filing cabinets within secured office areas that are monitored by alarm systems and access control mechanisms, preventing unauthorized physical entry.
• Staff Training and Confidentiality: All employees, contractors, and volunteers are required to undergo mandatory, regular training on data privacy, ethical disclosure, and confidentiality protocols. Every team member signs a legally binding confidentiality agreement that is regularly reinforced, emphasizing the extreme sensitivity of all client information.

B. Data Retention and Disposal

Our data retention policy is governed primarily by state and federal laws related to adoption records, which mandate that certain records must be retained for an extended period, often permanently.

• Permanent Retention (Non-Identifying Data): The birth parent’s non-identifying medical and social history and the child’s final adoption decree are retained permanently as they are essential legal and historical documents for the adopted person’s well-being and legal status throughout their life. This non-identifying record is segregated from the original, identifying file.
• Legal Retention (Identifying Data): Identifying information, including the full Home Study Report, background checks, and financial documentation, is retained for a period mandated by Kansas state law, which is typically seven to ten years after the finalization of the adoption or the closure of the client’s file, whichever is later. This retention is necessary to comply with potential audits, legal challenges, and regulatory oversight.
• Secure Disposal: Once the legally mandated retention period expires, all physical records are destroyed via cross-shredding, and digital files are permanently deleted using secure, irretrievable data sanitation methods, ensuring no sensitive information remains accessible in accordance with stringent legal protocols.

6. Your Rights Regarding Your Personal Information

Empowering You with Control Over Your Data (Within Legal Limitations)

We are committed to honoring your rights regarding your personal information, though it is important to understand that the regulatory nature of adoption may impose certain limitations, particularly concerning the right to deletion or alteration of legally filed records.

A. Right to Access and Correction

You have the right to request access to the personal information we hold about you and to receive a copy of that data, subject to legal restrictions (e.g., protecting the identity of other parties in a sealed record). You also have the right to request the correction of any incomplete or inaccurate data we hold about you. Due to the legal nature of documentation, corrections to notarized or filed documents must be handled through formal amendment processes rather than simple deletion.

B. Right to Object and Restrict Processing

You have the right to object to the processing of your personal data where we are relying on a legitimate interest (and there is something about your particular situation that makes you want to object to processing on this ground). However, you must understand that the legal and regulatory necessity of processing personal data for the purpose of a Home Study or a legal placement is non-negotiable and is a condition of engaging in our adoption services. If you object to the processing of legally required data, we may be unable to continue providing services.

C. Right to Erasure (The “Right to be Forgotten”)

While the “Right to be Forgotten” is a core tenet of modern privacy law, in the context of adoption, it is subject to significant legal limitations. We cannot delete any information that is part of a legally mandated adoption file, including the Home Study, background checks, medical history, or the final decree, as these records are often required to be retained permanently or for a statutorily defined period for the protection and well-being of the adopted child and compliance with court orders. We will, however, honor requests to erase any administrative or marketing-related data that is not part of the permanent or legally mandated adoption record, provided it does not compromise our ability to fulfill post-placement obligations.

D. Right to Data Portability

You have the right to request a copy of your personal data in a structured, commonly used, machine-readable format to transfer it to another service provider. This right is typically honored for administrative or contact data. However, the comprehensive Home Study Report and all accompanying documentation (which constitutes a “data file”) are subject to state laws governing the transfer and release of adoption records and must be handled through official interstate agency transfer protocols (ICPC or similar), rather than direct data portability.

E. Exercising Your Rights

To exercise any of these rights, please submit a written request to the Privacy Officer using the contact details provided in Section 8. We are required to respond to all legitimate requests within 30 calendar days and may require verification of your identity to ensure the security of highly confidential records.

7. Children’s Privacy and Policy Updates

Commitment to Protecting Minor’s Data and Transparency in Changes

A. Children’s Privacy

Our website is not intended for use by children under the age of 13, and we do not knowingly collect personally identifiable information from children under this age without verifiable parental consent. However, in the context of adoption services, we do collect highly sensitive and protected information about children (the adopted child) and non-identifying information about birth children (siblings). This data is collected solely for the purpose of placement, legal compliance, and the child’s long-term welfare, and is governed by strict state and federal child protection laws (such as HIPAA rules related to minor health information and state laws regarding the sealing and maintenance of adoption records). All such data is treated with the highest level of confidentiality and security, exceeding the standards set for adult PII, and is only accessed by authorized personnel under supervised conditions.

B. Changes to This Privacy Policy

The complex regulatory and legal landscape of adoption is continually evolving, requiring us to periodically review and update this Privacy Policy to ensure continued compliance and best practices. We reserve the right to modify this policy at any time. When we make significant changes, we will post the updated policy on our website with a revised “Effective Date.” If the changes are material and affect how we use previously collected confidential information in a way not covered by the original policy, we will notify affected clients directly via email and seek renewed consent or provide an opportunity to opt-out of the new data use, provided it does not conflict with legal mandates. We encourage all clients and site visitors to review this policy periodically to stay informed about how we are protecting your information.

8. Contact Information and Privacy Officer Details

How to Reach Us with Questions or Concerns Regarding Your Data

Your trust is paramount, and we are committed to promptly addressing any questions, concerns, or requests you may have regarding this Privacy Policy or our handling of your personal information. We have designated a Privacy Officer responsible for overseeing all privacy compliance, data security protocols, and the handling of client rights requests.

Primary Contact for Privacy Matters:

Privacy Officer SHAPE OF MY HEART ADOPTIONS 1430 SW WOODHULL STREET UNIT 4962 TOPEKA, KS 66604

Email: privacy@smha.help (Please note: For urgent birth parent crisis counseling, use the dedicated 24/7 phone line. This email is for data policy inquiries only.)

When contacting us regarding a privacy concern or to exercise your rights, please provide your full name, client ID (if applicable), and a clear, detailed description of your request or concern to allow us to address the matter efficiently and securely. We are here to ensure that your experience with SHAPE OF MY HEART ADOPTIONS is not only transformative for your family but is also managed with the highest degree of respect for your confidential and sensitive information.