Our Commitment
Broken to Bespoke is committed to protecting the privacy and dignity of the youth and families we serve. This policy explains what information we collect, how we use it, and how we safeguard it.
Broken to Bespoke respects privacy but cannot guarantee confidentiality. Our staff are mandated reporters under Minnesota law and must report suspected abuse or neglect.
Information We Collect
Youth Registration Information
- Youth name, preferred name, date of birth, age, phone, email, pronouns
- Parent/guardian name, relationship, contact information
- Emergency contact information
- Getting-to-know-you responses: interests, strengths, comfort levels, cultural traditions
- Program interests and goals
- Accessibility, medical, and dietary information needed for safe participation
- Safety and support information you choose to share
- Consent initials and signatures for conduct and photo release
Website Information
- We use basic analytics to understand website traffic
- We do not sell your personal information
- Contact form submissions are stored securely
How We Use Information
- To determine program eligibility and cohort placement
- To ensure safe and culturally affirming programming
- To communicate with parents/guardians about enrollment
- To provide accommodations and support
- To meet funder reporting requirements (aggregated, de-identified data only)
- To improve our programs
How We Store Information
Registration data is stored in a secure MySQL database on Hostinger servers. Database credentials are stored outside the public web folder. Access is limited to authorized Broken to Bespoke staff and board members. Sensitive details are stored as encrypted JSON and are not sent in full via email.
Photo and Media Release
We collect photo/video consent separately. You may choose:
- YES — Broken to Bespoke may use image/voice for educational, promotional, fundraising, website, and social media
- LIMITED — Group photos only, no name or identifying information
- NO — No identifiable image/voice for external communications. Declining does not affect eligibility.
Data Retention
We retain registration records for 7 years for compliance and program evaluation, or as required by law and funder requirements.
Your Rights
- Request access to your youth's registration information
- Request correction of inaccurate information
- Request deletion, subject to legal retention requirements
- Withdraw photo consent at any time in writing
Children's Privacy
Our program serves youth ages 11-18. We collect information about youth only with parent/guardian consent through our registration process. We do not knowingly collect information directly from children under 13 without verifiable parental consent.
Mandated Reporting
Broken to Bespoke staff are mandated reporters under Minnesota Statutes 260E. We must report suspected child maltreatment to the appropriate authorities.
Contact
Questions about this policy:
Broken to Bespoke
EIN: 41-5218469
Email: info@brokentobespoke.com
Website: brokentobespoke.com/contact.html
This policy is for transparency and does not constitute legal advice. Broken to Bespoke is a Minnesota nonprofit corporation.