Private family intake
We collect only what we need to work on the request.
The private request form collects one adult email address, an item-focused description, optional non-personal item clues, and the consent/authority confirmations shown on the form. It does not ask for a child's name, home address, school, medical information or phone number.
Families may also choose to upload up to four private item-reference photos. Photos are optional. Please upload photos of the item only and do not include children or other people, faces, names, addresses, school information, documents, screens, licence plates, or other identifying information. Accepted images are decoded and re-encoded before private storage so embedded EXIF/GPS and similar client metadata are not retained in the stored derivative.
Private photos are reference-only at Tier 1. They may help authorized staff understand or identify the item, but they are not used to determine eligibility, priority, acceptance or denial of service, fulfillment entitlement, or another decision directly affecting the family. They are not automatically published or shared with donors, volunteers, partners or the public.
Adult contact information is stored separately from the item request. Private requests and photos are not made public automatically.
Tier 1 private request data and private photos have a maximum active review period of 365 days and may be deleted or de-identified sooner when no longer needed. If a valid withdrawal is received, ordinary use and contact stop immediately and active adult contact, request text and private photos are deleted or de-identified within 7 calendar days unless a documented legal, security or business hold applies. Backup-only residual copies must age out within 90 days, and restore procedures must preserve prior suppression/deletion.
Like ordinary websites, the web server and security systems may record technical request information such as an IP address, request time, requested path, browser/user-agent information and security events. The application is designed not to place submitted email addresses, item text, photo contents or original photo filenames into routine logs.