Gesher Community Care ("GCC," "we," "us," or "our") is a 501(c)(3) nonprofit organization that connects Jewish community members with culturally affirming, antisemitism-aware mental health practitioners, subsidizes care, and trains practitioners. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website at geshercc.org (the "Site") or use our services.

Please read this policy carefully. By using the Site, you agree to the practices described here. If you do not agree, please do not use the Site.

1. Information We Collect

1.1 Information You Provide Directly

Care-matching / intake requests: If you request a match with a practitioner, we collect information such as your name, contact information (email, phone), and information about your care needs and preferences (for example, presenting concerns, cultural or religious preferences, insurance or payment preferences, and location). This information may be sensitive in nature, and we treat it with heightened care as described in Section 4 below.

Donations: If you make a donation, our third-party payment processor(s) (currently [e.g., Donorbox / Givebutter]) collect payment information such as name, billing address, and card or bank details. GCC does not directly store full payment card numbers on our own systems.

Newsletter and email sign-up: If you subscribe to updates, we collect your name and email address.

Practitioner applications: If you apply to join our practitioner network or training programs, we collect professional information such as license information, credentials, and practice details.

Communications: If you email or message us, we retain that correspondence and any information you choose to share.

1.2 Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect certain information through cookies and similar technologies, including:

​

• IP address, browser type, device type, and operating system;

• Pages viewed, time spent on pages, referring/exit pages, and general usage patterns;

• Approximate geographic location (derived from IP address).

• We currently use Google Analytics and advertising/tracking pixels (e.g., Meta Pixel) to understand Site usage and to measure and improve our outreach.

• These tools may set cookies or use similar technologies on your device. See Section 6 (“Cookies and Tracking Technologies”) for your choices.

​

2. How We Use Information

We use information we collect to:

 

• Match individuals seeking care with appropriate practitioners from our network (we typically provide 3–5 matched practitioner names per request);

• Process donations and issue tax-deduction receipts;

• Send newsletters, updates, and communications you have opted into;

• Evaluate and onboard practitioners into our network and training programs;

• Operate, maintain, and improve the Site and our programs;

• Understand aggregate trends in who we are serving, to guide fundraising, grant reporting, and program design;

• Comply with legal obligations and protect the rights, safety, and property of GCC, our practitioners, and the communities we serve.

3. How We Share Information

We do not sell your personal information. We share information only as follows:
With practitioners for matching purposes: When you request a match, we share the minimum information necessary with prospective practitioner matches so they can determine fit and availability. Our practitioner directory itself is access-controlled and is not publicly searchable, in part to protect practitioners from targeted harassment.

Service providers: We share information with vendors who perform services on our behalf, such as payment processing (e.g., Donorbox/Givebutter), email and productivity tools (Google Workspace), and analytics providers (Google Analytics), under contracts that limit their use of your information to providing services to us.
Legal and safety reasons: We may disclose information if required by law, subpoena, or legal process, or where we believe disclosure is necessary to protect the safety of any person, including in situations involving imminent risk of harm.

Business transfers: If GCC were to merge with or be acquired by another organization, information may be transferred as part of that transaction, subject to this policy or a successor policy.

With your consent: For any other purpose disclosed to you at the time of collection, with your consent.

4. Sensitive and Health-Related Information

 

• Because part of our mission involves connecting individuals with mental health care, some information we collect about care needs may be considered sensitive or health-related. We take the following steps to protect it:

• We limit internal access to intake and matching information to staff directly involved in the matching process;

• We maintain a Business Associate Agreement (BAA) with Google for our use of Google Workspace, and use HIPAA-informed practices for handling care-related communications and records;

• We do not use care-related intake information for advertising or marketing purposes, and it is excluded from data shared with analytics or advertising tools;

• GCC facilitates introductions between individuals and independent, licensed mental health practitioners. GCC itself is not your healthcare provider, and any clinical records created once you begin care with a practitioner are governed by that practitioner's own privacy practices and applicable law (including HIPAA, where applicable to them).

 

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to maintain donor and grant records, comply with legal and tax obligations, and support our matching program. Intake and matching information is retained only as long as needed to complete the match and for a limited period afterward for program evaluation, after which it is deleted or de-identified.

6. Cookies and Tracking Technologies

We use cookies and similar technologies, including Google Analytics and advertising pixels, to understand Site usage and improve our outreach. You can control cookies through:

​

• Your browser settings, which allow you to block or delete cookies;

• The Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout);

• Ad-industry opt-out tools such as the Digital Advertising Alliance's opt-out page (optout.aboutads.info);

• We honor Global Privacy Control (GPC) signals as an opt-out of sale/sharing where legally required to do so.

​

7. Your Privacy Rights

7.1 U.S. State Privacy Rights (e.g., California, and other states with comprehensive privacy laws)

Depending on your state of residence, you may have the right to:

​

• Know what personal information we have collected about you;

• Request deletion of your personal information;

• Correct inaccurate personal information;

• Opt out of the “sale” or “sharing” of personal information (our use of advertising pixels and analytics may constitute “sharing” under some state laws);

• Not be discriminated against for exercising these rights.

​

To exercise these rights, contact us at info@geshercc.org. We will verify your request and respond within the time required by applicable law.

7.2 Canadian Privacy Rights (PIPEDA)

If you are located in Canada, applicable federal and provincial privacy laws (including PIPEDA) may give you the right to access, correct, and request deletion of your personal information, and to know how it has been used and disclosed. Contact us using the information in Section 10 to make such a request.

7.3 Children's Privacy

The Site is not directed to children under 13 (or under 16 in some jurisdictions), and we do not knowingly collect personal information from children in that age range. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including restricted access controls on our practitioner database and care-matching records, and secure, BAA-covered email infrastructure for sensitive communications. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Users

GCC is headquartered in the United States and also operates in Canada. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Gesher Community Care
145 Palisade Street

Ste 368
Dobbs Ferry, NY 10522 

Email: info@geshercc.org

11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date. Material changes will be communicated through reasonable means, such as a notice on the Site.