Your Privacy, and Your Child's

This policy covers the Holy Family Fun Run website (hfafunrun.com), run by Holy Family Academy (“HFA,” “we,” “us”) to run its annual Fun Run fundraiser. HFA is the school your family already has a relationship with — this site is how that relationship extends to registration, pledges, and the event itself, not a separate company collecting data about you or your child.

From parents and guardians: name, email, phone, and — only if you make a gift — the billing details Stripe needs to process a card, and your postal code (used only to show a city dot on a donation map; never your street address).

About students: first and last name, grade, homeroom, shirt size, and, only if you choose to add them, a photo, a short note, and a link to a video. All of this is entered by a parent or by the school — a student never creates an account, logs in, or submits anything themselves.

About donors: name, email, and a message, if they choose to leave one, plus whatever Stripe collects to process their card. We never see, store, or log a full card number — Stripe handles that directly.

Nothing about a child is public by accident. Registering a student requires an affirmative action by a parent, and publishing a photo requires a separate, explicit consent checkbox — a parent can register a child and decline the photo. Public pages show a first name and last initial only; a full last name is never shown, and it's excluded at the database level, not just hidden by the page design. A parent can remove a photo at any time from the family dashboard, and removal is immediate.

Student pages are excluded from search engines and carry an unguessable address, so they can't be found by browsing or searching — only by a link or QR code you or your family shares.

To run the fundraiser: showing student and class pages, tracking pledges and laps, sending receipts and confirmations, showing standings and prize status, giving teachers a view of their own classroom, and letting the school reach families about the campaign. We don't use anything collected here for advertising, and we don't sell it to anyone.

A small number of services do the technical work of running the site, each only for that purpose: Stripe processes payments (we never touch card data ourselves), Resend delivers emails, Supabase hosts the database and photo storage, and Vercel hosts the site itself. If text-message updates are turned on, Twilio delivers those. None of them may use your information for their own purposes.

If you tick the text-message box when you register, Holy Family Academy may text you Fun Run updates at the number you gave us — registration opening, a reminder before the run, and results afterward. Message frequency varies; expect a few over the course of the campaign. Message and data rates may apply. Reply STOP to any message to stop them, or HELP to get help.

We will never share or sell your mobile information, or your consent to receive texts, to third parties or affiliates for marketing or promotional purposes. Twilio delivers the messages on our behalf and may not use your number for anything else.

Texting is entirely optional. You can register, pledge, and take part in every other part of the Fun Run without it, and stopping the texts never changes anything else about your family's account.

• Student records: through the school year, then archived.
• Photos: deleted when the site closes after the campaign, unless a family opts to reuse them next year.
• Donor and payment records: kept 7 years, the standard financial record-keeping period.
• Card numbers: never stored by us at all — Stripe holds a token, not the card.

You can remove your child's photo at any time from the family dashboard. You can unsubscribe from any email update using the link in that email, and reply STOP to any text message to stop texts. If you'd like something corrected or removed outside of that, or have any other question about your family's data, contact us — see below.

Card details are entered directly into Stripe's own secure form — our server never sees them. Student photos are stored privately and only ever shown through a temporary, signed link, never a public file. Photos have location data stripped automatically on upload. Every change to a lap count, a payment, or a pledge is logged with who made it and when.

Email giving@hfa.la or write to Holy Family Homeschool Apostolate, Inc. (doing business as Holy Family Academy), P.O. Box 2303, Covington, LA 70434.

We may update this policy as the platform changes; the effective date above will change when we do. Material changes affecting how student information is handled will be communicated to registered families directly, not just posted here.