Policy Hub

HOOTSOTRAA Complimentary Roadside Program

About the Roadside Program

We don’t just fix cars. We restore dignity.

We’ve been there: broken down on the side of the road, no money in our pockets, no one to call, hoping the cops wouldn’t send a tow truck we couldn’t afford. Most people drive past.

But HOOTSOTRAA pulls over. We stop because we remember what it’s like to feel invisible and afraid. We know the quiet shame that squeezes the breath from you. We stop because a simple act — a jack, a full tank, a steady voice — can reroute someone’s whole story.

Whether it’s a flat tire, an empty tank, or a soul running on fumes, we arrive with steady hands and unshakable presence. You are not forgotten. You are not alone. You are worthy of help.

The only thing we ask in return is that you share your experience good or bad. Tell the truth about the moment we stopped, so others know that showing up still changes lives.

Roadside Assistance Policy

1. Core Commitment

HOOTSOTRAA stops for everyone we see. No call required — if we see you, we’ve got your back.

2. Volunteer & Owner Support

If a volunteer or the owner performs mechanical work and the repair goes beyond complimentary guidelines, services may be offered at a reduced rate of $50/hr.

$45 goes directly to the volunteer.

$5 goes back into the roadside program fund.

3. Complimentary vs. Paid Services

All assistance begins as_orbs_ begins as complimentary help. We do our best to get you moving again at no cost.

Where we draw the line:

If a repair requires replacement parts from an auto parts store, the cost of parts and time to replace them are not covered unless hardship is determined.

Cost of gas or diesel is not free unless hardship is determined and funds are available.

Depending on the location, HOOTSOTRAA may leverage relationships with local auto parts stores to have parts delivered roadside.

4. Hardship Cases

If it is determined that you cannot pay, even if the repair falls outside of complimentary service, HOOTSOTRAA will cover the full cost as long as funds are available in the roadside account. All costs in these cases are covered by donations.

5. Pricing Transparency

Flat tire changes and similar quick fixes are always free.

Larger repairs (e.g., alternator replacement) are charged based on time it would take a dealership. If a range is given, HOOTSOTRAA splits the difference — so you know the cost before we begin. No hidden fees.

The only possible additional fee: if an oxyacetylene torch must be used, a $10 torch and setup fee applies, plus $1.00/minute to cover gas costs.

6. Case-by-Case Care

Every situation is handled individually. We listen to your story and do our best to have your back, whether or not you can pay. Compassion always comes first.

HOOTSOTRAA CONSULTING & SERVICES LLC

PRIVACY POLICY

Last Updated: January 20, 2026

1. INTRODUCTION

HOOTSOTRAA CONSULTING & SERVICES LLC (“HOOTSOTRAA,” “we,” “us,” or “our”) respects the privacy, dignity, and safety of the individuals and organizations we interact with. We recognize that many of our activities—including roadside assistance, community outreach, mentoring, wellness and safety checks, and consulting services—happen at stressful or vulnerable moments in people’s lives. We are committed to handling personal information in a way that is transparent, responsible, and compliant with applicable laws.

This Privacy Policy (“Policy”) describes how we collect, use, disclose, and safeguard information about you in connection with:

• Our consulting, roadside assistance, outreach, mentoring, safety, wellness, educational, and related services, and any other services we may provide now or in the future (collectively, the “Services”); and

• Our websites, portals, landing pages, online tools, forms, applications, communications, and related digital properties (collectively, the “Sites”), including any property at or under the hootsotraa.com, emmambush.com, or its-all-goody.com domains, or associated domains, subdomains, or redirects.

This Policy applies whenever you:

• Visit, access, or use any of our Sites;

• Request, receive, or are involved in the provision of our Services, whether on your own behalf or as a family member, patient, client, mentor, mentee, program participant, or community member;

• Interact with us by phone, voicemail, text message, messaging app, email, social media, in-person, or through body-worn or dash-camera recordings; or

• Participate in, volunteer for, or are otherwise impacted by outreach activities, educational programs, awareness campaigns, or events that we operate or support.

By accessing or using the Sites or Services, or by otherwise providing information to us, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with this Policy, you should not use the Sites or Services or otherwise provide us with personal information.

This Privacy Policy is not a contract and does not create any legal rights or obligations beyond those already provided by applicable law or by separate written agreements (such as Business Associate Agreements).

2. SCOPE AND RELATIONSHIP TO OTHER POLICIES

2.1 Scope of this Policy

This Policy applies to information we collect:

• Directly from individuals (including clients, patients of our clients, roadside assistance recipients, program participants, mentees, parents or guardians, volunteers, donors, and other users or community members);

• Indirectly from clients, health care providers, “Covered Entities” under HIPAA, business partners, or other third parties;

• Automatically when individuals visit or interact with our Sites or certain components of our Services; and

• Through body-worn cameras, dash cameras, in-vehicle devices, and other recording or monitoring technologies used in connection with our Services.

This Policy applies regardless of the device or method you use to interact with us (for example, phone, smartphone, tablet, laptop, or desktop computer).

2.2 Relationship to HIPAA, HITECH, and Business Associate Agreements

When we support health care providers or other “Covered Entities” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), HOOTSOTRAA may act as a “Business Associate.” In that capacity, we may receive, create, maintain, or transmit “Protected Health Information” (“PHI”) on behalf of a Covered Entity.

When we act as a Business Associate:

• Our use and disclosure of PHI is governed primarily by:

  – The Business Associate Agreement (“BAA”) we have executed with the Covered Entity; and

  – HIPAA, the HITECH Act (Health Information Technology for Economic and Clinical Health Act), and related regulations.

• In the event of any conflict between this Policy and a BAA with respect to PHI, the BAA and applicable HIPAA/HITECH rules will control.

When we receive health-related information outside of a Covered Entity / BAA context (for example, directly from you in connection with a mentoring, safety, or wellness program), that information may not be PHI under HIPAA but may still be considered Personal Information or sensitive data under state or other privacy laws. In those cases, we treat it in accordance with this Policy and applicable law.

2.3 Relationship to Other Notices and Agreements

In some situations, we may provide additional notices, consent forms, or policies that apply to a particular program, recording, event, or relationship (for example, a specific body camera consent form, outreach program notice, or Terms of Use for a specialized portal). Those additional documents may supplement this Policy. If a more specific notice conflicts with this Policy with respect to the same subject matter, the more specific notice will generally control.

2.4 State-Specific and International Notices

Individuals in certain jurisdictions (for example, residents of California, Colorado, Connecticut, Utah, Virginia, and certain international regions such as the European Economic Area or the United Kingdom) may have additional rights or protections under local privacy laws. State-specific information is provided in Section 20 (State-Specific Privacy Disclosures). International considerations are addressed in Section 21 (International Users and Cross-Border Transfers).

3. KEY DEFINITIONS

For purposes of this Privacy Policy:

“Personal Information” or “Personal Data” means information that identifies, relates to, describes, or could reasonably be linked to an identified or identifiable individual. This may include direct identifiers (such as a name or email address) and indirect identifiers (such as an IP address or device ID) when they can reasonably be associated with a person.

“Protected Health Information” or “PHI” has the meaning given under HIPAA and generally includes individually identifiable health information that we create, receive, maintain, or transmit on behalf of a Covered Entity in our capacity as a Business Associate.

“Sensitive Personal Information” may refer to information such as health information, precise geolocation, certain financial account details, information about minors, or other data that is treated as sensitive under applicable law.

“Processing” means any operation or set of operations performed on Personal Information, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.

“Services” means the consulting, outreach, roadside assistance, mentoring, safety, wellness, educational, training, program administration, and other related services provided by HOOTSOTRAA CONSULTING & SERVICES LLC, whether directly to you or through or on behalf of a client or partner.

“Sites” means any websites, web-based portals, landing pages, online forms, or other digital interfaces operated or controlled by HOOTSOTRAA, including any at or under the hootsotraa.com, emmambush.com, or its-all-goody.com domains or related domains or subdomains, and any successor or related domains.

“Recordings” means audio, video, still images, and associated metadata collected by or through body-worn cameras, dash cameras, in-vehicle systems, mobile devices, or similar technologies in connection with our Services.

4. CATEGORIES OF INFORMATION WE COLLECT

Depending on how you interact with us and which Services you use, we may collect the following categories of information.

4.1 Information You Provide Directly

(a) Identification and Contact Information

• First and last name, nickname, or preferred name;

• Postal address, billing address, and physical location information you provide;

• Email address, phone number, and preferred contact method;

• Date of birth or age range, where relevant or required (for example, to confirm eligibility for a program, verify identity, or comply with law);

• Employer, job title, role, or professional affiliation, where relevant (for example, in consulting engagements).

(b) Account and Profile Information

• Username, password, security questions, and other credentials if you create an account or profile on any of our Sites or portals;

• Profile details such as preferred pronouns, communication preferences, notification settings, or other optional information you choose to provide.

(c) Service, Case, and Transaction Information

• Information related to your use of Services (for example, details of roadside assistance events, locations where assistance was provided, types of services delivered, dates and times);

• Information relating to outreach, mentoring, safety checks, or educational or support programs you participate in;

• Notes, assessments, or observations made by our personnel in the course of providing Services;

• Payment-related information, such as transaction amounts and payment methods. We may see or receive partial payment card details, but full card numbers are typically handled by a third-party payment processor;

• Information related to donations or sponsorships, including payment details, donation history, and any recognition preferences.

(d) Health, Wellness, and Safety-Related Information

• Information you voluntarily provide about physical or mental health conditions, injuries, treatment plans, medications, risk factors, or other wellness information in the context of safety, wellness, mentoring, or outreach services;

• Health-related information that we receive from or share with health care providers or Covered Entities in our capacity as a Business Associate (PHI), according to applicable BAAs and HIPAA;

• Information relating to crisis or emergency situations (for example, if roadside assistance or outreach interactions reveal safety concerns, self-harm risks, or other urgent issues).

(e) Communications and Interactions

• Content of your communications with us, including emails, text messages, DMs, messaging app conversations, voicemails, and phone calls (which may be logged or recorded where permitted by law and disclosed to you);

• Information you provide in feedback, complaints, surveys, testimonials, program evaluations, or incident reports;

• Any media you choose to send us (for example, photos of a vehicle breakdown, screenshots, or documents).

(f) Voluntary Program and Demographic Information

• Information you provide as part of outreach, youth programs, mentoring arrangements, workshops, training, or community events;

• Optional demographic information you choose to share (such as age range, general geographic region, gender identity, or other characteristics) to help us understand who we serve and to improve program design, where permitted by law;

• Parental or guardian contact information and authorizations where minors are involved.

4.2 Information We Collect Automatically via the Sites

When you access or use the Sites, we may automatically collect:

(a) Device and Usage Information

• IP addresses and approximate geolocation derived from IP, where allowed;

• Device identifiers, operating system, browser type and version, language settings, and similar technical data;

• Dates and times of access, referring URLs, and exit pages;

• Pages or screens viewed, buttons or links clicked, scroll depth, time spent on pages, and other interaction details.

(b) Cookies, Pixels, and Similar Technologies

We may use cookies, web beacons, pixels, local storage, session tokens, and similar technologies to:

• Recognize and remember your browser or device;

• Maintain login sessions and provide secure access to portals or accounts;

• Remember your preferences and settings;

• Analyze Site traffic, usage patterns, and performance;

• Support security, fraud detection, and abuse prevention;

• Provide basic analytics and, where applicable, limited personalization of content.

You may manage certain cookie preferences through your browser settings or device-level settings. For more detail, see Section 11 (Cookies and Tracking Technologies).

4.3 Information We Receive from Third Parties

We may receive information about you from:

(a) Clients, Covered Entities, and Business Partners

• Health care providers, clinics, or practices who engage us to support patient safety, outreach, or related functions;

• Community organizations, schools, social service agencies, or other partners that refer individuals to our programs or collaborate on events;

• Employers or organizations that sponsor services, memberships, or support for their employees or members.

(b) Service Providers and Vendors

• Payment processors and financial institutions that confirm payment status, transaction metadata, and fraud screening results;

• Analytics providers and marketing tools that help us understand how people find and use our Sites (for example, aggregated website traffic data).

(c) Public and Commercial Sources

• Public records databases or publicly available information (for example, business contact information from a public website);

• Social media platforms or public posts if you interact with our official pages or content.

4.4 Body-Worn Cameras, Dash Cameras, and Other Recordings

In some Services—especially roadside assistance, outreach, and safety-related operations—we may use body-worn cameras, dash cameras, or other recording devices to document interactions and incidents.

We may collect:

• Video images of individuals, vehicles, license plates, locations, and surroundings;

• Audio recordings of conversations or ambient sounds in the vicinity of the device;

• Still images captured from video or as photographs;

• Metadata associated with recordings, such as date, time, approximate GPS coordinates or location, device ID, and file identifiers.

The operation, retention, and disclosure of such recordings are further detailed in Section 9 (Body-Worn and Dash Camera Program).

4.5 Browser Extensions & Local-Only Data

HOOTSOTRAA may offer browser extensions, including HOOTSOTRAA: Help Me (E&E·B), to assist users in understanding and navigating digital content.

By default, any personalization or preference data created through a HOOTSOTRAA browser extension is stored locally on the user’s device only. This data is used solely to improve the user’s experience (for example, accessibility preferences, explanation style, or pacing).

HOOTSOTRAA does not automatically collect, receive, transmit, or store this locally stored extension data.

Users may optionally choose to export their local extension data for personal backup, transfer to another device, or to share with HOOTSOTRAA for support purposes. Any such export is entirely user-initiated. HOOTSOTRAA can only access exported data if the user explicitly sends it.

HOOTSOTRAA browser extensions do not include advertising, behavioral tracking, or third-party analytics.

Users may delete all locally stored extension data at any time through the extension’s settings.

5. HOW WE USE INFORMATION

We may use Personal Information (and PHI, where applicable and allowed under HIPAA and a BAA) for the following purposes:

5.1 Provision, Coordination, and Personalization of Services

• To provide, operate, and maintain the Services you request or that are provided to you through a client or partner;

• To dispatch and deliver roadside assistance, safety checks, community support, and similar services;

• To coordinate case management, outreach, and mentoring (including matching mentees with mentors and tracking progress, where applicable);

• To document Services provided, including through written notes and, where used, body-worn or dash-camera recordings;

• To tailor advice, educational material, outreach strategies, and communications based on your context and preferences.

5.2 Communication and Customer Support

• To respond to inquiries, requests for information, case updates, or assistance;

• To send confirmations, receipts, statements, reports, and other administrative communications;

• To provide updates about your case, program participation, or scheduled appointments;

• To follow up about satisfaction, feedback, or quality improvement initiatives.

5.3 Program Management, Reporting, and Analytics

• To understand how our Services and Sites are used, including program uptake, outcomes, and impact;

• To monitor and improve the quality, safety, responsiveness, and accessibility of our Services;

• To develop training, protocols, and best practices for staff and partners;

• To generate aggregated, de-identified statistics for planning and/or fundraising

5.4 Safety, Security, and Incident Response

• To protect the safety of individuals we serve, our personnel, and the public, including by monitoring for signs of danger, abuse, self-harm, or other urgent risks;

• To detect, investigate, and respond to security incidents, fraud, abuse, or other unlawful or harmful activity;

• To verify identities and prevent unauthorized access to systems or data;

• To document events and interactions for incident review, dispute resolution, or legal defense.

5.5 Legal, Regulatory, and Compliance Purposes

• To comply with applicable laws, regulations, and legal processes;

• To cooperate with law enforcement or other governmental authorities where we are legally required or permitted to do so;

• To exercise, establish, or defend legal claims, including in disputes, litigation, regulatory matters, or investigations;

• To fulfill contractual obligations, including obligations under BAAs and other agreements.

5.6 Marketing, Outreach, and Awareness (Where Permitted)

• To send information about programs, services, volunteer opportunities, events, or campaigns that may be relevant, where allowed by law and subject to your preferences;

• To solicit feedback, testimonials, or success stories (for example, about roadside assistance or mentoring experiences), with your consent where required;

• Where permitted by law and with any required consent or authorization, to use or allow the use of de-identified or appropriately redacted stories, photos, audio, or video segments (including selected portions of body-worn or dash-camera recordings) in educational, outreach, promotional, or fundraising materials.

5.7 De-Identification and Aggregation

• To create de-identified, pseudonymized, or aggregated data sets that no longer reasonably identify an individual;

• To use such data for analytics, program design, research, trend analysis, or reporting to partners and supporters;

• To improve our Services and advocate for systemic change consistent with our mission.

6. ADDITIONAL USES AND DISCLOSURES OF PHI (HIPAA CONTEXT)

When we act as a Business Associate handling PHI, we may use and disclose PHI only as permitted by the relevant BAA and HIPAA/HITECH. Subject to those documents and applicable law, permitted uses and disclosures may include:

• For treatment and care coordination activities as directed by the Covered Entity;

• For health care operations, quality assessment, and improvement activities;

• For case management and care coordination, including outreach to patients and coordination with other providers, as authorized;

• For payment-related activities where applicable;

• For public health and safety purposes, where specifically allowed by HIPAA (for example, to avert a serious threat to health or safety, or in certain reporting obligations);

• To our subcontractors who are themselves required to safeguard PHI and agree to HIPAA-compliant terms;

• To comply with law, legal processes, or government requests as recognized under HIPAA.

We will not use or disclose PHI in a manner that would violate HIPAA if done by the Covered Entity, and we will not sell PHI or use it for marketing communications that require individual authorization under HIPAA, unless such authorization has been properly obtained.

7. HOW WE DISCLOSE INFORMATION

We may disclose Personal Information (and PHI, when authorized and applicable) to the following categories of recipients:

7.1 Service Providers and Contractors

We may share information with third-party service providers, vendors, and contractors who perform services on our behalf, such as:

• Web hosting, infrastructure, and data storage providers;

• Payment processors and financial institutions;

• Communications platforms (SMS, email, voice, and messaging services);

• IT support, cybersecurity, and system monitoring providers;

• Analytics, survey, and reporting tools;

• Professional advisors, such as lawyers, auditors, and accountants.

These entities are authorized to handle Personal Information only as necessary to perform their services for us and are generally required to protect the information according to contractual obligations and applicable law. Where PHI is involved, subcontractors are also subject to HIPAA-compliant Business Associate terms.

7.2 Clients, Covered Entities, and Program Partners

In many cases, we provide Services on behalf of or in collaboration with other organizations. We may disclose Personal Information (including PHI when allowed) to:

• The health care provider, practice, or Covered Entity that engaged us, consistent with our BAA and HIPAA;

• Community organizations, schools, or agencies involved in coordinated support, where sharing is permitted or required and aligned with the purpose for which information was collected;

• Sponsors or partner organizations that fund or administer programs you participate in, subject to applicable agreements and laws.

7.3 Law Enforcement, Regulators, and Legal Proceedings

We may disclose information:

• To comply with applicable laws, regulations, legal processes, subpoenas, or court orders;

• To law enforcement, regulators, or other authorities, where permitted or required, if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of HOOTSOTRAA, our clients, individuals we serve, or others;

• To investigate, detect, or prevent fraud, abuse, security incidents, or other potentially unlawful activity;

• In connection with establishing, exercising, or defending legal claims.

7.4 Business Transactions

If HOOTSOTRAA CONSULTING & SERVICES LLC is involved in a merger, acquisition, divestiture, reorganization, or other corporate transaction, Personal Information may be transferred to a successor or affiliated entity, subject to this Policy or an equivalent privacy commitment.

7.5 With Your Consent or at Your Direction

We may disclose information to third parties when you ask us to or explicitly consent (for example, if you authorize us to speak with a particular family member, advocate, or another provider). Where required by law, we will obtain written authorization for certain disclosures (for example, for some uses of PHI or for public use of identifiable photos or video).

8. DATA RETENTION AND RECORDKEEPING

We retain Personal Information and PHI for as long as reasonably necessary to:

• Provide the Services and maintain ongoing relationships;

• Meet legal and regulatory requirements (for example, medical or business records retention laws);

• Comply with BAAs and other contractual obligations;

• Resolve disputes, enforce agreements, and protect our rights;

• Support audits, investigations, and internal controls.

Retention periods vary depending on the type of information, the purpose for which it was collected, and what is required or permitted under law. When information is no longer needed for the purposes described above, we will:

• Delete it; or

• De-identify or anonymize it; or

• If immediate deletion is not feasible (for example, due to backup or archival systems), securely store and isolate it from further use until deletion is feasible.

For body-worn and dash-camera recordings, see Section 9.4 (Retention of Recordings).

9. BODY-WORN AND DASH CAMERA PROGRAM

9.1 Purpose of Recordings

We may use body-worn cameras, dash cameras, or similar devices as part of our roadside assistance, outreach, and safety operations to:

• Enhance the safety of individuals we serve and our personnel;

• Document incidents, interactions, and physical conditions relevant to the Services;

• Support training, supervision, and quality assurance;

• Facilitate accurate documentation of events for program review, complaint handling, and legal defense;

• Comply with client or contractual requirements where applicable.

9.2 What May Be Captured

Recordings may capture:

• Audio and video of individuals involved in an interaction, including bystanders in the field of view;

• Vehicles, license plates, road conditions, and property;

• Visible injuries, distress, or other sensitive circumstances;

• Public spaces, semi-public areas, or, in some cases, private property, depending on the nature of the call or event and applicable law;

• Children or minors present at the scene.

We strive to operate our recording devices in a way that balances safety, documentation needs, and privacy expectations, consistent with law and any contractual obligations.

9.3 Notice and Consent for Recordings

Where reasonably feasible and required by law, we will:

• Respect applicable consent requirements for recording in certain states or contexts (for example, “two-party consent” jurisdictions for audio recording). New York is a One Party State.

In emergencies or rapidly evolving situations, it may not always be possible to provide advance notice of recording. In some locations, video recording without audio may be permitted without consent; in others, both audio and video may require specific notice or consent. Our practices are intended to align with applicable law, but local rules may vary.

9.4 Retention of Recordings

We retain recordings for a period aligned with:

• Our internal policies;

• Legal, regulatory, and contractual obligations; and

• The practical need to investigate incidents, respond to complaints, and support training.

In general, recordings that do not document an identified incident of concern, safety issue, complaint, or legal matter may be retained for a limited period and then deleted. Recordings associated with a known incident or legal matter may be retained for longer, as required.

9.5 Access to and Use of Recordings

Access to recordings is restricted to authorized personnel and, where appropriate, authorized service providers. Recordings may be accessed or used to:

• Review specific incidents or events;

• Investigate complaints or allegations of misconduct;

• Support training and quality improvement (for example, by reviewing anonymized or redacted clips);

• Provide evidence or documentation in legal or administrative proceedings;

• Comply with lawful requests from law enforcement or regulators.

Where recordings are used for training, outreach, or educational materials, we will take steps to de-identify or redact individuals where feasible, and obtain consent or authorization where required.

9.6 Disclosures of Recordings

Recordings may be disclosed to:

• Clients, Covered Entities, or partners who engaged us, when relevant to a case or contract;

• Law enforcement or government authorities, where permitted or required by law;

• Courts, attorneys, or parties to a legal proceeding, pursuant to lawful process;

• Other third parties, where you have consented or where disclosure is authorized or required by law.

We may also use de-identified, redacted, or blurred excerpts of recordings for training, outreach, advocacy, or promotional purposes consistent with our mission, subject to any necessary consents or authorizations.

10. FINANCIAL INFORMATION, PAYMENTS, AND CRYPTOCURRENCY

10.1 Payment Card Information

We may allow payment via credit or debit cards. Typically:

• Card data is collected and processed directly by a third-party payment processor;

• We do not store full payment card numbers or security codes on our systems;

• We may store partial card details (for example, last four digits) and transaction metadata for recordkeeping, reconciliation, and fraud prevention.

10.2 Bank Transfers and Other Methods

If you pay via bank transfer, mobile wallet, or similar method:

• We may receive account identifiers, transaction IDs, and payer information;

• We use this information to confirm payments, track balances, and perform accounting.

10.3 Cryptocurrency Transactions

Where we accept cryptocurrency payments or donations:

• We may collect wallet addresses, transaction hashes, timestamps, and amounts;

• These transactions are recorded on public blockchains that we do not control;

• We may associate wallet addresses with names or other identifiers where required for accounting, compliance (for example, anti-money-laundering screening), or fraud prevention.

We treat such data as Personal Information when it can reasonably be linked to an individual.

11. COOKIES AND TRACKING TECHNOLOGIES

11.1 Types of Technologies Used

We may use:

• Cookies (session cookies and persistent cookies);

• Local storage;

• Web beacons or pixels;

• Log files and similar technologies.

11.2 Purposes

We use these technologies to:

• Maintain secure sessions and help you log in or stay logged in;

• Remember preferences (such as language or display options);

• Analyze how the Sites are used and improve performance;

• Detect and prevent fraud, abuse, and security incidents.

11.3 Managing Cookies and Tracking

Most web browsers allow you to:

• Block or limit cookies;

• Delete cookies already stored;

• Receive notifications before cookies are set.

Please note:

• If you disable or reject some cookies, certain features of the Sites may not function properly;

• Some tracking may still occur through essential or strictly necessary cookies that support core functionality.

11.4 “Do Not Track” (DNT) Signals

Our Sites may not currently respond to “Do Not Track” signals from browsers. You can use other privacy tools, browser extensions, or settings to manage online tracking.

12. DATA SECURITY

We employ reasonable and appropriate technical, administrative, and physical safeguards designed to:

• Protect Personal Information and PHI against accidental, unlawful, or unauthorized access, destruction, loss, alteration, disclosure, or use;

• Limit access to systems and data to individuals with a legitimate business need;

• Secure devices, networks, and systems with measures such as access controls, encryption (where appropriate), logging, and monitoring.

Despite these efforts, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security. You are responsible for:

• Maintaining the confidentiality of any account credentials (such as passwords);

• Logging out of shared devices;

• Using caution when transmitting information electronically.

If we become aware of a data breach affecting Personal Information or PHI, we will take appropriate steps to investigate and, where required, notify affected individuals and/or regulators consistent with applicable law, including any breach notification obligations under HIPAA or state laws.

13. CHILDREN’S PRIVACY

Our Services are primarily designed for adults and organizations. However, some Services (such as outreach, mentoring, or family roadside assistance) may involve minors.

• We do not knowingly collect Personal Information directly from children under 13 without verifiable parental or guardian consent where required by law;

• When minors participate in programs or come into contact with our Services, we generally obtain information through or with the involvement of a parent, guardian, school, or authorized organization, where appropriate;

• If we discover that a child under 13 has provided Personal Information directly to us without required consent, we will take reasonable steps to delete that information.

Parents or guardians who believe their child has provided information to us without consent should contact us using the details in Section 22.

14. YOUR PRIVACY RIGHTS AND CHOICES (GENERAL)

Depending on your location and applicable law, you may have some or all of the following rights regarding your Personal Information:

• Right to know / access: The right to request confirmation of whether we are processing your Personal Information and, in some cases, to receive a copy of that information.

• Right to correction (rectification): The right to request that we correct inaccurate or incomplete Personal Information about you.

• Right to deletion (erasure): The right to request that we delete certain Personal Information, subject to legal exceptions (for example, where we must keep data for legal compliance or recordkeeping).

• Right to restrict processing: In some circumstances, the right to request restrictions on how we use your Personal Information.

• Right to object: In certain cases, the right to object to specific uses of your Personal Information (for example, marketing).

• Right to data portability: In certain contexts, the right to receive a copy of your Personal Information in a usable format, or request that we transmit it to another entity.

• Right to withdraw consent: Where we rely on consent to process your Personal Information, the right to withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.

• Right to opt out of marketing: The right to opt out of receiving marketing or promotional communications from us.

Note: Many of these rights have conditions and exceptions. How you exercise them—and the form of our response—may differ based on your jurisdiction and the nature of the data.

14.1 Exercising Your Rights

You may exercise applicable rights by contacting us using the information in Section 22 (Contact Information). We may:

• Request sufficient information to verify your identity (and, if applicable, your authority to act on behalf of another individual);

• Ask you to clarify your request so we can respond accurately.

We will respond in accordance with applicable laws and within required timeframes. In some cases, we may not be able to fully comply with your request, for example, when:

• We must retain certain information to comply with legal or regulatory obligations, or to protect our rights;

• The information is subject to legal privilege or relates to an ongoing legal matter;

• Complying would adversely affect the privacy or rights of others;

• The request is manifestly unfounded or excessive under applicable law.

14.2 Marketing Communications

You may opt out of marketing or promotional emails at any time by following the unsubscribe instructions in those messages or by contacting us. Even if you opt out of marketing, we may still send non-promotional communications such as:

• Service-related messages;

• Security or account notices;

• Legal or policy updates relevant to your use of the Services.

15. ADDITIONAL INFORMATION FOR INDIVIDUALS IN THE EEA/UK (IF APPLICABLE)

If, in limited cases, our processing activities fall under the scope of data protection laws in the European Economic Area (“EEA”) or the United Kingdom (“UK”), the following may apply:

• Legal bases: We may process Personal Data based on one or more of the following:

  – Your consent;

  – Performance of a contract with you or to take steps at your request prior to entering into a contract;

  – Our legitimate interests (for example, improving Services, ensuring safety and security), balanced against your interests and rights;

  – Compliance with a legal obligation;

  – Protection of vital interests (for example, emergency situations).

• Additional rights: In addition to the rights listed in Section 14, you may have rights under EU/UK law to:

  – Object to processing based on legitimate interests;

  – Lodge a complaint with a supervisory authority in your country of residence or work, or where an alleged infringement occurred.

If you are in the EEA or UK and believe EU/UK data protection law applies to our processing of your data, you may contact us to exercise your rights. We may ask for additional information to confirm applicability and to respond properly.

16. SMS, TEXT, AND VOICE COMMUNICATIONS

If you provide a mobile phone number:

• You may receive SMS/text messages or voice calls from us in connection with Services (for example, dispatch updates, safety check-ins, scheduling, or urgent alerts);

• You can generally opt out of non-essential text messages by replying “STOP” or similar instructions where provided;

• We may still contact you via SMS or phone in emergencies or where permitted or required by law, even if you have opted out of marketing texts.

Your carrier’s messaging and data rates may apply. You are responsible for charges imposed by your carrier.

17. THIRD-PARTY LINKS, PLATFORMS, AND INTEGRATIONS

The Sites and our communications may contain links to third-party websites, platforms, or services that we do not control. Examples include:

• Social media platforms;

• Third-party payment portals;

• External educational or resource sites.

We are not responsible for the privacy practices or content of such third parties. When you follow a link or use a third-party feature, you should review that third party’s privacy policy and terms.

18. DO WE SELL PERSONAL INFORMATION OR USE IT FOR TARGETED ADVERTISING?

HOOTSOTRAA does not knowingly “sell” Personal Information or engage in “targeted advertising” as those terms may be defined in certain U.S. state privacy laws. However:

• We may use basic analytics tools to understand how people find and use our Sites;

• We do not share identifiable personal information with third parties in exchange for money;

• If a future activity could be considered a “sale” or “sharing” under applicable law, we will provide required notices and opt-out mechanisms.

19. CHANGES TO THIS PRIVACY POLICY

We may update or modify this Privacy Policy from time to time to reflect:

• Changes in our Services, technologies, or operational practices;

• Changes in legal or regulatory requirements;

• Feedback or evolving best practices.

When we make material changes, we will update the “Last Updated” date at the top of this Policy and may provide additional notice (for example, via the Sites or email) where required. Your continued use of the Sites or Services after changes become effective signifies your acceptance of the updated Policy.

20. STATE-SPECIFIC PRIVACY DISCLOSURES (UNITED STATES)

If you are a resident of certain U.S. states, you may have additional rights under state privacy laws. The following provides a high-level summary; your specific rights may vary by state and over time as laws change.

20.1 Categories of Personal Information We May Collect (California-Style Categories)

Using California-style categories, we may collect:

• Identifiers (e.g., name, contact details, IP address, device identifiers);

• Customer records information (e.g., billing address, payment info);

• Protected classification characteristics (when voluntarily provided, such as age range);

• Commercial information (e.g., records of Services obtained);

• Internet or other electronic network activity information (e.g., Site usage data);

• Geolocation data (approximate, based on IP or Service location);

• Audio, electronic, visual, or similar information (e.g., recordings);

• Professional or employment-related information (e.g., role or affiliation);

• In some contexts, health-related information (which may overlap with PHI).

20.2 Additional Rights for Certain State Residents

Residents of states such as California, Colorado, Connecticut, Utah, and Virginia may have rights including:

• Right to confirm whether we are processing your Personal Information;

• Right to access and obtain a copy of certain Personal Information;

• Right to request deletion of Personal Information, subject to legal exceptions;

• Right to request correction of inaccurate Personal Information;

• Right to opt out of certain types of processing, such as:

  – Sale of Personal Information;

  – Use of Personal Information for targeted advertising;

  – Certain forms of profiling that produce legal or similarly significant effects (if applicable);

• Right to designate an authorized agent to make some requests on your behalf (for example, under California law);

• Right to appeal our decision regarding a privacy request in certain states (for example, Colorado, Connecticut, Virginia).

20.3 How to Exercise State Privacy Rights

To exercise state privacy rights, please contact us using the methods in Section 22 and indicate that your request is related to state privacy rights. We may ask for information to verify your identity and residency. Where available, you may designate an authorized agent; we may require documentation of that authorization.

If we deny your request in whole or in part, and your state law provides a right to appeal, we will inform you of how to submit an appeal and how to contact your state attorney general if you remain unsatisfied.

20.4 Non-Discrimination

We will not discriminate against you for exercising your privacy rights under state law, such as by:

• Denying goods or services;

• Charging different prices or rates;

• Providing a different level or quality of services;

except to the extent permitted by law (for example, if a program inherently requires certain data to function).

21. INTERNATIONAL USERS AND CROSS-BORDER TRANSFERS

HOOTSOTRAA is based in the United States, and our Sites and Services are primarily directed to individuals and organizations in the United States. If you access the Sites or Services from outside the United States:

• Your Personal Information may be transferred to, stored in, and processed in the United States or other jurisdictions that may not provide the same level of data protection as your home jurisdiction;

• By using the Sites or Services, you consent to such transfers where permitted by law.

If required by law, we may rely on specific legal mechanisms to legitimize international data transfers (for example, standard contractual clauses) for certain data flows.

22. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, you may contact us at:

HOOTSOTRAA CONSULTING & SERVICES LLC

Attn: Privacy

1000 Union Street

Rome, New York 13440

Phone: 315-664-3900

Email: [email protected]

23. NO LEGAL ADVICE; RECOMMENDATION TO SEEK COUNSEL

This Privacy Policy is intended to describe HOOTSOTRAA’s privacy practices and to comply with applicable privacy laws and contractual obligations. It is not intended to constitute legal advice to any third party. Laws and regulations may change, and their application may differ based on specific facts and circumstances.

If you are a business, organization, or individual seeking to understand your own legal obligations or to draft your own policies, you should consult with qualified legal counsel for advice tailored to your situation.

1) HOOTSOTRAA Body-Worn & Dash Camera Recording Policy

HOOTSOTRAA CONSULTING & SERVICES LLC

1000 Union Street, Rome, NY 13440

315-664-3900 | [email protected]

HOOTSOTRAA LETTERHEAD

2) Public-Facing Use of Recording Opt-Out Form (Separate Form)

HOOTSOTRAA CONSULTING & SERVICES LLC — OPT-OUT OF PUBLIC-FACING USE (RECORDINGS)

This Opt-Out Form applies only to HOOTSOTRAA’s public-facing use of recordings (marketing/media). It does not opt you out of being recorded during Services. Recording Devices are mandatory for Services.

A. Person submitting opt-out

Full Name: __________________________________________

Phone: ______________________________________________

Email: _______________________________________________

Address (optional): ____________________________________

B. Service interaction (if known)

Date of Service: _______________ Approx. Time: __________

Location (city/road/landmark): ___________________________

Vehicle (make/model/color) (optional): _____________________

HOOTSOTRAA staff/volunteer name (if known): _______________

C. Opt-out election (check all that apply)

I opt out of HOOTSOTRAA using recordings that identify me (face/voice/name/story) in:

☐ Website content

☐ Social media posts/reels/stories

☐ Fundraising or donation materials

☐ Press/media/public relations

☐ Testimonials/story features

☐ Other (describe): _____________________________________

D. Important notes and limitations (acknowledgment)

By signing below, I understand and agree:

Recording during Services is mandatory. HOOTSOTRAA will not provide Services without Recording Devices present and operational.

This Opt-Out limits only public-facing use. HOOTSOTRAA may still use recordings for operational purposes (safety, quality, training, incident documentation, insurance, disputes, and legal compliance).

HOOTSOTRAA may disclose recordings if required by law, lawful process, or to protect safety and legal rights.

If HOOTSOTRAA can reasonably de-identify content (e.g., blur face/remove audio), HOOTSOTRAA may use the de-identified content publicly.

E. Signature

Signature: ___________________________________

Printed Name: _________________________________

Date: ________________________________________

Submission options: Email to [email protected]

 or deliver to HOOTSOTRAA at 1000 Union Street, Rome, NY 13440. 

HOOTSOTRAA LETTERHEAD





Travel / Mileage Policy

• Base Service Area:
25-mile total round trip from 7970 Lunar Drive included.

• Extended Mileage:
Travel beyond the included 25-mile round trip is billed at $1.00 per mile.

• Mileage Calculation:
Mileage is calculated based on total round-trip distance from the base address.

• Applicability:
Mileage fees apply to all services unless otherwise stated in the work order.