How we collect, use, and protect your information.
Expressions Unlimited ("we," "our," or "us") is committed to protecting the privacy of the individuals we serve, their families, and our staff. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
By using our website (expressionsunlimitednm.com), our Staff Portal, or by providing us your contact information, you agree to the practices described in this policy.
We may collect the following types of information:
We use the information we collect to:
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Message Types: Expressions Unlimited sends automated SMS text messages to staff members for operational purposes, including shift schedule reminders sent approximately 2 hours before a scheduled shift begins.
Who receives texts: Only Expressions Unlimited staff members who have provided a phone number and consented to receive SMS communications through the Staff Portal.
Message Frequency: Message frequency varies based on your schedule. You may receive up to one (1) SMS per scheduled shift.
Message & Data Rates: Message and data rates may apply. Check with your wireless carrier for details.
To Opt Out: Reply STOP to any text message at any time to unsubscribe. You will receive one final confirmation message and no further SMS will be sent. You may also contact us directly to remove your number.
To Get Help: Reply HELP to any message, or contact us at info@expressionsunlimitednm.com or (505) 232-5900.
No third-party sharing: Your phone number and opt-in consent will not be shared with or sold to any third party for marketing purposes.
Staff Portal data — including names, emails, phone numbers, schedules, and clock records — is stored securely in Google Firebase (a Google Cloud service), which provides industry-standard encryption in transit and at rest.
We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, loss, misuse, or disclosure. Access to staff data within the portal is limited to authorized administrators.
We retain staff records for as long as the employment relationship exists and as required by applicable employment laws. Personal data may be deleted upon written request, subject to legal retention requirements.
Our public website may use basic browser cookies to improve your experience (e.g., remembering preferences). We do not use third-party advertising cookies or tracking pixels.
We may use anonymized usage analytics (such as page visit counts) to understand how our website is used and improve its content. This data cannot be used to identify individual visitors.
Our website and Staff Portal are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
The individuals we serve in our group homes and daycare programs are protected under separate confidentiality and privacy policies governed by applicable state and federal regulations, including HIPAA where applicable.
We use the following third-party services that may process data on our behalf:
These services operate under their own privacy policies. We do not control their data practices beyond what is necessary to provide our services.
You have the right to:
To exercise any of these rights, please contact us at the information below. We will respond within 30 days.
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact us:
