Back to home

Privacy Policy

This policy explains how information is handled on the website, public forms, signing links, and internal portal.

Last updated: July 17, 2026

Information we collect

  • Public contact requests may collect a visitor's name, phone number, email address, message, and the facility they are asking about.
  • Public preliminary or admission forms may collect prospective resident, responsible-party, care, medication, payer, insurance, identifier, signature, and uploaded document information when a form is completed.
  • Internal portal use may collect staff account details, role, assigned facilities, session activity, documents, work records, reminders, resident records, visitor records, and operational actions.
  • Technical information may include IP address, browser/device details, security logs, error logs, and strictly necessary authentication cookies.

How we use information

  • We use public contact information to respond to inquiries, schedule tours, and provide information about the facility a visitor asks about.
  • We use preliminary or admission form information to evaluate care needs, prepare admissions, coordinate facility operations, and maintain resident records.
  • We use internal portal information to run the business, assign access, manage care-related workflows, create documents, and keep required operational records.
  • We use technical information to protect accounts, investigate abuse, prevent fraud, maintain availability, troubleshoot errors, and improve security.

How resident information is disclosed

  • We do not sell personal information.
  • Resident and prospective resident information is disclosed only to authorized people involved in care, placement, payment, administration, or legal compliance. This may include authorized family members or representatives, doctors, care providers, pharmacies, hospitals, facility staff, facility management, and government, regulatory, or legal parties when required.
  • Resident information is not disclosed for advertising or unrelated marketing.
  • Information is stored in secure systems used to operate the application. Those systems are not authorized to use resident information for their own independent purposes.
  • Health-related or sensitive information should be handled according to applicable healthcare, privacy, retention, and licensing obligations. This website policy is not a substitute for any HIPAA Notice of Privacy Practices if one is legally required.

Retention and security

  • We keep information only as long as needed for business, care, legal, security, and recordkeeping purposes.
  • We use administrative, technical, and physical safeguards designed to protect information, including restricted staff access, secure sessions, HTTPS, backups, monitoring, and account controls.
  • No internet system is perfectly secure. If we learn of a security incident, we will evaluate it and provide notices required by applicable law.

Your choices

  • You may choose not to submit a public contact form or preliminary form.
  • You may request correction or deletion of information where legally allowed and operationally feasible.
  • Staff account access is controlled by facility management and may be changed or revoked according to internal policy.

Contact

  • Questions about this policy can be sent to biltmorecare@gmail.com or directed to the appropriate facility manager.