Information we collect

  • Name and preferred contact details
  • Town or ZIP code
  • Help-at-home, community or not-sure path
  • General service category and timing
  • Who is making the request
  • Consent record, page and submission time
  • Limited campaign labels from the site's own URL and the referring website's hostname, when available
  • A short-lived, one-way security fingerprint derived from network and browser signals to limit spam; the raw network address is not stored with the request

How we use it

We use the information to respond, understand the requested category and, only with appropriate permission, introduce a participating provider. We may also use de-identified operational totals to understand site performance.

Sharing and advertising

We do not place names, phone numbers, email addresses, care categories or form narratives into advertising-platform events. Before sharing identifiable information with a separate provider, we explain who may receive it and obtain appropriate permission.

Retention and choices

Care requests are retained only as long as needed for response, consent records, contracts and applicable legal obligations. Security fingerprints are used only for abuse prevention. You may use the care request form to ask about access to or deletion of your information.

Security and data minimization

The care endpoint accepts same-origin JSON requests, validates allowed values, rejects oversized and automated submissions, limits repeated requests and stores records in platform-backed structured storage. Transport security and browser security headers are applied at the site edge. No internet service can promise absolute security, so the safest design is to collect less sensitive information in the first place.

The request form has no narrative box for diagnoses or medical history. If a participating provider later needs protected information, it should use its own appropriate secure intake process rather than asking a family to place documents in this marketing form.

Retention, access and incidents

Operational records should be reviewed on a defined retention schedule and removed when they are no longer needed for response, consent, security, contractual or legal purposes. A verified person may request access, correction or deletion by asking for a privacy follow-up through the form and providing only the minimum details needed to locate the record.

If a material security incident affects personal information, Vermont Senior Care will investigate, contain the issue, preserve appropriate records and provide notices required by applicable law. This notice will be updated when collection or sharing practices materially change.