Privacy Policy

This policy explains what Compass AFC, Inc. (“Compass,” “we,” “us”) collects when you use compassafc.com, how we use it, and who we share it with.

Compass AFC provides Adult Foster Care services under MassHealth. This policy covers our website. It does not describe how we handle the records of members enrolled in our program — that is covered by our Notice of Privacy Practices, which we provide at enrollment and which you may request at any time.

What we collect

Information you give us. We collect what you type into the forms on this site:

  • New Client Referral — your name, email, phone, and organization; whether you are a family member, provider, or other referral source; and the name, town, and phone number of the person being referred, plus any notes you add.
  • Caregiver inquiry — your name, phone, email, whether you live in Massachusetts, and a description of your caregiving situation.
  • Job application — your name, phone, and email.
  • Secure Upload — any documents you choose to upload, and the email address you give the upload page.

You may also send us information directly by phone or email.

Information collected automatically. When you visit the site, our hosting and advertising tools record standard technical information: your IP address, browser and device type, the pages you view, the links you click, how long you stay, and the site or ad you arrived from.

We do not ask for, and ask that you do not send through this website, Social Security numbers, MassHealth or other insurance ID numbers, financial account numbers, or detailed medical history. If you need to send us documentation, use our secure upload link.

Why we collect it

We use the information to:

  • respond to client referrals and assess eligibility for the AFC program;
  • answer questions from prospective caregivers and walk them through applying;
  • review and respond to job applications;
  • measure which of our ads and pages bring people to us;
  • operate, secure, and improve the website; and
  • meet our legal, MassHealth, and accreditation obligations.

We do not sell your personal information. We do not share it with third parties for their own marketing.

Cookies, analytics, and advertising

This site uses cookies and similar technologies. Some are necessary for pages and forms to work.

We also use Google Ads conversion tracking. This tells us when a visit that came from one of our ads led to a referral or an application, so we can judge whether our advertising is working. It sets cookies through Google, and Google may use them to measure and target advertising across other sites. We do not give Google the contents of your referral or application.

You have direct control over this:

Necessary cookies cannot be turned off without breaking parts of the site. Most browsers also offer a “Do Not Track” setting; because there is still no common standard for honoring it, we do not currently respond to those signals.

Who we share it with

We share information only as described here:

RecipientWhat they receiveWhy
WebflowWebsite hostingRuns and serves the site
Zoho (CRM, Flow)Referral, caregiver, and applicant details you submit, under a business associate agreementReceives, stores, and routes your inquiry
Google (Ads)Website and ad interaction data — not form contentsMeasures our advertising
DropboxFiles you upload through our secure upload linksDocument intake
Our case management and administrative staffReferral and application detailsTo act on your request

We may also disclose information when the law requires it, in response to lawful requests from public authorities, to protect our rights or someone’s safety, or in connection with a sale or reorganization of the business.

Where a service provider handles protected health information on our behalf, we put a business associate agreement in place before they do so.

How long we keep it

We keep referral, caregiver, and application information as long as needed for the purpose it was collected and for any period required by law, MassHealth, accreditation standards, or our records-retention schedule, then dispose of it securely.

How we protect it

We maintain a written information security program with administrative, physical, and technical safeguards, consistent with Massachusetts 201 CMR 17.00 and with HIPAA where it applies. This includes access controls, encryption of data in transit, company-managed and encrypted devices under central management, and workforce training.

Some of the staff who support our program work outside the United States. They work under individual contracts governed by Massachusetts law, on company-issued and company-managed devices, under the same confidentiality and security obligations as our domestic staff, and under a business associate agreement where they handle protected health information.

No website is perfectly secure. Information you send over the internet travels at your own risk, which is why we ask you not to put sensitive identifiers into web forms.

If we learn of a breach of personal information, we will notify affected individuals and the Massachusetts Office of Consumer Affairs and Business Regulation and Attorney General as M.G.L. c. 93H requires, and will follow the HIPAA Breach Notification Rule where it applies.

Referring someone else

If you submit a referral about another person, you are telling us that you have that person’s permission to share their information with us, or that you have legal authority to act for them. We will use what you send only to assess and respond to the referral.

Your choices

You may ask us to see what we hold about you, correct it, or delete it. We will honor the request unless a law, a MassHealth requirement, or our retention obligations prevent it; if we can’t, we’ll tell you why. To opt out of emails from us, use the unsubscribe link or contact us directly.

If you are an enrolled member or a caregiver in our program, your rights in your record are broader than this and are described in our Notice of Privacy Practices.

Children

This site is meant for adults. We do not knowingly collect information from children under 13 through the website. If you believe a child has given us information here, contact us and we will delete it.

Changes

We may update this policy. The “Last updated” date above tells you when it last changed. Material changes will be posted on this page.

Contact us

Compass AFC, Inc.
100 Tradecenter Street, Suite G-700, Woburn, MA 01801
Phone (978) 378-4669
Compliance hotline (617) 575-2655

C
Compass AFC Assistant
Questions about Adult Foster Care
Close
Automated assistant. For medical or urgent matters please call the office.