Effective October 1, 2026 · Last updated October 1, 2026
This policy explains what Compass AFC, Inc. (“Compass,” “we,” “us”) collects when you use compassafc.com, how we use it, and who we share it with.
Compass AFC provides Adult Foster Care services under MassHealth. This policy covers our website. It does not describe how we handle the records of members enrolled in our program — that is covered by our Notice of Privacy Practices, which we provide at enrollment and which you may request at any time.
Information you give us. We collect what you type into the forms on this site:
You may also send us information directly by phone or email.
Information collected automatically. When you visit the site, our hosting and advertising tools record standard technical information: your IP address, browser and device type, the pages you view, the links you click, how long you stay, and the site or ad you arrived from.
We do not ask for, and ask that you do not send through this website, Social Security numbers, MassHealth or other insurance ID numbers, financial account numbers, or detailed medical history. If you need to send us documentation, use our secure upload link.
We use the information to:
We do not sell your personal information. We do not share it with third parties for their own marketing.
This site uses cookies and similar technologies. Some are necessary for pages and forms to work.
We also use Google Ads conversion tracking. This tells us when a visit that came from one of our ads led to a referral or an application, so we can judge whether our advertising is working. It sets cookies through Google, and Google may use them to measure and target advertising across other sites. We do not give Google the contents of your referral or application.
You have direct control over this:
Necessary cookies cannot be turned off without breaking parts of the site. Most browsers also offer a “Do Not Track” setting; because there is still no common standard for honoring it, we do not currently respond to those signals.
We share information only as described here:
| Recipient | What they receive | Why |
|---|---|---|
| Webflow | Website hosting | Runs and serves the site |
| Zoho (CRM, Flow) | Referral, caregiver, and applicant details you submit, under a business associate agreement | Receives, stores, and routes your inquiry |
| Google (Ads) | Website and ad interaction data — not form contents | Measures our advertising |
| Dropbox | Files you upload through our secure upload links | Document intake |
| Our case management and administrative staff | Referral and application details | To act on your request |
We may also disclose information when the law requires it, in response to lawful requests from public authorities, to protect our rights or someone’s safety, or in connection with a sale or reorganization of the business.
Where a service provider handles protected health information on our behalf, we put a business associate agreement in place before they do so.
We keep referral, caregiver, and application information as long as needed for the purpose it was collected and for any period required by law, MassHealth, accreditation standards, or our records-retention schedule, then dispose of it securely.
We maintain a written information security program with administrative, physical, and technical safeguards, consistent with Massachusetts 201 CMR 17.00 and with HIPAA where it applies. This includes access controls, encryption of data in transit, company-managed and encrypted devices under central management, and workforce training.
Some of the staff who support our program work outside the United States. They work under individual contracts governed by Massachusetts law, on company-issued and company-managed devices, under the same confidentiality and security obligations as our domestic staff, and under a business associate agreement where they handle protected health information.
No website is perfectly secure. Information you send over the internet travels at your own risk, which is why we ask you not to put sensitive identifiers into web forms.
If we learn of a breach of personal information, we will notify affected individuals and the Massachusetts Office of Consumer Affairs and Business Regulation and Attorney General as M.G.L. c. 93H requires, and will follow the HIPAA Breach Notification Rule where it applies.
If you submit a referral about another person, you are telling us that you have that person’s permission to share their information with us, or that you have legal authority to act for them. We will use what you send only to assess and respond to the referral.
You may ask us to see what we hold about you, correct it, or delete it. We will honor the request unless a law, a MassHealth requirement, or our retention obligations prevent it; if we can’t, we’ll tell you why. To opt out of emails from us, use the unsubscribe link or contact us directly.
If you are an enrolled member or a caregiver in our program, your rights in your record are broader than this and are described in our Notice of Privacy Practices.
This site is meant for adults. We do not knowingly collect information from children under 13 through the website. If you believe a child has given us information here, contact us and we will delete it.
We may update this policy. The “Last updated” date above tells you when it last changed. Material changes will be posted on this page.
Compass AFC, Inc.
100 Tradecenter Street, Suite G-700, Woburn, MA 01801
Phone (978) 378-4669
Compliance hotline (617) 575-2655
100 Tradecenter G700
Woburn MA 01801
info@compassafc.com
(978) 378-4669 (call or text)
(978) 261-7697 (fax)

Monday - Friday
09:00 AM - 05:00 PM
Saturday & Sunday — On-Call
Compliance Hotline: (617) 575-2655
