Privacy Policy
1. Who we are
This website is operated by ALFAdvisory Partners (“we”, “us”, “our”), which provides website design, local SEO, digital marketing and compliance software to assisted living facilities in Florida.
We are the data controller for information submitted through this website. You can reach us at info@evergreenbrain.com.
2. What we collect
Information you give us
When you submit a form on this website, we collect what you type into it:
| Form | Fields collected |
|---|---|
| ALF growth review request | Full name, email address, phone number, facility name, Florida city, facility status, primary need, your message, and your consent |
| Free checklist request | Full name, email address, and your consent |
Only the fields you actually fill in are transmitted. Optional fields left blank are not sent.
Information collected automatically
When you submit a form, we also record:
- Campaign attribution — UTM parameters (source, medium, campaign, term, content) if they were present in the link you arrived through
- The page you submitted from
- The referring website, if your browser provided one
- Your IP address, passed to our bot-protection provider as part of verifying that the submission is genuine
This tells us which marketing efforts are working. It is not used to build a profile of you or to track you across other websites.
What we do not collect
- We do not use advertising or analytics cookies on this website
- We do not buy or import contact lists
- We do not ask for payment details through this website
- We do not knowingly collect information about residents of your facility — see section 11
3. Why we collect it
| Purpose | Basis |
|---|---|
| To reply to your enquiry and discuss your requirements | Your request, and our legitimate interest in responding to it |
| To send you the checklist you asked for | Your consent |
| To send occasional related emails, where you ticked that box | Your consent, withdrawable at any time |
| To understand which marketing brought you here | Our legitimate interest in running the business efficiently |
| To block automated and fraudulent submissions | Our legitimate interest in keeping the website usable |
Marketing consent is never pre-ticked. If you did not tick it, we will only use your details to answer the enquiry you sent.
4. Where your information goes
When you submit a form, the information travels like this:
- Your browser sends it to our own secure endpoint
- That endpoint verifies the anti-bot check with Cloudflare
- The enquiry is posted into a private internal channel in our Slack workspace, visible only to our team
- We reply to you by email
We do not sell, rent or trade your personal information. We do not share it with advertisers.
If your enquiry concerns licensing, CEMP preparation, training, Medicaid processes, credentialing, compliance documents or mock surveys, those services are delivered by an independent specialist partner. We will ask your permission before passing your details to that partner, and will tell you who they are first. See the Partner Services Disclosure.
5. Third-party services
These are the only third parties that receive data through this website, and exactly what each one gets:
| Service | What it receives | Why |
|---|---|---|
| Google reCAPTCHA | Your IP address and browser signals | To confirm you are a person and not an automated script |
| Slack | The contents of your form submission | So our team is notified of your enquiry |
| Google Fonts | Your IP address, when the page loads the fonts | To display the site's typefaces |
| Our hosting and edge provider | Standard server logs, including IP address | To serve the website and keep it secure |
These providers process data on their own infrastructure, which may be located outside your country, including in the United States. Each publishes its own privacy policy governing that processing.
7. How long we keep it
- Enquiries in Slack: retained for up to 24 months from your last contact with us, subject to our Slack workspace retention settings
- Email correspondence: retained for up to 24 months from your last contact with us, or longer where we have an ongoing engagement with you
- Marketing contacts: until you unsubscribe or ask us to delete them
We delete information when it is no longer needed for the purpose it was collected for.
8. Your rights
You can ask us to:
- Access the personal information we hold about you
- Correct anything inaccurate
- Delete your information
- Stop using it for marketing — every marketing email also carries an unsubscribe link
- Withdraw consent you previously gave, at any time
- Receive a copy of what you gave us, in a portable format
Email info@evergreenbrain.com and we will respond within 30 days. We will not charge you or treat you differently for exercising any of these rights.
Depending on where you live, you may have further rights under laws such as the Florida Digital Bill of Rights, the California Consumer Privacy Act or the UK and EU GDPR, including the right to complain to your local supervisory authority. We honour the rights listed above for anyone who asks, wherever they are, rather than only where we are legally required to.
9. Security
We take reasonable measures to protect the information you send us:
- The website is served over an encrypted HTTPS connection
- Form submissions are protected against automated abuse
- Credentials for our internal systems are stored server-side and are never present in the website's public code
- Enquiries are visible only to team members who need to see them
No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. Please do not send sensitive personal information, resident records or medical details through the website forms.
10. Children's privacy
This website is intended for facility owners, administrators and operators. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has submitted information to us, contact us and we will delete it.
11. A note on resident information
Please do not send resident records, health information or other confidential facility data through this website. The contact forms are for business enquiries only and are not designed or secured for protected health information.
We do not describe this website or our software as HIPAA compliant. If a project requires handling protected health information, that will be governed by a separate written agreement with appropriate safeguards in place before any such data is shared.
12. Changes to this policy
We may update this policy as the website or our services change. Material changes will be communicated to anyone who has an active engagement with us.
13. How to contact us
Questions about this policy, or about the information we hold, can be sent to info@evergreenbrain.com.
ALFAdvisory Partners
Serving assisted living facilities across Florida