Privacy Policy
Effective Date: December 10, 2025
Welcome to Gracepoint Adult Medical Day Care (“Gracepoint,” “we,” “our,” or “us”). Your privacy is important to us, and we are committed to protecting the personal and health information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our adult medical day care services.
By accessing or using our website and services, you agree to the terms outlined in this Privacy Policy. If you do not agree, please do not use our website or services. We may update this policy periodically, so we encourage you to review it regularly.
Health Information (HIPAA & PHI)
As a medical day care facility, your health data is protected under the Health Insurance Portability and Accountability Act (HIPAA).
-
- Protected Health Information (PHI): Any information regarding your medical condition, care provided, or payment for services.
-
- Gracepoint implements all necessary safeguards to protect your health information in compliance with HIPAA.
Information We Collect
A. Information You Provide
Collected when you contact us, register for services, or fill out forms:
-
- Name, email, phone number, and mailing address
-
- Health information and care requirements
-
- Service applications or employment inquiries
B. Information Collected Automatically
Collected when you visit our website:
-
- Device information: IP address, browser type, operating system, geographic location
-
- Usage information: Pages viewed, time spent on the site, referring website addresses
-
- Cookies: Used to remember preferences and track visitor behavior
How We Use Your Information
We use collected information for the following purposes:
-
- Service Delivery: To respond to inquiries and coordinate services, including medical supervision, transportation, and individualized care plans
-
- Communication: To provide updates, billing information, and service-related messages
-
- Website Improvement: To analyze traffic and enhance functionality and content
-
- Security & Compliance: To prevent fraud, meet legal obligations, and maintain system integrity
Sharing and Disclosure
We do not sell or rent your personal information. Information is shared only as needed:
-
- Service Providers: Trusted third parties (IT hosting, billing services, email delivery) under confidentiality agreements
-
- Legal Compliance: Required by law, court order, or regulatory mandate
-
- Consent: When explicitly authorized by you
-
- Anonymized Data: Non-identifiable data may be shared for research or analysis purposes
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance user experience and analyze website performance:
-
- Manage cookies via your browser settings
-
- Opt out of Google Analytics using the Google Analytics Opt-Out Browser Add-on
Disabling certain cookies may affect website functionality.
Data Security
We protect your information using industry-standard measures:
-
- Encryption (SSL): All online transmissions are encrypted
-
- Restricted Access: Only authorized personnel have access to personal and health information
-
- Monitoring: Regular audits and security checks ensure confidentiality
While no system is completely secure, we take reasonable steps to protect your data.
Data Retention
We retain information while you use our services and for the duration required by law, including HIPAA’s six-year retention rule for medical records. Once the retention period expires, data is securely disposed of according to industry best practices.
Your Rights and Choices
You have control over your personal information:
-
- Access & Correction: Request access to or correction of information
-
- Deletion: Request deletion of information, subject to legal requirements
-
- Marketing Opt-Out: Stop receiving marketing messages via email or SMS using provided links or by contacting us directly
-
- PHI Rights: Your health information rights are protected under HIPAA
To exercise these rights, contact us using the details below.
Third-Party Links and Services
Our website may contain links to third-party sites. We are not responsible for their content or privacy practices. Your interactions with such sites are subject to their policies.
HIPAA Compliance
Gracepoint implements:
-
- Administrative Safeguards: Policies and employee training for PHI protection
-
- Physical Safeguards: Secure facilities and restricted access to records
-
- Technical Safeguards: Encryption, firewalls, secure authentication
-
- Access Controls: Only authorized personnel access PHI
-
- Audit & Monitoring: Regular review of PHI usage
-
- Breach Response: Procedures to identify, respond to, and notify affected individuals
Non-Discrimination
We comply with all applicable privacy laws, including HIPAA, CCPA, and GDPR. Your privacy choices do not affect your access to our services.
Minors
Our services are for adults only. We do not knowingly collect information from minors under 16.
Policy Updates
We may update this Privacy Policy to reflect changes in practices or legal requirements. Updates will be posted on our website with the new effective date.
Contact Information
For questions or to exercise your privacy rights, contact us:
-
- Email: info@gracepointadultmedicaldaycare.com
-
- Phone: +1(443) 255-9973 +1(301)741-3814
- Phone: +1(443) 255-9973 +1(301)741-3814
-
- Address: 7201 Sollers point Rd Dundalk MD 21222