Privacy Policy

Overview

Core Health Group, LLC ("Core Health Group," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website at thecorehealthco.com, contact us, or engage our home care services.

By using our website or submitting information through our forms, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or submit your information.

This policy applies to all individuals who interact with our website, including prospective clients, current clients, family members, caregivers, and job applicants.

Information We Collect

We collect several types of information depending on how you interact with us:

Personal Identification Information Name, address, phone number, email address, and other contact details you provide when completing forms on our website.

Health & Care Information When you submit a patient intake form or consultation request, we may collect information about care needs, medical conditions, insurance coverage (including Medicaid/GAPP status), and emergency contacts. This information is used solely to evaluate and provide care services.

Employment Information If you apply for a position with Core Health Group, we collect your name, contact information, work history, certifications, and other details relevant to employment.

Technical & Usage Information When you visit our website, we automatically collect certain technical data including your IP address, browser type, operating system, referring URLs, pages visited, and time spent on pages. This data is collected through cookies and similar technologies.

Communications If you contact us by phone, email, or through our website chat widget, we may retain records of those communications.

How We Use Your Information

We use the information we collect for the following purposes:

- Service Delivery — To evaluate care needs, coordinate services, match caregivers with clients, and manage ongoing care relationships. - Communications — To respond to inquiries, schedule consultations, send appointment confirmations, and follow up on care requests. - Operations — To process patient intake forms, caregiver applications, and payment arrangements. - Legal Compliance — To comply with applicable federal and Georgia state laws, including regulations from the Georgia Department of Community Health (DCH) and Medicaid requirements. - Website Improvement — To analyze how visitors use our website and improve our online services. - Marketing — With your consent, to send updates about our services. You may opt out at any time.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

HIPAA & Protected Health Information

Core Health Group is a licensed home care agency operating under the Georgia Department of Community Health. To the extent that we function as a covered entity or business associate under the Health Insurance Portability and Accountability Act (HIPAA), we maintain a separate Notice of Privacy Practices (NPP) that governs how we handle Protected Health Information (PHI).

Your PHI includes any individually identifiable health information related to your past, present, or future physical or mental health condition, the provision of health care, or payment for health care.

We use and disclose PHI only as permitted by HIPAA and our NPP, which includes treatment, payment, and health care operations. We do not share PHI for marketing purposes without your written authorization.

To request a copy of our Notice of Privacy Practices or to exercise your HIPAA rights (including the right to access, amend, or restrict your PHI), please contact us at Info@TheCoreHealthCo.com or call 678-536-6668.

How We Share Your Information

We may share your information in the following circumstances:

Service Providers We use third-party platforms to operate our business, including GoHighLevel (CRM and scheduling), Zapier (workflow automation), and Vercel (website hosting). These providers are contractually obligated to protect your information and may only use it to perform services on our behalf.

Care Coordination With your consent, we may share relevant information with physicians, hospitals, insurance providers, or other health care professionals involved in your care.

Legal Requirements We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect the rights, property, or safety of Core Health Group, our clients, or others.

Business Transfers In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any such change.

With Your Consent We may share your information for any other purpose with your explicit consent.

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic.

What Are Cookies? Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and to provide reporting information.

Types of Cookies We Use - Essential Cookies — Required for the website to function properly. These cannot be disabled. - Analytics Cookies — Help us understand how visitors interact with our website (e.g., pages visited, time spent). We use this data in aggregate form only. - Third-Party Cookies — Our chat widget (powered by LeadConnector/GoHighLevel) may set cookies to enable chat functionality.

Your Choices Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies; however, doing so may affect certain features of our website.

By continuing to use our website, you consent to our use of cookies as described above.

Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

- Secure HTTPS encryption on all website traffic - Access controls limiting who can view sensitive information - Use of reputable, security-certified third-party platforms - Regular review of data handling practices

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and we encourage you to use caution when sharing sensitive information online.

In the event of a data breach that affects your rights or freedoms, we will notify affected individuals as required by applicable law.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

For active clients, records are retained throughout the care relationship and for a minimum of seven (7) years following the end of services, in accordance with Georgia state law and Medicaid recordkeeping requirements.

For job applicants, information is retained for up to two (2) years following the conclusion of the hiring process.

For website inquiries and consultation requests that do not result in a service relationship, information is retained for up to two (2) years.

When information is no longer needed, we securely delete or anonymize it.

Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

- Right to Access — Request a copy of the personal information we hold about you. - Right to Correction — Request that we correct inaccurate or incomplete information. - Right to Deletion — Request that we delete your personal information, subject to certain legal exceptions. - Right to Restrict Processing — Request that we limit how we use your information. - Right to Opt Out — Opt out of receiving marketing communications from us at any time by contacting us or using the unsubscribe link in any email we send. - HIPAA Rights — If you are a client, you have additional rights under HIPAA regarding your Protected Health Information. Please see our Notice of Privacy Practices for details.

To exercise any of these rights, contact us at Info@TheCoreHealthCo.com or by mail at the address below. We will respond within 30 days.

Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without parental consent.

Core Health Group does provide care services to pediatric clients with disabilities. In those cases, personal and health information is collected from a parent or legal guardian, not directly from the child, and is handled in accordance with applicable law and our HIPAA obligations.

If you believe we have inadvertently collected information from a child under 13 without proper consent, please contact us immediately at Info@TheCoreHealthCo.com.

Third-Party Links

Our website may contain links to third-party websites, resources, or services that are not operated by Core Health Group. These links are provided for your convenience only.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites. We encourage you to review the privacy policy of every site you visit.

Our inclusion of a link does not imply endorsement of the linked site or any association with its operators.

Georgia State Law

Core Health Group is headquartered in Atlanta, Georgia and operates exclusively within the State of Georgia. This Privacy Policy is governed by and construed in accordance with the laws of the State of Georgia, without regard to its conflict of law provisions.

We comply with all applicable Georgia state laws regarding the collection, use, and protection of personal information, including the Georgia Personal Identity Protection Act (O.C.G.A. § 10-1-910 et seq.).

Any dispute arising under this Privacy Policy shall be resolved in the courts of Fulton County, Georgia.

Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify you by email or by posting a prominent notice on our website.

Your continued use of our website after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your information.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Core Health Group, LLC 6065 Roswell Rd., #405 Atlanta, GA 30328

Phone: 678-536-6668 Email: Info@TheCoreHealthCo.com Website: thecorehealthco.com

We take privacy concerns seriously and will respond to your inquiry within 5 business days.