Privacy Policy

Last updated: July 2026

This policy covers homecareroots.com — the public HomeCare Roots website. It explains how we handle information you give us here, and how that differs from the health information we handle once your child is in our care.

The short version

We collect two things: anonymous, cookieless statistics about how the site is used, and whatever you type into one of our forms. We use form submissions to contact you about your enquiry. We do not sell your information, we do not run advertising trackers, and we do not want your child’s medical records arriving through a web form.

What we collect

Site analytics

We run our own analytics. It is first-party and cookieless: no third-party analytics provider, no advertising network, no cross-site profile of you. When you load a page we record the page you viewed, the page title, the referring site, your screen size, any campaign parameters in the link you followed, roughly how long you stayed and how far you scrolled. A random session identifier is kept in your browser’s sessionStorage so that several pageviews can be grouped into one visit; it is discarded when you close the tab.

We also record which country and city our host reports for the request, and a one-way cryptographic hash of your IP address. We keep the hash rather than the address itself so we can spot abuse and spam without holding a record of who you are.

Form submissions

When you send us a message through Request Care, Refer a Patient, Contact or the careers application, we receive what you typed — typically your name, email address, phone number, county, the service you are asking about, and your message. We also record the page you sent it from and the time you sent it, so we can respond in context.

These forms include a hidden field that real people never see or fill in. It exists to catch automated spam, and nothing else.

What we do not do

• We do not sell, rent or trade your personal information. Not to anyone, at any price.
• We do not run advertising or retargeting pixels, and we do not build advertising profiles.
• We do not use third-party analytics platforms that track you across other websites.
• We do not share what you send us with anyone outside the vendors below, unless you ask us to or the law requires it.

HIPAA and protected health information

HomeCare Roots is a healthcare provider, and once your child is in our care we handle protected health information (PHI) under HIPAA, with the safeguards and your rights as a patient that HIPAA requires. Our Notice of Privacy Practices governs that relationship, and we provide it to you when care begins. Ask us for a copy at any time.

This website is a different thing. The forms on this site are not a channel for PHI. They are ordinary web forms, sent to our care team so they can call you back. Please do not use them to send medical records, test results, imaging, physician orders or detailed clinical history. Tell us enough to reach you, and we will take the clinical detail over the phone or another secure channel where it belongs.

If you send us clinical detail anyway, we do not discard it — we treat it with the same care as any other information you entrust to us. We would simply rather you did not have to.

Cookies and browser storage

This website sets no cookies for tracking, advertising or analytics. That is why you are not being asked to dismiss a consent banner. The only browser storage we use is sessionStorage, holding a random session identifier and the referring page for our own analytics. Both disappear when you close the tab. If you block storage entirely, the site still works.

Our administrative console, which is not part of the public site, uses a session cookie for staff sign-in.

Third parties we rely on

We keep this list short on purpose. Every name here is a company that processes some data on our behalf in order for the site to function.

• Netlify hosts this website and runs the code behind our forms. Like any web host, it processes the requests your browser makes, and it stores our form submissions on our behalf.
• Resend delivers the notification email that tells our care team a form has come in.
• Google Fonts serves the typefaces this site uses. Loading a font makes a request to Google’s servers from your browser.
• Google Maps supplies the embedded map on our Contact page. It loads only on that page.

Each of these companies has its own privacy practices, which govern what they do with the data they process. We do not send them anything beyond what their service requires.

How long we keep things

We keep form submissions for as long as we need them to respond to you and to keep an accurate record of our relationship with your family or your practice, and then no longer than we have a reason to. Analytics records are aggregated into counts and trends rather than kept as an indefinite log of individual visits. Where we are a healthcare provider, records related to care are retained for the periods that Georgia law and our HIPAA obligations require, which are longer than anything on this website. If you would like your enquiry deleted, ask us and we will do it.

Children’s privacy

Everything we do is about children, but this website is written for adults. It is intended for parents, guardians, clinicians and prospective employees, and we do not knowingly collect information directly from a child. When you tell us about your child, we treat that as your information to share, as their parent or guardian. If you believe a child has sent us something directly, contact us and we will remove it.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Ask by phone or email using the details below and we will answer you. Where you are our patient’s family, HIPAA gives you specific rights over the health record itself, and those are set out in our Notice of Privacy Practices rather than here.

Georgia does not currently have a general consumer privacy statute of the kind some other states have. Our answer does not depend on that. If you ask us to delete an enquiry, we delete it.

Security

This site is served over HTTPS. Form submissions travel encrypted, and access to them is restricted to the staff who need it. No system is perfect, which is the honest reason we ask you to keep clinical detail off this website in the first place.

Changes to this policy

If we change how we handle information, we will update this page and the date at the top of it. Material changes will be described here rather than quietly folded in.

Contact us about privacy

A person, not a form.

• (201) 696-8934 — available 24 hours a day, 7 days a week
• info@homecareroots.com
• +1 (404) 973-0737
• HomeCare Roots LLC, 191 Peachtree St NE, Suite 1401, Atlanta, GA 30303