WAVENY LIFECARE NETWORK
Privacy Policy
Effective Date: March 12, 2026
1. Introduction
Waveny LifeCare Network (“Waveny,” “we,” “us,” or “our”) is a nonprofit senior care organization headquartered at 3 Farm Road, New Canaan, Connecticut 06840. We are committed to protecting the privacy of all individuals who interact with our organization — including current and prospective residents, patients, family members, donors, volunteers, job applicants, and website visitors.
This Privacy Policy describes how we collect, use, disclose, and safeguard personal information through our website at www.waveny.org, our online contact and inquiry forms, our newsletter and event communications, and our digital services.
Waveny is subject to the Health Insurance Portability and Accountability Act (HIPAA), the Connecticut Data Privacy Act (CTDPA), and other applicable federal and state privacy laws. This Policy supplements — but does not replace — the Notice of Privacy Practices we provide to patients and residents as required by HIPAA. In the event of a conflict between this Policy and our HIPAA Notice of Privacy Practices with respect to protected health information, the HIPAA Notice governs.
2. Information We Collect
2a. Information You Provide Directly
We may collect the following categories of personal information when you contact us, complete forms on our website, or engage with our services:
- Contact information: name, mailing address, email address, telephone number
- Demographic information: date of birth, age, gender
- Health and care information: medical history, care needs, and insurance information (governed by HIPAA for patients and residents)
- Financial information: billing, payment, and donation history
- Employment information: resumes, applications, and professional credentials (for career applicants)
- Communications and feedback: inquiries, messages, testimonials, and comments submitted to us
- Newsletter and event preferences
2b. Information Collected Automatically
When you visit www.waveny.org, certain information is collected automatically through cookies and similar technologies, including:
- Device and browser information (IP address, browser type, operating system)
- Usage data (pages visited, time on site, links clicked, referring website URLs)
- Cookie identifiers and tracking data (see Section 6 — Cookies)
2c. Information from Third Parties
We may receive personal information from referring agencies, treating physicians, insurance companies, or other partners who provide services in connection with your care or our operations, consistent with applicable law.
3. How We Use Your Information
We use personal information to:
- Provide and coordinate healthcare, residential, therapeutic, and home care services
- Communicate with residents, patients, and family members regarding care and services
- Process inquiries, tour requests, and admissions
- Process donations and manage donor relationships
- Send newsletters, event invitations, and organizational updates (where you have opted in)
- Respond to employment applications and conduct hiring processes
- Operate, maintain, and improve our website and digital services
- Comply with legal, regulatory, and accreditation obligations
- Protect the safety, security, and legal rights of individuals and our organization
- Investigate and respond to data security incidents
4. How We Share Your Information
Waveny does not sell your personal information. We may share information in the following circumstances:
4a. Service Providers
We share information with vendors and service providers who perform functions on our behalf, such as website hosting, payment processing, email delivery, analytics, and IT security. These parties are contractually bound to use your information only as directed and to protect it appropriately.
4b. Healthcare Partners
As a licensed healthcare provider, we may share protected health information with treating physicians, hospitals, insurers, government health programs, and other covered entities as permitted or required by HIPAA.
4c. Legal and Regulatory Requirements
We may disclose personal information when required by law, court order, or government regulation, or to protect the rights, property, or safety of Waveny, our residents, patients, or the public.
4d. Organizational Transactions
In the event of a merger, restructuring, or transfer of organizational assets, personal information may be transferred as part of that transaction in accordance with applicable law and with appropriate protections.
4e. With Your Consent
We may share your information for other purposes with your explicit prior consent.
5. Health Information and HIPAA
For individuals who receive healthcare services from Waveny, the privacy of protected health information (PHI) is separately governed by our HIPAA Notice of Privacy Practices, which is provided to you at admission and is available upon request. Waveny maintains administrative, technical, and physical safeguards designed to protect PHI in compliance with HIPAA’s Privacy and Security Rules.
6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to support functionality, analyze usage, and assist with marketing. Categories include:
- Essential cookies: Required for the website to operate (e.g., form sessions, navigation)
- Analytics cookies: Help us understand how visitors use the site (e.g., Google Analytics)
- Marketing cookies: Track visitor activity to support advertising and outreach
You may manage cookie preferences through your browser settings. Disabling certain cookies may affect site functionality. We currently do not respond to “Do Not Track” browser signals. We note that the Meta Pixel (Facebook) is used on our site for marketing analytics, and its use is subject to Meta’s data practices.
7. Your Rights Under Connecticut Law (CTDPA)
If you are a Connecticut resident, you have the following rights under the Connecticut Data Privacy Act, subject to applicable exceptions:
- Right to Know: Request confirmation of whether we process your personal data and access to that data
- Right to Correct: Request correction of inaccurate personal data
- Right to Delete: Request deletion of personal data we have collected about you
- Right to Data Portability: Request a portable copy of your personal data
- Right to Opt Out: Opt out of the processing of personal data for targeted advertising, sale, or profiling in furtherance of decisions that produce legal or similarly significant effects
To exercise these rights, please contact us using the information in Section 12. We will respond to verified requests within 45 days, with an additional 45 days available where reasonably necessary. We will not discriminate against you for exercising your privacy rights.
If we deny your request, you may appeal the decision in writing to our contact address below. If your appeal is also denied, you may file a complaint with the Connecticut Attorney General at portal.ct.gov/AG.
8. Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations (including Connecticut health record retention requirements), resolve disputes, and enforce agreements. When information is no longer required, we securely delete or anonymize it.
9. Data Security
Waveny implements reasonable and appropriate administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include access controls, encryption of data in transit, regular security assessments, and staff training.
No method of internet transmission or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. In the event of a data security incident affecting your personal information, we will notify you as required by Connecticut law and applicable federal regulations.
If you have received a notice about a specific data security event at Waveny, please refer to the notice posted on our website or contact us directly for more information.
10. Children’s Privacy
Our website is not directed to children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will take prompt steps to delete such information.
11. Third-Party Websites
Our website may contain links to third-party sites, including social media platforms and partner organizations. This Privacy Policy does not govern those websites. We encourage you to review the privacy policies of any external sites you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the revised policy on our website with an updated effective date. Your continued use of the Site following any changes constitutes your acceptance of the updated policy.
13. Contact Us
For questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact us:
Waveny LifeCare Network
3 Farm Road, New Canaan, CT 06840
Phone: (203) 594-5200
Email: info@waveny.org
Website: www.waveny.org
For HIPAA-related privacy requests, please direct your inquiry to our Privacy Officer at the address above.