Vanda Health

1. Scope

This Policy applies only to information collected through the Site. It does not cover any information we receive in the course of providing consulting or management services under a Business Associate Agreement (BAA) or other HIPAA-covered relationship.

2. Information We Collect

2.1 Information you provide directly

1. Contact form
2. “Join Our Team” career form
Please do not submit resident health records or other protected health information (“PHI”) through these forms.

2.2 Information collected automatically

When you visit the Site we automatically collect:

• Device & browsing data (IP address, browser type, referring pages, time spent, clicks, and similar)

• Cookies & similar tracking technologies set by us or by third-party tools (see § 6)

2.3 Information from third parties

If you interact with us on social media platforms (e.g., Facebook, LinkedIn, Instagram) we may receive limited profile information pursuant to each platform’s privacy settings.

3. How We Use Your Information

• Provide, maintain, and improve the Site

• Respond to questions or requests

• Evaluate job or contractor candidates

• Market our services, including through Google Ads remarketing where permitted (see § 7)

• Analyze Site performance and user engagement

• Detect, investigate, and help prevent security incidents or illegal activities

• Comply with legal obligations

4. Legal Bases for Processing (GDPR/UK GDPR)

If you are in the EEA/UK, we process your personal data on the following bases:

• Legitimate interests – running and protecting our business and Site
• Consent – for optional cookies and marketing communications
• Contract – answering pre-contract enquiries or processing employment applications
• Legal obligation – where laws require us to keep certain records

5. How We Share Information

We do not sell your personal information. We share it only:

• Service providers that help us operate the Site (e.g., website host, email service, analytics, advertising platforms)

• Business transfers if we undergo a merger, acquisition, or asset sale

• Legal & compliance – when required to comply with law, court order, or to protect rights, safety, or property

All service providers are contractually required to keep your data confidential and to use it only for the services they perform for us.

6. Cookies & Tracking Technologies

We use cookies, pixel tags, and similar technologies to:

• Remember user preferences

• Conduct analytics (e.g., Google Analytics 4)

• Measure and optimize advertising campaigns

You can manage cookies through your browser settings or by using the cookie banner (where available). Blocking cookies may affect Site functionality.

7. Google Services & Online Advertising

We use Google Ads and related tools for remarketing and lead-generation forms. Google may place cookies or use device identifiers to show you Vanda Health ads on other sites. You can opt out of Google’s personalized ads via adssettings.google.com or the Network Advertising Initiative opt-out page.

8. HIPAA & Sensitive Information

The Site is not intended to collect or transmit PHI. Communications sent through website forms are not encrypted for HIPAA purposes. If you are a resident, family member, or healthcare provider, please use the secure channels provided by your community or your Vanda Health contact.

9. Data Retention

• Inquiry data – 24 months after last interaction

• Career applications – 3 years or longer if legally required

• Cookie data – retained per cookie life-span (see cookie banner)

• Legal/contract data – as long as necessary to meet statutory obligations

10. Security

We follow industry-standard administrative, technical, and physical safeguards to protect information in our custody. Nevertheless, no website or email transmission is 100 % secure; please use discretion when sharing information online.

11. Your Privacy Rights

11.1 United States

• Email marketing – click “unsubscribe” in any marketing email or contact us.

• Do Not Track – we do not respond to browser DNT signals.

11.2 California (CCPA/CPRA)

California residents may request:

• Information about categories and specific pieces of personal information we have collected
• Deletion of personal information (subject to exceptions)
• Opt-out of “sharing” for cross-context behavioral advertising
• Submit requests via the contact methods in § 15. We will verify your identity before fulfilling a request.

11.3 EEA/UK

You may have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. You also have the right to lodge a complaint with your supervisory authority.

12. Children’s Privacy

The Site is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have done so, please contact us and we will delete the information.

13. External Links

The Site contains links to third-party websites and social media pages. We are not responsible for the content or privacy practices of those sites.

14. Changes to This Policy

We may update this Policy periodically. When we do, we will revise the “Last updated” date at the top and, if the changes are material, post a notice on the Site or notify you by other reasonable means.

15. Contact Us

Vanda Health Senior Living Management & Consulting
Phone: (503) 726-9834
Email: info@vandahealth.net

If you have any questions about this Privacy Policy or our privacy practices, please reach out using the contact details above.