Your Villages Website Privacy Policy

Last Revised: April 30, 2026

Thanacare LLC (collectively with its subsidiaries, affiliates, and related entities, "Company," "Thanacare," "we," "us," and "our") respects your privacy and is committed to protecting it through our compliance with this Website Privacy Policy (the "Policy"). This Policy should be read in conjunction with our Website Terms of Use, into which this Policy is incorporated by reference.

This Policy describes:

  • The types of information we collect from you or that you may provide when you visit our website at www.yourvillages.com and any websites and blogs directly owned by the Company (collectively, our "Website").
  • Our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Policy applies to information we collect on this Website or in emails and other electronic messages between you and this Website, and information gathered when you interact with our advertising on third-party websites if such advertisements include links to this Policy.

This Policy does not apply to:

  • Information collected by us offline or through any other means.
  • Information collected on our instance-specific products, each of which is governed by its own separate privacy policy. These include, without limitation:
    • Firefly at firefly.yourvillages.org
    • Doula Villages at doula.yourvillages.org
    • Any other customer-specific Villages instance
  • Information collected by any third party through any application or content (including advertising) that may link to or be accessible from the Website (see "Third-party Websites" below).

Please read this Policy carefully to understand our practices regarding your information and how we will treat it. If you do not agree with our policies and practices, please do not use our Website. By using our Website, you agree to the terms of this Policy. This Policy may change from time to time (see "Changes to this Policy" below). Your continued use of our Website after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

What We Collect and How We Collect It

To ensure that we provide you with the best possible experience, we will store, use, and share information about you in accordance with this Policy.

Information You Provide to Us

Personal Information is any information that can be used to individually identify you, such as:

  • First and last name
  • Email address
  • Telephone number (if provided)
  • Mailing address (if provided)
  • Organization name and role (if provided in business-inquiry forms)
  • Comments or messages provided in free-text boxes on our forms

You may provide us Personal Information when you:

  • Submit a contact form, demo request, or business inquiry
  • Correspond with us by email or other means

The Website is a marketing and informational site for organizations interested in the Villages care coordination platform. The Website is not designed to collect health information, Medicare numbers, Social Security numbers, payment card information, or other sensitive personal data. Please do not provide this type of information through Website forms or free-text fields. If you are an end user of one of our instance-specific products (e.g., Firefly, Doula Villages), please refer to that product's separate privacy policy.

Important Information Relating to Health Information and HIPAA

This Website (www.yourvillages.com) is a corporate marketing site. It does not process Protected Health Information ("PHI") as defined under the Health Insurance Portability and Accountability Act ("HIPAA"), and information you provide directly to this Website is not subject to HIPAA.

Some of our instance-specific products do handle PHI. If you are using one of those products as part of a care relationship with a covered entity (such as a healthcare provider, hospital, or healthcare insurer), the handling of your PHI is governed by:

  1. The Notice of Privacy Practices of the applicable covered entity, and
  2. The Business Associate Agreement between the covered entity and Thanacare LLC.

The privacy policy for each instance-specific product describes how PHI and other personal information are handled within that product.

Automated Information Collection

In addition to the information that you provide to us, we may collect information automatically during your visit to our Website. We collect this information using automated tools that may collect information about your behavior and your device, such as your IP address, the pages you have viewed, browser type, operating system, and the actions you have taken while using the Website.

Cookies

A "cookie" is a small data file transmitted from a website to your device's storage. We use both:

  • Session cookies, which do not stay on your device after you close your browser, and
  • Persistent cookies, which remain on your device until you delete them or they expire.

We use the following categories of cookies:

  • Strictly Necessary Cookies. Essential for you to move around the Website and use its features. Without these, services you have requested cannot be provided. These do not require your consent.
  • Performance / Analytics Cookies. Collect information about how you use the Website to help us understand traffic patterns, browsing behavior, and areas to improve. We use these to improve the Website experience.
  • Functionality Cookies. Remember choices you make (such as preferred language) to provide a more personalized experience.
  • Targeting / Advertising Cookies. Where used, these collect information about your browsing habits to make advertising more relevant to you. These cookies are set only with your consent where required by applicable law.

Where required by law (including in California, Colorado, and other U.S. states with applicable privacy statutes), we honor opt-out preference signals such as the Global Privacy Control (GPC) and treat them as a request to opt out of the sale or sharing of personal information for cross-context behavioral advertising.

You may also turn off cookies at any time by modifying your internet browser's settings. Disabling cookies may affect Website functionality.

Google Analytics

We use Google Analytics to conduct technical and statistical analysis on Website performance. The Website sends information to Google Analytics for this purpose. For more information on how Google Analytics uses information from sites and apps that use its services, please review Google's privacy policy at https://policies.google.com/technologies/partner-sites.

Web Beacons and Email Tracking

A "web beacon" is an electronic image that allows us to understand certain user behavior. If you receive emails from us, we may use web beacons to track whether the email was opened and whether links in the email were clicked. This information is used to improve our communications. You can disable image loading in most email clients to prevent web beacons.

Embedded Web Links

Links provided in our emails may include tracking technology. The redirection system allows us to understand how email links are used and may identify that you personally clicked the link. This data is used to measure the performance of our communications.

Third-party Service Providers

We use service providers to host our Website, send our email communications, run our customer relationship management system, and provide marketing analytics. These providers may collect data necessary to perform their services. They are contractually bound to use that data only for the purposes for which we engage them.

Your Choices and Selecting Your Privacy Preferences

We want to provide you with relevant information that you have requested.

Email Communications

If you submit a contact form or other inquiry, we may respond by email to address your inquiry. We do not currently send marketing emails or newsletters from this Website. If we begin to do so in the future, we will obtain your consent before adding you to any marketing list and will provide an unsubscribe mechanism in every marketing email, in accordance with the U.S. CAN-SPAM Act of 2003.

Text Messaging

The Website does not currently send SMS or "text" messages. If we add SMS messaging in the future, we will obtain your express written consent before sending any marketing or informational text messages, in accordance with the Telephone Consumer Protection Act ("TCPA") and applicable state law.

How We Use Your Information

The information we gather and that you provide is collected to provide you with information and the services you request, and for the following purposes:

  • Responding to your inquiries and requests
  • Improving the Website and our products
  • Preventing malicious activity and providing a secure experience
  • Measuring the performance of our outreach
  • Complying with applicable law

How We Share Your Information

We do not sell or rent your Personal Information to any third party. We may disclose your Personal Information as follows:

  • Service Providers. We share Personal Information with trusted service providers (such as email service providers, hosting providers, customer relationship management providers, and analytics providers) that help us operate the Website and our communications. These service providers are contractually obligated to use Personal Information only for the purposes for which we engage them and to maintain appropriate safeguards.
  • Compliance with Laws and Protection of Rights. We will disclose Personal Information when we believe disclosure is reasonably necessary to (i) comply with any applicable law, regulation, subpoena, or court order; (ii) respond to lawful requests from law enforcement or other governmental authorities; (iii) enforce our agreements, policies, or Terms of Use; (iv) investigate or help prevent security threats, fraud, or other malicious activity; or (v) respond to an emergency that we believe in good faith requires disclosure to assist in preventing the death or serious bodily injury of any person.
  • Business Transfers. If Thanacare is involved in a merger, acquisition, financing, or sale of assets, Personal Information may be shared or transferred as part of that transaction. We will require any successor or acquirer to honor this Policy with respect to your Personal Information, or notify you and provide a meaningful choice if a successor's privacy practices differ materially.

Sub-processor Categories

The following categories of sub-processors process Personal Information on our behalf in connection with this Website:

  • Cloud hosting and infrastructure (for example, our website hosting provider)
  • Email delivery (for newsletter and transactional emails)
  • Customer relationship management (for managing inquiries and contacts)
  • Web analytics (for understanding Website performance)

A current list of named sub-processors is available on request by contacting us at the address below.

Third-party Websites

This Policy does not apply to websites or other domains maintained or operated by third parties. Our Website may link to third-party websites and services, but these links are not endorsements, and this Policy does not extend to them. Because this Policy is not enforced on third-party websites, we encourage you to read any posted privacy policy of the third-party website before using the service or providing any information.

State Privacy Rights

California — CCPA / CPRA

If you are a California consumer, you have certain rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA"), with respect to your Personal Information.

Categories of Personal Information we collect. Identifiers (name, email, phone, IP address); commercial information (inquiries you submit, services you express interest in); internet or other electronic network activity (cookies, browsing behavior on our Website); inferences drawn from the above (interest segments for marketing).

Sources. Directly from you when you submit a form or subscribe; automatically through cookies and analytics tools; from our service providers.

Purposes. As described in "How We Use Your Information."

Sensitive Personal Information. We do not knowingly collect Sensitive Personal Information through this Website.

Disclosure for business purposes. We disclose the categories listed above to the categories of service providers identified in "Sub-processor Categories."

No sale of Personal Information. We do not sell your Personal Information for monetary consideration. We do not "share" your Personal Information for cross-context behavioral advertising in the meaning of the CCPA, except as may occur via Targeting/Advertising Cookies if you have not opted out. Where we do "share" within that meaning, you may opt out via the controls described under "Cookies" above and by sending a Global Privacy Control signal.

You have the following rights, subject to verification of your identity:

  • Right to Know. Request access to the categories and specific pieces of Personal Information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
  • Right to Delete. Request deletion of Personal Information we have collected from you.
  • Right to Correct. Request correction of inaccurate Personal Information.
  • Right to Limit Use of Sensitive Personal Information (where applicable).
  • Right to Opt Out of Sale or Sharing.
  • Right to Non-Discrimination for exercising your rights.

To exercise any of these rights, contact us at support@yourvillages.com or write to the address listed at the end of this Policy. We will verify your identity before fulfilling your request and will respond within the timeframes required by law. You may designate an authorized agent to make a request on your behalf.

We do not knowingly use your Personal Information for the purposes of cross-context behavioral advertising or "automated decisionmaking" or "profiling" subject to the CCPA's automated-decisionmaking rules.

Other U.S. State Privacy Rights

Residents of certain U.S. states — including, as of the Last Revised date above, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — have additional rights under their state privacy laws, which may include rights of access, correction, deletion, portability, opt-out of sale, opt-out of targeted advertising, and opt-out of certain profiling. These rights are subject to applicable thresholds, exceptions, and verification requirements.

To exercise any state-law privacy right, contact us at support@yourvillages.com. We will verify your identity and respond within the period required by your state's law. You may also have the right to appeal a denial of your request; appeal instructions will be provided in any denial we issue.

Washington My Health My Data Act

If you are a Washington resident, the Washington My Health My Data Act ("MHMDA") provides additional rights with respect to "consumer health data." This corporate Website does not knowingly collect consumer health data from you. If you provide health-related information through one of our instance-specific products (such as Firefly or Doula Villages), the privacy policy for that product describes how that information is handled.

"Do Not Track" Signals

Some web browsers transmit "Do Not Track" signals. We currently do not respond to such signals, but we honor Global Privacy Control signals as described under "Cookies" above.

Information of Minors

The Website is intended for adults, and we do not knowingly collect Personal Information from children under the age of 16. We do not target the Website to minors. If we learn that we have collected Personal Information from a child under 16 without verified parental consent, we will take steps to delete it. If you are a parent or guardian and believe your child has provided us Personal Information, please contact us at support@yourvillages.com.

Data Retention

We retain Personal Information for as long as needed for the purposes described in this Policy, unless a longer retention period is required by law. Typical retention periods include:

  • Contact form submissions: up to two (2) years after the last interaction, unless you request earlier deletion.
  • Web analytics data: in accordance with the retention setting of our analytics provider (typically 14–26 months).

After the applicable retention period, Personal Information is deleted or de-identified.

Data Security and Breach Notification

We use reasonable technical, administrative, and physical safeguards designed to protect your Personal Information against accidental loss and unauthorized access, use, alteration, and disclosure. No system is completely secure, however, and we cannot guarantee the absolute security of your information.

If we experience a security incident affecting your Personal Information, we will notify you and applicable regulators in accordance with applicable law, including any required state and federal data-breach notification timelines.

For Website Visitors Outside of the United States

The Website is designed for use by individuals in the United States only. We do not warrant or represent that this Policy or the Website's use of your Personal Information complies with the laws of any other jurisdiction. If you access the Website from outside the United States, you do so at your own initiative and are responsible for compliance with local law.

Changes to this Policy

If we make any material changes to this Policy, a revised Policy will be posted on this page, and the date of the change will be reflected in the "Last Revised" block above. For material changes, we may also notify you by email if you are a subscriber. You can access this page from any of our webpages by clicking on the "Privacy Policy" link (typically in the footer).

How to Contact Us

We value your feedback and welcome your questions. To contact us about this Policy or your Personal Information, please contact us at:

Thanacare LLC
Email: support@yourvillages.com

For California consumers exercising rights under the CCPA: contact support@yourvillages.com with the subject line "California Privacy Rights Request."

For residents of other U.S. states exercising state privacy rights: contact support@yourvillages.com with the subject line "[State Name] Privacy Rights Request."