GLENOAK LIVING
Privacy Policy
Move-in support and interface preferences
Interest in GlenOak's $500 move-in bonus is optional. A qualifying move may be eligible, but sending an inquiry does not guarantee a bonus. We record whether you ask us to check eligibility. Applicable terms, move confirmation, and payment records are held in a restricted staff ledger. Withdrawing sales contact does not erase an earned bonus. Do not submit bank details, medical records or full leases in the marketing form. When the offer is active, /move-in-support explains how to ask about eligibility. Local interface storage can remember one advisor-help prompt per session, dismissal for 14 days and accepted inquiry suppression for 90 days; these preferences contain no personal or advertising identifier. If reliable preference storage is unavailable, automatic prompts are disabled.
Optional Microsoft ad attribution
Where available in Privacy choices, Microsoft ad attribution is a separate optional permission, off by default. Google or Analytics permission does not authorize it. After you allow it, we retain a Microsoft ad click identifier for the current browser session for up to 24 hours. If you submit an inquiry, we send Microsoft Advertising only that identifier and the original inquiry receipt time to measure ad performance. Contact details, care answers and monetary values are excluded. The identifier is removed from active application storage within seven days after successful API submission, and no later than 90 days from the inquiry. Minimal delivery records remain to prevent duplicate reports. Turning the choice off clears future browser capture; it does not recall a report authorized at submission. You may contact us about deletion or cancellation of an unsent report. Provider and backup retention can differ. This measurement does not identify every inquiry or establish lead qualification.
Text and WhatsApp conversations
When you contact GlenOak by text message or WhatsApp, a virtual assistant may process the conversation to collect your name, location, senior-living preferences, timeframe, budget range, and optional email before a GlenOak advisor takes over. Vercel AI Gateway and OpenAI may process the message to provide this feature. We retain the conversation in our private workspace and may copy it to the related Zoho CRM lead. Do not send medical records, diagnoses, government identification numbers, insurance identifiers, bank details, or payment-card information. You can ask for a person or send STOP to pause automated messages.
Who we are and what this notice covers
GlenOak Living is an independent senior-living directory and marketing intake service provided by GlenOak Advisors. Our consumer contact brand is GlenOak Senior Advisors. This policy applies to glenoakliving.com, its inquiry forms, text and WhatsApp conversations, partner applications, listing claims, and private workspaces. Local advisor businesses provide their own placement services and have separate privacy practices. Contact us at lucas@glenoakadvisors.com or 4938 Hampden Ln., #552, Bethesda, MD 20814. Our directory includes communities across U.S. metro areas; that mailing address is our business contact address, not the address of a listed community.
Information you provide
GlenOak Living does not collect healthcare data. When you request pricing, availability, care information, a tour, or messaging assistance, we collect the name, email, phone number, location or community of interest, care needs, budget range, move timeframe, preferences, and conversation content you provide. Community staff may also send an authorized overflow referral; we keep the referrer and referring community separate from the referred person’s contact details. Tour preferences may include a date, time of day, and in-person or video format. We record applicable consent events and message delivery status. When you request help, we use your name, email, phone number and request details to respond by call, text or email. We may send your request and contact details to one local advisor to help with your search. That advisor may call or email about your request. GlenOak’s text-message permission does not authorize another business to text you. GlenOak Senior Advisors and its service providers handle request-related texts. Text frequency varies. Carrier message/data charges may apply. Reply STOP to stop texts or HELP for help. SMS opt-in records are not sold or transferred for another business’s messaging. Contact lucas@glenoakadvisors.com to ask that contact or introductions stop. A phone field does not establish that a number can receive texts. Submitting does not enroll you in an automated follow-up sequence or unrelated promotions. Provide another person’s information only when you have authority to do so. Please do not send medical records, diagnoses, government identification numbers, insurance identifiers, bank details, or payment-card information through forms or messaging.
Partner applications and listing claims
Applications collect your company, name, work email, phone number, service area, and optional business website. Listing claims collect the community, company or operator, name, work email, phone number, and role. We retain submission and review records, verification notes, and the decision. A partner application can create or link a pending contact in Zoho CRM; it does not itself create approved partner access. A listing claim is linked to the facility in CRM only after approval and an appropriate account match. We may check public business and licensing records and contact a business using independently obtained details to verify authority. Do not send identity documents through these forms.
Information collected through use of the site
Our hosting, security, map, and email providers process technical information such as IP address, browser and device information, requested pages, timestamps, delivery results, and approximate location derived from IP address. We use country information to restrict online submissions to the United States. Public pages remain available internationally. Essential session cookies support sign-in; browser storage can remember interface choices, your analytics preference, and verified Google Place identifiers to reduce repeat lookups. These place identifiers refer to public communities, not visitors. We do not save Google photos, ratings, or review text in browser storage. Security controls use short-lived hashed request identifiers for rate limiting. We do not request your device’s precise geolocation through the website.
Search advertising and inquiry attribution
When you arrive through a recognized GlenOak search campaign, we remember the advertising platform, campaign name, and available numeric campaign, ad-group, and ad identifiers in first-party session storage. This record expires after 24 hours or when the browser session ends. If you submit an inquiry during that session, those identifiers can be saved with the inquiry in our private database and Zoho CRM so we can evaluate the source and quality of requests. This operational attribution works independently of Google Analytics. We do not retain search terms, full referring URLs, or browsing histories in this operational attribution record. Separately, if you select Allow ad attribution in Privacy choices, we save the Google ad click identifier with the permission version and time in first-party session storage for up to 24 hours or until the browser session ends. If you submit an inquiry while that permission is active, we save the identifier with the private inquiry and pass it to Zoho CRM. The Zoho Google Ads integration can report that identifier and the inquiry creation event to Google Ads for advertising measurement. We do not include your name, contact details, care answers, budget, or free text in that advertising report. This optional permission is separate from Allow analytics and from permission for an advisor to contact you. Decline ad attribution stops future capture and clears the optional browser record; it does not automatically erase earlier submitted records. Advertising attribution is off until you allow it, and ChatGPT measurement uses minimal server events after eligible inquiries are accepted; no OpenAI advertising SDK runs on this page, inquiry forms or private workspaces. Attribution is browser-reported and may be incomplete or inaccurate.
Google Analytics and your choices
Google Analytics (G-SH00DL5SYK) measures visits to our published public pages, visible-page engagement and generic completed inquiries. Analytics is on by default for U.S. visits when no prior opt-out applies. Outside the U.S., or when the country is unknown, it requires your permission. You can turn it off using Privacy choices near the footer. Global Privacy Control and an enabled browser exclusion also turn it off. Private workspaces, sign-in, API routes, local QA and previews are excluded. We provide public paths without query strings or fragments, a fixed safe page title and coarse source categories. We do not send your name, email address, phone number, form answers, care selections, budget, search entries, advertising click identifiers or inquiry identifiers to Analytics. Google processes browser, device, cookie and network information for measurement. Google Signals, advertising storage, personalized advertising and remarketing are disabled. Turning Analytics off stops future collection; it does not erase information already processed by Google. Clearing browser storage resets your saved choices and exclusion. You can exclude this browser in Privacy choices; apply that preference separately on other browsers or devices. Google's data-use information is available at https://policies.google.com/technologies/partner-sites.
Optional inquiry-source measurement
When you allow analytics, we may also remember a coarse source category, such as organic search, paid search, referral or direct/unknown, and an allowlisted public landing-page path in session storage for up to 24 hours. We do not store a full referrer, search query or browsing history in this record. If you submit an inquiry while measurement is allowed, that small source record can be saved with the inquiry for GlenOak administrators to report aggregate counts and actual inquiry statuses. It is excluded from placement-partner views and provider notification payloads. Declining or withdrawing clears optional session measurement and stops future collection; it does not change the essential inquiry or automatically erase source information already saved with a prior inquiry. The separate operational advertising attribution described above remains independent of this optional choice. Contact clicks are classified as community or GlenOak intent, not completed calls or delivered messages. After a server-confirmed saved inquiry, the public-page Analytics tag may receive a generate_lead event containing only the website-form method, GlenOak recipient and allowlisted public page path. It receives no request ID, answers, contact details or advertising click IDs. A generic Analytics event does not establish paid-click attribution. ChatGPT ad measurement uses minimal server events only after newly accepted inquiries are committed; no contact identifiers or browser matching identifiers are uploaded.
ChatGPT ad measurement
For eligible canonical, published public pages in the United States, minimal ChatGPT ad measurement is on by default unless you turn it off in Privacy choices. A prior Google Analytics denial keeps default ChatGPT measurement off until you choose to turn it on separately. Global Privacy Control, the owner’s browser exclusion, the application switch, unavailable or invalid saved-choice storage, non-U.S. or unknown location, and private, unpublished, preview or QA pages prevent admission. After a new inquiry is durably saved, GlenOak may send OpenAI one server event with lead_created, an opaque event identifier derived from the saved receipt using a secret, the original acceptance time, and the canonical public community page address (or the home page for general guidance). It excludes names, contact details and hashes, inquiry contents, care preferences, budget, free text, IP address, user agent, browser or ad-click identifiers, cookies and URL query strings. This reduced payload limits conversion matching; equivalent campaign attribution is not guaranteed. Replayed requests, failed submissions and clicks do not create another event. A random first-party measurement capability and policy generation are stored only on this site to associate pending events with privacy withdrawal; they are never sent to OpenAI or the CRM. Turning measurement off sends a same-origin withdrawal that cancels eligible pending events under the same dispatch lock when the server receives it. An offline or failed withdrawal cannot cancel work already issued; unsent events expire after 30 seconds. Events already issued remain recorded and withdrawal cannot recall information already received by OpenAI. Network failures after issuance remain uncertain and are not automatically retried. The server API replaces application-page Pixel execution and automatic contact matching.
How we use information
We use information to respond to requests, operate an automated conversational intake with staff oversight, coordinate introductions, qualify budget and timing preferences, arrange follow-up, review partner applications and listing claims, operate accounts, maintain listing accuracy, document consent and referral activity, troubleshoot delivery, prevent abuse, and meet applicable legal obligations. We may use non-identifying usage information to improve public pages. We do not make housing admission, care eligibility, or medical decisions through automated website scoring. Communities make their own admission and care assessments.
Sharing with placement companies and communities
Your form permission authorizes GlenOak Senior Advisors to share your request with one approved local advisor business so an advisor can contact you by phone or email about it. We share the request details needed for that assistance, including your name, permitted contact details, selected community or area, care preferences, budget and timing. We bind permission to your request and actual selected partner; a different business recipient requires new permission. GlenOak request-text permission is separate from the advisor’s call/email permission. WhatsApp requires its separate channel permission. Being open to other communities does not authorize unrelated marketing or additional recipients. We retain the exact submission notice, version, submission action and acceptance time. Older requests retain their original permission: if we promised to identify the company and ask separately, we keep that promise. You may withdraw sharing permission or request that contact stop by written or electronic notice to lucas@glenoakadvisors.com. We stop pending actions where possible; information already delivered or an uncertain transmission cannot be recalled. Infrastructure providers process information for GlenOak as described below rather than acting as independently assigned advisors.
Referral compensation and choices
Families are not charged to browse the directory or submit an inquiry. After a successful placement, the community pays placement compensation to GlenOak and the local placement partner under their arrangement. GlenOak funds the family’s $500 bonus from its share. This business relationship is separate from optional Analytics. The local partner handles its placement disclosures and services. Privacy laws may characterize particular transfers differently based on the actual facts and applicable law. Contact us if you want to stop additional sharing or contact. We do not sell audience lists or build remarketing audiences from care inquiries. Our minimal ChatGPT ad events exclude contact details, hashed contact identifiers and inquiry contents. A request to stop future sharing cannot retract information already received by a provider.
Service providers and storage
Vercel hosts the website, runs the intake application, and provides private object storage and security infrastructure. Neon provides the private database for inquiries, conversations, access, applications, review decisions, and delivery queues. Zoho CRM holds facility records and copies of relevant inquiries, conversation summaries, and business contacts. Zoom Phone and WhatsApp Business carry text and WhatsApp messages. An AI model provider assists with extracting intake answers under application controls; the application selects the recipient-facing intake questions. ZeptoMail sends sign-in links and operational notifications. Administrative and lead notifications generally link to the private workspace rather than including family contact and budget details. Google Maps Platform supplies maps, place matching, photos, ratings, and available reviews or summaries. We use providers to operate these features and limit information supplied to what the feature needs. Provider processing and backups may occur in the United States or other locations where those providers operate.
Maps, images, reviews, and links
Loading maps or third-party images lets their providers receive the technical information needed to serve that content, including IP address and referrer. Google Maps may have its own cookies and processing under Google’s policies. Inquiry form contents are not sent to Maps. We centrally store selected community information, Google ratings, review samples, photos and their source attributions. Saved photos are served through GlenOak-controlled storage. Visiting a listing does not trigger a new Google Places search, details request or photo acquisition. Displayed reviews are a saved sample returned by the provider and may not include every review or reflect later changes. These review texts and photo URLs are not saved into Zoho. Community descriptions can be prepared with AI assistance from available listing information. Review summaries, when shown, may be generated or supplied using available review content; they are not medical assessments. External links take you to services with separate terms and privacy policies. Google’s privacy policy is available at https://policies.google.com/privacy and its Maps terms at https://www.google.com/intl/en_us/help/terms_maps/.
Accounts, security, and operational records
Approved partner contacts sign in using short-lived, single-use email links. Account sessions use secure cookies on the production site. Server-side access checks separate company inquiries; administrator access is restricted to GlenOak’s designated administrator. We keep audit records of assignments, notes, application decisions, and delivery attempts. We use encryption in transit, restricted storage, validation, origin checks, rate limits, and hosting protections. No system is completely secure. Protect your email account, do not share sign-in links, sign out on shared devices, and report suspected misuse promptly to lucas@glenoakadvisors.com.
Retention
We retain inquiry, application, verification, account, and referral records while reasonably needed to respond, provide service, manage a relationship, establish referral attribution, resolve disputes, prevent fraud, and comply with applicable requirements. We periodically review records and remove or de-identify information no longer needed. Retention depends on record type and circumstances; we do not promise a single automatic deletion deadline for all records. Short-lived security counters expire separately from business records. Deletion from active systems may take additional time to reach backups and provider systems, and required legal or dispute records may be retained with restricted use.
Access, correction, deletion, and communications
Email lucas@glenoakadvisors.com to request access, correction, deletion, withdrawal of referral consent, or cessation of contact. Describe the request without sending sensitive identity documents. We may ask for proportionate verification to protect your information. Depending on applicable law, you may also have rights to a portable copy, to restrict or object to processing, to opt out of certain transfers or profiling, to use an authorized agent, or to appeal a decision. We will assess requests under the laws that apply and explain an applicable exception or appeal route. We will not discriminate against you for exercising applicable privacy rights. You may also complain to a relevant regulator. Operational sign-in and security messages may be necessary when you request or use an account.
Children, international access, and changes
The service is intended for adults aged 18 or older and is not directed to children. If you believe a child provided personal information, contact us so we can investigate and take appropriate action. International access to public pages does not expand our service area; U.S. submission restrictions use IP-based location and can be imperfect. We may update this policy as the service changes. The effective date will appear above, and we will provide additional notice or seek consent where required for a material change. Public review forms or demonstration pages explicitly labeled as previews do not submit their entries; their on-screen notice controls that demonstration’s behavior.