This policy explains what information Guiding Hand Senior Care Consulting ("Guiding Hand", "we", "us") collects, how we use and protect it, and what you can ask us to do with it. It covers this website (www.ghseniorcare.com), our application questionnaire (apply.ghseniorcare.com) and our consulting services.

1. Visiting our website

You can read this website without giving us any information. The website has no accounts, no forms, no cookies, no advertising and no analytics that follow you from page to page or site to site.

Our hosting and security provider, Cloudflare, processes technical information about each request, such as your IP address, browser type and the page you asked for, so it can deliver the page and block attacks. Cloudflare also gives us Cloudflare Web Analytics. It shows us totals, such as how often each page is viewed, which websites sent visitors to us, which countries, browsers and devices visitors use, and how fast our pages load. It uses no cookies, does not follow you to other websites and does not tell us who you are. We use Google Search Console, which shows us totals such as how often our pages appear in Google search and how often people click them. It does not tell us who you are.

2. When you call or email us

When you call or email us, we receive what you choose to tell us, usually your name, email address, phone number and a description of your project. We keep these details in our email and in HubSpot, the customer-relationship software we use to keep track of conversations. We do not add you to a marketing list.

Please do not send us Social Security numbers, financial account numbers or similar details by email, text or voicemail. If we need them, we ask for them through our secure questionnaire.

3. When you buy the Application Package

Stripe processes your payment. We never see or store your full card number. Stripe sends us your name, email address, the amount you paid and the number of licensed beds you chose. We use your email address to send you your questionnaire link, sign-in codes and updates about your order. These emails are delivered by our email provider, Resend.

4. Our questionnaire and your application documents

Our questionnaire collects the information a California RCFE license application needs. That includes personal and financial information such as Social Security numbers, dates of birth, driver's license numbers and financial account numbers, information about other people named in the application, such as owners, partners, the administrator and staff, and the documents you upload. Please share another person's information only with their permission.

We handle this information more strictly than anything else we hold:

  • We encrypt it, and your uploads, before they are stored on a server that we control. Access is limited to Guiding Hand.
  • We do not send it by email or messaging service, and we do not copy it into spreadsheets, customer-relationship software or workflow tools.
  • Our internal status notes contain only an application number, a business name, a stage and a due date.
  • You sign in with a six-digit code we email you each visit. Each session lasts a day. Every download is logged with its time and device.
  • We use it only to prepare your application documents and to support you while you complete and revise them.

5. Consulting clients

If you sign a consulting agreement with us, your information is handled as that agreement says, with the same safeguards as section 4.

6. Public licensing records

We read public facility records published by the California Department of Social Services to follow the RCFE market and, at times, to contact newly licensed facilities about our services. These records are public. If you would rather we did not contact you, tell us and we will not.

7. How we use information

We use information to answer your questions, provide the services you ask for, take payment, send you messages about your order or engagement, keep our systems secure and meet our legal obligations. We do not use it for advertising.

8. Who we share it with

We do not sell your personal information, and we do not share it for advertising. We do not give it to other businesses for their own marketing.

We share information only with the service providers that help us run the business, and only for that purpose: Stripe (payments), Resend (email delivery), Cloudflare (website hosting, security and visit statistics), Hetzner (the server that stores our encrypted application data), HubSpot (contact records), Slack and Google (email, our internal status notes and search reporting). We may also disclose information when the law requires it.

We do not submit your application to the California Department of Social Services. You do that yourself, with the documents we prepare.

9. How long we keep it

  • Application Package questionnaire answers, uploads and package files: deleted 30 days after your 90-day revision window closes, which is 120 days after first delivery. If your order closes earlier, they are deleted 30 days after it closes.
  • Consulting clients: as your agreement says.
  • Backups: we keep the 7 most recent nightly encrypted backups, and never keep a backup for more than 14 days.
  • A permanent record of each sale or engagement that contains none of the sensitive information above: your name, dates, the template version used and our review decisions.
  • Contact records and payment records: as long as we need them to serve you and to meet tax and accounting rules.

10. Your choices

You can ask us to tell you what information we hold about you, to correct it or to delete it. Email hello@ghseniorcare.com. We reply within 45 days. We may need to confirm your identity first. We keep records the law requires us to keep, and deleting your questionnaire information before your package is delivered ends our work on it.

11. Security

We use reasonable security procedures and practices, as California Civil Code section 1798.81.5 requires. If a breach involves your information, we will notify you as California Civil Code section 1798.82 requires.

12. Do Not Track and Global Privacy Control

We do not track visitors across websites, so we treat every visitor the same way whether or not your browser sends a Do Not Track or Global Privacy Control signal.

13. Children

Our services are for adults who own or plan to open a licensed care facility. We do not knowingly collect information from anyone under 18.

14. Changes to this policy

If we change this policy, we post the new version on this page with a new effective date. If a change affects an order or engagement in progress, we tell you by email.

15. Contact

Questions about this policy or your information: hello@ghseniorcare.com or (909) 576-0228.

Version 1.0, effective October 19, 2026.