Privacy policy

1. Who We Are and Scope 

Infinite Life Works provides home- and community-based care and related services. This policy applies to our public websites, web forms, recruiting pages, communications, and other online services that link to this policy. It does not replace a Notice of Privacy Practices, service agreement, consent form, or other notice that may apply to protected health information under HIPAA or Minnesota law. 

 

2. Information We Collect 

• Contact and identity data: name, address, email address, telephone number, preferred contact method, and information submitted through a form or inquiry. 

• Care and health-related information needed to evaluate, coordinate, schedule, document, or deliver services, including health conditions, functional needs, care preferences, emergency contacts, and service history. 

• Employment and caregiver information, including applications, credentials, background screening, availability, training, and communications. 

• Device and usage data, including IP address, browser, device identifiers, approximate location, pages viewed, referring pages, and website interaction data. 

• Communications and media, including messages, call or meeting records, support requests, and information voluntarily provided. Do not submit sensitive health information through a public web form unless it is clearly presented as a secure channel. 

 

3. How We Use Information 

• Provide, coordinate, schedule, administer, and improve care and services. 

• Respond to inquiries, referrals, applications, requests, and communications. 

• Operate, secure, troubleshoot, and improve our websites, systems, and services. 

• Authenticate users, prevent fraud, protect people and systems, and meet legal, regulatory, contractual, licensing, billing, audit, and compliance obligations. 

• Send service-related notices and, where permitted, marketing communications. You may opt out of non-service marketing messages. 

• Use deidentified or aggregated information for analytics, quality improvement, planning, and business operations. 

 

4. Cookies, Analytics, and Similar Technologies 

We may use essential cookies and similar technologies to operate the website, remember preferences, measure performance, and understand traffic. We may use analytics or search-optimization tools, such as Google Analytics or Search Console-related services, only as configured by Infinite Life Works. Where required, we will request consent before using non-essential cookies or targeted advertising technologies. You can manage cookies through your browser settings; disabling some cookies may affect functionality. 

 

5. How We Share Information 

We do not sell personal data for money. We may disclose information to service providers and processors that host, secure, support, analyze, communicate, or operate services for us; care professionals, authorized representatives, referral sources, payers, and others involved in requested services; affiliated entities or business partners for shared operations; government authorities, courts, regulators, auditors, or law enforcement when required or permitted; and transaction parties in a merger, financing, reorganization, acquisition, or sale. We do not use or disclose protected health information outside applicable HIPAA permissions, authorizations, or other legal bases, and we do not use sensitive health data for targeted advertising. 

 

6. Minnesota Privacy Rights 

Depending on whether the Minnesota Consumer Data Privacy Act (MCDPA) applies to Infinite Life Works, the data involved, and the request, a Minnesota resident may have the right to confirm whether we process personal data; access or obtain a copy; correct inaccuracies; delete personal data; obtain information about categories of data and third parties; opt out of sale, targeted advertising, or certain profiling; and appeal a denied request. Some rights are limited by law and may not apply to protected health information or other exempt data. 

To make a request, contact us using Section 11. We may verify your identity. We will respond within applicable deadlines, generally within 45 days under the MCDPA when it applies, with a possible extension when permitted. We will not discriminate against you for exercising a privacy right. If we deny a request, you may appeal through the same channel; we will explain the outcome and any further option available under applicable law. 

 

7. Health Information and Minnesota Protections 

Health information may be subject to HIPAA, the Minnesota Health Records Act, and other requirements. Minnesota law may protect health records more stringently than HIPAA in some circumstances. We limit access to workforce members and contractors who need it for their duties, use role-based permissions and safeguards, and disclose health information only for permitted purposes or with required authorization. For more information about HIPAA rights, refer to our applicable Notice of Privacy Practices. 

 

8. Data Security 

We use administrative, technical, and physical safeguards appropriate to the information, including access controls, authentication, monitoring, secure configuration, workforce training, vendor controls, and incident-response procedures. No transmission or storage method is completely secure. If a qualifying incident occurs, we will provide notices required by applicable federal and Minnesota law without unreasonable delay and consistent with legal and investigative requirements. 

 

9. Retention 

We retain information only as long as reasonably necessary for service delivery, legal and regulatory obligations, financial records, dispute resolution, security, and enforcement of agreements. Retention periods vary by record type. When information is no longer needed, we securely delete it, destroy it, or deidentify it when feasible and permitted. 

 

10. Children 

Our website is not directed to children under 13, and we do not knowingly collect personal data from children through the public website without appropriate authorization. Information collected in authorized care is handled under applicable health-care and privacy requirements. 

 

11. Contact Us and Privacy Requests 

For privacy questions, rights requests, corrections, appeals, or security concerns, contact Infinite Life Works at it@infinitelifeworks.com.  
For compliance-related questions or additional assistance, contact:  
compliance@infinitelifeworks.com .  
Do not include unnecessary health information or account credentials in an email. 

 

12. Changes to This Policy 

We may update this policy to reflect changes in services, technology, legal requirements, or privacy practices. We will post the updated policy and revise the Last updated date. Material changes will be communicated in a manner appropriate to the change and applicable law. 

 

Selected Minnesota References 

Minnesota Consumer Data Privacy Act, Minn. Stat. §§ 325M.10–325M.30; Minnesota Attorney General consumer privacy guidance; Minnesota Health Records Act, Minn. Stat. §§ 144.291–144.298; Minnesota breach-notification statute, Minn. Stat. § 325E.61.