MyCG Home Care logo
Home
Family ExperienceMyCG Ecosystem
HomeResources

Privacy & Information Handling

Your Privacy. Our Promise.

At MyCG Home Care, we understand that protecting your privacy is fundamental to earning and maintaining your trust. Home care is one of the most personal services a family can receive, and because of that, we believe privacy isn't simply a legal requirement. It's part of how we deliver compassionate, high-quality care.

Whether you're exploring care for yourself or a loved one, submitting a care request, applying to join our team as a caregiver, or simply browsing our website, we're committed to handling your personal information with professionalism, confidentiality, integrity, and respect.

This is our promise to you: we will collect only what's necessary to provide our services and operate responsibly, we will be transparent about what information we collect and why, we will protect it with appropriate safeguards, and we will never use it in ways inconsistent with this Privacy Policy or applicable law. As our organization grows, we'll continue strengthening our privacy, cybersecurity, and information governance practices, because protecting information is an extension of caring for people.

Below, you'll find the full details of how we collect, use, protect, and manage information across our website and digital services, organized into 25 sections, from the information we collect and how we secure it, to your privacy rights, HIPAA and healthcare privacy, cookies, AI use, and how to reach us with questions. Each section can be expanded individually, so you can jump straight to what matters most to you.

1

Introduction

Welcome to the MyCG Home Care website ("Website"). At MyCG Home Care ("MyCG," "we," "our," or "us"), we understand that protecting your privacy is fundamental to earning and maintaining your trust. Whether you are exploring home care services for yourself or a loved one, submitting a care request, applying to become a caregiver, contacting our team, or simply browsing our Website, we are committed to protecting your personal information with the highest standards of professionalism, confidentiality, integrity, and respect. Home care is one of the most personal services an individual or family can receive. Because of this, we believe privacy is not simply a legal requirement, it is an essential part of delivering compassionate, high-quality care. Every interaction with MyCG is built upon the principles of dignity, transparency, accountability, and responsible stewardship of information. This Privacy Policy explains how MyCG collects, uses, stores, protects, and, where appropriate, shares information collected through our Website and related digital services. It also explains your privacy rights, the choices available to you regarding your personal information, and the safeguards we use to protect the confidentiality and security of the information entrusted to us. Our Website serves as the public gateway to MyCG Home Care. Information submitted through the Website is securely processed through MyCG's operational systems in accordance with this Privacy Policy, applicable federal and state laws, and industry best practices. As our organization continues to grow, this Privacy Policy is intended to support our expanding digital ecosystem, including future secure client portals, family services, caregiver services, administrative platforms, and other MyCG digital applications. We are committed to collecting only the information reasonably necessary to: • Respond to inquiries and requests for home care services. • Evaluate caregiver and employment applications. • Coordinate communications with clients, families, caregivers, healthcare professionals, and referral partners. • Deliver safe, reliable, and high-quality home care services. • Improve our Website and digital services. • Meet applicable legal, regulatory, licensing, and compliance requirements. • Protect the security, integrity, and reliability of our systems and the people we serve. We have intentionally written this Privacy Policy using clear, understandable language. While privacy laws can be complex, we believe every individual has the right to understand how their information is handled without unnecessary legal jargon. As technology, healthcare regulations, cybersecurity risks, and digital services continue to evolve, MyCG will periodically review and update this Privacy Policy to ensure it continues to reflect current legal requirements, industry standards, and our commitment to responsible information governance. By accessing or using the MyCG Home Care Website, you acknowledge that you have read this Privacy Policy and understand the practices described within it.
The MyCG Privacy Commitment
At MyCG Home Care, privacy is more than a compliance obligation, it is a promise to every client, family, caregiver, employee, referral partner, and visitor who places their trust in us. • Protect your personal information with appropriate administrative, technical, and physical safeguards. • Collect only the information necessary to provide our services and operate our organization responsibly. • Be transparent about what information we collect, why we collect it, and how it is used. • Respect your privacy rights and provide meaningful choices whenever possible. • Never use your information in ways that are inconsistent with this Privacy Policy or applicable law. • Continuously strengthen our privacy, cybersecurity, and information governance practices as our organization grows. We believe that protecting information is an extension of caring for people. Every decision we make regarding personal information is guided by the same values that shape the care we provide every day: compassion, professionalism, accountability, integrity, and respect.

2

Scope of This Privacy Policy

This Privacy Policy describes how MyCG Home Care collects, uses, protects, stores, shares, and manages personal information obtained through the MyCG Home Care website and related digital services. This Privacy Policy applies to all visitors who interact with our website, whether they browse informational pages, submit inquiries, request home care services, apply for employment, communicate with us electronically, subscribe to updates, or otherwise provide information through our online services. This Privacy Policy also applies to information collected through forms, contact requests, caregiver applications, referral submissions, chat tools (where available), newsletters, online scheduling, and other digital features that reference or link to this Privacy Policy. As MyCG expands its digital ecosystem, this Privacy Policy will also apply to future online services operated under the MyCG brand unless a separate privacy notice specifically applies. Who This Policy Applies To • Prospective clients and current clients using our website. • Family members and authorized representatives. • Individuals requesting home care consultations. • Caregiver and employment applicants. • Referral partners and healthcare professionals. • Website visitors and individuals contacting MyCG electronically. • Users of future MyCG digital services that reference this Privacy Policy. What This Policy Covers • Personal information collected directly from you. • Information collected automatically through website technologies. • How information is used, disclosed, retained, and protected. • Your privacy rights and available choices. • Security measures used to safeguard information. • Future digital services operating under the MyCG Home Care brand. What This Policy Does Not Cover This Privacy Policy does not replace any separate Notice of Privacy Practices provided under HIPAA, employment privacy notices, contracts, or other policies that may apply to specific MyCG services. Where another legally required notice governs a particular service or category of information, that notice will supplement this Privacy Policy. Our Commitment Whenever multiple privacy requirements apply, MyCG will apply the most appropriate legal and operational safeguards required for the information involved. We are committed to maintaining consistent privacy standards across our website, operational systems, and future digital platforms.

3

Information We Collect

MyCG Home Care collects information that is necessary to respond to your requests, provide services, evaluate employment applications, communicate effectively, operate our website, improve user experience, comply with legal obligations, and protect the security of our systems. The information we collect depends on how you interact with our Website. Some information is provided directly by you, while other information may be collected automatically through standard website technologies. A. Information You Provide Directly • Full name • Email address • Telephone number • Mailing address • ZIP code and service location • Information submitted through Request Care forms • Information submitted through caregiver employment applications • Information provided through contact forms, referral forms, surveys, or newsletter subscriptions • Information you choose to include in messages, attachments, or supporting documents B. Care Request Information • Information about the person needing care • Requested services and scheduling preferences • General care needs and living situation • Emergency contact information where voluntarily provided C. Caregiver & Employment Information • Employment history • Professional qualifications and certifications • Availability and scheduling preferences • Resume or supporting employment documents • Other information voluntarily provided during recruitment D. Information Collected Automatically • IP address • Browser type and version • Device type and operating system • Pages visited and navigation patterns • Date, time, and duration of visits • Referral website or search engine • Cookies and similar technologies E. Cookies and Analytics • Remember user preferences • Measure website performance • Understand visitor behavior in aggregate • Improve usability and accessibility • Support security monitoring F. Information We Do Not Intentionally Collect • We do not intentionally collect personal information from children where prohibited by law. • We ask visitors not to submit unnecessary sensitive medical or financial information through general website forms unless specifically requested as part of a secure care intake process. Our Data Minimization Principle MyCG believes in collecting the minimum amount of personal information reasonably necessary to fulfill the purpose for which it was provided. We do not collect information simply because it is available. Every category of information collected must support a legitimate operational, clinical, employment, security, legal, or customer service purpose.

4

How We Use Your Information

MyCG Home Care uses the information we collect only for legitimate business, operational, customer service, employment, security, and legal purposes. We do not collect personal information for purposes that are incompatible with those described in this Privacy Policy. The information you provide helps us deliver safe, responsive, and professional home care services while improving your experience with MyCG. A. Providing Home Care Services • Respond to requests for care and consultations. • Evaluate service needs and availability. • Coordinate communications with clients, families, and authorized representatives. • Prepare for care assessments and onboarding. B. Recruiting and Hiring Caregivers • Review caregiver and employment applications. • Communicate throughout the recruitment process. • Evaluate qualifications and scheduling availability. • Complete lawful pre-employment processes where applicable. C. Customer Service and Communications • Respond to inquiries and feedback. • Send appointment confirmations and service updates. • Provide requested information about MyCG services. • Respond to technical or website support requests. D. Operating and Improving Our Website • Maintain website performance and security. • Analyze website traffic and usage trends. • Improve accessibility, navigation, and user experience. • Develop new digital services and features. E. Safety, Security, and Fraud Prevention • Protect our systems against unauthorized access. • Detect, investigate, and prevent fraud or misuse. • Protect visitors, clients, caregivers, and MyCG assets. F. Legal and Regulatory Compliance • Comply with applicable federal, state, and local laws. • Maintain required business and healthcare records. • Respond to lawful requests from courts or government authorities. • Support audits, investigations, or regulatory obligations. G. Future Digital Services • Support secure MyCG client, family, and caregiver portals. • Support future CareOS-powered digital workflows. • Provide secure notifications and service communications. Our Commitment to Responsible Use MyCG does not use personal information for purposes that are inconsistent with this Privacy Policy. We do not sell personal information, and we strive to use only the minimum information reasonably necessary to accomplish each legitimate purpose. As our technology evolves, any new use of personal information will remain subject to this Privacy Policy, applicable law, or additional notice where required.

5

When We Share Your Information

MyCG Home Care respects the confidentiality of your personal information. We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share personal information only when it is necessary to provide our services, operate our business, comply with legal obligations, protect individuals, or when you have authorized us to do so. A. Within MyCG • Authorized employees who require access to perform their duties. • Operational teams responsible for care coordination, customer service, recruitment, compliance, billing, and administration. • Secure internal systems supporting MyCG operations. B. Service Providers • Website hosting providers. • Cloud infrastructure providers. • Technology vendors supporting secure communications. • Background screening providers for employment where applicable. • Professional advisors such as legal, accounting, or cybersecurity consultants. C. Healthcare and Care Coordination • Healthcare professionals involved in coordinating your care where permitted or authorized. • Authorized family members or legal representatives, when appropriate. • Emergency services where necessary to protect health or safety. D. Legal and Regulatory Requirements • Courts, law enforcement, or government agencies when required by law. • Licensing, accreditation, or regulatory authorities. • To establish, exercise, or defend legal rights. E. Business Transactions • If MyCG undergoes a merger, acquisition, restructuring, or sale of assets, information may be transferred as part of that transaction, subject to applicable legal protections. F. With Your Consent • We may share information with other parties when you specifically request or authorize us to do so. Our Commitment Whenever MyCG shares personal information, we limit the information disclosed to what is reasonably necessary for the intended purpose. We expect organizations that process information on our behalf to maintain appropriate confidentiality, privacy, and security standards consistent with applicable laws and contractual obligations.

6

Cookies, Tracking Technologies, and Website Analytics

MyCG Home Care uses cookies and similar technologies to improve the performance, security, functionality, and usability of our Website. These technologies help us understand how visitors interact with our Website so we can continuously improve the experience while protecting our systems. Cookies are small text files stored on your device by your web browser. They allow websites to recognize your browser, remember certain preferences, and collect limited technical information about website usage. A. Types of Cookies We May Use • Essential Cookies – Required for the secure operation of the Website and basic functionality. • Performance and Analytics Cookies – Help us understand website traffic, page usage, and visitor trends. • Preference Cookies – Remember your settings and improve your browsing experience. • Security Cookies – Help detect suspicious activity and protect against unauthorized access. B. Website Analytics • Measure website traffic and visitor trends. • Identify pages that are most frequently visited. • Improve navigation and accessibility. • Monitor website performance and reliability. • Support future improvements to MyCG's digital services. C. Third-Party Technologies • MyCG may use carefully selected third-party technology providers, such as website analytics or hosting providers, to help operate the Website. These providers may collect limited technical information necessary to perform their services under contractual confidentiality and security obligations. D. Managing Cookies • You may configure your web browser to refuse or delete cookies at any time. • Blocking certain cookies may affect the functionality of some areas of the Website. • Most browsers provide settings that allow you to review, manage, or remove cookies. E. Do Not Track • Some web browsers provide 'Do Not Track' signals. Because there is currently no universally accepted standard governing these signals, MyCG may not respond consistently to every browser-based Do Not Track request. Our Commitment We do not use cookies or tracking technologies to sell your personal information. Any analytics or performance information collected is used to improve the quality, security, accessibility, and effectiveness of the MyCG Home Care Website and related digital services.

7

Data Security and Information Protection

Protecting personal information is one of MyCG Home Care's highest priorities. We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction. While no method of transmitting information over the Internet or storing electronic information can be guaranteed to be completely secure, MyCG continually works to maintain security practices that are appropriate to the sensitivity of the information we collect and the services we provide. A. Administrative Safeguards • Privacy and confidentiality policies and procedures. • Role-based access to information. • Workforce privacy and security training. • Vendor due diligence where third parties process information. • Regular review of privacy and security practices. B. Technical Safeguards • Secure website connections using encryption technologies (such as HTTPS/TLS). • Access controls and authentication mechanisms. • Monitoring for unauthorized access and suspicious activity. • Secure backup and recovery procedures where appropriate. • Protection against malware and other cybersecurity threats. C. Physical Safeguards • Controlled access to facilities and equipment where information is processed. • Secure handling and disposal of sensitive records. • Measures designed to prevent unauthorized physical access to systems containing personal information. D. Workforce Responsibilities • Only authorized personnel may access personal information required for their assigned responsibilities. • Employees and contractors are expected to protect confidential information and comply with applicable privacy and security policies. E. Security Incidents • If MyCG becomes aware of a security incident affecting personal information, we will investigate the matter promptly, take reasonable steps to contain and remediate the issue, and provide notifications where required by applicable law. F. Your Role in Protecting Information • Use strong passwords where applicable. • Protect your devices from unauthorized access. • Notify MyCG promptly if you believe your information has been compromised or if you identify suspicious activity related to our Website. Our Commitment Information security is an ongoing process. MyCG regularly evaluates its security practices and continues to strengthen administrative, technical, and physical safeguards to support the confidentiality, integrity, and availability of personal information throughout our organization and evolving digital ecosystem.

8

Data Retention and Record Management

MyCG Home Care retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide services, meet legal and regulatory obligations, resolve disputes, enforce agreements, and protect the integrity of our operations. Retention periods may vary depending on the type of information involved, the purpose for which it was collected, and applicable federal, state, or local legal requirements. A. Factors That Determine Retention • The purpose for which the information was collected. • Applicable healthcare, employment, tax, licensing, and business recordkeeping requirements. • Legal, contractual, or regulatory obligations. • Security, audit, and operational requirements. B. Categories of Information • Website inquiries and contact requests. • Care request submissions. • Caregiver and employment applications. • Client and family communications. • Website analytics and technical logs. • Business and administrative records. C. Secure Storage • Personal information is stored using appropriate administrative, technical, and physical safeguards. • Access is limited to authorized personnel with a legitimate business need. D. Secure Disposal • When information is no longer required, MyCG will securely delete, destroy, anonymize, or otherwise dispose of it in accordance with applicable legal requirements and internal policies. E. Legal Holds • If information becomes relevant to litigation, investigations, audits, or legal proceedings, MyCG may retain it for longer than normal retention periods until the matter has been resolved. F. Continuous Review • MyCG periodically reviews its record management practices to ensure retention periods remain appropriate, legally compliant, and consistent with operational needs. Our Commitment MyCG is committed to responsible information lifecycle management. We retain information only for legitimate purposes and dispose of it securely when it is no longer required, helping protect privacy while meeting our legal, regulatory, and operational responsibilities.

9

Your Privacy Rights and Choices

If you need clarification about what you shared, want something corrected, or want to ask how MyCG is handling information, contact the team and the request will be routed appropriately. You have the right to: • Access the personal information we have about you • Request correction of inaccurate information • Request deletion of your information (subject to legal obligations) • Opt out of marketing communications • Withdraw consent where processing is based on consent

10

HIPAA, Protected Health Information (PHI), and Healthcare Privacy

MyCG Home Care is committed to protecting the privacy, confidentiality, and security of health-related information entrusted to us. As a healthcare organization, we recognize that certain information may be protected under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and other applicable federal and state privacy laws. This Website Privacy Policy describes how information collected through our Website is handled. In certain situations, health information collected as part of providing home care services may also be governed by a separate Notice of Privacy Practices or other legally required healthcare privacy notices. Where applicable, those notices supplement this Privacy Policy. A. Protected Health Information (PHI) • Protected Health Information (PHI) generally includes individually identifiable health information created, received, maintained, or transmitted in connection with the provision of healthcare services. • PHI may include health conditions, care needs, treatment information, service documentation, billing information, or other information protected by applicable law. B. Website Information vs. Healthcare Information • General website browsing information is not normally considered PHI. • Information submitted through a Request Care form or other healthcare-related communication may become part of MyCG's operational or clinical records when appropriate. C. How We Protect Health Information • Limit access to authorized workforce members. • Apply administrative, technical, and physical safeguards. • Maintain appropriate confidentiality obligations. • Support secure operational systems and authorized care coordination. D. Permitted Uses and Disclosures • MyCG may use or disclose health information where permitted or required by applicable law, including for treatment, payment, healthcare operations, legal requirements, public health activities, or with your authorization where required. E. Your Rights Regarding Health Information • Depending on applicable law, you may have rights to request access, corrections, restrictions, confidential communications, or an accounting of certain disclosures of your protected health information. F. Breach Notification • If MyCG determines that protected information has been compromised in a manner requiring notification, we will provide notice consistent with applicable legal requirements. Our Commitment MyCG is committed to treating health information with the highest level of confidentiality. Protecting the dignity, privacy, and trust of our clients and families is central to the way we deliver care and operate our organization.

11

Third-Party Services and Service Providers

MyCG Home Care works with carefully selected third-party service providers to support the operation of our Website, deliver our services, maintain our technology infrastructure, and improve the experience of our clients, families, caregivers, and website visitors. These providers perform services on our behalf and are permitted to access personal information only to the extent reasonably necessary to perform those services. Where appropriate, we require them to maintain appropriate privacy, confidentiality, and security protections consistent with applicable laws and contractual obligations. A. Types of Service Providers • Website hosting and cloud infrastructure providers. • Email and secure communication platforms. • Technology support and cybersecurity providers. • Website analytics and performance monitoring providers. • Recruitment, applicant management, and background screening providers where applicable. • Professional advisors, including legal, accounting, compliance, and auditing firms. B. Information Shared • We share only the minimum information reasonably necessary for the provider to perform its contracted services. • Service providers are not authorized to use personal information for their own independent marketing purposes unless you separately choose to engage with them. • SMS consent and mobile telephone information will not be sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. Information may be disclosed to service providers acting solely on behalf of MyCG Home Care to deliver and support the messaging program, subject to appropriate confidentiality and data-protection obligations. C. Security Expectations • MyCG evaluates service providers based on the nature of the services they provide and expects them to implement appropriate administrative, technical, and physical safeguards to protect information entrusted to them. D. Business Associates and Healthcare Vendors • Where required by applicable healthcare privacy laws, MyCG may enter into appropriate contractual agreements with vendors that process protected health information on our behalf. E. Third-Party Websites • Our Website may contain links to external websites or services that are not operated by MyCG. We are not responsible for the privacy practices, security, or content of those third-party websites. We encourage you to review their privacy policies before providing personal information. F. Future Technology Partners • As MyCG expands its digital ecosystem, additional technology providers may support future client, family, caregiver, and administrative platforms. Any such providers will be expected to meet MyCG's privacy and security standards and applicable legal requirements. Our Commitment MyCG carefully selects organizations that support our operations and expects them to handle information responsibly. We remain accountable for protecting the trust placed in us and strive to ensure that third-party relationships support—not compromise—our commitment to privacy, confidentiality, and information security.

12

Children's Privacy

MyCG Home Care is committed to protecting the privacy of children. Our Website and online services are intended for adults seeking information about home care services, family caregivers, healthcare professionals, referral partners, prospective employees, and other authorized users. They are not designed or directed toward children. A. Intended Audience • Our Website is intended for individuals who are at least 18 years of age or who are otherwise legally authorized to act on behalf of a client or family member. • We do not knowingly market our services directly to children. B. Information About Children • In some situations, adults may voluntarily provide information about a child when requesting services, communicating with MyCG, or acting on behalf of a family member. • Any such information will be handled in accordance with applicable laws and this Privacy Policy. C. Information Collected Directly From Children • MyCG does not knowingly collect personal information directly from children through the Website where prohibited by applicable law. • If we become aware that personal information has been submitted directly by a child in a manner that is not permitted, we will take reasonable steps to delete or otherwise handle the information in accordance with applicable legal requirements. D. Parent or Guardian Requests • A parent, legal guardian, or other authorized representative who believes that a child has provided personal information through the Website may contact MyCG to request review, correction, or deletion of the information, subject to applicable legal requirements. E. Future Digital Services • If MyCG introduces future online services specifically intended for minors or pediatric care, we will provide any additional notices, safeguards, and consent processes required by applicable law. Our Commitment Protecting children and vulnerable individuals is consistent with MyCG's mission and values. We are committed to operating our Website responsibly and to complying with applicable laws governing children's privacy whenever they apply.

13

State Privacy Rights

MyCG Home Care recognizes that privacy laws vary across the United States and continue to evolve. Depending on the state in which you reside, you may have additional rights regarding your personal information under applicable state privacy laws. MyCG is committed to honoring applicable privacy rights and responding to qualifying requests in accordance with the laws that apply to the information we collect and process. A. State Privacy Laws • Certain states provide residents with additional rights relating to access, correction, deletion, portability, and limitations on the use or disclosure of personal information. • MyCG monitors changes in state privacy legislation and updates its practices as appropriate. B. California Residents • If you are a California resident, you may have rights provided under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), where applicable. • These rights may include requesting access to certain personal information, requesting correction or deletion, and exercising other rights provided by California law. C. Other U.S. States • Residents of other states may have rights under applicable state privacy laws. MyCG will evaluate and respond to requests based on the laws applicable to your state of residence and the nature of the information involved. D. Verification of Requests • Before fulfilling certain privacy requests, MyCG may take reasonable steps to verify your identity or confirm your authority to act on behalf of another individual. E. Limitations • Some requests may be limited where MyCG is required to retain information for healthcare, employment, contractual, legal, regulatory, fraud prevention, security, or other legitimate purposes permitted by law. F. Non-Discrimination • MyCG will not unlawfully discriminate against individuals for exercising their applicable privacy rights. Our Commitment As MyCG expands into additional states, we will continue to review emerging privacy legislation and strengthen our privacy program to remain compliant while maintaining a consistent, transparent, and respectful experience for all individuals who interact with our organization.

14

International Visitors and Cross-Border Access

MyCG Home Care is a United States home care organization. Our Website, services, and digital platforms are intended primarily for individuals located in the United States and for those seeking information about services provided within the United States. Individuals may access our Website from other countries; however, by accessing or using our Website, you understand that your information may be transferred to, stored, and processed in the United States, where privacy and data protection laws may differ from those in your country of residence. A. Intended Geographic Scope • MyCG's services are designed primarily for clients, families, caregivers, referral partners, and job applicants within the United States. • Our Website may be viewed internationally, but our operations are governed primarily by applicable U.S. laws. B. Cross-Border Data Transfers • If you access the Website from outside the United States, information you voluntarily provide may be processed and stored in the United States. • By using the Website, you acknowledge and consent to this transfer where permitted by applicable law. C. Applicable Laws • MyCG complies with privacy obligations applicable to its operations and the information it processes. • Additional rights or obligations may apply where required by law or contract. D. International Inquiries • Individuals outside the United States who have questions regarding this Privacy Policy or the handling of their information may contact MyCG using the contact details provided in this Privacy Policy. E. Future International Operations • If MyCG expands operations beyond the United States, this Privacy Policy may be updated or supplemented to reflect additional legal and regulatory requirements. Our Commitment Regardless of where you access our Website, MyCG is committed to treating personal information responsibly, applying appropriate safeguards, and maintaining transparency about how information is collected, used, protected, and managed.

15

Changes to This Privacy Policy

MyCG Home Care may update this Privacy Policy from time to time to reflect changes in our services, technology, legal or regulatory requirements, business operations, or privacy practices. We encourage visitors to review this Privacy Policy periodically so they remain informed about how we protect personal information. A. Reasons for Updates • Changes in applicable federal, state, or local laws. • Introduction of new services, technologies, or digital platforms. • Improvements to privacy, cybersecurity, or information governance practices. • Operational or organizational changes affecting the processing of personal information. B. Notification of Changes • When material changes are made, MyCG will update the 'Last Updated' date shown at the beginning of this Privacy Policy. • Where required by applicable law, MyCG may provide additional notice through the Website or by other appropriate communication methods. C. Effective Date • Unless otherwise stated, revisions become effective on the date they are published on the MyCG Home Care Website. D. Continued Use • Your continued use of the Website after an updated Privacy Policy becomes effective indicates your acknowledgment of the revised policy, to the extent permitted by applicable law. E. Previous Versions • MyCG may retain prior versions of this Privacy Policy as part of its governance and compliance records. Our Commitment MyCG is committed to transparency. Whenever our privacy practices change, we will strive to communicate those changes clearly and maintain a Privacy Policy that accurately reflects how personal information is collected, used, protected, and managed.

16

Contact Information, Questions, and Privacy Concerns

MyCG Home Care welcomes questions, comments, and concerns regarding this Privacy Policy and our privacy practices. We are committed to responding to privacy-related inquiries in a timely, respectful, and professional manner. If you believe your privacy rights have been affected, would like to exercise an applicable privacy right, or have questions about how your personal information is handled, please contact us using the information below. Privacy Inquiries • Privacy questions or concerns • Requests to access, correct, or update personal information • Requests to exercise applicable privacy rights • Questions regarding communications or marketing preferences • Reports of suspected privacy or security incidents Contact Details The following information should be updated with MyCG's current contact details before publication: Organization: MyCG Home Care Website: www.mycghomecare.com Email: [Privacy Email Address] Telephone: [Main Office Telephone] Mailing Address: [Business Address] Attention: Privacy Officer / Privacy Team Privacy Complaints If you believe that MyCG has not handled your personal information appropriately, we encourage you to contact us first so we can review your concerns and work toward a prompt resolution. Where applicable, you may also have the right to contact a governmental or regulatory authority responsible for privacy or healthcare oversight. Accessibility If you require this Privacy Policy in an alternative format or need assistance understanding its contents because of a disability or accessibility need, please contact MyCG and we will make reasonable efforts to provide appropriate assistance. Our Commitment MyCG values openness and accountability. We believe that privacy questions deserve clear answers, and we are committed to treating every inquiry with professionalism, respect, and confidentiality.

17

Definitions and Interpretation

To make this Privacy Policy easier to understand, the following definitions explain certain terms used throughout this document. Unless the context requires otherwise, singular terms include the plural and vice versa. MyCG: MyCG Home Care and its authorized representatives, employees, contractors, and approved service providers acting on its behalf. Website: The MyCG Home Care public website and any webpages, forms, or online services that reference this Privacy Policy. Personal Information: Information that identifies, relates to, describes, or can reasonably be linked to an identifiable individual, as defined by applicable law. Protected Health Information (PHI): Health information protected under HIPAA or other applicable healthcare privacy laws. CareOS: MyCG's internal operational platform used to coordinate business processes, care operations, and related workflows. It is not the public website. Service Provider: A third-party organization engaged by MyCG to perform services on its behalf under appropriate contractual, privacy, and security obligations. Cookies: Small text files placed on a user's device to support website functionality, security, preferences, and analytics. Processing: Any operation performed on personal information, including collection, use, storage, access, disclosure, transmission, retention, or deletion. You: Any individual who visits the Website, requests services, submits information, applies for employment, or otherwise interacts with MyCG through its digital services. Applicable Law: Federal, state, and local laws, regulations, and legally binding requirements governing privacy, healthcare, employment, cybersecurity, and information management. Interpretation These definitions are intended to improve readability and consistency throughout this Privacy Policy. Where a legal definition under applicable law differs from the simplified definitions provided here, the applicable legal definition will govern. Our Commitment MyCG believes that privacy documents should be understandable. These definitions are provided to help clients, families, caregivers, employees, and website visitors better understand how this Privacy Policy applies to them.

18

Effective Date, Document Governance, and Final Statement

This Privacy Policy represents MyCG Home Care's commitment to protecting the privacy, confidentiality, and security of the personal information entrusted to us. It establishes the principles that govern how information is collected, used, protected, shared, retained, and managed across the MyCG Home Care Website and related digital services. Effective Date Effective Date: [To be completed before publication] Last Updated: [To be completed before publication] This Privacy Policy becomes effective on the published Effective Date and remains in force until it is replaced by a revised version. Document Governance • Document Owner: MyCG Home Care • Primary Business Function: Privacy, Compliance, and Information Governance • Review Frequency: At least annually, or sooner if required by law, operational changes, or technology updates. • Approval Authority: Executive Leadership or designated Privacy Officer. • Publication Location: www.mycghomecare.com and any other official MyCG digital platform where this Privacy Policy is referenced. Relationship to Other Policies This Privacy Policy should be read together with any other applicable MyCG notices, including Notices of Privacy Practices, website Terms of Use, accessibility statements, cookie notices, employment privacy notices, and any service-specific privacy disclosures that may apply. Final Statement At MyCG Home Care, protecting privacy is an extension of the care we provide. Every interaction with our clients, families, caregivers, employees, referral partners, and website visitors is guided by our commitment to compassion, professionalism, integrity, accountability, and respect. We recognize that trust is earned. By maintaining transparent privacy practices, investing in strong information security, and continually improving our governance as technology and laws evolve, we strive to deserve that trust every day. Thank you for taking the time to read this Privacy Policy and for placing your confidence in MyCG Home Care. End of Privacy Policy © MyCG Home Care. All rights reserved.

19

Acceptance, Acknowledgment, and Continued Use

By accessing or using the MyCG Home Care Website, you acknowledge that you have had the opportunity to review this Privacy Policy and understand how MyCG collects, uses, protects, and manages personal information as described throughout this document. Where applicable law requires consent for specific processing activities, MyCG will obtain that consent through appropriate notices, forms, or other legally recognized mechanisms. Nothing in this section limits any rights you may have under applicable privacy or healthcare laws. A. Use of the Website • Your use of the Website signifies your acknowledgment of this Privacy Policy to the extent permitted by applicable law. • If you do not agree with this Privacy Policy, you should discontinue use of the Website or refrain from submitting personal information through it. B. Additional Agreements • Certain MyCG services may be governed by additional terms, notices, or agreements. • Where another legally required notice applies, that notice supplements this Privacy Policy for the applicable service. C. Ongoing Responsibility • We encourage visitors to review this Privacy Policy periodically. • Continued use of the Website after updates may constitute acknowledgment of the revised policy where permitted by law. D. Questions Before Using the Website • If you have questions about this Privacy Policy before providing personal information, please contact MyCG using the contact information provided in Section 16. Final Commitment MyCG Home Care is committed to maintaining the confidence of every client, family member, caregiver, employee, referral partner, and website visitor. We view privacy as an essential part of quality care and responsible business operations, and we remain dedicated to protecting personal information with integrity, transparency, and respect.

20

Artificial Intelligence and Automated Technologies

MyCG Home Care is committed to using technology responsibly to improve care coordination, operational efficiency, communication, and the experience of clients, families, caregivers, and employees. As our digital ecosystem evolves, MyCG may incorporate artificial intelligence (AI), machine learning, automation, and other advanced technologies into certain products and services. These technologies are intended to support—not replace—qualified human judgment, professional decision-making, or compassionate care. A. Purpose of AI and Automation • Improve administrative efficiency and workflow management. • Support care coordination and operational planning. • Enhance communication and service responsiveness. • Improve reporting, analytics, and quality improvement. • Strengthen cybersecurity and fraud detection. B. Human Oversight • MyCG does not rely solely on automated systems to make decisions regarding the delivery of care where human professional judgment is required. • Appropriately trained personnel review important operational and care-related decisions. C. Responsible Use of AI • AI technologies are used in ways consistent with applicable laws, ethical principles, and organizational policies. • MyCG seeks to minimize bias, protect privacy, and promote fairness whenever AI-assisted processes are used. D. Information Used by AI Systems • Only information reasonably necessary for an approved purpose may be processed by AI-enabled systems. • Access to personal information remains subject to privacy, confidentiality, and security safeguards. E. Future AI Capabilities • As CareOS evolves, AI may support scheduling, documentation assistance, analytics, communications, quality improvement, and other operational functions. • New AI capabilities will be implemented in accordance with applicable legal, privacy, and governance requirements. F. Transparency • MyCG is committed to being transparent about the responsible use of AI and other automated technologies as our services continue to evolve. Our Commitment MyCG believes technology should enhance human care, not replace it. We are committed to using artificial intelligence responsibly, ethically, and transparently while protecting privacy, maintaining human accountability, and preserving the dignity and trust of every individual we serve.

21

CareOS Digital Privacy Framework

MyCG Home Care operates an integrated digital ecosystem designed to support high-quality, coordinated home care services. At the center of this ecosystem is CareOS, MyCG's operational platform, which supports authorized business processes, care coordination, communications, and workflow management. The MyCG public Website serves as the primary entry point for many users. Information submitted through the Website may be securely transferred into CareOS for authorized operational purposes. MyCG designs this ecosystem so that privacy, confidentiality, security, and appropriate access controls are considered throughout the lifecycle of personal information. A. Components of the MyCG Digital Ecosystem • Public Website – Information, inquiries, care requests, and employment applications. • CareOS – Internal operational platform supporting authorized workflows. • Family Portal – Future secure access for authorized family members. • Caregiver Portal – Future secure access for caregivers and workforce services. • Administrative and Executive Platforms – Internal systems supporting authorized business operations. B. Secure Information Flow • Information is processed through controlled workflows designed to support legitimate operational, care, employment, compliance, and customer service purposes. • Access is limited according to role, responsibility, and legitimate business need. C. Role-Based Access • MyCG applies role-based access principles so users access only the information reasonably necessary for their responsibilities. • Access permissions are reviewed and managed through organizational governance processes. D. Privacy by Design • MyCG strives to incorporate privacy and security considerations when developing new digital services, workflows, integrations, and technologies. • Privacy reviews may be performed before significant new digital capabilities are introduced. E. Continuous Improvement • As CareOS and related platforms evolve, MyCG will continue strengthening privacy, cybersecurity, governance, and information management practices while supporting innovation. Our Commitment CareOS has been designed to support people—not replace them. MyCG is committed to building a trusted digital ecosystem where technology improves coordination, communication, and service quality while protecting privacy, maintaining appropriate human oversight, and safeguarding the information entrusted to our organization.

22

Cybersecurity and Digital Trust Commitment

MyCG Home Care recognizes that protecting personal information requires more than compliance with privacy laws. It also requires a strong cybersecurity program built on prevention, monitoring, preparedness, and continuous improvement. Our goal is to maintain the trust of our clients, families, caregivers, employees, referral partners, and community by protecting the confidentiality, integrity, and availability of the information entrusted to us. A. Security Governance • Cybersecurity is integrated into MyCG's operational and information governance practices. • Security responsibilities are assigned to appropriate leadership, technology, and operational teams. B. Core Security Principles • Access is limited to authorized users based on legitimate business need. • Security controls are reviewed and improved as technology and risks evolve. • Reasonable safeguards are applied throughout the information lifecycle. C. Threat Monitoring and Response • MyCG strives to monitor for unauthorized access, suspicious activity, malware, fraud, and other cybersecurity threats. • Potential incidents are investigated promptly, with appropriate containment, remediation, and notification where required by law. D. Business Continuity and Resilience • MyCG seeks to maintain resilient systems, backup strategies, and recovery processes that support continuity of operations following disruptive events. E. Workforce Awareness • Employees and authorized users receive guidance and training appropriate to their responsibilities for protecting confidential information and recognizing cybersecurity risks. F. Vendor Security • MyCG expects technology vendors and service providers that process information on our behalf to maintain appropriate security safeguards consistent with contractual obligations and applicable law. G. Continuous Improvement • MyCG periodically reviews cybersecurity practices, emerging threats, regulatory developments, and operational lessons learned to strengthen our digital resilience. Our Digital Trust Commitment Digital trust is earned through consistent action. MyCG is committed to building and maintaining systems that support safe, reliable, and secure care while continually strengthening our cybersecurity capabilities. We view cybersecurity as an essential part of protecting the people we serve and the confidence they place in our organization.

23

Ethical Data Governance Principles

At MyCG Home Care, privacy is guided not only by legal compliance but also by ethical responsibility. Every decision involving personal information should reflect our commitment to dignity, respect, fairness, accountability, and responsible stewardship. These principles guide how information is collected, used, shared, protected, and governed across the MyCG ecosystem. 1. Respect for Human Dignity We recognize that personal information represents real people and families. Information should always be handled with compassion and respect. 2. Purpose Limitation We collect and use personal information only for legitimate, clearly defined purposes. 3. Data Minimization We seek to collect only the information reasonably necessary to deliver services or meet legal and operational responsibilities. 4. Transparency We strive to explain our privacy practices in language that is clear, understandable, and accessible. 5. Accountability MyCG accepts responsibility for protecting information entrusted to our organization and expects the same commitment from workforce members and service providers. 6. Security and Confidentiality Information should be protected throughout its lifecycle using appropriate administrative, technical, and physical safeguards. 7. Fairness and Non-Discrimination Information will not be used in ways that unlawfully discriminate against individuals or undermine equitable treatment. 8. Continuous Improvement We regularly review our governance practices to strengthen privacy, cybersecurity, and information management as technology and regulations evolve. Applying These Principles These principles influence the design of MyCG's website, CareOS, future digital services, workforce practices, vendor relationships, and operational decision-making. They complement applicable legal requirements and support MyCG's long-term commitment to trustworthy, people-centered care. Our Commitment Ethical data governance is fundamental to MyCG's culture. We believe responsible information management strengthens trust, improves care, and supports the relationships that matter most to our clients, families, caregivers, employees, and community.

24

Privacy Frequently Asked Questions

The following questions address some of the most common privacy topics raised by clients, families, caregivers, job applicants, referral partners, and website visitors. This section is intended to provide straightforward answers while complementing the detailed provisions of this Privacy Policy. 1. Does MyCG sell my personal information? No. MyCG does not sell, rent, or trade your personal information to third parties for marketing purposes. 2. Why does MyCG collect my information? We collect only the information reasonably necessary to respond to inquiries, provide services, evaluate employment applications, improve our website, comply with legal obligations, and support our operations. 3. Who can access my information? Access is limited to authorized personnel and approved service providers who require the information to perform legitimate business, care, or operational responsibilities. 4. How does MyCG protect my information? We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or loss. 5. Can I request access to my information? Yes. Depending on applicable law, you may have the right to request access to, correction of, or other actions relating to your personal information. 6. Does MyCG use cookies? Yes. We use cookies and similar technologies to improve website performance, security, functionality, and user experience. You may manage cookies through your browser settings. 7. Does MyCG use artificial intelligence? MyCG may use AI and automation to improve operations and services. These technologies are intended to support—not replace—qualified human judgment and are used responsibly and transparently. 8. What is CareOS? CareOS is MyCG's secure operational platform that supports care coordination and authorized business processes. It is not the public website. 9. What should I do if I have a privacy concern? Please contact MyCG using the contact information provided in this Privacy Policy. We welcome questions and will review concerns promptly and professionally. 10. Will this Privacy Policy change? Yes. We may update this Privacy Policy periodically to reflect changes in law, technology, or our services. The most current version will always be available on our Website. Our Commitment We believe privacy information should be understandable. If your question is not answered here, we encourage you to contact MyCG directly. We are committed to openness, transparency, and providing clear answers about how your information is handled.

25

The MyCG Privacy Promise

Privacy is more than a legal obligation at MyCG Home Care—it is a promise that reflects who we are and how we care for people. Every person who contacts MyCG places trust in us. Whether you are seeking care for yourself or a loved one, applying to join our team, referring a client, or simply visiting our Website, we recognize that the information you share deserves to be treated with dignity, respect, and care. Our Promise to You • We will treat your personal information with the same respect we would expect for our own families. • We will be transparent about what information we collect and why we collect it. • We will collect only the information reasonably necessary to provide services and operate responsibly. • We will protect your information using appropriate administrative, technical, and physical safeguards. • We will continue to strengthen our privacy, cybersecurity, and governance practices as technology and laws evolve. • We will use technology to support compassionate human care—not to replace it. • We will respect your privacy rights and respond to your questions with openness and professionalism. • We will strive every day to earn and maintain your trust. A Commitment That Extends Beyond Compliance We believe protecting privacy is part of protecting people. Our commitment extends beyond meeting legal requirements. It is reflected in the way we design our services, build our technology, train our workforce, choose our partners, and serve our communities. As MyCG grows, this promise will continue to guide every stage of our digital and operational journey. Closing Statement Thank you for choosing MyCG Home Care. We are honored by your trust and committed to protecting the information you share with us while providing compassionate, professional, and reliable home care services. Privacy. Trust. Compassion. Care. These are not simply words—they are commitments that guide everything we do.

Your trust is a serious responsibility.

We are committed to protecting the information you share so you can focus on what matters most: your loved one.

Privacy-conscious handling

Care-focused communication

Evolving safeguards

Information should stay limited to care-related use and necessary communication.

Privacy practices will keep evolving as the MyCG system grows.