Privacy Policy

Who we are

Novinway, LLC ("Novinway," "we," "us," or "our") is a private-pay respite care and family support service for families raising neurodivergent children in Maryland, Virginia, and Washington DC.

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our website at novinway.com, submit an inquiry or intake form, or use our services.

Information we collect

We collect personal information only to the extent reasonably necessary to provide and maintain our services.

Information you provide directly:

• Contact information: name, email address, phone number
• Family information: children's ages, general support needs, and care preferences provided during intake
• Child health information: care-relevant health information shared by parents or received from clinical providers through written parent authorization under 45 CFR 164.508
• Referral source information: how you heard about Novinway
• Communications: messages, emails, or other correspondence you send us

Information collected automatically:

• Website usage data: pages visited, time on site, browser type, and general location (city or region level)
• Device information: device type and operating system

We do not collect payment card information directly. Payments are processed through third-party payment processors who maintain their own privacy practices.

How we use your information

We use personal information strictly to provide and improve our services. Specifically:

• To respond to inquiries and process intake submissions
• To match families with Care Specialists and develop individualized Care Profiles
• To deliver and coordinate Respite Care and System Navigation services
• To communicate with families about scheduling, care updates, and service changes
• To comply with applicable legal obligations including mandated reporter requirements
• To improve our services based on aggregate usage patterns

Child health information is used solely to develop Care Profiles and deliver safe, appropriate care. We collect only what is necessary for this purpose.

We do not use personal information for targeted advertising. We do not sell personal information. We do not use automated decision-making that produces legal or similarly significant effects.

How we share your information

We share personal information only in the following circumstances:

• Care Specialists and System Navigators: W-2 employees assigned to your family receive the information necessary to provide care and navigation services, including relevant Care Profile information.
• Service providers: Third-party vendors who support our operations (scheduling software, payroll, background check services) receive limited information necessary to perform their functions. These vendors are contractually required to protect your information and may not use it for their own purposes.
• Clinical providers: With written parent authorization, we may share or receive relevant health information with your child's clinical providers to support coordinated care.
• Legal requirements: We may disclose information when required by law, including mandatory reporting obligations under Maryland Family Law Art. 5-704 and Virginia Code 63.2-1509, or in response to valid legal process.

We do not sell, rent, or share personal information with third parties for marketing purposes.

Child health information

Novinway is not a HIPAA covered entity. We do not bill any health plan, government program, or third-party payer, and we do not transmit health information electronically in connection with any standard transaction under 45 CFR Part 162.

Child health information we receive is governed by Maryland Health-General Article 4-301 and Virginia Code 32.1-127.1:03. We receive this information through written parent authorization and use it solely to develop individualized Care Profiles and deliver safe, appropriate care.

We treat child health information with the highest level of care. Access is limited to personnel with a direct need to know for care delivery purposes.

Data retention

We retain personal information for as long as necessary to provide services and comply with legal obligations. For active families, we retain care-related records for a minimum of three years following the end of service. Inquiries that do not convert to active service are retained for 12 months.

You may request deletion of your personal information at any time by contacting us at hello@novinway.com. We will respond within 45 days. Some information may be retained where required by law or for legitimate business purposes such as resolving disputes or enforcing agreements.

Your rights

Maryland and Virginia residents have the following rights with respect to their personal information:

• Access: Request confirmation of whether we process your personal information and obtain a copy of it
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Portability: Receive your personal information in a portable, readily usable format
• Opt-out: Opt out of any sale of personal information or use for targeted advertising (Novinway does not engage in either practice)

To exercise any of these rights, contact us at hello@novinway.com. We will respond within 45 days. We will not discriminate against you for exercising your privacy rights.

Data security

We implement reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include access controls limiting information to personnel with a legitimate need, encrypted data transmission, and secure storage practices.

No method of transmission or storage is completely secure. If you have reason to believe your information has been compromised, please contact us immediately at hello@novinway.com.

Children's information

Our services are provided to families on behalf of children. All child-related information is collected from and managed by parents or legal guardians, who serve as personal representatives for their minor children under applicable law. We do not knowingly collect personal information directly from children.

We do not process children's personal information for targeted advertising or any purpose unrelated to delivering the services their family has requested.

Third-party services

Our website and operations use the following third-party services, each of which maintains its own privacy practices:

• Tally (inquiry and intake forms): tally.so/privacy
• Gusto (payroll and HR): gusto.com/privacy
• Google Workspace (email, scheduling, and document management): workspace.google.com/terms/privacy
• Slack (internal operations communications): slack.com/privacy-policy
• Checkr (background screening): checkr.com/privacy-policy

We are not responsible for the privacy practices of these third-party services.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify active families by email. Your continued use of our website or services after any update constitutes acceptance of the revised policy.