Last updated 12 October 2026
This policy explains how Gimbaran (“we”, “us”, “our”) handles information when you read gimbaran.com, request an appointment, write to the care desk, subscribe to notes, or unsubscribe. Senior healthcare is personal. We treat stories about health, family, and daily life as confidential even when a website form only collects a name and an email address.
The pages on this website are static. Forms are validated in your browser and are not transmitted to a Gimbaran server by the pages themselves. If you later email us, or if a coordinator replies to an address you typed, that later exchange is covered by the sections below.
It applies to older adults considering care, family members enquiring on their behalf, existing clients reading our articles, and visitors who only browse. It also applies to clinicians and companions employed or contracted by Gimbaran when they use the public website. It does not replace the privacy notice we give you when a care agreement starts. That notice is more specific because a care relationship includes health records, visit notes, and family-update lists.
If you contact us about another adult, you confirm that you are allowed to share the details you send. We may ask you to show that the person agrees, especially before we discuss memory, mood, or a diagnosis. Wanting to help is not always the same as having permission.
Depending on the form or the email, we may receive:
Please do not send full medical records, identity documents, or insurance numbers through a website form or an unsolicited first email. If a clinician needs records, we will tell you a more limited way to share them after we know who you are.
We do not ask for a telephone number or a street address on this website. If you add either inside a free-text box, we will use it only to respond to that enquiry and we would rather you did not include it unless you truly need to.
Like most websites, the server that hosts gimbaran.com may keep technical logs: browser type, rough time of a request, and the page requested. Those logs help the host keep the site available and investigate abuse. We do not use them to build a marketing profile of your health.
This website does not run advertising trackers and does not sell browsing history. Fonts and icons may be requested from third-party networks (for example, a font host or an icon library). Those providers receive your IP address as part of delivering the file, under their own policies. If that bothers you, you can still read the text of our pages with browser settings that block third-party requests, though the design may look plainer.
A sentence such as “mother is more confused after sunset” is health information even when it is not written on a clinic chart. We limit who inside Gimbaran can read enquiry messages: care coordinators and, when a visit is being arranged, the clinician whose focus matches the request. Companions do not receive a website enquiry unless they are already part of an agreed care team.
We do not use stories from enquiries as testimonials. The family quotations on our website are used with permission and without clinical detail that would identify a resident to a stranger. You may ask us to remove a quotation that includes you.
Articles on the blog are general education. Reading them does not create a health record. Writing to us about an article might, if your message includes personal symptoms. We keep that distinction so a casual reader is not treated as a patient, and so a person who does share symptoms is not treated as a casual reader.
We use personal information to:
We do not sell personal information. We do not rent email lists. We do not allow advertisers to target you on other sites because you read about memory care or heart health here.
Subscription is optional and separate from receiving care. A client can be on a plan and off the newsletter, or on the newsletter and not yet a client. Each note includes a way to unsubscribe, and this website keeps a dedicated unsubscribe page. If you use that page, enter the same address that receives the notes.
We may still email you about an appointment or a care agreement after you unsubscribe from general notes. Those messages are part of the service you asked for, not marketing. You can ask a coordinator to limit them to essential scheduling.
We share information only as needed:
We do not share enquiry content with data brokers, list vendors, or unrelated charities. A gathering you attend may include other residents; we do not publish attendance lists.
Website enquiries that do not become care are kept only as long as needed to complete the reply and a short period afterward in case you write again about the same question. A typical window is twelve months unless a longer period is required for a complaint.
If you become a client, clinical records are kept for the period required of healthcare providers where the care is delivered, which is often many years after the last visit. Newsletter opt-out records are kept so the suppression remains reliable. Server logs are kept for a shorter operational period set by the host.
When a retention period ends, we delete or de-identify the information. Backups may linger until the backup cycle overwrites them. We do not restore a backup in order to revive a list you left.
We use access limits, staff confidentiality duties, and reputable email practices. No method of sending information over the internet is perfectly secure. Email in particular can be intercepted or mis-addressed. Do not include highly sensitive detail in a first message if a safer channel can wait until we reply.
Staff who do not need an enquiry cannot browse it for curiosity. A breach involving health details would be handled as a serious incident: we would contain it, review what was exposed, and notify affected people when the risk to them is more than trivial.
You may email care@gimbaran.com to:
We may need to confirm you are the person the information is about, or that you are authorized, before we act. We will not ask you to prove authorization by sending a large bundle of unrelated documents.
Clinical records that the law tells us to keep cannot be deleted on request, even if you end care. You can still ask for a copy and for factual errors to be corrected. An opinion a clinician honestly held at the time may be supplemented with your comment rather than erased.
Gimbaran provides senior healthcare. The website is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us a message, email care@gimbaran.com and we will delete it unless a safeguarding concern requires us to keep a limited record.
Our footer includes buttons that open a share dialog on other platforms. If you use them, that platform receives the address of gimbaran.com and anything else you add in their window. Their privacy policy then applies. We do not receive your social-media password. We also link to our own articles and plans. Moving between Gimbaran pages does not change this policy.
People read this site from many places. If you email us, your message may be handled by staff and service providers in the locations where Gimbaran operates its care desk and hosts its tools. Those locations may have different privacy laws from the place where you are sitting. We still apply this policy, and we apply any stronger duty that binds us for health information.
We do not claim that the website is offered only in one country, and we do not restrict reading it by nationality. Care services themselves are arranged individually and described in a care agreement, not by this policy alone.
We will post updates on this page and change the date at the top. If a change would use existing enquiry information in a meaningfully new way, we will describe that change in plain language and, where we still have your email because of a subscription or a care relationship, we will mention it there too. Continuing to browse after an update means the new policy applies to new visits. It does not silently rewrite a care agreement you already signed.
Email care@gimbaran.com with the subject “Privacy”. Describe what you want changed or explained. Care-desk hours are Monday to Friday, 8:00 to 6:00. Please do not include a telephone number or a postal address unless we have asked for one; we handle privacy requests by email.
If you are unhappy with our reply, you may also contact the privacy regulator that oversees healthcare information in the place where your care was delivered. We will tell you which office that is when a care agreement exists. For website-only enquiries, start with us so we can fix the issue directly.