Last updated: November 14, 2026
Connected Years is operated by Brenton Ginty. This policy describes information handled through connectedyears.com and the administration of workshop enquiries from senior living communities in the United States. For privacy questions or requests, email support@connectedyears.com.
Information we collect
The enquiry form asks for your name, professional role, community name, city, state, work email, community level of care, expected group size and permission to contact you about your request. You may also provide a parent organization, telephone number, preferred dates, general group interests, referral source and operational notes. Required fields are identified on the form; optional fields may be left blank.
We record business correspondence, follow-up actions, scheduling details, aggregate attendance and feedback, quotes, external invoice references and payment status when needed to administer a relationship. This website does not collect payment-card details or process payments.
Please provide community-level information only. Do not submit resident names, diagnoses, care plans, personal writing, photographs, identification documents or other sensitive resident information. The level-of-care field describes the community, not an individual resident. Residents do not need website accounts.
Why we use information
We use information to answer your enquiry, discuss suitability and availability, agree and administer workshops, keep business records, respond to privacy requests and protect our services. Submitting an enquiry permits contact about that request; it does not subscribe you to a marketing list. You can ask us to stop optional follow-up. Communications needed to administer an agreed booking or answer a new request may still be necessary.
Technical information, cookies and tracking
Our hosting and security providers process technical information such as IP/network information, request times, browser details and security signals to deliver the website and detect abuse. Cloudflare Turnstile checks form submissions for spam. Administrator sign-in uses session cookies. Error monitoring receives technical diagnostics; the application removes form contents, user identifiers, request headers, cookies and URL query parameters from error events. Providers may still process connection information and derive approximate geography.
Optional website analytics and advertising trackers are disabled. We do not use the website to sell personal information or share it for cross-context behavioral advertising. The website does not change its essential security or authentication functions in response to Do Not Track or Global Privacy Control signals. Neither signal enables advertising or analytics. Third-party sites you choose to visit have their own practices.
Service providers and disclosures
We use Vercel for website hosting, Supabase for the application database and administrator authentication, Resend for application and sign-in email, Microsoft 365 through GoDaddy for business email, Cloudflare Turnstile for spam prevention, and Sentry for error monitoring. These services process information for their respective functions. The Connected Years CRM is private and separate from unrelated businesses and projects.
Information may be processed in the United States and other countries where we or our providers operate. We do not promise US-only processing. We may also disclose information when required by law, to respond to misuse or disputes, or to professional advisers assisting the business under appropriate confidentiality arrangements. If business ownership changes, affected information may transfer with the business, subject to applicable law and notice requirements.
Retention and deletion
We keep enquiry and correspondence records while needed to respond to the request and manage related follow-up. For ongoing or completed relationships, retention depends on workshop administration, financial recordkeeping, dispute handling and applicable legal duties. We consider whether a relationship remains active, when the last substantive contact occurred, whether the information is still relevant, and whether a legal or contractual reason requires retention. There is no automatic deletion timer for CRM records.
Access, correction and deletion requests are handled individually. Deleting information from active records does not instantly remove copies from email, provider logs or backups. Those copies are subject to provider retention and backup lifecycles; legal obligations may require some records to be kept. We will explain material limitations when responding to a request. We do not promise a fixed deletion deadline beyond deadlines required by applicable law.
Your choices and requests
Email support@connectedyears.com to ask what business contact information we hold about you, request a correction or deletion, or stop optional follow-up. Tell us enough to locate the relevant enquiry without sending sensitive identification documents. We may need proportionate verification of your identity or an authorized representative's authority. We will respond under the law applicable to your request and explain any information we must retain. This policy does not limit rights provided by applicable US state or federal law.
Workshop creative work
This website and CRM do not provide a place to upload resident writing, photographs or health information. Workshop use of an AI tool, printing and any sharing of creative work require separate explanations and arrangements with the community and participants. This website policy does not grant permission to publish resident material or promise how an unidentified AI or printing provider handles it. Avoid confidential or sensitive information in creative prompts.
Security and changes
We use restricted administrator access, encrypted connections and other safeguards, but no website or email service is completely secure. Tell us if you believe information was submitted in error without forwarding additional sensitive material.
We will update this page and its date when practices change, and give additional notice where required. A policy change does not itself authorize a previously undisclosed use of collected information.