HAAS (Holistic Array of Authentic Services, LLC) provides home care services in Minnesota and operates this website. We treat personal information as something to safeguard, not something to monetize. This policy explains what we collect, how we use it, and your rights.
Information we collect
Through this website, we collect information you provide on our forms — names, contact information, the content of your messages, employment history (on the job application), and uploads such as resumes or timesheets.
Through our services, we collect health-related information needed to provide care — care plans, schedules, and documentation required by Minnesota DHS and Medical Assistance programs. This information is treated as Protected Health Information (PHI) under HIPAA where applicable.
Automatically, our hosting provider and analytics tools may log standard technical information (IP addresses, browser/OS, page views, referring URLs) to keep the site functioning and to understand usage patterns.
How we use information
- To respond to inquiries from prospective clients, families, and case managers.
- To process and evaluate job applications.
- To provide and document home care services.
- To comply with state licensing, audits, and reporting requirements.
- To improve the website and our services.
HIPAA
HAAS is a HIPAA-covered entity. Protected Health Information (PHI) collected through our care services is handled under HIPAA’s Privacy and Security Rules. The website’s standard contact and intake forms are designed for early-stage inquiries and should not be used to send detailed PHI; we’ll route sensitive conversations to secure channels once we connect.
How we share information
We do not sell personal information. We share it only when:
- It’s necessary to provide care (e.g., with the assigned caregiver, your case manager, or your county worker).
- Required by law (state reporting, audits, court orders).
- You direct us to share it (e.g., with a designated family representative).
- With service providers under contract — including Microsoft (Power Automate, SharePoint, M365) and our hosting provider — who help us operate the business and are bound by appropriate confidentiality terms.
Data retention
We retain employment, client, and care records for the periods required by Minnesota DHS regulations and applicable law. Casual website inquiries (e.g., contact-form messages that don’t lead to services) are retained for a shorter period and deleted when no longer relevant.
Third-party services
This website may use Google Analytics (or a comparable tool) for usage statistics. Form submissions are processed through Microsoft Power Automate. These providers have their own privacy practices.
Your rights
You can ask what information we have about you, request corrections, ask us to delete information that we don’t need to keep for legal or regulatory reasons, or request a copy of our HIPAA Notice of Privacy Practices. Contact us at Info@haascares.com or (651) 756-8492.
Changes to this policy
We update this policy from time to time. The “last updated” date at the top reflects the most recent change.