The Kensington Reston

Effective Date: November 2, 2026

Kensington Senior Living, LLC (“KSL,” “we,” “our,” or “us”) is committed to protecting your privacy and handling your personal information in a safe, respectful, and transparent manner. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website (the “Site”) and interact with our services, including senior living communities and related care services. This policy applies to The Kensington Reston website at https://kensingtonreston.com/.

By accessing or using the Site, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect personal information that you voluntarily provide to us, including:

• Name, address, phone number, and email address
• Your contact preferences and the general nature of your inquiry — for example, the community you are interested in and your anticipated timeframe for moving forward.
• Communication preferences
• Information submitted through forms, inquiries, event registrations, or applications
• Any other information you choose to provide

We may also automatically collect certain information when you visit the Site, including:

• IP address and approximate geolocation
• Browser type, device type, and operating system
• Pages visited, links clicked, and time spent on the Site
• Cookies and similar tracking technologies
• Referral Information, including the source that directed you to our Site (such as referring URLs, search terms, and marketing campaign identifiers like UTM parameters)

Our website forms are intended for general inquiries and are not designed for submitting health information or other sensitive information. Please do not submit medical records, diagnoses, insurance information, Social Security numbers, financial account information, or other sensitive information through website forms or email. Although we ask you not to submit health-related information through these channels, such information may be protected under applicable federal or state laws even when the Health Insurance Portability and Accountability Act ("HIPAA") does not apply.

2. How We Use Your Information

We use personal information for legitimate business purposes, including but not limited to:

• Respond to inquiries and provide requested information
• Personalize your experience and connect you with appropriate services and communities
• Provide information about our communities, services, and care options
• Improve our website functionality, content, and user experience
• Send communications, including newsletters, updates, and event invitations
• Analyze usage trends and measure marketing effectiveness
• Maintain the security, integrity and performance of our systems
• Comply with applicable legal obligations and protect our rights and the rights of others
• Process and evaluate job applications, communicate with applicants, and manage our recruitment and hiring activities

You may opt out of marketing emails at any time using the unsubscribe link included in our communications. Consent to receive marketing communications is not a condition of receiving services.

We use contact information submitted through website inquiries to respond to requests, coordinate follow-up or tours, and provide information about our communities. Where you provide the required consent or other applicable optional permission, follow-up may include inquiry-related or promotional calls or text messages, consistent with the scope of your permission and your communication preferences. Providing a phone number alone does not enroll you in an optional text messaging program.

Newsletter enrollment is for email communications only. Where available, Go High Level supports SMS follow-up for website inquiries when you have opted in to that program. Pocketstop provides event announcements and promotional text messages to individuals who enroll separately by texting the community’s designated keyword to its assigned number. Pocketstop enrollment is separate from website forms; submitting a website inquiry or signing up for a newsletter does not enroll you in Pocketstop. You may opt out of optional calls or text messages by following the instructions provided in the communication or by contacting the relevant community through another reasonable method.

3. Sharing of Information

We do not sell your personal information in exchange for money. We do use advertising and analytics technologies that may qualify as a “sale” or “sharing” of personal information under applicable state law. You may opt out of these activities as described in Sections 4 and 8. We may also disclose your information in the following circumstances:

• With affiliated communities under common ownership or management.
• With service providers and partners who process data on our behalf to support our operations, including website hosting, customer relationship management, email marketing, communications tools, and event facilitation. For example, when you register for an event, we may share limited information such as your name and RSVP details with event partners or speakers to help administer the event. Information submitted through forms may be stored in our CRM systems and used (with your consent where required) to send communications via email service providers.

Communications tools. Where available, we use Go High Level for opted-in website inquiry SMS follow-up and Pocketstop for separately enrolled event announcements and promotional text messages. Pocketstop enrollment is by a community-specific keyword text and is not connected to website forms.

Tour scheduling. The Site may link to Calendly for booking a tour. Information you provide during booking is processed through the scheduling service to arrange your appointment. Review Calendly’s privacy notice before providing information at https://calendly.com/privacy.

• With professional advisors (e.g. legal) as necessary.
• When required by law or to protect the safety and rights of individuals.
• In connection with a business transfer, such as a merger or acquisition.

All third parties are expected to maintain appropriate confidentiality and security measures and use the information only for authorized purposes.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as pixels, tags, and scripts) to:

• Enhance and personalize your browsing experience
• Analyze traffic and usage patterns
• Customize content and improve functionality
• Support marketing and advertising efforts

Analytics tools. We use third-party analytics tools, including Google Analytics and Google Tag Manager, to understand how users interact with our Site. These tools may collect information such as IP address, browser type, device information, pages visited, and time spent on pages.

For more information about how these providers handle your data, you can review their privacy policies:

• Google Privacy Policy: https://policies.google.com/privacy

Advertising and marketing technologies. We use advertising and measurement tools including Google Ads and the Meta (Facebook) Pixel.

Call tracking. We use CallRail to understand which marketing efforts lead to calls. The website may display a different phone number based on how you reached the Site and collect referral, page-visit, device and call-attribution information. Visitor-level call tracking is subject to the applicable choices in our privacy preference controls.

Chat and inquiry tools. We offer Zapier-based chat as a separate communication channel. The chat service may load when you visit the Site, including before you make a cookie choice and after you reject optional categories. The service may receive technical information such as your IP address, browser information and the page you visit; when you use chat, it also processes information you choose to enter so your inquiry can be answered or routed. Our current cookie preferences do not disable chat loading. Please do not enter health information, medical records, diagnoses or other sensitive information in chat.

Measurement when cookies are declined. If you decline or later withdraw optional cookie consent, Google may still receive information about your consent choice, the page viewed, device and browser information, and measurement identifiers. This means declining optional cookies does not stop every measurement request. Cookie-storage choices and restrictions on personalized advertising continue to apply, together with your applicable privacy rights.

These tools may:

• Deliver personalized advertisements
• Measure the effectiveness of our advertising campaigns
• Enable remarketing based on prior visits

These third parties may use cookies and similar technologies to track activity across websites.

Your choices. When you first visit the Site, a consent banner lets you accept or reject non-essential cookies. You can change that choice at any time using the persistent “Manage privacy choices” control on the Site. Our “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” links, where displayed, open the same preferences. We also honor the Global Privacy Control (GPC) browser signal: if your browser or a browser extension sends it, we treat it as an opt-out of sale and sharing automatically, with no further action needed from you.

Declining optional categories does not necessarily prevent every request to a service provider. The measurement behavior and, where offered, the separate chat channel are described above. Our current cookie preferences do not disable chat loading. You can choose not to use chat or submit information through it. You can additionally manage or disable cookies through your browser settings, though disabling cookies may affect Site functionality.

You can learn more or opt out of personalized advertising by visiting:

• Google Ads Settings: https://adssettings.google.com
• Network Advertising Initiative: https://optout.networkadvertising.org/

5. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information.

However:

• No method of transmission over the internet or electronic storage is completely secure.
• We cannot guarantee absolute security of information transmitted online.
• Please do not submit sensitive personal or financial information (such as Social Security numbers, bank account details, or credit card information) through unsecured forms or email.

6. Your Privacy Choices

Depending on your location, you may have the right to:

• Request access to the personal information we maintain about you
• Request corrections or updates to your information
• Request deletion of your personal data, subject to legal exceptions
• Obtain a portable copy of personal information, where applicable
• Opt out of targeted advertising and qualifying profiling, where applicable
• Appeal a denial of privacy-rights request, where applicable
• Opt out of marketing communications
• Opt out of the “sale” or “sharing” of your personal information, and direct us to limit our use of sensitive personal information, as described in Section 8

To exercise these rights, please contact us using the information below. We may need to verify your identity before processing your request.

7. Data Retention

We retain personal information only for as long as necessary to:

• Fulfill the purposes described in this Policy
• Provide services and respond to requests
• Comply with legal, regulatory, and contractual obligations
• Resolve disputes and enforce agreements

Retention periods depend on the type of information, the purpose for which it was collected, and applicable requirements. When information is no longer needed, we delete it, securely dispose of it, or de-identify it, subject to applicable exceptions.

We may also retain de-identified or aggregated data for analytics and business purposes.

8. U.S. State Privacy Rights

If you are a resident of certain U.S. states, you may have additional privacy rights, subject to the applicability, scope, and exceptions of the relevant law. The descriptions below distinguish statutory rights from voluntary company choices.

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (as amended by the CPRA), California residents have the right to:

• Know what personal information we collect, use, and disclose
• Access your personal information
• Request correction of inaccurate information
• Request deletion of personal information
• Opt out of “sale” or “sharing” of personal information
• Limit our use and disclosure of sensitive personal information
• Non-discrimination for exercising your rights

We use advertising technologies that qualify as “sharing” under California law. You may opt out at any time using the persistent “Manage privacy choices” control on the Site, the “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” links where displayed, or by enabling Global Privacy Control in your browser.

To exercise your rights, contact us using the information below.

Virginia Residents (VCDPA)

Where the Virginia Consumer Data Protection Act (VCDPA) applies, Virginia consumers have the following rights, subject to applicable exceptions:

• Right to access your personal data
• Right to correct inaccuracies
• Right to delete personal data
• Right to data portability
• Right to opt out of:
  • targeted advertising
  • sale of personal data
  • profiling

To exercise these rights, contact us using the information in this Policy.

Maryland Residents (MODPA)

If you are a Maryland resident and the Maryland Online Data Privacy Act (MODPA) applies, you have the right to:

• Confirm whether we process your personal data and access that data
• Request correction of inaccurate personal data
• Request deletion of personal data, subject to legal exceptions
• Obtain a portable copy of personal data processed by automated means
• Obtain a list of the categories of third parties to which personal data has been disclosed
• Opt out of targeted advertising, the sale of personal data, and profiling for solely automated decisions that produce legal or similarly significant effects
• Non-discrimination for exercising your rights

We limit collection to personal data reasonably necessary and proportionate to provide or maintain a product or service you request. We do not sell sensitive personal data and collect, use, or share it only when strictly necessary for that request.

To exercise your rights, contact us using the information in this Policy. Authorized agents and legally authorized representatives may submit requests as permitted by law. We respond within 45 days, with an additional 45-day extension where permitted and explained within the initial period. Information is provided free of charge once every 12 months.

If we deny your request, you may appeal by contacting us with “Privacy Appeal.” We respond in writing within 60 days. If we deny your appeal, we provide an available online mechanism for submitting a complaint to the Maryland Attorney General’s Consumer Protection Division.

You may withdraw consent through our privacy preferences link or by contacting us. We stop processing that depends on your consent as soon as practicable, and within 30 days.

New York Residents

Where applicable, New York’s SHIELD Act requires reasonable safeguards for computerized private information. We maintain administrative, technical, and physical safeguards designed to protect that information, including appropriate disposal. We provide notice of security incidents to affected individuals and authorities as required by applicable law.

As a matter of company policy, New York residents may:

• Request access to their personal information
• Request correction of inaccurate information
• Request deletion of personal information, subject to applicable exceptions
• Opt out of targeted advertising and marketing communications

These voluntary choices do not limit rights provided by applicable law. To exercise them, contact us using the information in this Policy or use our privacy preferences link. We may need to verify your identity for requests requiring verification.

Where the New York Child Data Protection Act applies, we restrict processing of covered users’ personal data as required by law. For covered users ages 13–17, processing must be strictly necessary for a permitted purpose or supported by legally valid informed consent. Processing involving covered users under 13 must comply with applicable federal children’s privacy requirements.

9. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the content, security or privacy practices of those sites. We encourage you to review their policies before providing any information.

10. Children’s Privacy

Our Site is not intended for children under the age of 13, and we do not knowingly collect personal information from children. If we learn that such information has been collected, we will take appropriate steps to delete it.

Additional state protections may apply to users under 18.

11. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction and will remain subject to applicable privacy commitments and legal requirements.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised effective date.

Your continued use of the Site after updates constitutes your acceptance of the revised Policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Kensington Senior Living, LLC

11921 Freedom Drive

Suite 950

Reston, VA 20190

cduncan@kensingtonsl.com

Or submit a request through our website: https://kensingtonseniorliving.com/contact/

We will verify your identity and respond within the timeframe required by law. You may designate an authorized agent to act on your behalf.

We are committed to maintaining your trust by protecting your privacy with care, compassion, and integrity.