Last Updated: January 2025

Privacy Policy

Your privacy and the confidentiality of your personal health information are of utmost importance to us. This policy explains how we collect, use, protect, and share your information in compliance with HIPAA and applicable privacy laws.

Information We Collect

We collect various types of information to provide and improve our treatment services, ensure compliance with healthcare regulations, and maintain the safety and security of our facility and patients.

Personal Information

  • Name, date of birth, contact information (phone, email, address)
  • Emergency contact information and next of kin details
  • Insurance information and payment details
  • Government-issued identification numbers (as required by law)

Protected Health Information (PHI)

  • Medical history, diagnoses, and treatment records
  • Substance use history and assessment results
  • Mental health evaluations and therapy notes
  • Medication records and prescription information
  • Laboratory test results and clinical observations

Website Usage Information

  • IP address, browser type, and device information
  • Pages visited, time spent on site, and navigation patterns
  • Referring website and search terms used

How We Use Your Information

We use the information we collect for legitimate healthcare purposes and to provide you with the highest quality of care and support throughout your recovery journey.

Treatment & Care Coordination

To provide, coordinate, and manage your healthcare treatment and services, including assessments, therapy sessions, medication management, and discharge planning.

Payment & Insurance Processing

To process insurance claims, verify coverage, obtain payment for services rendered, and communicate with insurance providers regarding your treatment.

Healthcare Operations

To improve our services, conduct quality assessments, train staff, ensure compliance with regulations, and maintain accreditation standards.

Legal & Safety Obligations

To comply with legal requirements, respond to court orders, protect against fraud, and ensure the safety of patients, staff, and visitors.

Communication & Support

To communicate with you about appointments, treatment updates, follow-up care, and provide ongoing support services with your consent.

HIPAA & Medical Privacy

HIPAA Compliance Commitment

As a healthcare provider, we are required to comply with the Health Insurance Portability and Accountability Act (HIPAA) and its Privacy Rule. We maintain strict safeguards to protect your Protected Health Information (PHI) and ensure confidentiality at all times.

You have received or will receive:

  • Notice of Privacy Practices (NPP) detailing your rights
  • Authorization forms for any non-routine disclosures
  • Information about your privacy rights and how to exercise them

42 CFR Part 2 Protection

Information related to substance use disorder treatment is protected by federal confidentiality regulations (42 CFR Part 2), which provide even stricter protections than HIPAA. We cannot disclose substance use treatment records without your written consent except in very limited circumstances defined by law.

Important: These protections apply to all records that would identify you as having or having had a substance use disorder.

Your HIPAA Rights

  • Right to Access: You can request copies of your medical records and treatment information.
  • Right to Amend: You can request corrections to your health information if you believe it is inaccurate.
  • Right to an Accounting: You can request a list of certain disclosures of your health information.
  • Right to Request Restrictions: You can request limits on how we use or disclose your information.
  • Right to Confidential Communications: You can request that we communicate with you in a specific way or at a specific location.

Information Sharing & Disclosure

We only share your information when necessary for your treatment, with your authorization, or as required by law. Your privacy is always our priority.

With Your Authorization

We will obtain your written authorization before sharing your information with:

  • Family members or friends you designate
  • Outside healthcare providers for coordination of care
  • Employers, schools, or other third parties

For Treatment Purposes

We may share information with other healthcare providers involved in your care, including physicians, therapists, pharmacists, and medical specialists, to ensure coordinated and effective treatment.

For Payment & Operations

We may share information with insurance companies, billing services, and auditors as necessary to process claims, verify coverage, and maintain our healthcare operations.

As Required by Law

We may disclose information without your authorization when required by law, including:

  • Court orders, subpoenas, or legal proceedings
  • Public health reporting (communicable diseases, abuse, neglect)
  • Law enforcement purposes in specific circumstances
  • To prevent serious threats to health or safety

Business Associates

We may share information with third-party service providers (business associates) who perform services on our behalf, such as billing, IT support, or accreditation services. These entities are contractually required to protect your information.

Cookies & Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience, analyze site traffic, and understand user behavior. This information is not linked to your medical records.

Essential Cookies

Required for website functionality, security, and navigation. These cannot be disabled.

Analytics Cookies

Help us understand how visitors use our site so we can improve user experience.

Functional Cookies

Remember your preferences and settings to provide enhanced features.

Marketing Cookies

Track your activity to deliver relevant advertisements and measure campaign effectiveness.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling certain cookies may affect website functionality.

Browser Settings: Visit your browser's help section for instructions on managing cookies (Chrome, Firefox, Safari, Edge, etc.)

Your Rights & Choices

You have important rights regarding your personal and health information. We are committed to honoring these rights and making it easy for you to exercise them.

Access Your Records

Request copies of your medical records, treatment plans, and billing information. We will provide these within 30 days of your request.

Correct Inaccuracies

Request amendments to your health information if you believe it contains errors or is incomplete. We will review and respond to your request.

Restrict Disclosures

Request restrictions on how we use or share your information. While we will consider your request, we are not always required to agree to it.

Opt Out of Communications

Unsubscribe from marketing emails, newsletters, or promotional communications at any time. Treatment-related communications will continue.

Request Deletion

Request deletion of certain personal information. Note that we must retain medical records as required by law and regulation.

Disclosure Accounting

Request a list of certain disclosures we have made of your health information over the past six years.

How to Exercise Your Rights

To exercise any of these rights, please contact our Privacy Officer using the information provided in the Contact & Updates section below. We will respond to your request within the timeframes required by law.

No Retaliation: We will not retaliate against you for exercising your privacy rights or filing a complaint.

Data Security

We implement comprehensive security measures to protect your personal and health information from unauthorized access, use, disclosure, alteration, or destruction.

Our Security Measures

Physical Security

Secure facilities with controlled access, surveillance systems, and locked storage for physical records.

Technical Safeguards

Encryption, firewalls, secure servers, and regular security updates to protect electronic data.

Access Controls

Role-based access, unique user credentials, and audit trails to monitor who accesses information.

Staff Training

Regular privacy and security training for all employees who handle patient information.

Data Backup

Regular encrypted backups stored securely to prevent data loss and ensure business continuity.

Incident Response

Comprehensive breach response plan to quickly address and mitigate any security incidents.

Important Security Notice

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute security of information transmitted over the internet or stored electronically.

Your Role: Help protect your information by keeping login credentials confidential, using secure networks, and reporting any suspicious activity immediately.

Children's Privacy

We are committed to protecting the privacy of minors and comply with all applicable laws regarding the treatment of children and adolescents.

Parental Consent & Rights

For patients under 18 years of age, we generally require parental or legal guardian consent before providing treatment or collecting personal information, except in circumstances permitted by law.

Parents and Guardians Have the Right To:

  • Access their child's medical records and treatment information
  • Request amendments to their child's health information
  • Receive notifications about their child's treatment and progress
  • Make decisions about information sharing and disclosure

Adolescent Confidentiality

We recognize that adolescents may have certain privacy rights under state and federal law, particularly regarding substance use disorder treatment and mental health services. We balance these rights with parental involvement to ensure the best outcomes.

Note: In some situations, minors may consent to their own treatment without parental consent, and their information may be protected from parental access. We will explain these circumstances when applicable.

Website Use by Minors

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through our website. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

Contact & Updates

Privacy Officer Contact Information

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to file a complaint, please contact our Privacy Officer:

Email

privacy@recoverycenterca.com

Phone

(555) 123-4567

Mailing Address

Privacy Officer

123 Recovery Way, Suite 100

Los Angeles, CA 90001

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Providing notice to current patients through email or mail
  • Posting notices in our facility

Filing a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights.

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201

Phone: 1-877-696-6775
Website: www.hhs.gov/ocr/privacy

Additional Resources

For more information about your privacy rights and healthcare privacy laws:

Questions About Your Privacy?

Our team is here to help. Contact us anytime to discuss your privacy concerns or learn more about how we protect your information.

Contact Us
Privacy Policy