Privacy Policy

Valley Spring Recovery Center ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, use our services, or otherwise interact with us.

Valley Spring Recovery Center is an outpatient addiction and mental health treatment center located in Norwood, New Jersey. We provide Partial Hospitalization (PHP), Intensive Outpatient (IOP), Virtual IOP, and Mental Health programs. As a healthcare provider, we are subject to the Health Insurance Portability and Accountability Act (HIPAA) and maintain strict standards for the protection of your health information.

By accessing or using our website and services, you agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please do not use our website or services.

We may collect the following types of information when you interact with our website and services:

We collect this information through direct interactions (when you fill out forms, call us, or communicate with us), automated technologies (cookies, web beacons, analytics tools), and third-party sources (insurance providers, referring healthcare professionals, with your consent).

We use the information we collect for the following purposes:

• Treatment & Care: To provide, coordinate, and manage your addiction and mental health treatment, including assessments, therapy sessions, medication management, and care planning
• Insurance Verification: To verify your insurance coverage, process claims, and obtain authorizations for treatment services
• Admissions & Intake: To process your inquiries, assess eligibility for our programs, and facilitate the admissions process
• Communication: To contact you about appointments, treatment updates, aftercare planning, and respond to your questions or requests
• Quality Improvement: To evaluate and improve the quality of our treatment programs, staff training, and patient outcomes
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, including HIPAA, state licensing requirements, and mandatory reporting obligations
• Website Improvement: To analyze website usage patterns, optimize user experience, and ensure our website functions properly
• Safety & Security: To protect against fraud, unauthorized access, and other threats to you and our organization

We do not sell your personal information. We may share your information in the following circumstances:

• Treatment Operations: With healthcare providers, specialists, and clinical staff directly involved in your care and treatment coordination
• Insurance & Payment: With your insurance company or third-party payers to obtain authorization and process payment for services rendered
• Legal Requirements: When required by law, including responses to subpoenas, court orders, or regulatory investigations
• Emergency Situations: To prevent or lessen a serious and imminent threat to your health or safety, or the health or safety of others
• Business Associates: With third-party service providers who perform services on our behalf (e.g., electronic health records systems, billing services), under strict contractual obligations to protect your information
• With Your Consent: We may share your information for purposes not described in this policy only with your explicit written authorization

Under federal regulation 42 CFR Part 2, records relating to substance use disorder treatment are afforded additional confidentiality protections. These records may not be disclosed without your written consent, except in limited circumstances permitted by law.

As a HIPAA-covered entity, we are required to:

• Maintain the privacy and security of your Protected Health Information (PHI)
• Provide you with a Notice of Privacy Practices describing how we may use and disclose your health information
• Notify you in the event of a breach of your unsecured PHI
• Follow the terms of our current Notice of Privacy Practices
• Ensure that our business associates agree to safeguard your PHI through signed Business Associate Agreements

Our full Notice of Privacy Practices is available at our facility and will be provided to you upon admission. You may also request a copy at any time by contacting our office.

Under HIPAA and applicable state laws, you have the following rights regarding your health information:

• Right to Access: You may request access to and obtain a copy of your medical records and other health information we maintain about you
• Right to Amend: You may request that we correct or update your health information if you believe it is inaccurate or incomplete
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your health information for purposes other than treatment, payment, and healthcare operations
• Right to Request Restrictions: You may request restrictions on how we use or disclose your health information for treatment, payment, or healthcare operations
• Right to Confidential Communications: You may request that we communicate with you about health matters through a specific method or at a certain location
• Right to Revoke Authorization: If you have provided written authorization for the use or disclosure of your information, you may revoke that authorization at any time in writing
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights

To exercise any of these rights, please contact our Privacy Officer using the contact information provided at the end of this policy.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. These technologies include:

• Essential Cookies: Required for the website to function properly, including session management and security features. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymized usage data (e.g., Google Analytics). This data includes pages visited, time on site, and referral sources.
• Functional Cookies: Remember your preferences and settings to provide a personalized experience, such as language selection or form pre-fill.

We do not use cookies to collect Protected Health Information (PHI) or track your activity across other websites for targeted advertising purposes related to substance use or mental health treatment.

Most web browsers allow you to manage cookie preferences through their settings. You can choose to block or delete cookies; however, doing so may affect the functionality of our website. For more information about managing cookies, visit your browser's help section.

We implement industry-standard security measures to protect your personal and health information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All data transmitted through our website is encrypted using SSL/TLS (Secure Socket Layer/Transport Layer Security) technology
• Access Controls: Access to personal and health information is restricted to authorized personnel who need it to perform their job functions
• Staff Training: All employees receive regular training on HIPAA compliance, data privacy, and security best practices
• Physical Safeguards: Paper records and physical media containing sensitive information are stored in secure, access-controlled locations
• Incident Response: We maintain procedures for identifying, responding to, and mitigating security incidents and data breaches

While we take reasonable precautions to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security concerns or breaches in accordance with applicable laws.

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Valley Spring Recovery Center provides treatment services to adults aged 18 and older.

If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as promptly as possible. If you believe we may have collected information from a child under 13, please contact us immediately using the information provided below.

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

If changes materially affect how we handle your Protected Health Information, we will provide notice through our website and, where required, obtain your consent before applying changes to information previously collected.