Privacy Policy

1. Introduction

Welcome to Valley Spring Recovery Center ("we," "our," or "us"). We are committed to protecting the privacy and confidentiality of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, contact us for services, or participate in our treatment programs.

Valley Spring Recovery Center provides outpatient addiction treatment and mental health services at our facility located in Norwood, New Jersey. We understand the sensitive nature of behavioral health treatment and take our responsibility to protect your information seriously.

By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or services.

2. Information We Collect

Personal Information You Provide

We may collect personally identifiable information that you voluntarily provide to us when you:

• Fill out a contact form or insurance verification request
• Call our admissions line at (201) 781-8812
• Submit an inquiry through our website
• Enroll in one of our treatment programs
• Subscribe to our newsletter or blog updates
• Apply for employment or career opportunities

This information may include your name, phone number, email address, mailing address, date of birth, insurance information, and other details relevant to your inquiry or treatment.

Protected Health Information (PHI)

When you participate in our treatment programs, we collect Protected Health Information as defined by HIPAA, including medical history, treatment records, diagnoses, prescriptions, and other clinical documentation. The handling of PHI is governed by our Notice of Privacy Practices, which is provided to all clients upon admission.

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing activity, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent on pages, and navigation paths
• Referring website or search terms used to find us
• Device type (desktop, mobile, tablet) and screen resolution

3. How We Use Your Information

We use the information we collect for the following purposes:

• Treatment Services: To provide, coordinate, and manage your addiction treatment and mental health care, including Partial Care (PHP), Intensive Outpatient (IOP), Virtual IOP, and Mental Health programs
• Insurance Verification: To verify your insurance coverage and process claims with your insurance provider
• Communication: To respond to your inquiries, schedule assessments, send appointment reminders, and provide information about our services
• Website Improvement: To analyze website usage patterns, improve our content and user experience, and ensure our website functions properly
• Legal Compliance: To comply with applicable federal and state laws, regulations, and accreditation requirements, including CARF accreditation standards
• Quality Assurance: To evaluate and improve the quality of our clinical programs and patient outcomes
• Safety: To protect the health and safety of our clients, staff, and the public when required or permitted by law

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• Treatment Coordination: With healthcare providers involved in your care, with your written consent as required by 42 CFR Part 2 and HIPAA
• Insurance and Billing: With your insurance company for coverage verification, claims processing, and payment, as authorized by you
• Service Providers: With trusted third-party vendors who assist us in operating our website, conducting our business, or serving our clients, provided they agree to keep your information confidential
• Legal Requirements: When required by law, court order, or governmental regulation, or to protect our rights, property, or safety
• Emergencies: When necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public
• De-identified Data: We may share aggregated, de-identified data that cannot reasonably be used to identify you for research, analytics, or public health purposes

Special Protection for Substance Use Disorder Records: Federal regulation 42 CFR Part 2 provides additional protections for substance use disorder treatment records. These records receive stricter confidentiality protections than other medical records and cannot be disclosed without your specific written consent, except in limited circumstances defined by law.

5. HIPAA Compliance

Valley Spring Recovery Center complies with the Health Insurance Portability and Accountability Act (HIPAA) and all applicable federal and state privacy regulations. As a healthcare provider, we maintain strict protocols to protect your Protected Health Information (PHI).

Our HIPAA compliance program includes:

• Designated Privacy Officer responsible for privacy practices and compliance
• Regular workforce training on HIPAA regulations and privacy policies
• Physical, administrative, and technical safeguards to protect PHI
• Business Associate Agreements with all third-party vendors who access PHI
• Breach notification procedures in accordance with the HITECH Act
• Policies and procedures that are reviewed and updated regularly

You have the right to receive a copy of our Notice of Privacy Practices, which describes in detail how your medical information may be used and disclosed and how you can access this information. You may request a copy at any time by contacting our office.

6. Your Rights

Under HIPAA and applicable state laws, you have the following rights regarding your health information:

• Right to Access: You may request a copy of your medical records and personal information that we maintain about you
• Right to Amend: You may request that we correct or update inaccurate or incomplete information in your records
• Right to Restrict: You may request restrictions on how we use or disclose your information for treatment, payment, or healthcare operations
• Right to an Accounting: You may request a list of certain disclosures we have made of your health information
• Right to Confidential Communications: You may request that we communicate with you through specific means or at a specific location
• Right to Revoke Authorization: If you have provided written authorization for a specific use or disclosure, you may revoke that authorization at any time in writing
• Right to File a Complaint: You may file a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated

To exercise any of these rights, please contact us using the information provided in the Contact Us section below. We will respond to your request within 30 days, as required by law.

7. Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files placed on your device that help us understand how visitors interact with our website.

Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly, including security features and accessibility preferences
• Analytics Cookies: Help us understand how visitors navigate and use our website so we can improve content and functionality
• Functional Cookies: Remember your preferences and settings to provide a more personalized experience

Third-Party Services

We may use third-party analytics services such as Google Analytics to collect and analyze website usage data. These services may use cookies and similar technologies to collect information about your browsing activity. This information is used to evaluate website usage, compile reports, and help us improve our website.

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before cookies are stored. Please note that disabling cookies may affect the functionality of certain parts of our website.

8. Data Security

We implement a variety of physical, technical, and administrative security measures to protect your personal information and health records from unauthorized access, use, or disclosure. These measures include:

• Encryption of sensitive data transmitted through our website using SSL/TLS protocols
• Secure electronic health record systems with access controls and audit trails
• Physical security measures at our facility, including restricted access to records and workstations
• Regular security assessments and vulnerability testing
• Workforce training on information security best practices
• Incident response procedures for potential data breaches

While we strive to protect your information using commercially reasonable measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining the highest standards of data protection in compliance with HIPAA and industry best practices.

9. Children's Privacy

Our website is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13 through our website. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately so we can take appropriate action.

For adolescents aged 13 and older who may participate in our treatment programs, the collection and handling of their health information is governed by applicable state and federal laws, including additional protections for minors in behavioral health treatment.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other operational needs. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is being handled, please contact us:

If you believe your privacy rights have been violated, you may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting www.hhs.gov/hipaa/filing-a-complaint or calling 1-877-696-6775.