Privacy Policy

Personal Information You Provide

We may collect personal information that you voluntarily provide to us, including but not limited to:

• Full name, date of birth, and contact information (phone number, email address, mailing address)
• Insurance information and billing details
• Emergency contact information
• Medical history, treatment records, and health-related information
• Information submitted through our online forms, including admissions inquiries, insurance verification requests, and contact forms
• Employment or referral source information

Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and usage, including:

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent on pages, and navigation patterns
• Referring website or search terms that led you to our site
• Cookies, pixel tags, and similar tracking technologies (see Section 7)

Information from Third Parties

We may receive information about you from third parties, including referring healthcare providers, insurance companies, family members (with your consent), and analytics providers.

We use the information we collect for the following purposes:

• Treatment and Care: To provide, coordinate, and manage your addiction treatment and mental health services, including Partial Care (PHP), Intensive Outpatient Programs (IOP), Virtual IOP, and our Mental Health Program
• Admissions and Intake: To process admissions inquiries, verify insurance coverage, and facilitate the enrollment process
• Communication: To respond to your inquiries, send appointment reminders, provide treatment updates, and share relevant health information
• Billing and Insurance: To process payments, submit insurance claims, and manage your financial account
• Quality Improvement: To evaluate and improve the quality of our treatment programs, services, and patient outcomes
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, and accreditation requirements, including CARF accreditation standards
• Website Improvement: To analyze usage patterns and optimize our website experience
• Safety: To protect the health and safety of our patients, staff, and the public as required or permitted by law

We do not sell your personal information. We may share your information in the following circumstances:

• For Treatment, Payment, and Healthcare Operations: We may share your PHI with other healthcare providers involved in your care, insurance companies for payment purposes, and for internal quality improvement and operational activities, as permitted under HIPAA
• With Your Consent: We may share your information when you provide written authorization, such as sharing treatment updates with designated family members or transferring records to another provider
• Service Providers: We may share information with trusted third-party vendors who assist us in operating our website, processing payments, or delivering services, provided they agree to keep your information confidential
• Legal Requirements: We may disclose your information when required by law, court order, or governmental regulation, or when necessary to protect the rights, safety, or property of Valley Spring Recovery Center, our patients, or others
• Emergency Situations: We may disclose information to prevent or lessen a serious and imminent threat to the health or safety of a person or the public

42 CFR Part 2 Protections: As a substance use disorder treatment program, we comply with federal regulations (42 CFR Part 2) that provide additional confidentiality protections for substance use disorder patient records. These records receive heightened protection and generally cannot be disclosed without your written consent, except in limited circumstances defined by law.

Valley Spring Recovery Center complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act. As a covered entity, we maintain the privacy and security of your protected health information (PHI) in accordance with federal regulations.

Our HIPAA compliance measures include:

• Maintaining a designated Privacy Officer responsible for overseeing HIPAA compliance
• Providing a separate Notice of Privacy Practices (NPP) that details how your medical information may be used and disclosed
• Training all workforce members on HIPAA privacy and security requirements
• Implementing administrative, physical, and technical safeguards to protect electronic PHI (ePHI)
• Executing Business Associate Agreements (BAAs) with all third-party vendors who access PHI
• Maintaining breach notification procedures as required by the HITECH Act

A copy of our Notice of Privacy Practices is available upon request and is provided to all patients at the time of admission. You may request a copy by contacting our Privacy Officer at (201) 781-8812.

Under HIPAA and applicable state laws, you have the following rights regarding your health information:

• Right to Access: You have the right to inspect and obtain a copy of your medical records and other health information we maintain about you
• Right to Amend: You may request that we amend your health information if you believe it is incorrect or incomplete
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your health information
• Right to Request Restrictions: You may ask us to restrict how we use or disclose your health information for treatment, payment, or healthcare operations
• Right to Confidential Communications: You may request that we communicate with you about health matters through a specific method or at a specific location
• Right to a Paper Copy: You have the right to obtain a paper copy of our Notice of Privacy Practices at any time
• Right to Revoke Authorization: If you have provided written authorization for us to use or disclose your information, you may revoke that authorization in writing at any time
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights

To exercise any of these rights, please contact us using the information provided in the Contact Us section below. We will respond to your request within the timeframe required by applicable law.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from.

Types of Cookies We Use

• Essential Cookies: Required for the website to function properly, including session management and security features. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings to provide a more personalized experience
• Advertising Cookies: May be used to deliver relevant advertisements and track campaign performance. We take special care to ensure that advertising technologies are not used to re-identify or target individuals based on health conditions or treatment status.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be alerted when a cookie is being placed. Please note that disabling certain cookies may affect the functionality of our website.

We do not use cookies or tracking technologies to collect or transmit protected health information (PHI). Our advertising practices comply with HIPAA requirements regarding the use of tracking technologies in healthcare.

We implement a combination of administrative, technical, and physical security measures designed to protect your personal information and PHI from unauthorized access, use, or disclosure.

Our security measures include:

• SSL/TLS encryption for all data transmitted through our website
• Encrypted storage of electronic health records and sensitive data
• Role-based access controls limiting information access to authorized personnel
• Regular security assessments and vulnerability testing
• Employee training on data security and privacy best practices
• Physical security measures at our facility, including secure records storage
• Incident response procedures for addressing potential data breaches

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your data but are committed to continually improving our security practices.

Our website and services are not directed to individuals under the age of 18. Valley Spring Recovery Center provides treatment services for adults aged 18 and older. We do not knowingly collect personal information from children under 18 through our website.

If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information from our records as promptly as possible. If you believe that we may have collected information from a minor, please contact us immediately using the information provided in the Contact Us section.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

If we make changes that significantly affect how we handle your protected health information, we will provide you with direct notice as required by applicable law.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Valley Spring Recovery Center
830 Broadway
Norwood, NJ 07648

Phone: (201) 781-8812

If you believe your privacy rights have been violated, you also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting www.hhs.gov/ocr/privacy or calling 1-877-696-6775.

We take all privacy complaints seriously and will investigate and respond to your concerns in a timely manner. You will not be retaliated against for filing a complaint.