Privacy Policy

Introduction

Valley Spring Recovery Center ("Valley Spring," "we," "us," or "our") is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, contact us, or receive services at our facility.

By accessing our website or utilizing our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our website or services.

Valley Spring Recovery Center is a CARF-accredited outpatient addiction and mental health treatment center located at 830 Broadway, Norwood, NJ 07648. We provide Partial Care (PHP), Intensive Outpatient (IOP), Virtual IOP, and Mental Health programs to individuals seeking recovery from substance use disorders and co-occurring mental health conditions.

Information We Collect

We collect information in several ways depending on how you interact with Valley Spring Recovery Center. The types of information we may collect include:

Personal Information You Provide Directly

• Full name, date of birth, and contact information (address, phone number, email)
• Insurance information and billing details
• Emergency contact information
• Information submitted through our website forms, including insurance verification requests, appointment inquiries, and contact forms
• Employment and referral source information

Protected Health Information (PHI)

• Medical and behavioral health history
• Substance use history and treatment records
• Diagnoses, treatment plans, progress notes, and discharge summaries
• Lab results, medication records, and clinical assessments
• Information related to participation in our treatment programs

Information Collected Automatically

• IP address, browser type, and operating system
• Pages visited, time spent on pages, and referring URLs
• Device identifiers and general geographic location
• Cookies and similar tracking technologies (see Section 7)

How We Use Your Information

Valley Spring Recovery Center uses the information we collect for the following purposes:

• Treatment and Care: To provide, coordinate, and manage your addiction treatment and mental health services, including creating individualized treatment plans and facilitating care transitions
• Payment and Billing: To process insurance claims, verify coverage, send invoices, and manage billing-related communications
• Healthcare Operations: To support quality improvement initiatives, staff training, compliance auditing, accreditation processes (including CARF), and business management
• Communication: To respond to your inquiries, schedule appointments, send appointment reminders, and provide information about our programs and services
• Website Improvement: To analyze how visitors use our website so we can improve functionality, content, and user experience
• Legal Compliance: To fulfill our obligations under applicable federal and state laws, including HIPAA, 42 CFR Part 2, and New Jersey state regulations
• Safety and Security: To protect the rights, safety, and property of Valley Spring, our patients, staff, and visitors

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: We will share your health information with third parties when you provide written authorization, which you may revoke at any time
• For Treatment: With other healthcare providers involved in your care, such as primary care physicians, psychiatrists, or referral sources, when appropriate consent is obtained
• For Payment: With your insurance company or other payers to obtain authorization for treatment, process claims, and resolve billing matters
• For Healthcare Operations: With entities that assist with accreditation, quality assurance, auditing, and legal compliance
• As Required by Law: When disclosure is required by federal, state, or local law, including mandatory reporting obligations
• Service Providers: With trusted third-party vendors who assist with website hosting, analytics, electronic health records, and other operational functions, subject to confidentiality agreements
• Emergency Situations: When necessary to prevent or lessen a serious and imminent threat to your health or safety or that of another person

Important: Substance use disorder treatment records maintained by Valley Spring are protected under federal regulation 42 CFR Part 2, which imposes stricter confidentiality requirements than standard HIPAA rules. These records cannot be disclosed without your specific written consent except in limited circumstances authorized by law.

HIPAA Compliance

In addition to HIPAA, Valley Spring adheres to the following regulatory frameworks:

• 42 CFR Part 2: Federal regulations governing the confidentiality of substance use disorder patient records, which provide additional protections beyond HIPAA
• New Jersey State Privacy Laws: Including the New Jersey Consumer Privacy Act and state health information regulations
• CARF International Standards: Our accreditation requires adherence to rigorous standards regarding patient confidentiality and data management

We train all staff members on HIPAA compliance, conduct regular risk assessments, and maintain a designated Privacy Officer to oversee our privacy practices and address any concerns.

Your Rights

Under HIPAA and applicable state law, you have the following rights regarding your personal and health information:

• Right to Access: You may request access to and obtain a copy of your health records maintained by Valley Spring
• Right to Amend: You may request that we correct or amend inaccurate or incomplete information in your health records
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your health information
• Right to Request Restrictions: You may request restrictions on how we use or disclose your health information, although we are not always required to agree to such restrictions
• Right to Confidential Communications: You may request that we communicate with you regarding your health information through a specific method or at a specific location
• Right to a Paper Copy: You may request a paper copy of our Notice of Privacy Practices at any time
• Right to Revoke Authorization: If you have provided written authorization for us to disclose your health information, you may revoke that authorization at any time in writing
• Right to File a Complaint: You have the right to file a complaint with Valley Spring or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint

To exercise any of these rights, please contact our Privacy Officer using the contact information provided in Section 11 of this policy.

Cookies and Tracking

Our website uses cookies and similar technologies to improve your browsing experience, analyze site traffic, and understand how visitors interact with our content. Cookies are small text files stored on your device when you visit a website.

Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, such as page navigation and access to secure areas. These cannot be disabled
• Analytics Cookies: Help us understand how visitors interact with our website by collecting information about pages visited, time on site, and referral sources. We use Google Analytics and similar tools for this purpose
• Functional Cookies: Remember your preferences and settings to provide a more personalized experience

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically choose to block or delete cookies; however, doing so may affect the functionality of our website. For more information about managing cookies, visit your browser's help documentation.

We may also use tracking pixels, web beacons, and similar technologies in emails or on our website to understand engagement and improve our communications. These tools do not collect personally identifiable health information.

Data Security

Valley Spring Recovery Center takes the security of your information seriously. We implement a range of administrative, technical, and physical safeguards to protect your personal and health information from unauthorized access, use, alteration, or disclosure.

Our security measures include, but are not limited to:

• Encryption of data in transit and at rest using industry-standard protocols (SSL/TLS)
• Secure, access-controlled electronic health record systems
• Role-based access controls that limit information access to authorized personnel only
• Regular security assessments and vulnerability testing
• Staff training on data security best practices and HIPAA compliance
• Physical safeguards at our facility, including secure storage of paper records and controlled access areas
• Incident response procedures for investigating and addressing any suspected data breaches

While we strive to protect your information using commercially reasonable measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to promptly notifying you and applicable authorities in the event of a data breach, as required by law.

Children's Privacy

Our website and services are not directed to individuals under the age of 18. Valley Spring Recovery Center does not knowingly collect personal information from children under 18 through our website.

Our treatment programs serve adults aged 18 and older. If we become aware that we have inadvertently collected personal information from a child under 18 through our website, we will take steps to delete that information as promptly as possible.

If you are a parent or guardian and believe your child has provided personal information to us through our website, please contact us immediately using the information provided in Section 11.

Changes to This Policy

Valley Spring Recovery Center reserves the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page and post the revised policy on our website.

For material changes that significantly affect how we handle your personal or health information, we will make reasonable efforts to provide additional notice, such as posting a prominent announcement on our website or notifying you directly if we have your contact information.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after any changes to this policy constitutes your acceptance of the updated terms.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights regarding your personal or health information, or need to file a complaint, please contact us: