HIPAA Privacy Policy

Create Recovery Center

Create Recovery Center is committed to protecting your privacy and ensuring the confidentiality of your behavioral health information. This policy explains how your information is collected, used, stored, and shared, along with your rights under applicable privacy laws.

We follow all federal and state regulations, including the Health Insurance Portability and Accountability Act (HIPAA), to safeguard your personal and health information at every stage of care.

Our Legal Responsibilities

Create Recovery Center is required by law to:

  • Maintain the privacy of your protected health information (PHI)
  • Provide you with this notice of our legal duties and privacy practices
  • Follow the terms of the policy currently in effect
  • Notify you in the event of a breach involving unsecured health information

We uphold strict standards across all aspects of treatment, communication, and recordkeeping to ensure your information remains secure.

What Is Protected Health Information (PHI)?

Protected Health Information (PHI) includes any information that identifies you and relates to your physical or mental health, the care you receive, or payment for that care.

This may include:

  • Clinical assessments and diagnoses
  • Therapy notes and progress records
  • Treatment plans and medical documentation
  • Appointment history
  • Insurance and billing details
  • Communication related to your care

PHI may exist in electronic, written, or verbal form.

How We Use and Disclose Your Information

Treatment

Your information may be used to provide, coordinate, and manage your care. This includes communication between therapists, medical professionals, and your care team.

When necessary, we may share information with external providers to ensure continuity and quality of care.

Payment

We may use your information to:

  • Verify insurance coverage
  • Obtain prior authorizations
  • Submit claims to insurance providers
  • Process payments for services

This may involve sharing limited information with insurers or third-party billing partners.

Signs of a Mental Health Condition

Your information may be used for internal purposes such as:

  • Program development and improvement
  • Staff training and supervision
  • Compliance, licensing, and accreditation
  • Quality assurance reviews

These efforts help us maintain high standards of care.

Additional Uses and Disclosures

We may use or disclose your information without written authorization in certain situations:

As Required by Law

When disclosure is required by federal, state, or local regulations.

Public Health and Safety

To report abuse or neglect, prevent disease, or address serious threats to health or safety.

Health Oversight Activities

For audits, inspections, or investigations by regulatory agencies

Legal Proceedings

In response to court orders, subpoenas, or lawful legal processes.

Law Enforcement

Under specific legal conditions, such as locating individuals or responding to official requests.

Emergency Situations

To prevent immediate harm to you or others, limited information may be shared as necessary.

Uses That Require Your Authorization

Certain uses of your information require your written consent, including:

  • Sharing psychotherapy notes beyond standard uses
  • Marketing communications
  • Any disclosures not otherwise permitted by HIPAA

You may revoke your authorization at any time in writing. This will not affect actions already taken.

Right to Request Amendments

You have the following rights:

Right to Access

Request to review or obtain a copy of your health records.

Right to Request Amendments

Request corrections if information is inaccurate or incomplete.

Right to an Accounting of Disclosures

Receive a list of disclosures made outside of treatment, payment, or operations.

Right to Request Restrictions

Request limits on how your information is used or shared (subject to approval).

Right to Confidential Communications

Request communication via preferred methods (phone, email, alternate address).

Right to a Copy of This Notice

Request a copy of this policy at any time.

How We Protect Your Information

Create Recovery Center implements comprehensive safeguards to protect your data

Administrative Safeguards

  • Staff training on privacy and confidentiality
  • Role-based access controls
  • Internal compliance policies

Technical Safeguards

  • Secure electronic health record systems
  • Encryption and password protection
  • Controlled digital access

Physical Safeguards

  • Secure storage of records
  • Restricted facility access
  • Proper disposal of sensitive documents

We continuously update our systems and protocols to maintain compliance and security.

Breach Notification

If your unsecured health information is compromised, you will be notified as required by law. This notification will include:

  • What happened
  • The type of information involved
  • Steps you can take to protect yourself
  • Actions we are taking to resolve the issue

 

Changes to This Policy

Create Recovery Center reserves the right to update this policy at any time. Updates will apply to all information we maintain, and the latest version will always be available upon request or on our website.

 

 

Complaints and Contact Information

If you believe your privacy rights have been violated, you may file a complaint with Create Recovery Center or with the U.S. Department of Health and Human Services. Filing a complaint will not affect your care.

For questions, concerns, or privacy-related requests, contact: