HIPAA Privacy Policy
Create Recovery Center
Create Recovery Center is committed to protecting your privacy and ensuring the confidentiality of your behavioral health information. This policy explains how your information is collected, used, stored, and shared, along with your rights under applicable privacy laws.
We follow all federal and state regulations, including the Health Insurance Portability and Accountability Act (HIPAA), to safeguard your personal and health information at every stage of care.
Our Legal Responsibilities
Create Recovery Center is required by law to:
- Maintain the privacy of your protected health information (PHI)
- Provide you with this notice of our legal duties and privacy practices
- Follow the terms of the policy currently in effect
- Notify you in the event of a breach involving unsecured health information
We uphold strict standards across all aspects of treatment, communication, and recordkeeping to ensure your information remains secure.
What Is Protected Health Information (PHI)?
Protected Health Information (PHI) includes any information that identifies you and relates to your physical or mental health, the care you receive, or payment for that care.
This may include:
- Clinical assessments and diagnoses
- Therapy notes and progress records
- Treatment plans and medical documentation
- Appointment history
- Insurance and billing details
- Communication related to your care
PHI may exist in electronic, written, or verbal form.
How We Use and Disclose Your Information
Treatment
Your information may be used to provide, coordinate, and manage your care. This includes communication between therapists, medical professionals, and your care team.
When necessary, we may share information with external providers to ensure continuity and quality of care.
Payment
We may use your information to:
- Verify insurance coverage
- Obtain prior authorizations
- Submit claims to insurance providers
- Process payments for services
This may involve sharing limited information with insurers or third-party billing partners.
Signs of a Mental Health Condition
Your information may be used for internal purposes such as:
- Program development and improvement
- Staff training and supervision
- Compliance, licensing, and accreditation
- Quality assurance reviews
These efforts help us maintain high standards of care.
Additional Uses and Disclosures
We may use or disclose your information without written authorization in certain situations:
As Required by Law
When disclosure is required by federal, state, or local regulations.
Public Health and Safety
To report abuse or neglect, prevent disease, or address serious threats to health or safety.
Health Oversight Activities
For audits, inspections, or investigations by regulatory agencies
Legal Proceedings
In response to court orders, subpoenas, or lawful legal processes.
Law Enforcement
Under specific legal conditions, such as locating individuals or responding to official requests.
Emergency Situations
To prevent immediate harm to you or others, limited information may be shared as necessary.
Uses That Require Your Authorization
Certain uses of your information require your written consent, including:
- Sharing psychotherapy notes beyond standard uses
- Marketing communications
- Any disclosures not otherwise permitted by HIPAA
You may revoke your authorization at any time in writing. This will not affect actions already taken.
Right to Request Amendments
You have the following rights:
Right to Access
Request to review or obtain a copy of your health records.
Right to Request Amendments
Request corrections if information is inaccurate or incomplete.
Right to an Accounting of Disclosures
Receive a list of disclosures made outside of treatment, payment, or operations.
Right to Request Restrictions
Request limits on how your information is used or shared (subject to approval).
Right to Confidential Communications
Request communication via preferred methods (phone, email, alternate address).
Right to a Copy of This Notice
Request a copy of this policy at any time.
How We Protect Your Information
Create Recovery Center implements comprehensive safeguards to protect your data
Administrative Safeguards
- Staff training on privacy and confidentiality
- Role-based access controls
- Internal compliance policies
Technical Safeguards
- Secure electronic health record systems
- Encryption and password protection
- Controlled digital access
Physical Safeguards
- Secure storage of records
- Restricted facility access
- Proper disposal of sensitive documents
We continuously update our systems and protocols to maintain compliance and security.
Breach Notification
If your unsecured health information is compromised, you will be notified as required by law. This notification will include:
- What happened
- The type of information involved
- Steps you can take to protect yourself
- Actions we are taking to resolve the issue
Changes to This Policy
Create Recovery Center reserves the right to update this policy at any time. Updates will apply to all information we maintain, and the latest version will always be available upon request or on our website.
Complaints and Contact Information
If you believe your privacy rights have been violated, you may file a complaint with Create Recovery Center or with the U.S. Department of Health and Human Services. Filing a complaint will not affect your care.
For questions, concerns, or privacy-related requests, contact: