Privacy Policy

1. Introduction

Uplift Sobriety (“we,” “us,” or “our”) is committed to protecting your privacy and safeguarding your personal health information. This Privacy Policy describes how we collect, use, disclose, and protect information that we gather through our website, services, and treatment programs.

As a substance use disorder (SUD) treatment provider licensed by the California Department of Health Care Services (DHCS), we comply with all applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA), 42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records), the California Consumer Privacy Act (CCPA), the Telephone Consumer Protection Act (TCPA), and all other applicable regulations.

2. Information We Collect

We may collect the following categories of information:

• Personal Identification Information: Name, email address, phone number, date of birth, mailing address.
• Insurance Information: Insurance provider, policy number, group number, subscriber information for the purpose of verifying insurance coverage for treatment services.
• Health Information: Information related to substance use history, mental health conditions, medical history, and treatment needs, collected only with your explicit consent and as necessary for treatment planning.
• Website Usage Data: IP address, browser type, pages visited, time spent on pages, referring URLs, and similar analytics data collected through cookies and similar technologies.
• Communication Records: Records of inquiries, form submissions, phone calls, and other communications with our staff.

3. How We Use Your Information

We use collected information for the following purposes:

• To provide, administer, and improve our treatment services
• To verify insurance coverage and process claims
• To respond to your inquiries and contact requests
• To communicate with you about treatment options and services
• To comply with legal and regulatory requirements
• To analyze website usage and improve our online experience
• To protect the safety and security of our patients, staff, and operations

We do not use your information for patient brokering, lead selling, or any purpose not directly related to providing you with treatment services or responding to your inquiry.

4. HIPAA and 42 CFR Part 2 Compliance

As a SUD treatment provider, we are subject to enhanced privacy protections under 42 CFR Part 2, which provides stricter confidentiality requirements than HIPAA for substance use disorder patient records. Under these regulations:

• Your SUD treatment records are protected with the highest level of federal confidentiality.
• We cannot disclose that you are or were a patient, or any information identifying you as having a substance use disorder, without your specific written consent, except in limited circumstances permitted by law.
• Your records may not be used to investigate or prosecute you for any criminal activity.
• Any disclosure made with your consent must be accompanied by a written statement prohibiting re-disclosure.
• We maintain a Notice of Privacy Practices detailing your rights under HIPAA, which is provided upon intake.

5. Disclosure of Information

We may disclose your information only in the following circumstances:

• With Your Written Consent: We will share your SUD treatment records only with your specific, informed, written consent as required by 42 CFR Part 2.
• For Treatment, Payment, and Healthcare Operations: As permitted by HIPAA and with appropriate safeguards.
• As Required by Law: Including court orders, medical emergencies posing an immediate threat to health or safety, reporting suspected child abuse or neglect, and audits or evaluations by authorized government agencies.
• To Business Associates: Third parties who perform services on our behalf and are bound by HIPAA Business Associate Agreements.

We do not sell, rent, or trade your personal information or health records to third parties for marketing purposes. We do not share patient information with lead generation companies, patient brokers, or any entity for the purpose of soliciting patients.

6. Your Rights

You have the following rights regarding your information:

• Right to Access: You may request access to your health records and personal information we maintain.
• Right to Amend: You may request corrections to inaccurate information in your records.
• Right to Restrict: You may request restrictions on certain uses and disclosures of your information.
• Right to Accounting: You may request an accounting of certain disclosures of your health information.
• Right to Revoke Consent: You may revoke any written consent for disclosure at any time, except where disclosures have already been made in reliance on your prior consent.
• Right to Complain: You may file a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.
• California Residents (CCPA): Under CCPA, you have additional rights including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

7. Consent to Contact (TCPA Disclosure)

When you submit a form on our website (including the contact form or insurance verification form), you provide your express written consent for Uplift Sobriety and its authorized representatives to contact you by:

• Telephone (including calls to mobile devices using automated dialing technology or prerecorded/artificial voice messages)
• Text message / SMS
• Email

at the contact information you provide, for the purpose of responding to your inquiry, verifying insurance coverage, and communicating about our treatment services. This consent is not a condition of receiving treatment. You may revoke your consent at any time by calling (888) 589-2073. Standard message and data rates may apply.

8. Marketing Practices

Uplift Sobriety is committed to ethical marketing practices in full compliance with LegitScript certification standards, FTC guidelines, and all applicable advertising regulations:

• We do not use your protected health information (PHI) for marketing purposes without your express written authorization.
• We do not sell, trade, or share patient contact information with third-party marketing companies, lead generators, or patient brokers.
• Any marketing communications you receive from us will be related to your inquiry or treatment and will include clear opt-out instructions.
• We do not use deceptive marketing tactics, make guarantees of treatment outcomes, or misrepresent our services in any advertising.

9. Data Security

We implement appropriate technical, administrative, and physical safeguards to protect your information from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, staff training on privacy and security, regular security assessments, and secure data storage systems. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to analyze website traffic and usage patterns, improve our website functionality, and deliver relevant content. You can control cookie preferences through your browser settings. We do not use cookies to collect protected health information. Third-party analytics services may collect anonymized usage data subject to their own privacy policies.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

12. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a revised “Last Updated” date. Your continued use of our website and services after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our privacy practices, please contact our Privacy Officer:

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by calling 1-800-368-1019 or visiting hhs.gov/ocr.