Privacy Policy

1. HIPAA Compliance

As a healthcare provider, KCA Advisors complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and all applicable federal and state privacy laws. We are also subject to 42 CFR Part 2, which provides additional confidentiality protections for individuals receiving substance use disorder treatment.

Your protected health information (PHI) is safeguarded according to the highest standards of privacy and security. We maintain comprehensive policies and procedures to ensure compliance with all applicable regulations.

2. Information We Collect

2.1 Personal Health Information

When you receive treatment at our facility, we collect and maintain health information necessary to provide quality care, including:

• Demographic information (name, date of birth, address, contact information)
• Medical history and current health conditions
• Mental health and substance use history
• Treatment plans, progress notes, and clinical assessments
• Medication records and laboratory results
• Insurance and billing information
• Emergency contact information

2.2 Website Information

When you visit our website, we may automatically collect certain information, including:

• IP address and browser type
• Pages visited and time spent on pages
• Referring website addresses
• Device information (computer, mobile device, operating system)
• Cookies and similar tracking technologies

2.3 Information You Provide

We collect information you voluntarily provide through:

• Contact forms and email inquiries
• Phone calls to our admissions line
• Insurance verification requests
• Newsletter subscriptions

3. How We Use Your Information

3.1 Treatment Purposes

We use your protected health information to:

• Provide, coordinate, and manage your addiction treatment and related services
• Conduct clinical assessments and develop treatment plans
• Communicate with you about your care
• Coordinate with other healthcare providers involved in your treatment (with your authorization)
• Manage medications and monitor your progress

3.2 Payment Purposes

We use your information to:

• Process insurance claims and verify benefits
• Bill for services provided
• Collect payment for treatment
• Respond to insurance audits and requests for information

3.3 Healthcare Operations

We may use your information for:

• Quality assessment and improvement activities
• Staff training and education
• Regulatory compliance and accreditation
• Business planning and development
• Customer service and communication

3.4 Website and Marketing

Information collected through our website may be used to:

• Respond to your inquiries and provide requested information
• Improve our website functionality and user experience
• Send newsletters and educational materials (with your consent)
• Analyze website traffic and usage patterns

4. Disclosure of Your Information

4.1 Authorization Required

Under 42 CFR Part 2, we cannot confirm or deny your presence at our facility or disclose any information about your substance use disorder treatment without your specific written authorization, except in limited circumstances permitted by law.

4.2 Permitted Disclosures Without Authorization

We may disclose your information without authorization only in the following limited situations:

• Medical Emergency: To medical personnel to the extent necessary to meet a bona fide medical emergency
• Research: For research activities, provided all identifying information is removed or the research meets specific regulatory requirements
• Audit and Evaluation: To authorized persons for program audit or evaluation purposes
• Court Order: Pursuant to a valid court order that meets specific legal criteria
• Crime on Premises: To report a crime committed on our premises or against personnel
• Child Abuse/Neglect: To report suspected child abuse or neglect as required by state law

4.3 Business Associates

We may share your information with business associates who perform services on our behalf (such as billing companies, laboratory services, or IT providers). These business associates are required by contract to safeguard your information and use it only for authorized purposes.

5. Your Rights

You have the following rights regarding your protected health information:

5.1 Right to Access

You have the right to inspect and obtain a copy of your treatment records. Requests must be made in writing. We will respond within 30 days of receiving your request.

5.2 Right to Amendment

You may request that we amend your health information if you believe it is incorrect or incomplete. We will respond to your request within 60 days.

5.3 Right to an Accounting

You have the right to receive an accounting of disclosures of your health information made by us for certain purposes.

5.4 Right to Request Restrictions

You may request restrictions on how we use or disclose your information. We are not required to agree to your request but will consider it carefully.

5.5 Right to Confidential Communications

You may request that we communicate with you about your treatment in a specific way or at a specific location.

5.6 Right to Revoke Authorization

You may revoke any authorization you have given us to use or disclose your information, except to the extent we have already taken action in reliance on the authorization.

5.7 Right to Complain

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. You will not be retaliated against for filing a complaint.

6. Security Measures

We implement appropriate physical, technical, and administrative safeguards to protect your information from unauthorized access, use, or disclosure:

• Secure, locked storage for paper records
• Encrypted electronic health records systems
• Password-protected computers and networks
• Employee training on privacy and security
• Limited access to information based on job responsibilities
• Regular security risk assessments and updates
• Secure disposal of records when no longer needed

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze website traffic. Cookies are small text files stored on your device.

You can control cookie settings through your browser preferences. However, disabling cookies may limit your ability to use certain features of our website.

We do not use cookies to collect personally identifiable information without your consent.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you are under 18, you must have parental or guardian consent before providing any personal information to us.

10. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the updated policy on our website. The effective date at the top of this policy indicates when it was last revised.

We will notify you of material changes by posting a notice on our website or, if you are a current client, through other appropriate means.

11. Notice of Privacy Practices

If you are receiving treatment at KCA Advisors, you will receive a more detailed Notice of Privacy Practices that describes how we may use and disclose your protected health information, as required by HIPAA and 42 CFR Part 2. The Notice of Privacy Practices provides additional information about your rights and our legal duties.

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to request deletion of personal information
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information below.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

14. Complaints

To file a complaint regarding our privacy practices, contact:

15. Consent

By using our website or receiving services at our facility, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our website or services.