Privacy Policy
Peak State Recovery
Effective Date: January 1, 2025
Peak State Recovery (“we,” “our,” or “us”) is committed to protecting your privacy and maintaining the highest level of confidentiality regarding your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and when you receive services from us.
This policy is designed to comply with federal privacy laws, including:
- 42 CFR Part 2 – Confidentiality of Substance Use Disorder (SUD) Records
- Health Insurance Portability and Accountability Act (HIPAA)
- State and Federal Laws Regarding Privacy and Confidentiality
Please read this policy carefully, and if you have any questions, contact us at:
Address: 22265 AR-9, Paron, AR 72122
Email: support@peakstaterecovery.com
Phone: (501) 209-3764
1. Information We Collect
When you visit our website or receive services, we may collect and process:
A. Personal Health Information (PHI) (Protected Under HIPAA & 42 CFR Part 2)
- Name
- Date of birth
- Contact information (email, phone, mailing address)
- Medical history and treatment records
- Substance use disorder treatment information
- Billing and insurance information
- Emergency contact details
B. Non-Personal Information (Website and Digital Interactions)
- IP address
- Device type and browser
- Website pages visited and interaction history
- Referring URLs and exit pages
- Cookies and tracking data (See Section 6: Website & Online Tracking for details)
2. How We Use Your Information
We use the information we collect to:
Provide and coordinate your treatment (medical records, referrals, prescriptions)
Process payments (insurance billing, financial assistance)
Ensure legal and regulatory compliance
Improve website functionality and user experience
Send newsletters, updates, or promotional materials (only if you opt-in)
Engage in quality assurance, auditing, and service improvement
3. How We Share Your Information
Your treatment records are protected under 42 CFR Part 2, and we CANNOT disclose them without your written consent, except in the situations below:
A. Disclosures Allowed WITHOUT Consent
We may use or disclose PHI without your consent only in the following situations:
- Medical Emergencies – If you experience a life-threatening emergency, we may share PHI with emergency personnel.
- Court Orders – If a court issues a valid order requiring disclosure.
- Suspected Child or Elder Abuse/Neglect – As required by law, we must report suspected abuse or neglect.
- Threats of Harm – If there is an immediate danger to yourself or others.
- Crimes on Program Premises – If a crime occurs on Peak State Recovery’s premises or against staff.
- Health Oversight Audits – For audits by regulatory agencies (e.g., Medicaid, SAMHSA).
- Business Associates – If we work with third-party service providers (e.g., billing companies, IT security firms) who must handle PHI, they are required by law to follow strict confidentiality agreements (Business Associate Agreements - BAAs).
B. Disclosures WITH Your Written Consent
Your PHI will not be shared with family, employers, or outside providers without your written consent, which must include:
Who the information is being shared with
What specific information is being shared
Why the information is being shared
An expiration date or event for the consent
You have the right to revoke your consent at any time, except if action has already been taken based on your prior authorization.
4. Your Rights Regarding Your PHI
You have the following rights regarding your PHI:
A. Right to Access & Copy Records
Timeframe: You can request a copy of your records, and we will provide access within 30 days.
B. Right to Correct Records
Timeframe: If you believe your medical records contain incorrect or missing information, you can request a correction. We will respond within 60 days.
C. Right to Request Confidential Communications
You can request that we contact you via alternative means (e.g., a different phone number or mailing address).
D. Right to Request Restrictions on Use & Disclosure
You can request additional restrictions on how we share your PHI, though we may not always be able to grant them.
E. Right to Be Notified of a Data Breach
If a data breach occurs that compromises your PHI, we will notify you in writing within 60 days.
F. Right to File a Complaint
If you believe your privacy rights have been violated, you can file a complaint without retaliation to:
Peak State Recovery Privacy Officer (Contact details at the end)
U.S. Department of Health & Human Services (hhs.gov)
5. Data Retention & Security
How Long We Keep Your Records
We retain PHI for 7 years after your last date of service, as required by federal and state laws.
How We Protect Your Data
We implement technical, administrative, and physical safeguards to protect PHI, including:
Encrypted electronic medical records
Access controls & staff confidentiality agreements
Regular security audits
6. Website & Online Tracking
Cookies & Tracking Technologies
We use cookies and similar tracking technologies on our website to:
Analyze visitor traffic
Improve website functionality
Personalize user experience
You Can Opt-Out of Tracking
You can disable cookies via your browser settings.
No PHI Collected Online
Our website does not collect or store PHI unless you submit it through a secure contact form.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be:
Posted on our website
Communicated to you via email or postal mail (if required by law)
The Effective Date at the top of this document indicates the most recent update.
8. Contact Information
For questions, requests, or complaints, contact:
Peak State Recovery
Email: support@peakstaterecovery.com
Phone: (501) 209-3764
