Privacy Policy

1. Information We Collect

Personal Information

FutureSteps Behavioral Treatment & Helpline may collect the following types of personal information when you interact with our website, call our admissions line, or engage with our services:

• Contact Information: Name, email address, phone number, and mailing address
• Demographic Information: Age, date of birth, gender, and emergency contact details
• Insurance Information: Insurance provider, policy number, group number, and subscriber details
• Inquiry Information: Details you provide when filling out contact forms, requesting callbacks, or submitting admissions inquiries
• Communication Records: Records of phone calls, emails, and chat interactions with our admissions team

Protected Health Information (PHI)

If you become a patient at FutureSteps Behavioral Treatment & Helpline, we collect Protected Health Information as defined under HIPAA, including but not limited to:

• Medical history and current health conditions
• Substance use history and treatment records
• Mental health assessments and diagnoses
• Treatment plans and progress notes
• Medication records and prescriptions
• Lab results and clinical evaluations

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking identifiers

2. How We Use Your Information

FutureSteps Behavioral Treatment & Helpline uses the information we collect for the following purposes:

• Treatment Services: To provide, coordinate, and manage your addiction treatment and behavioral health care at our Carlsbad facility
• Admissions Processing: To evaluate and process admissions inquiries, verify insurance coverage, and facilitate intake procedures
• Communication: To respond to your inquiries, provide requested information, and follow up on admissions consultations
• Payment & Billing: To process insurance claims, verify benefits, and manage billing for treatment services
• Quality Improvement: To improve our treatment programs, website functionality, and overall patient experience
• Legal Compliance: To comply with applicable federal and state laws, including HIPAA, 42 CFR Part 2, and California privacy regulations
• Safety & Security: To protect the safety of our patients, staff, and visitors, and to prevent fraud or unauthorized access

3. HIPAA Compliance

FutureSteps Behavioral Treatment & Helpline complies fully with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, including the HIPAA Privacy Rule and Security Rule.

Our HIPAA Commitments

• Privacy Rule Compliance: We maintain strict policies and procedures governing the use and disclosure of Protected Health Information (PHI)
• Security Rule Compliance: We implement administrative, physical, and technical safeguards to protect electronic PHI (ePHI) from unauthorized access, use, or disclosure
• Breach Notification: In the event of a breach of unsecured PHI, we will notify affected individuals, the U.S. Department of Health and Human Services, and, where required, the media, in accordance with the HIPAA Breach Notification Rule
• Business Associate Agreements: We require all third-party vendors who access PHI on our behalf to sign Business Associate Agreements (BAAs) that bind them to HIPAA compliance standards
• Staff Training: All FutureSteps Behavioral Treatment & Helpline employees and contractors receive regular HIPAA privacy and security training

42 CFR Part 2 Compliance

As a substance use disorder treatment provider, FutureSteps Behavioral Treatment & Helpline also complies with 42 CFR Part 2, which provides additional federal protections for substance use disorder patient records. These regulations restrict the disclosure of information that would identify an individual as having a substance use disorder, and require specific patient consent before such information can be shared.

4. Information Sharing & Disclosure

FutureSteps Behavioral Treatment & Helpline does not sell, rent, or trade your personal information or health records. We may share information only in the following circumstances:

With Your Consent

We will share your information when you provide written authorization, including sharing treatment records with other healthcare providers, family members, or designated individuals.

For Treatment, Payment, and Operations

As permitted by HIPAA, we may use and disclose PHI for purposes of treatment (coordinating your care), payment (processing insurance claims), and healthcare operations (quality assurance, staff training).

As Required by Law

We may disclose information when required by federal, state, or local law, including:

• Court orders and legal proceedings
• Public health reporting requirements
• Reports to law enforcement when required by law
• Child abuse or neglect reporting as mandated by California law
• Situations involving imminent threat to health or safety

Service Providers

We may share information with trusted third-party service providers who assist with our operations, including billing companies, IT service providers, and insurance verification services. All such providers are bound by confidentiality agreements and, where applicable, Business Associate Agreements.

5. Cookies & Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us understand how visitors use our site and improve your browsing experience.

Types of Cookies We Use

• Essential Cookies: Required for basic website functionality such as page navigation and access to secure areas
• Analytics Cookies: Help us understand how visitors interact with our website by collecting information about pages visited, time on site, and traffic sources
• Functional Cookies: Remember your preferences and settings to enhance your experience on future visits

Analytics

We may use web analytics services, such as Google Analytics, to collect anonymized data about website usage. This data helps us improve our website and better serve individuals seeking addiction treatment information. Analytics data does not include any Protected Health Information or personally identifiable details about treatment.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is being set. Please note that disabling cookies may affect the functionality of certain features on our website.

6. Your Rights

You have the following rights regarding your personal and health information held by FutureSteps Behavioral Treatment & Helpline:

Right to Access

You have the right to request access to your personal information and medical records. We will provide copies of your records within 30 days of receiving a valid written request, as required by HIPAA and California law.

Right to Amendment

You may request that we amend inaccurate or incomplete information in your records. We will respond to amendment requests within 60 days and provide written notification of our decision.

Right to Restriction

You may request that we restrict certain uses and disclosures of your health information. While we are not required to agree to all restriction requests, we will honor reasonable requests and any restrictions required by law.

Right to an Accounting of Disclosures

You have the right to receive a list of certain disclosures we have made of your health information for the six years prior to your request.

Right to Request Confidential Communications

You may request that we communicate with you through specific means or at specific locations (for example, contacting you only at a particular phone number or address).

Right to Deletion

You may request the deletion of personal information we have collected, subject to certain exceptions required by law, including medical record retention requirements under California and federal regulations.

Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with FutureSteps Behavioral Treatment & Helpline or directly with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

California Privacy Rights

California residents may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. FutureSteps Behavioral Treatment & Helpline does not sell personal information.

7. HIPAA Notice of Privacy Practices

This section serves as a summary of our Notice of Privacy Practices as required by the HIPAA Privacy Rule. A full copy of our Notice of Privacy Practices is available upon request at our facility or by contacting our Privacy Officer.

Protected Health Information (PHI)

PHI includes any individually identifiable health information created, received, maintained, or transmitted by FutureSteps Behavioral Treatment & Helpline. This includes information related to:

• Your past, present, or future physical or mental health conditions
• The provision of healthcare services to you
• Payment for healthcare services

Your Patient Rights Under HIPAA

• Right to a Copy of This Notice: You are entitled to receive a paper copy of our Notice of Privacy Practices at any time
• Right to Inspect and Copy Records: You may inspect and obtain a copy of your medical and billing records
• Right to Request Amendments: You may request changes to your health records if you believe information is inaccurate
• Right to Accounting of Disclosures: You may request a list of disclosures made of your PHI
• Right to Request Restrictions: You may request limitations on how we use or disclose your PHI
• Right to Confidential Communications: You may request that we communicate with you in a particular way or at a specific location
• Right to Revoke Authorization: If you have provided written authorization for the use or disclosure of your PHI, you may revoke that authorization at any time in writing

Our Obligations

FutureSteps Behavioral Treatment & Helpline is required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this notice of our legal duties and privacy practices
• Follow the terms of the notice currently in effect
• Notify you in the event of a breach of your unsecured PHI

8. Contact Us About Privacy

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to file a complaint, please contact our Privacy Officer:

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting www.hhs.gov/ocr/privacy/hipaa/complaints/ or by calling 1-877-696-6775.