DRAFT — Pending legal review. This is a working template, not the final policy. Have it reviewed by counsel before publishing.
Effective date: [TO BE SET ON PUBLICATION]
Northridge Recovery Center (“Northridge,” “we,” “us”) operates this website at northridgerecovery.com. We take the privacy of our prospective and current clients seriously. This Privacy Policy explains what information we collect through this website, how we use it, who we share it with, and your rights.
This policy applies to the website only. Information collected during the course of treatment is governed by our separate Notice of Privacy Practices, which is provided to clients at intake and which controls in any conflict.
1. Information we collect
Information you give us
- Callback / contact form: name, email, phone number, payment-method preference, and any message you write.
- Newsletter: email address.
- Insurance verification (admissions): name, date of birth, insurance carrier, and member ID. This information is Protected Health Information (PHI) and is collected only through HIPAA-cleared channels (phone or a HIPAA-compliant intake form). It is never accepted by general website forms.
Information collected automatically
- Server logs: IP address, user-agent string, requested URL, timestamp, and referrer. Used to operate the site, diagnose problems, and rate-limit form submissions.
- Cookies and similar technologies: session cookies and, if enabled, anonymous analytics cookies. We do not use third-party advertising cookies.
2. How we use information
- To respond to your callback requests, contact messages, and admissions inquiries.
- To verify insurance benefits, when you ask us to do so, through HIPAA-cleared channels.
- To send the email newsletter you opt into, and only that newsletter, until you unsubscribe.
- To operate, secure, and improve the website.
- To comply with legal obligations and respond to lawful requests.
We do not sell your personal information. We do not rent it. We do not share it with third parties for their own marketing.
3. TCPA — calls, texts, and email
When you submit a form that includes a phone number, you must check a consent box agreeing to be contacted by Northridge by phone, SMS, or email. Message and data rates may apply. Consent to contact is not a condition of treatment. You can revoke consent at any time by replying STOP to a text, asking us during a call, or emailing admissions@northridgerecovery.com.
4. HIPAA & PHI
Northridge is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). Information collected during the course of treatment, and any insurance details collected to verify benefits, are Protected Health Information (PHI). PHI is governed by our Notice of Privacy Practices, available at intake or on request.
Website forms on this site do not collect PHI. The insurance verification step on the Admissions page directs you to a HIPAA-compliant channel (phone or a HIPAA-cleared intake form provided by a vendor we have a Business Associate Agreement with).
5. Your California privacy rights (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what personal information we have collected about you.
- Request deletion of that information, subject to legal exceptions (we are required to retain certain medical and treatment records).
- Correct inaccurate personal information.
- Opt out of any “sale” or “sharing” of personal information — we do neither, but the right exists.
- Be free from discrimination for exercising any of these rights.
To exercise these rights, email admissions@northridgerecovery.com or call 818-626-8463. We will verify your identity before responding.
6. Data retention
Lead and inquiry records are retained for as long as needed to follow up with you and for our legitimate record-keeping needs. Treatment records (PHI) are retained per California Department of Health Care Services and federal requirements, typically a minimum of seven years.
7. Security
The site uses HTTPS. Form submissions are rate-limited and protected by anti-spam measures. PHI is handled only through HIPAA-compliant systems with signed Business Associate Agreements. Despite reasonable safeguards, no system is perfectly secure; if you have specific concerns, contact us before submitting sensitive information.
8. Children
This website is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy. The effective date at the top will reflect the most recent version. Material changes will be posted prominently for at least 30 days.
10. Contact
Northridge Recovery Center
5237 Topanga Canyon Blvd., Woodland Hills, CA 91364
Phone: 818-626-8463
Email: admissions@northridgerecovery.com
Licensed by the California Department of Health Care Services, License #191157BP.