Privacy Policy

HIPAA Notice of Privacy Practices

As required by the Privacy Regulations Promulgated Pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA)

Effective Date: 3/17/2025

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Ojai Recovery is committed to protecting the privacy of your protected health information (PHI). This Notice of Privacy Practices describes how we may use and disclose your PHI to carry out treatment, payment, or health care operations (TPO) and for other purposes permitted or required by law. It also outlines your rights regarding your PHI.

Uses and Disclosures of Protected Health Information
Your PHI may be used and disclosed by our organization, office staff, and others involved in your care for the purposes of treatment, payment, and healthcare operations, including but not limited to:

Treatment:
We will use and disclose your PHI to provide, coordinate, or manage your health care and related services. For example, we may share your information with a referred specialist or a pharmacy fulfilling your prescription.

Payment:
Your PHI will be used as needed to obtain payment for health care services. For instance, we may disclose information to your health plan for coverage approval.

Healthcare Operations:
We may use or disclose your PHI for business activities such as quality assessments, employee reviews, accreditation, and administrative functions. For example, we may share your PHI with accrediting agencies or contact you regarding follow-up care.

We may also disclose PHI in specific situations without your authorization, including but not limited to:

As required by law

For public health and safety concerns

To report communicable diseases

For health oversight activities

In cases of abuse, neglect, or domestic violence

To comply with FDA regulations

For legal proceedings and law enforcement purposes

For national security and military activities

For workers’ compensation claims

Required Disclosures:
Under the law, we are required to disclose PHI:

To you upon request (subject to certain limitations)

To the Secretary of the Department of Health and Human Services for compliance investigations

Other uses and disclosures will be made only with your written authorization, which you may revoke at any time in writing, except where actions have already been taken in reliance on the authorization.

Your Rights Regarding Your Protected Health Information
You have the following rights concerning your PHI:

Right to Inspect and Copy:
You may inspect and obtain a copy of your PHI, except for certain restricted records (e.g., psychotherapy notes or legal proceedings documents).

Right to Request Restrictions:
You may request limitations on the use or disclosure of your PHI. However, we are not required to agree if we determine it is not in your best interest.

Right to Confidential Communications:
You may request that we communicate with you using alternative means or locations.

Right to Amend:
If you believe your PHI is incorrect or incomplete, you may request an amendment. If denied, you have the right to file a statement of disagreement.

Right to an Accounting of Disclosures:
You may request a list of certain disclosures of your PHI that were made without your authorization.

Right to a Copy of This Notice:
You may request a paper or electronic copy of this notice at any time.

Complaints
If you believe your privacy rights have been violated, you may file a complaint with Ojai Recovery or the Secretary of Health and Human Services. We will not retaliate against you for filing a complaint.