WEBSITE PRIVACY POLICY & NOTICE OF PRIVACY PRACTICES

CENTRAL FLORIDA RECOVERY CENTERS, INC. (dba Central Florida Counseling & Recovery Centers, dba Om To Home)

Effective Date: April 27, 2025

Our Commitment to Your Privacy

CENTRAL FLORIDA RECOVERY CENTERS, INC., operating as Central Florida Counseling & Recovery Centers and Om To Home (collectively, “we,” “us,” or “our”), is dedicated to maintaining the privacy and confidentiality of your information. This policy describes how we handle information collected through our website ([Insert Website Address Here]) and outlines our practices regarding your Protected Health Information (“PHI”) as required by the Health Insurance Portability and Accountability Act (“HIPAA”) and Florida law.

PHI is information that may identify you and relates to your health, healthcare services, or payment for those services. While our website forms are intended for general inquiries and appointment requests, we urge you not to submit sensitive PHI through these general website forms.

This Notice describes:

  • How we collect and use information through our website.
  • How we may use and disclose your PHI for treatment, payment, or health care operations (“TPO”).
  • Your rights regarding your PHI.

We are required by law to maintain the privacy of PHI, provide this notice, and notify affected individuals following a breach of unsecured PHI. We abide by the terms of the notice currently in effect.

Scope of this Notice

This Notice applies to information collected via this website and to all PHI created or received related to services provided by CENTRAL FLORIDA RECOVERY CENTERS, INC., including those offered under Central Florida Counseling & Recovery Centers and Om To Home (general practice/internal medicine, sleep medicine, inpatient substance abuse care, outpatient counseling, etc.).

Information Collected Through Our Website

  1. Information You Provide: We collect information you voluntarily provide through website forms, such as appointment request forms or contact forms. This typically includes your name, email address, phone number, and the reason for your inquiry. Please do not include detailed medical information, diagnoses, or specific health conditions in these general forms. We use this information to respond to your requests, schedule appointments, and provide you with information about our services.
  2. Automatic Information Collection (Cookies & Analytics): Like many websites, we may use cookies, server logs, and other similar technologies to automatically collect certain information when you visit our site.
    • What are Cookies? Cookies are small data files stored on your browser or device. They help the website function effectively and provide information about how users interact with the site.
    • How We Use Them: We may use cookies for purposes such as:
      • Ensuring the website functions correctly.
      • Understanding website traffic and usage patterns (e.g., through analytics services like Google Analytics).
      • Improving user experience.
    • Your Choices: Most web browsers allow you to control cookies through their settings preferences. You can set your browser to reject cookies, but doing so may affect the functionality of certain parts of our website.
    • Data Collected: This automatically collected data may include your IP address, browser type, operating system, referring URLs, pages viewed, and dates/times of visits. This information is generally used in an aggregated, non-personally identifiable way for website analysis and improvement.

How We May Use and Disclose Your Protected Health Information (PHI)

(This section outlines uses/disclosures primarily related to healthcare services, distinct from general website data)

The following categories describe ways we use and disclose PHI for treatment, payment, and operations, and as otherwise permitted or required by law.

  1. For Treatment: To provide, coordinate, or manage your healthcare and related services with internal staff and other involved healthcare providers.
  2. For Payment: To obtain payment for services, including insurance eligibility checks, claims processing, and invoicing.
  3. For Health Care Operations: For operational needs like quality assessment, training, licensing, accreditation, and business planning.
  4. Appointment Reminders & Treatment Alternatives: To contact you with appointment reminders or information about relevant health services.
  5. Individuals Involved in Your Care: To family, friends, or others involved in your care or payment, unless you object (or if determined to be in your best interest if you cannot object).
  6. As Required By Law: When required by federal, state, or local law (e.g., reporting abuse, responding to court orders/subpoenas).
  7. Public Health Activities: For disease control, vital statistics reporting, medication reaction reporting, etc.
  8. Health Oversight Activities: For audits, investigations, inspections, and licensure by oversight agencies.
  9. Law Enforcement: In response to legal processes (warrants, subpoenas) or in limited circumstances (e.g., identifying a suspect).
  10. Specialized Government Functions: For military, national security, or protective services activities.
  11. Research: Under specific protocols ensuring privacy.
  12. Coroners, Medical Examiners, Funeral Directors: As necessary for their duties.
  13. Organ and Tissue Donation: Consistent with applicable law if you are an organ donor.

Specific Protections for Substance Use Disorder Information

For patients receiving substance use disorder services subject to 42 CFR Part 2, stricter rules apply. We generally cannot disclose identifying information except with your written consent, for internal communications, medical emergencies, research/audits, or under a qualified court order.

Your Rights Regarding Your Protected Health Information

You have the following rights concerning your PHI:

  1. Right to Inspect and Copy: To view and get a copy of your medical and billing records. Submit a written request to our Privacy Officer. Fees may apply. Denials can be reviewed.
  2. Right to Amend: To request corrections to inaccurate or incomplete PHI we maintain. Submit a written request with reasons to our Privacy Officer. We may deny requests under certain circumstances (e.g., if information is accurate or not created by us).
  3. Right to an Accounting of Disclosures: To receive a list of certain disclosures made (excluding TPO and authorized disclosures) up to six years prior. Submit a written request to our Privacy Officer. The first list per year is free.
  4. Right to Request Restrictions: To ask us to limit how we use or disclose your PHI for TPO, or disclosures to those involved in your care. We generally don’t have to agree, except for disclosures to health plans for services you paid for entirely out-of-pocket. Submit a written request detailing the desired limits.
  5. Right to Request Confidential Communications: To ask us to communicate with you in a specific way or location (e.g., work phone only). Submit a written request specifying your preference. We accommodate reasonable requests.
  6. Right to a Paper Copy of This Notice: To get a paper copy anytime, available at our facilities or upon request.

Data Security

We implement reasonable physical, technical, and administrative safeguards consistent with HIPAA and the Florida Information Protection Act (FIPA) to protect PHI. For website data, we use measures (like SSL encryption where appropriate, though users should be aware no internet transmission is 100% secure) to protect information submitted online, particularly login portals or designated secure communication channels if applicable. Remember, do not send sensitive PHI via standard email or general website contact forms.

Changes to This Notice

We reserve the right to change this Notice and our privacy practices. Revised notices will be effective for information we already have and future information. The current Notice will be posted on our website and in our facilities with the effective date.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or the Secretary of the Department of Health and Human Services. To complain to us, contact our Privacy Officer in writing. You will not be penalized for filing a complaint.

Contact Information

For questions about this Notice or to exercise your rights, please contact:

Privacy Officer: Wendy Packer CENTRAL FLORIDA RECOVERY CENTERS, INC. 6900 Turkey Lake Rd, Ste 1-2 Orlando, FL 32819 Phone: (407) 370-5357 Email: [email protected]