HIPAA Notice of Privacy Practices

Effective Date: January 1, 2026
Last Updated: April 8, 2026

Restoration Recovery ("we," "us," or "our") is required by law to maintain the privacy of your protected health information (PHI), to provide you with this Notice of our legal duties and privacy practices regarding your PHI, and to abide by the terms of the Notice currently in effect. This notice applies to all records of your care generated by Restoration Recovery.

1. About This Notice

This Notice of Privacy Practices describes how Restoration Recovery may use and disclose your protected health information to carry out treatment, payment, or healthcare operations, and for other purposes permitted or required by law. It also describes your rights regarding your health information and how you can exercise those rights.

"Protected health information" (PHI) is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health condition, the provision of healthcare to you, or the payment for that healthcare.

2. Special Protections for Substance Use Disorder Records

As a substance use disorder treatment provider, your records at Restoration Recovery are protected by federal confidentiality rules under 42 CFR Part 2. These regulations provide additional protections beyond HIPAA for information related to substance use disorder treatment. Under 42 CFR Part 2:

• Your substance use disorder treatment records cannot be disclosed without your specific written consent, except in limited circumstances permitted by law
• Information about your participation in a substance use disorder treatment program is confidential and cannot be disclosed to third parties without your authorization
• Violations of 42 CFR Part 2 are subject to criminal penalties under federal law
• A general authorization for the release of medical or other information is not sufficient for the release of substance use disorder treatment records

3. How We May Use and Disclose Your Health Information

For Treatment

We may use and disclose your health information to provide, coordinate, or manage your healthcare and related services. For example, we may share your information with physicians, therapists, counselors, or other healthcare providers involved in your care. With your written consent as required by 42 CFR Part 2, we may also disclose your substance use disorder treatment information to coordinate care with external providers.

For Payment

We may use and disclose your health information to bill and collect payment for the treatment and services we provide. For example, we may contact your health insurer to verify coverage, submit claims, or obtain prior authorization for proposed treatment. With your written consent, we may share information necessary for payment purposes with your insurance company.

For Healthcare Operations

We may use and disclose your health information for our healthcare operations, which include internal administration, quality improvement, training, audits, compliance activities, and other functions necessary to run our organization and ensure quality care.

Appointment Reminders and Treatment Alternatives

We may use and disclose your health information to contact you with appointment reminders or to inform you about treatment alternatives or health-related benefits and services that may be of interest to you.

As Required by Law

We will disclose your health information when required to do so by federal, state, or local law.

Public Health Activities

We may disclose your health information for public health activities as permitted by law, such as reporting to a public health authority to prevent or control disease, injury, or disability.

Health Oversight Activities

We may disclose your health information to a health oversight agency for activities authorized by law, including audits, investigations, inspections, and licensure activities.

Judicial and Administrative Proceedings

We may disclose your health information in response to a court order. We may also disclose your information in response to a subpoena, discovery request, or other lawful process, but only if efforts have been made to notify you of the request or to obtain a protective order.

Law Enforcement

We may disclose your health information for law enforcement purposes as required by law, or in response to a valid court order, warrant, subpoena, or summons issued by a judicial officer. Substance use disorder records protected by 42 CFR Part 2 may only be disclosed to law enforcement under the limited exceptions outlined in those regulations.

To Avert a Serious Threat to Health or Safety

We may use and disclose your health information when necessary to prevent a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law and ethical standards.

Coroners, Medical Examiners, and Funeral Directors

We may release health information to a coroner or medical examiner as necessary to carry out their duties. We may also release information to funeral directors as permitted by law.

Research

Under certain circumstances, we may use or disclose your health information for research purposes, subject to applicable law, institutional review board approval, and appropriate safeguards to protect your privacy.

Workers' Compensation

We may disclose your health information as authorized by and to the extent necessary to comply with workers' compensation laws or similar programs.

Military and Veterans

If you are a member of the armed forces, we may disclose your health information as required by military command authorities, subject to applicable law.

Inmates

If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release your health information to the correctional institution or law enforcement official as permitted by law.

4. When We May Not Use or Disclose Your Health Information

Except as described in this notice, we will not use or disclose your health information without your written authorization. You may revoke your authorization in writing at any time, except to the extent that we have already taken action in reliance on your authorization. Specific situations that require your written authorization include:

• Most uses and disclosures of psychotherapy notes, if maintained separately
• Uses and disclosures of your health information for marketing purposes
• Disclosures that constitute a sale of your health information
• Any disclosure of substance use disorder treatment records not otherwise permitted by 42 CFR Part 2
• Other uses and disclosures not described in this notice

5. Your Health Information Rights

Right to Request Privacy Protections

You have the right to request restrictions on certain uses and disclosures of your health information. While we are not required to agree to all requested restrictions, we will accommodate reasonable requests when appropriate. If you pay for a service or healthcare item out of pocket in full, you may request that we not disclose information about that service to your health plan for the purpose of payment or healthcare operations, and we will honor that request.

Right to Request Confidential Communications

You have the right to request that we communicate with you about health matters in a certain way or at a certain location. For example, you may request that we contact you only at work or by mail. To make such a request, please contact our Privacy Officer. We will make every reasonable effort to accommodate your request.

Right to Inspect and Copy Your Health Information

You have the right to inspect and obtain a copy of your health information that may be used to make decisions about your care. To request access to your records, submit a written request to our Privacy Officer. We may charge a reasonable, cost-based fee for copies. We will respond to your request within 30 days. In certain limited circumstances, we may deny your request to inspect and copy your records. If we deny your request, you will be notified in writing and may have a right to request a review of the denial.

Right to Amend Your Health Information

If you believe that your health information is incorrect or incomplete, you have the right to request that we amend it. To request an amendment, submit a written request to our Privacy Officer, including a reason for the amendment. We may deny your request if the information was not created by us, is not part of the information you are permitted to inspect and copy, is already accurate and complete, or is not available for amendment under the law.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your health information. To request an accounting, submit a written request to our Privacy Officer. The first accounting you request within a 12-month period will be provided free of charge. Additional requests may be subject to a reasonable, cost-based fee.

Right to a Copy of This Notice

You have the right to obtain a paper copy of this Notice of Privacy Practices at any time, even if you have agreed to receive it electronically. You may request a copy by contacting our Privacy Officer.

Right to Choose Someone to Act for You

If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your rights and make choices about your health information. We will confirm that person's authority and ability to act on your behalf before taking action.

6. Changes to This Notice

We reserve the right to change this Notice of Privacy Practices and to make the new provisions effective for all protected health information that we maintain. If we make a material change to this Notice, we will post the revised version on our website and make copies available at our clinic locations. The effective date of the current Notice will be listed at the top of this page.

7. Complaints

If you believe your privacy rights have been violated, you may file a complaint with Restoration Recovery or with the U.S. Department of Health and Human Services Office for Civil Rights (OCR). You will not be retaliated against for filing a complaint.

To file a complaint with Restoration Recovery, contact our Privacy Officer:

• Phone: 423-498-2000
• Email: info@restoration-recovery.com
• Mail: Privacy Officer, Restoration Recovery, 6141 Shallowford Rd, Suite 100, Chattanooga, TN 37421

To file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights:

• Online: HHS Office for Civil Rights Complaint Portal
• Phone: 1-877-696-6775
• Mail: U.S. Department of Health and Human Services, 200 Independence Avenue S.W., Washington, D.C. 20201

8. Contact Information

If you have questions about this Notice of Privacy Practices or wish to exercise any of your rights described herein, please contact our Privacy Officer:

• Phone: 423-498-2000
• Email: info@restoration-recovery.com
• Mail: Privacy Officer, Restoration Recovery, 6141 Shallowford Rd, Suite 100, Chattanooga, TN 37421