HIPAA Notice of Privacy Practices

*The Archangel Centers | Effective Date: 2026-06-07 | Last Updated: 2026-06-07*

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

The Archangel Centers (referred to in this notice as "we," "us," or "the practice") is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and is required by law to maintain the privacy of your protected health information (PHI). We are also required to provide you with this notice of our legal duties and privacy practices, to follow the terms of the notice currently in effect, and to notify you in the event of a breach of unsecured PHI.

This notice applies to all of the records of clinical care generated by The Archangel Centers, including services delivered at our Tinton Falls, New Jersey clinic and our Charlotte, North Carolina clinic, and to any virtual treatment services we provide.

How we may use and disclose your PHI

We are permitted by law to use and disclose your PHI in several categories without your specific written authorization.

Treatment

We use and disclose PHI to provide, coordinate, and manage clinical care. This includes sharing information among the clinical team (therapists, counselors, medical providers, case managers) involved in treatment, and with outside providers (a primary care physician, a partner detox facility we coordinate care with, a referring clinician) who participate in clinical care.

Payment

We use and disclose PHI to bill for and collect payment for the services we provide. This includes sharing necessary information with your health insurer, with billing services, and with collection agencies if required, in accordance with applicable law.

Healthcare operations

We use and disclose PHI for activities necessary to operate the practice. Examples include quality assessment, clinician training, accreditation reviews, business management, and customer service.

Special situations

We may also use or disclose your PHI without your written authorization in the following situations:

• When required by law. If a federal, state, or local law requires the disclosure.
• Public health activities. Reporting communicable diseases, adverse medication events, and similar public health matters.
• Health oversight activities. Audits, investigations, and inspections by government agencies authorized to oversee the healthcare system.
• Judicial and administrative proceedings. In response to a court order, subpoena, or other lawful process, subject to applicable protections.
• Law enforcement. In limited circumstances permitted by law (for example, identifying a suspect, reporting a crime on the premises, responding to a court order).
• To avert a serious threat to health or safety. When disclosure is necessary to prevent or lessen a serious threat to the health or safety of a person or the public.
• Coroners, medical examiners, and funeral directors.
• Organ and tissue donation.
• Workers' compensation. As required by workers' compensation laws.
• Military and veterans. In limited circumstances for members of the armed forces.
• Inmates. If you are an inmate of a correctional institution, in limited circumstances.

Additional protections for substance use treatment records

Substance use disorder treatment records are protected by federal law (42 CFR Part 2) in addition to HIPAA. In general, we may not disclose information that identifies you as someone receiving substance use treatment without your written consent, except in narrow circumstances permitted by 42 CFR Part 2 (including medical emergencies, audits and evaluations, research, court order with the required findings, and reporting of certain crimes on program premises or against program personnel). Where 42 CFR Part 2 provides stricter protection than HIPAA, the stricter protection applies.

Uses and disclosures that require your written authorization

We will obtain your written authorization before using or disclosing PHI for:

You may revoke your authorization in writing at any time, except to the extent we have already acted in reliance on it.

• Most uses and disclosures of psychotherapy notes
• Marketing purposes that involve financial remuneration to us
• Sale of PHI

Your rights

You have the following rights regarding your PHI:

Right to access

You have the right to inspect and obtain a copy of your PHI in our designated record set, in the form and format you request if readily producible. We may charge a reasonable, cost-based fee. Requests should be submitted in writing to the Privacy Officer.

Right to amend

You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. We may deny the request in certain situations and will provide a written explanation if we do.

Right to an accounting of disclosures

You have the right to request a list of certain disclosures we have made of your PHI in the six years prior to your request (excluding disclosures for treatment, payment, healthcare operations, and certain other categories).

Right to request restrictions

You have the right to request a restriction on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree, except where you request that we not disclose PHI to a health plan for services you have paid for in full out of pocket.

Right to request confidential communications

You have the right to request that we communicate with you about your PHI in a particular way or at a particular location (for example, only at your work address, or only by mail and not phone). We will accommodate reasonable requests.

Right to be notified of a breach

You have the right to be notified if we (or one of our business associates) discovers a breach of your unsecured PHI.

Right to a paper copy of this notice

You have the right to a paper copy of this notice on request, even if you have agreed to receive it electronically.

Our duties

We are required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this notice of our legal duties and privacy practices
• Follow the terms of the notice currently in effect
• Notify you in the event of a breach of unsecured PHI

Changes to this notice

We reserve the right to change this notice and to make the revised notice effective for PHI we already have about you, as well as for any information we receive in the future. The current notice will be posted on this page and will be available at our clinics. The "Effective Date" at the top of this notice indicates when the current version became effective.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us by contacting the Privacy Officer (below), or with the U.S. Department of Health and Human Services Office for Civil Rights at:

Office for Civil Rights U.S. Department of Health and Human Services 200 Independence Avenue, SW Washington, DC 20201 Phone: 1-877-696-6775 Web: https://www.hhs.gov/ocr/

We will not retaliate against you for filing a complaint.

Contact: Privacy Officer

For questions about this notice, to exercise any of your rights, or to file a complaint with us, contact:

The Archangel Centers Privacy Officer 44 Apple Street, Suite 3 Tinton Falls, NJ 07724 Phone: (888) 464-2144 Email: [email protected]