At Valley Spring Recovery Center, protecting your personal health information is foundational to the trust we build with every patient and family we serve.
Begin ReadingValley Spring Recovery Center is committed to protecting the privacy and security of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 CFR Part 2 regulations governing the confidentiality of substance use disorder patient records, and all applicable New Jersey state privacy laws.
This Notice of Privacy Practices describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.
As a CARF-accredited outpatient addiction and mental health treatment facility, we maintain the highest standards of confidentiality. Your trust is the foundation of the therapeutic relationship, and we take every measure to protect the information you share with us during your recovery journey.
In the course of providing treatment, we may collect and maintain the following categories of Protected Health Information:
Your name, date of birth, address, phone number, email, Social Security number, and insurance information.
Treatment plans, progress notes, assessments, diagnoses, medication records, lab results, and discharge summaries.
Records related to substance use disorder treatment, which receive additional federal protections under 42 CFR Part 2.
Claims, payment records, insurance verification data, pre-authorization documents, and financial assistance records.
Records of phone calls, secure messages, and correspondence related to your care and treatment coordination.
We may use and disclose your PHI for the following purposes without your written authorization:
Sharing information among your treatment team, including clinicians, therapists, psychiatrists, and care coordinators. This includes referrals to other healthcare providers and communication about your treatment plan. For substance use disorder records, additional consent requirements under 42 CFR Part 2 may apply.
Submitting claims to your insurance company, verifying coverage, obtaining pre-authorization for services, and processing co-pays and billing. We follow minimum necessary standards and share only the information required for payment processing.
Quality improvement activities, staff training, CARF accreditation surveys, compliance audits, and business management functions necessary to operate our facility and improve the care we deliver to all patients.
Important: Substance use disorder records receive additional protections under federal law (42 CFR Part 2). These records cannot be disclosed without your specific written consent, except in limited emergency situations or as required by law.
Under HIPAA and New Jersey law, you have the following rights regarding your Protected Health Information:
You may request to inspect and obtain a copy of your medical records maintained by Valley Spring Recovery Center.
You may request that we amend your health information if you believe it is incorrect or incomplete.
You may request restrictions on certain uses or disclosures of your PHI, though we are not always required to agree.
You may request a list of disclosures we have made of your health information for purposes other than treatment, payment, or operations.
You may request that we communicate with you about health matters through specific means or at specific locations.
You may file a complaint with us or with the U.S. Department of Health and Human Services if you believe your rights have been violated.
Valley Spring Recovery Center is required by law to:
We are required to maintain the privacy of your PHI and provide you with this notice of our legal duties and privacy practices. All staff members receive annual HIPAA training and sign confidentiality agreements.
We are required to abide by the terms of this Notice of Privacy Practices currently in effect. If we change our practices, we will distribute a revised notice.
We are required to notify you if a breach of your unsecured PHI occurs. Notification will include a description of the breach, the types of information involved, steps you should take, what we are doing, and contact information for further questions.
We make reasonable efforts to limit the use and disclosure of your PHI to the minimum amount necessary to accomplish the intended purpose.
If you have questions about this Notice, wish to exercise any of your rights, or want to file a complaint, please contact our Privacy Officer:
Privacy Officer
830 Broadway, Norwood, NJ 07648
Phone: (201) 781-8812
You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr/privacy/hipaa/complaints or by calling 1-877-696-6775.
You will not be retaliated against for filing a complaint.
Effective Date: This Notice of Privacy Practices is effective as of January 1, 2026.
Valley Spring Recovery Center reserves the right to change the terms of this notice and to make new notice provisions effective for all PHI that we maintain. If we make material changes, we will post a revised notice in our facility and on our website. You may request a copy of the current notice at any time by contacting our Privacy Officer.
This notice applies to all records of your care generated by Valley Spring Recovery Center, whether created by our staff or received from other healthcare providers.
Our team is here to help. Call us at (201) 781-8812 or visit us at 830 Broadway, Norwood, NJ 07648.