Privacy Policy

Effective Date: February 9, 2026

Our Commitment to Your Privacy

Your privacy is important to us. This Privacy Policy explains how Lighthouse Behavioral Health Center collects, uses, and protects your information when you use our website and services. We are committed to maintaining the highest standards of confidentiality and compliance with all applicable privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA).

Information We Collect

Personal Information

• Name, contact information (phone, email, address)
• Date of birth and demographic information
• Insurance information and payment details
• Emergency contact information
• Information you provide via forms, phone calls, or other contact methods

Protected Health Information (PHI)

• Medical history, diagnoses, and treatment records
• Mental health and substance use disorder information
• Medication and prescription information
• Clinical assessments and progress notes
• Laboratory and diagnostic test results

Website Usage Data

• IP address, browser type, and device information
• Pages visited and time spent on our website
• Cookies and similar tracking technologies for analytics

How We Use Your Information

Treatment, Payment, and Healthcare Operations

• Treatment: To provide, coordinate, and manage your healthcare services and treatment
• Payment: To bill and collect payment for services, verify insurance coverage, and process claims
• Healthcare Operations: To improve our services, conduct quality assessments, train staff, and ensure regulatory compliance

Other Uses

• To respond to your inquiries and appointment requests
• To communicate important information about your care
• To comply with legal and regulatory obligations
• To improve our website functionality and user experience
• For health and safety purposes, including reporting suspected abuse or neglect

Information Sharing and Disclosure

We do not sell your personal information or protected health information. We may share your information only in the following circumstances:

With Your Authorization

• We will obtain your written authorization before using or disclosing your PHI for purposes other than treatment, payment, or healthcare operations
• You have the right to revoke your authorization at any time in writing

Required or Permitted by Law

• To public health authorities for disease prevention and control
• To law enforcement in response to valid legal process (court orders, subpoenas, warrants)
• To report suspected abuse, neglect, or domestic violence as required by law
• To comply with workers' compensation laws
• For judicial and administrative proceedings as authorized by court order
• To coroners, medical examiners, and funeral directors as necessary

Healthcare Operations

• To business associates who perform services on our behalf (billing, IT support) under written agreements requiring them to protect your information
• To other healthcare providers involved in your care for coordination purposes
• To insurance companies and health plans for payment and coverage verification

HIPAA Notice of Privacy Practices

This section constitutes our Notice of Privacy Practices as required by the Health Insurance Portability and Accountability Act (HIPAA).

Your Rights Regarding Your Protected Health Information

You have the following rights with respect to your protected health information:

• Right to Access: You have the right to inspect and obtain a copy of your health records. Requests must be made in writing.
• Right to Amend: You may request corrections to your health records if you believe information is incorrect or incomplete.
• Right to an Accounting of Disclosures: You may request a list of disclosures we have made of your PHI for purposes other than treatment, payment, or healthcare operations.
• Right to Request Restrictions: You may request restrictions on how we use or disclose your information. We are not required to agree to your request but will consider it.
• Right to Confidential Communications: You may request that we communicate with you in a specific manner or at a specific location.
• Right to a Paper Copy of This Notice: You may request a paper copy of this Notice at any time.
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights.

Our Legal Duties

• We are required by law to maintain the privacy and security of your protected health information
• We must follow the terms of this Notice currently in effect
• We will notify you if we are unable to agree to a requested restriction
• We will notify you if your protected health information is breached

Uses and Disclosures That Require Your Authorization

We will obtain your written authorization before using or disclosing your information for:

• Marketing purposes (unless it is a face-to-face communication)
• Sale of your protected health information
• Psychotherapy notes (with limited exceptions)
• Most uses and disclosures not described in this Notice

Data Security and Protection

We implement comprehensive physical, technical, and administrative safeguards to protect your information:

Physical Safeguards

• Secure facility access controls and locked storage for physical records
• Limited access to areas where PHI is stored
• Proper disposal procedures for documents containing PHI

Technical Safeguards

• Encryption of electronic health records and data transmissions
• Secure authentication and access controls
• Regular security updates and firewall protection
• Automatic log-off from electronic systems

Administrative Safeguards

• Staff training on privacy and security practices
• Written policies and procedures for handling PHI
• Business associate agreements with third-party vendors
• Regular risk assessments and security evaluations

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Analyze website traffic and improve user experience
• Remember your preferences and settings
• Provide relevant content and information

You may disable cookies through your browser settings, though this may affect website functionality. We do not use cookies to collect protected health information.

Children's Privacy

Our website is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors without parental consent. If we become aware that we have collected information from a minor without proper consent, we will take steps to delete it.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Material changes will be posted on our website and will be effective immediately upon posting. The revised Notice will apply to all protected health information we maintain. We will provide you with a copy of the revised Notice:

• Upon your request
• At your next visit for treatment
• By posting prominently at our facility and on our website

State-Specific Privacy Rights

Residents of certain states may have additional privacy rights under state law. Maryland law provides additional protections for mental health and substance use disorder treatment records. We comply with all applicable state privacy laws that provide greater protections than HIPAA.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to file a complaint, please contact:

Filing a Complaint with HHS

You may also file a complaint with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated:

This Privacy Policy and Notice of Privacy Practices complies with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule, 45 CFR Parts 160 and 164, and all applicable federal and state privacy laws.