Privacy Policy

Effective Date: February 20, 2026

Brightside Rehab - Alcohol & Drug Treatment ("Brightside Rehab," "we," "us," or "our") is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, contact our facility, or receive treatment services at our center located at 1508 E Chicago St, Valparaiso, IN 46383.

By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or services.

1. Information We Collect

We may collect the following types of information when you interact with our website, call our facility, or engage with our treatment programs:

Personal Information

• Full name, date of birth, and gender
• Contact information including phone number, email address, and mailing address
• Emergency contact details
• Insurance information and billing details
• Government-issued identification numbers (when required for treatment or billing)
• Employment and financial information relevant to admissions and payment

Health and Treatment Information

• Medical history, diagnoses, and treatment records
• Substance use history and mental health assessments
• Prescription and medication records
• Lab results and clinical evaluations
• Treatment plans, progress notes, and discharge summaries
• Referral information from healthcare providers or courts

Website Usage Information

• IP address, browser type, and operating system
• Pages visited, time spent on pages, and navigation patterns
• Referring website or search terms used to find our site
• Device identifiers and general geographic location
• Information submitted through contact forms, chat features, or callback requests

2. How We Use Your Information

We use the information we collect for the following purposes:

• Treatment Services: To provide, coordinate, and manage your addiction treatment and rehabilitation care, including medical detox, residential treatment, outpatient programs, and dual diagnosis treatment.
• Communication: To respond to your inquiries, schedule appointments, provide treatment updates, and send important notices regarding your care or our services.
• Billing and Insurance: To process payments, verify insurance coverage, submit claims, and manage accounts receivable.
• Quality Improvement: To evaluate and improve the quality of our treatment programs, staff training, and patient outcomes.
• Compliance: To comply with federal and state laws, licensing requirements, accreditation standards, and regulatory obligations.
• Website Improvement: To analyze website traffic, improve user experience, optimize content, and ensure our site functions properly.
• Safety and Security: To protect the rights, safety, and property of our patients, staff, visitors, and facility.

3. How We Share Your Information

We do not sell, rent, or trade your personal or health information. We may share your information only in the following circumstances:

• With Your Consent: When you provide written authorization for us to disclose your information to specified individuals or entities.
• For Treatment, Payment, and Healthcare Operations: As permitted under HIPAA, we may share your Protected Health Information (PHI) with other healthcare providers involved in your care, insurance companies for payment processing, and internally for quality assurance and operational purposes.
• Service Providers: With trusted third-party vendors who assist us with website hosting, data analytics, billing, and other operational services, under strict confidentiality agreements.
• Legal Requirements: When required by law, court order, subpoena, or governmental regulation, or when necessary to protect our legal rights or comply with legal proceedings.
• Public Health and Safety: As required or permitted by law for public health activities, to prevent serious threats to health or safety, or to report suspected abuse, neglect, or domestic violence.
• 42 CFR Part 2 Compliance: Records relating to substance use disorder treatment are additionally protected under federal regulation 42 CFR Part 2 and cannot be disclosed without your written consent except in limited circumstances authorized by law, such as medical emergencies or qualified audits.

4. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytical data. These technologies include:

• Essential Cookies: Required for the website to function properly, including session management and security features. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data such as page views, session duration, and bounce rates.
• Functional Cookies: Remember your preferences and settings to provide a more personalized experience on return visits.

You can control cookie settings through your web browser preferences. Most browsers allow you to block or delete cookies; however, doing so may affect the functionality of certain features on our website. Please note that our website does not respond to "Do Not Track" browser signals at this time.

We do not use cookies or tracking technologies to collect Protected Health Information. Any health-related data is collected solely through secure, HIPAA-compliant systems.

5. Your Rights

You have the following rights regarding your personal and health information:

• Right to Access: You may request a copy of the personal and health information we maintain about you. We will provide the requested information within 30 days of receiving your written request.
• Right to Correction: You may request that we amend or correct inaccurate or incomplete information in your records. We will respond to your request within 60 days.
• Right to Restrict Disclosures: You may request restrictions on how we use or disclose your health information for treatment, payment, or healthcare operations. While we will consider all requests, we are not required to agree to restrictions except where disclosures to a health plan relate to services you paid for in full out of pocket.
• Right to Confidential Communications: You may request that we communicate with you about your health matters through a specific method or at a specific location (for example, only by mail to a designated address).
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your health information during the six years prior to your request.
• Right to Revoke Authorization: If you have provided written authorization for us to use or disclose your information, you have the right to revoke that authorization at any time in writing. Revocation does not apply to disclosures already made in reliance on your prior authorization.
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services Office for Civil Rights. You will not be retaliated against for filing a complaint.
• Right to a Paper Copy: You have the right to receive a paper copy of this Privacy Policy upon request.

To exercise any of these rights, please contact our Privacy Officer using the contact information provided at the bottom of this policy.

6. HIPAA Notice of Privacy Practices

Brightside Rehab is required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to maintain the privacy of your Protected Health Information (PHI), provide you with notice of our legal duties and privacy practices, and abide by the terms of this notice.

What Is Protected Health Information?

Protected Health Information (PHI) is individually identifiable health information that relates to your past, present, or future physical or mental health condition, the provision of healthcare services, or payment for those services. PHI includes information maintained in any form, whether electronic, paper, or oral.

Our Responsibilities

• We are required by law to maintain the privacy and security of your PHI.
• We must notify you promptly if a breach occurs that may compromise the privacy or security of your PHI.
• We must follow the duties and privacy practices described in this notice and provide you with a copy upon request.
• We will not use or share your PHI other than as described in this notice unless you provide written authorization. You may revoke any authorization you give us in writing at any time.

Permitted Uses and Disclosures of PHI

We may use and disclose your PHI without your authorization for the following purposes:

• Treatment: To provide, coordinate, or manage your healthcare and related services, including consultations with other healthcare providers.
• Payment: To obtain payment for services provided, including billing your insurance plan, verifying coverage, and processing claims.
• Healthcare Operations: To support our business activities, including quality improvement, staff training, compliance audits, and accreditation.
• As Required by Law: To comply with federal, state, or local laws that require disclosure of health information.
• Health and Safety: To prevent or lessen a serious and imminent threat to a person or the public, consistent with applicable law and ethical standards.
• Research: Under certain conditions and with appropriate safeguards, for approved medical research purposes.
• Workers' Compensation: As authorized by and necessary to comply with workers' compensation laws.

Patient Rights Under HIPAA

• You have the right to inspect and obtain a copy of your medical records.
• You have the right to request amendments to your medical records if you believe they contain errors.
• You have the right to receive an accounting of disclosures of your PHI made by our facility.
• You have the right to request restrictions on certain uses and disclosures of your PHI.
• You have the right to request confidential communications by alternative means or at alternative locations.
• You have the right to be notified in the event of a breach of your unsecured PHI.
• You have the right to obtain a paper copy of this notice from us upon request.

Substance Use Disorder Records

Records relating to substance use disorder treatment at Brightside Rehab are protected under federal regulation 42 CFR Part 2. These records receive additional confidentiality protections beyond those provided by HIPAA. Generally, we may not disclose information identifying you as having a substance use disorder, or disclose any details of your treatment, without your written consent, except in the following limited circumstances:

• To medical personnel in a bona fide medical emergency
• To qualified personnel for the purpose of conducting scientific research, management audits, or program evaluations
• As authorized by an appropriate court order
• As permitted by law to report suspected child abuse or neglect

Violation of 42 CFR Part 2 is a criminal offense. Suspected violations may be reported to the appropriate authorities as provided by law.

Changes to This Notice

We reserve the right to change the terms of this notice at any time. Any changes will apply to all PHI we maintain. A revised notice will be posted on our website and made available at our facility upon request.

7. Data Security

We implement a range of administrative, technical, and physical safeguards to protect your personal and health information from unauthorized access, use, alteration, or disclosure. These measures include:

• Encryption of electronic health records and sensitive data transmissions
• Secure access controls with role-based permissions for staff
• Regular security assessments, vulnerability testing, and system updates
• Employee training on HIPAA compliance, data privacy, and security best practices
• Physical security measures at our facility, including restricted access to records areas
• Business Associate Agreements with all third-party vendors who handle PHI

While we take extensive precautions to protect your information, no method of electronic transmission or storage is completely secure. We continually review and update our security practices to address emerging threats and maintain the highest level of protection for your data.

8. Third-Party Links

Our website may contain links to external websites operated by third parties. These links are provided for your convenience and informational purposes. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any external sites before providing personal information. Linking to a third-party website does not constitute an endorsement of that site or its content by Brightside Rehab.

9. Children's Privacy

Our website is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors through our website. If we learn that we have inadvertently collected personal information from a child under 18 without verified parental consent, we will take steps to delete that information as promptly as possible. If you believe we may have collected information from a minor, please contact us immediately using the information below.

For minors receiving treatment services at our facility, all information is collected and managed with appropriate parental or guardian consent in accordance with Indiana state law and applicable federal regulations.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the "Effective Date" at the top of this page and post the revised policy on our website. We encourage you to review this page periodically to stay informed about how we protect your information. Your continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, or if you wish to exercise any of your rights described herein, please contact our Privacy Officer:

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated: