Privacy Policy

Privacy Policy: HIPAA & 42 CFR Part 2 Compliance

Effective Date: December 3, 2025
Owner: Prosperous Health San Diego (“Prosperous Health,” “we,” “our,” or “us”)

1. Introduction

Your privacy is critically important to us. Prosperous Health San Diego is dedicated to protecting the confidentiality, integrity, and security of your protected health information (PHI) and personally identifiable information (PII) in compliance with the Health Insurance Portability and Accountability Act (HIPAA), 42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records), and all applicable federal and state laws.

2. Information We Collect

We may collect and process the following types of information:

Personal Information: Name, address, email, phone number, date of birth, insurance details, emergency contacts.
Health Information: Medical history, diagnoses, treatment records, substance use disorder information, and other PHI.
Insurance Information: Policy numbers, provider details, coverage data.
Communication Data: Emails, web forms, phone calls, text messages, chat interactions, and other communications with our team.

3. How We Use Your Information

Your information is used solely for:

Providing, coordinating, or managing your care and related services
Verifying insurance benefits and eligibility
Processing payments and billing
Responding to inquiries and providing customer support
Complying with legal, regulatory, and contractual obligations
Improving our website, services, and security

4. Disclosure of Information

We do not share your PHI or PII except as permitted or required by law. Disclosures may occur:

With your written consent
For treatment, payment, or healthcare operations (TPO) as allowed under HIPAA
To business associates under strict confidentiality agreements
To comply with court orders, subpoenas, or legal requirements
In medical emergencies, to medical personnel, as permitted by 42 CFR Part 2
To prevent or lessen a serious and imminent threat to health or safety

5. 42 CFR Part 2 Protections

Records relating to substance use disorder diagnosis, treatment, or referral are protected by federal law (42 CFR Part 2). We will not disclose such information without your explicit written consent, except as specifically permitted by law (e.g., medical emergencies, research with IRB approval, court order).

6. Data Security

We maintain administrative, physical, and technical safeguards to protect your information, including:

Encrypted data storage and transmission (FIPS 140-2 compliance)
Access controls and audit trails
Secure destruction of records
Ongoing staff training in privacy and security

7. Your Rights

You have the right to:

Request access to your records
Request corrections or amendments
Request restrictions on certain uses or disclosures
Receive an accounting of disclosures
Revoke your consent (where permitted)
File a complaint without fear of retaliation

8. Communication Privacy

All communications (phone, email, web forms, chat) are treated as confidential. We use secure methods for transmitting sensitive information and will not use unencrypted email or text for PHI without your explicit consent.

9. Cookies & Web Tracking

Our website may use cookies and analytics tools to improve site functionality. No PHI or sensitive PII is collected or stored through these tools.

10. Third-Party Links

Our website may include links to third-party sites. We are not responsible for the privacy practices or content of those sites.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a new effective date.

12. Contact Us

For questions, requests, or complaints regarding this policy or your rights, contact:
Privacy Officer
Prosperous Health San Diego
Email: jerry@phealthsd.com
Phone: 858-864-1428

Notice: Violation of federal law and regulations by Prosperous Health San Diego is a crime. Suspected violations may be reported to appropriate authorities in accordance with 42 CFR Part 2.