NOTICE OF PRIVACY PRACTICES
Protected Health Information & Substance Use Disorder Records
Effective Date: February 16, 2026
This Notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
- Introduction
Blueprints for Addiction Recovery, Inc. (“Blueprints,” “we,” “us,” or “Provider”) is required by law to maintain the privacy of your Protected Health Information (“PHI”), to provide you with notice of our legal duties and privacy practices, and to follow the terms of this Notice.
This Notice explains:
- How we may use and disclose your PHI
- Your rights regarding your PHI
- How your Substance Use Disorder (SUD) records are protected under federal law (42 CFR Part 2)
- How to contact us with questions or complaints
PHI includes information that identifies you and relates to your physical or mental health, condition, treatment, or payment for services.
Certain records related to substance use disorder treatment receive additional protections under federal law (42 CFR Part 2). Where applicable, those protections are explained below.
- Uses and Disclosures of PHI for Treatment, Payment, and Health Care Operations
(Authorization Not Required)
For Treatment
We may use and disclose PHI to provide, coordinate, or manage your health care and related services. This may include sharing information among physicians, clinicians, nurses, counselors, students, and other health care professionals involved in your care.
Example: Sharing information with a referring provider, psychiatrist, or primary care physician to coordinate treatment.
For Payment
We may use and disclose PHI to bill and collect payment for services you receive. This includes disclosures to health plans, insurance companies, billing services, and clearinghouses.
Example: Submitting claims to your insurance provider
For Health Care Operations
We may use and disclose PHI for operations necessary to run our programs and ensure quality care, including:
- Quality improvement and outcomes evaluation
- Training and supervision
- Audits, compliance, and risk management
- Accreditation, licensing, credentialing, and peer review
Sharing Among Professional Staff
Blueprints works collaboratively with licensed professionals and workforce members. PHI may be shared as needed to carry out treatment, payment, and health care operations.
- Special Notice Regarding Substance Use Disorder (SUD) Records
(42 CFR Part 2)
Records that identify you as having sought or received substance use disorder treatment are protected under federal law (42 CFR Part 2) and receive additional confidentiality protections beyond HIPAA.
Consent for SUD Records
- We generally require your written consent to use or disclose SUD records.
- A single written consent may authorize future uses and disclosures of SUD records for treatment, payment, and health care operations, and remains effective until you revoke it in writing.
Redisclosure
Recipients of SUD records may re‑disclose the information only as permitted by federal law and your consent.
Legal Proceedings
SUD records may not be used or disclosed against you in civil, criminal, administrative, or legislative proceedings without your written consent or a court order, except as otherwise permitted by law.
- Other Uses and Disclosures Permitted Without Authorization
We may use or disclose PHI without your authorization as permitted or required by law, including:
- As Required by Law & Law Enforcement
- Public Health Activities (disease control, abuse reporting)
- Health Oversight Activities (audits, licensure)
- Judicial or Administrative Proceedings
- Emergency or Serious Threats to Health or Safety
- Coroners, Medical Examiners, Funeral Directors
- Organ, Eye, or Tissue Donation
- Approved Research
- Specialized Government Functions
- Workers’ Compensation
- Disaster Relief
- Disclosures to You or Your Personal Representative
- Compliance Investigations by the U.S. Department of Health and Human Services
- Uses and Disclosures Requiring Written Authorization
Any use or disclosure of PHI not described in this Notice will be made only with your written authorization. You may revoke your authorization in writing at any time, except to the extent we have already relied on it.
Blueprints does not sell PHI.
- Your Rights Regarding Your PHI
You have the right to:
- Access and Obtain Copies of your PHI (paper or electronic)
- Request Corrections or Amendments
- Receive an Accounting of Certain Disclosures
- Request Restrictions on uses or disclosures
- Request Confidential Communications
- Restrict Disclosures to Health Plans if you pay in full out‑of‑pocket
- Receive Notice of a Breach
- Opt Out of Communications from Blueprints
- Receive a Paper Copy of this Notice upon request
Requests must be submitted in writing. We will respond within required legal timeframes.
- PRIVACY POLICIES GOVERNING DIGITAL & MULTIMEDIA ASSETS
This privacy notice discloses the privacy practices for https://blueprintsrecovery.com. This privacy notice applies solely to information collected by this website. It will notify you of the following:
- What personally identifiable information is collected from you through the website, how it is used and with whom it may be shared.
- What choices are available to you regarding the use of your data.
- The security procedures in place to protect the misuse of your information.
- How you can correct any inaccuracies in the information.
INFORMATION COLLECTION, USE, AND SHARING We are the sole owners of the information collected on this site. We only have access to/collect information that you voluntarily give us via email or other direct contact from you. We will not sell or rent this information to anyone.
We will use your information to respond to you, regarding the reason you contacted us. We will not share your information with any third party outside of our organization, other than as consented by you to fulfill your request for treatment services.
We collect website traffic information that is non-personally identifiable such as internet protocol address, browser type, device type, date and time of visit. Such information is used to improve site visitor experience and website content and performance
Unless you ask us not to, we may contact you via email in the future to tell you more about our services, or changes to this privacy policy.
COOKIES We use “cookies” on this site. A cookie is a piece of data stored on a site visitor’s hard drive to help us improve your access to our site and identify repeat visitors to our site. For instance, when we use a cookie to identify you, you would not have to log in a password more than once, thereby saving time while on our site. Cookies can also enable us to track and target the interests of our visitors to enhance the experience on our site. Usage of a cookie is in no way linked to any personally identifiable information on our site.
YOUR ACCESS TO AND CONTROL OVER INFORMATION You may opt out of any future contacts from us at any time. You can do the following at any time by contacting us via the email address or phone number given on our website:
- See what data we have about you, if any.
- Change/correct any data we have about you.
- Have us delete any data we have about you.
- Express any concern you have about our use of your data.
SECURITY We take precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline.
Wherever we collect sensitive information, that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for “https” at the beginning of the address of the Web page.
While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or clinical service) are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment.
- Changes to This Notice
We reserve the right to change this Notice and apply the revised Notice to information we already have as well as information we receive in the future. Updated notices will be posted on our website and available upon request.
- Complaints and Contact Information
If you believe your privacy rights have been violated, you may file a complaint without fear of retaliation.
Contact:
Compliance Officer
Blueprints for Addiction Recovery, Inc.
1901 Olde Homestead Lane, Suite 101
Lancaster, PA 17601
Phone: (717) 361‑1660
You may also file a complaint with:
Secretary of the U.S. Department of Health and Human Services
200 Independence Avenue, S.E.
Washington, DC 20201