HIPAA PRIVACY POLICY

Effective Date: 4th June 2025

At KASA Recovery, we are committed to maintaining the confidentiality, privacy, and security of your health information. This Privacy Policy outlines how we handle your protected health information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA), a federal law that governs the use and disclosure of your health information.

This policy applies to all services we provide at KASA Recovery, including but not limited to, outpatient and inpatient treatment, counseling, and any related healthcare services. By engaging with our services, you consent to the practices described in this Privacy Policy.

1. What is Protected Health Information (PHI)?

Protected Health Information (PHI) refers to any information related to your physical or mental health, the provision of healthcare, or payment for healthcare services that can identify you as an individual. PHI can include:

• Your medical history
• Diagnoses
• Treatment plans and records
• Medications
• Test results
• Billing information

2. How We Use and Disclose Your Health Information

We use and disclose your PHI for the following purposes:

• Treatment: To provide, coordinate, or manage your healthcare. For example, we may share your information with your doctors, nurses, and therapists to ensure you receive comprehensive treatment.
• Payment: To obtain payment for the services we provide. We may disclose your PHI to insurance companies, billing departments, and other entities involved in the payment process.
• Healthcare Operations: To conduct our business activities such as quality improvement, training, and administrative purposes. We may use your PHI to enhance the quality of care and ensure compliance with applicable regulations.
• Legal and Regulatory Compliance: We may disclose your PHI when required by law or to comply with regulatory bodies or court orders.
• Appointment Reminders: We may contact you with reminders about appointments, follow-ups, and care plans.
• Research: In some cases, your PHI may be used for medical research, but this will only occur after we obtain your explicit consent, or if the research is approved by an institutional review board (IRB) and ensures your privacy is maintained.

3. Your Rights Under HIPAA

You have several rights concerning your PHI. These include:

• Right to Inspect and Copy: You have the right to inspect and obtain copies of your health records, subject to certain exceptions. You may request access to your medical records, billing information, and other personal health information.
• Right to Request Corrections: If you believe that your PHI is incorrect or incomplete, you have the right to request a correction or amendment to your records.
• Right to Request Restrictions: You may request restrictions on how your PHI is used or disclosed. While we are not required to agree to these requests, we will consider them on a case-by-case basis.
• Right to Confidential Communications: You have the right to request that we communicate with you about your health information in a particular manner or location, such as by phone, email, or a different address.
• Right to an Accounting of Disclosures: You have the right to request a list of instances where your PHI has been disclosed, other than for treatment, payment, or healthcare operations.
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or the U.S. Department of Health and Human Services Office for Civil Rights.

4. How We Protect Your Information

We implement a variety of physical, administrative, and technical safeguards to ensure your PHI is protected. This includes:

• Physical Safeguards: Secure access controls to our facilities, ensuring only authorized personnel can access your health information.
• Administrative Safeguards: Policies and procedures designed to ensure that only those who need to access your PHI for treatment or other authorized purposes are able to do so.
• Technical Safeguards: Encryption and secure communication technologies to protect your information during transmission and storage.

5. Third-Party Service Providers

In some cases, we may work with third-party service providers to perform functions on our behalf (such as billing, IT services, or auditing). These providers are required to maintain the confidentiality and security of your PHI and will not use your information for any purpose other than to provide the agreed-upon services.

6. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our practices or legal requirements. Any changes to this policy will be posted on this page, and the date of the most recent revision will be indicated at the top. If the changes are significant, we will notify you directly via email or other means.

7. Contact Us

If you have any questions or concerns about your privacy rights or how we handle your PHI, please contact us:

KASA Recovery

Address: 5369 W. Pico Blvd,  Los Angeles, CA 90019

Phone: (323) 792-1700

Email: help@kasarecovery.com

For more information on HIPAA or to file a complaint, you may also visit the U.S. Department of Health and Human Services website: www.hhs.gov/hipaa.