Effective Date: [August 20, 2026]Eagle Lake Recovery Center (together with any of its affiliated operating brands, “Eagle Lake,” “we,” “us,” or “our”) is committed to protecting your privacy. This Website Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, submit an online form, or communicate with us by text message or other electronic means.Important distinction regarding health information. Some information you provide through our Website or electronic communications may constitute protected health information (PHI) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), even before you are admitted for treatment. When information is PHI, we use and disclose it in accordance with HIPAA and our Notice of Privacy Practices. If there is a conflict between this Website Privacy Policy and our Notice of Privacy Practices with respect to PHI, the Notice of Privacy Practices controls.Substance use disorder records. Certain records maintained by Eagle Lake may also be protected by the federal confidentiality regulations for substance use disorder patient records, 42 C.F.R. Part 2. When Part 2 applies, we use and disclose those records only as permitted by applicable law. These protections, and Eagle Lake’s related consent and notice practices, reflect the SAMHSA/HHS final rule aligning 42 C.F.R. Part 2 with HIPAA (compliance date February 16, 2026).
Information We Collect
Information You ProvideWhen you contact us through the Website, submit a form, request information, ask us to verify insurance benefits, or communicate with us electronically, we may collect information such as:
name, email address, and phone number;
the content of your inquiry or message, including information you choose to provide about treatment needs or services;
insurance information when you request benefits verification;
appointment, consultation, or assessment request information; and
other information you voluntarily provide.
Depending on the nature of the information and how it is collected or maintained, some of this information may be PHI and may also be subject to 42 C.F.R. Part 2.
Information Collected AutomaticallyWhen you visit our Website, certain technical information may be collected automatically, such as your IP address, browser type and version, device information, pages visited, time spent on pages, referring website, and similar usage information. Whether particular data is considered PHI depends on the context in which it is collected and used.
SMS and Electronic CommunicationsWhen you communicate with us by text message or another electronic channel, we may process your phone number, message content, timestamps, delivery information, and related metadata as necessary to send, receive, route, secure, and manage those communications. Because messages about treatment, health conditions, insurance, or care may contain sensitive health information, we apply applicable privacy and security requirements to those communications.By providing your phone number and communicating with us by text message, you consent to receive text messages from Eagle Lake related to your inquiry, including scheduling and follow-up messages and, where you have separately opted in, educational or promotional messages. Consent to receive text messages is not a condition of receiving treatment or services. Message frequency varies; message and data rates may apply. Reply STOP to opt out of text messages at any time, or HELP for assistance.Please avoid sending highly sensitive information through ordinary text messaging unless Eagle Lake has directed you to use that communication method. Text messages and standard email may not provide the same level of security as a secure patient communication platform.
How We Use InformationWe may use information collected through the Website and electronic communications to:
respond to questions about our programs and services;
communicate with you about treatment options;
schedule consultations, assessments, or other requested services;
verify insurance benefits when requested;
operate, secure, maintain, and improve the Website;
measure Website performance and understand general usage patterns;
manage communication quality and response times; and
send educational or promotional communications when permitted by law and, where required, with your consent.
You may opt out of promotional emails at any time using the unsubscribe link included in the message; we honor opt-out requests within the time required by applicable law, including the CAN-SPAM Act (15 U.S.C. § 7701 et seq.).When information is PHI or is protected by 42 C.F.R. Part 2, our uses of that information are additionally governed by those laws and our applicable privacy notices and authorizations.
Information Sharing and DisclosureWe do not sell personal information or PHI. We may disclose information only as permitted by applicable law and for legitimate operational, treatment, payment, healthcare operations, or other authorized purposes, as applicable.
Service Providers and Business AssociatesWe may use third-party service providers for services such as website hosting and maintenance, email or messaging services, website analytics, form processing, communications routing, and insurance verification. When a vendor creates, receives, maintains, or transmits PHI on our behalf and qualifies as a HIPAA business associate, we require an appropriate Business Associate Agreement (BAA) and other safeguards required by law. Vendors handling records subject to 42 C.F.R. Part 2 must also satisfy applicable Part 2 requirements.
Legal and Regulatory DisclosuresWe may disclose information when permitted or required by applicable law. Disclosures of PHI and records protected by 42 C.F.R. Part 2 are subject to the specific requirements and limitations of those laws. We do not treat every subpoena, government request, or other demand for information as automatically authorizing disclosure; we evaluate the applicable legal requirements before disclosing protected information.
Cookies and Tracking TechnologiesOur Website may use cookies and similar technologies to support Website functionality, security, performance measurement, and analytics. You can control many cookies through your browser settings, although disabling certain cookies may affect Website functionality.
Website AnalyticsWe may use analytics services, including Google Analytics, to understand general Website traffic and usage. These technologies may collect information such as IP address, device or browser information, pages viewed, referral information, and interactions with the Website. We do not characterize this information as anonymous in all circumstances because whether data is identifiable or constitutes PHI depends on the context.We evaluate tracking technologies used on pages that may collect or reveal health-related information. If a tracking technology would receive PHI, we use it only when the disclosure is permitted by HIPAA, including through an appropriate BAA or other legally permitted basis when required. We also evaluate applicable 42 C.F.R. Part 2 requirements where substance use disorder patient records are involved.Eagle Lake does not knowingly use geofencing or other location-based technology to identify, track, or direct advertising to individuals based on their presence at or near a health care facility. [Confirm and list here any additional tracking pixels or tags in use beyond Google Analytics, e.g., Meta Pixel or Google Ads remarketing tags, and evaluate each against the disclosures in this Policy.]
Data SecurityWe use reasonable administrative, technical, and physical safeguards designed to protect personal information and, where applicable, PHI. Safeguards may include encryption in transit, secure hosting, access controls, workforce access limitations, system maintenance, and other security measures appropriate to the information and systems involved. No method of transmission or storage can be guaranteed to be completely secure.If a security incident affects your personal information, we will provide notification as required by applicable law, which may include the HIPAA Breach Notification Rule (45 C.F.R. §§ 164.400–414), 42 C.F.R. Part 2, Louisiana’s Database Security Breach Notification Law (La. R.S. § 51:3071 et seq.), and, where applicable, the FTC Health Breach Notification Rule (16 C.F.R. Part 318).
Your Privacy RightsDepending on the information involved and the laws that apply, you may have rights to request access to or correction of information, request certain restrictions, receive an accounting of certain disclosures, request confidential communications, opt out of certain communications, or exercise other privacy rights. Rights involving PHI are described more fully in our Notice of Privacy Practices.For requests involving ordinary personal information that is not PHI, we will respond as required by applicable law. Certain records may need to be retained even when deletion is requested because of legal, regulatory, clinical, or recordkeeping obligations.
Data RetentionWe retain information only for as long as reasonably necessary for the purposes for which it was collected and as required by applicable legal, regulatory, clinical, contractual, and recordkeeping obligations. Retention periods may vary depending on the type of information and the systems in which it is maintained.
Children’s PrivacyOur Website is not directed to children under 18. We do not knowingly collect personal information from children under 18 through general Website functions except as permitted by law and as necessary to respond to requests involving treatment or services. If information concerning a minor is collected in connection with healthcare services, applicable healthcare privacy and consent requirements govern that information. Eagle Lake’s residential and outpatient programs are designed to serve adult patients. See also the Children’s Online Privacy Protection Act (15 U.S.C. §§ 6501–6506; 16 C.F.R. Part 312).
Notice of Privacy PracticesOur HIPAA Notice of Privacy Practices, combined to address both HIPAA and 42 C.F.R. Part 2 consistent with the 2024 SAMHSA/HHS final rule, describes how we may use and disclose PHI, your rights regarding PHI, and our legal duties. A current copy should be made prominently availableis available on our Website at [insert hyperlink to Notice of Privacy Practices] and is also available from Eagle Lake upon request.
Changes to This Privacy PolicyWe may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or applicable laws. When we update the policy, we will post the revised version on this page and update the effective date.
Contact UsIf you have questions about this Privacy Policy, our privacy practices, or your privacy rights, please contact Eagle Lake Recovery Center using the contact information provided on our Website.
