Privacy Policy

Effective Date: February 22, 2026

Introduction

NRVT Rehabilitation ("we," "our," or "us") is a licensed addiction treatment and mental health center located at 2019 Forest Ave, Chico, CA 95928. We are committed to protecting the privacy and confidentiality of all individuals who visit our facility, use our website at nrvt.net, or engage with our treatment programs.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information and Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA), the California Consumer Privacy Act (CCPA), and other applicable federal and state privacy laws. By accessing our website or utilizing our treatment programs, you acknowledge that you have read and understand this policy.

Information We Collect

We may collect the following categories of information when you interact with our facility or website:

Personal Information

Full name, date of birth, and contact details (phone number, email address, mailing address)
Emergency contact information
Insurance and billing information
Government-issued identification numbers
Employment and demographic information

Protected Health Information (PHI)

Medical history, diagnoses, and treatment records
Substance use history and assessment results
Medication records and prescriptions
Mental health evaluations and progress notes
Lab results and clinical documentation

Website Usage Information

IP address, browser type, and operating system
Pages visited, time spent on the site, and referring URLs
Device identifiers and location data (general geographic region)
Information submitted through contact forms or appointment requests

How We Use Your Information

We use the information we collect for the following purposes:

Treatment Operations: To provide, coordinate, and manage your addiction treatment and mental health care at our Chico, California facility
Payment Processing: To verify insurance coverage, process claims, and manage billing for treatment received at our center
Healthcare Operations: To support quality improvement, staff training, accreditation, and compliance activities
Communication: To respond to inquiries, schedule appointments, and provide follow-up care coordination
Legal Compliance: To comply with federal and state laws, including HIPAA, 42 CFR Part 2 (substance abuse treatment records), and mandatory reporting obligations
Website Improvement: To analyze site usage, enhance user experience, and ensure website security

HIPAA Compliance

As a healthcare facility, NRVT Rehabilitation is a HIPAA-covered entity. We maintain strict administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of your Protected Health Information (PHI).

Our HIPAA Commitments

All staff members undergo annual HIPAA training and are bound by confidentiality agreements
Electronic health records are encrypted and stored in HIPAA-compliant systems with restricted access controls
Physical records are maintained in secured areas with controlled access
We conduct regular risk assessments and audits to identify and mitigate potential privacy vulnerabilities
We maintain documented policies and procedures for handling PHI breaches, including timely notification protocols

Minimum Necessary Standard

We adhere to the HIPAA Minimum Necessary Standard, ensuring that only the minimum amount of PHI required to accomplish a specific purpose is used or disclosed. Access to patient records is role-based and limited to authorized personnel directly involved in your care.

Information Sharing & Disclosure

We do not sell your personal information or PHI to third parties. We may share your information only under the following circumstances:

With Your Consent: When you provide written authorization for us to disclose information to specified individuals or organizations
Treatment, Payment, and Operations: With healthcare providers, insurance companies, and business associates involved in your care, as permitted by HIPAA
Legal Requirements: When required by law, court order, subpoena, or government investigation
Public Health & Safety: To prevent serious threats to health or safety, to report suspected abuse or neglect, or as required by public health authorities
Business Associates: With third-party vendors who perform functions on our behalf (e.g., electronic health records providers, billing companies), subject to Business Associate Agreements that require HIPAA-compliant data handling

42 CFR Part 2 Protections

Substance use disorder treatment records maintained by NRVT Rehabilitation receive additional federal protection under 42 CFR Part 2. These records may not be disclosed without your specific written consent, except in limited circumstances permitted by law, such as medical emergencies or qualified audit/evaluation activities.

Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience:

Essential Cookies: Required for basic website functionality, such as page navigation and form submission
Analytics Cookies: Help us understand how visitors interact with our site so we can improve content and usability
Performance Cookies: Monitor site speed and performance to ensure optimal user experience

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. Our website does not respond to "Do Not Track" browser signals at this time. No health-related or treatment information is collected through cookies or website tracking technologies.

Your Rights

You have the following rights regarding your personal information and PHI:

Right to Access: You may request copies of your medical records and personal information held by our facility
Right to Amend: You may request corrections to inaccurate or incomplete information in your medical records
Right to Restrict: You may request limitations on how your PHI is used or disclosed for treatment, payment, or healthcare operations
Right to Confidential Communications: You may request that we communicate with you through specific channels or at specific locations
Right to an Accounting of Disclosures: You may request a record of certain disclosures of your PHI made by our facility
Right to Revoke Authorization: You may withdraw previously granted authorization for disclosure of your PHI at any time in writing
Right to Deletion: Under applicable California law, you may request deletion of personal information collected through our website, subject to legal and regulatory exceptions
Right to File a Complaint: You may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated

To exercise any of these rights, please contact our Privacy Officer using the information provided at the end of this policy. We will respond to all requests within the timeframes required by applicable law.

HIPAA Notice of Privacy Practices

This section serves as a summary of our Notice of Privacy Practices as required by HIPAA. A full copy of our Notice of Privacy Practices is available upon request at our facility or by contacting our Privacy Officer.

Uses and Disclosures of Protected Health Information

Your PHI may be used and disclosed by NRVT Rehabilitation, our staff, and others involved in your care for the purposes of treatment, payment, and healthcare operations. Examples include:

Sharing treatment information with physicians, therapists, and counselors involved in your care plan
Submitting claims and related documentation to your insurance company for payment
Internal quality assurance reviews and staff training activities

Your Rights Regarding PHI

As a patient at our Chico, California treatment center, you have the right to:

Receive a copy of our Notice of Privacy Practices
Request restrictions on the use and disclosure of your PHI
Inspect and obtain a copy of your health records
Request amendments to your health information
Receive an accounting of disclosures of your PHI
Be notified in the event of a breach of your unsecured PHI
File a complaint if you believe your privacy rights have been violated, without fear of retaliation

Our Responsibilities

NRVT Rehabilitation is required by law to maintain the privacy and security of your PHI, to provide you with notice of our legal duties and privacy practices, and to abide by the terms of our current Notice of Privacy Practices. We will notify you promptly if a breach occurs that may have compromised the security of your PHI.

Children's Privacy

Our website is not directed at individuals under the age of 13, and we do not knowingly collect personal information from children under 13 through our website. If we learn that we have inadvertently collected personal information from a child under 13 via our website, we will take immediate steps to delete that information. For minors between the ages of 13 and 17 who may participate in treatment programs at our facility, all applicable parental consent and privacy protections are strictly observed in accordance with federal and California state law.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, the updated policy will be posted on this page with a revised effective date. We encourage you to review this page periodically to stay informed about how we protect your information. Changes to this Privacy Policy do not affect the protections afforded to your PHI under HIPAA, which are governed by our Notice of Privacy Practices.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy, your privacy rights, or our data practices, please contact our Privacy Officer:

Privacy Officer, NRVT Rehabilitation
Address: 2019 Forest Ave, Chico, CA 95928
Phone: (209) 231-2053
Email: [email protected]

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting www.hhs.gov/ocr/complaints or calling 1-800-368-1019. We will not retaliate against you for filing a complaint.