ClickCease

PRIVACY POLICY & HIPAA NOTICE

IMPORTANT NOTICE

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Provided in compliance with 45 C.F.R. ยง 164.520

Last Updated: 9/22/2025
Effective Date: 9/22/2025

TABLE OF CONTENTS

  1. About This Policy
  2. HIPAA Notice of Privacy Practices
  3. Website Privacy Policy
  4. Your Privacy Rights
  5. Contact Information

ABOUT THIS POLICY

These terms and conditions (the “Terms”) govern your access to and use of Luxury Rehab Atlas’s websites and mobile applications that link to or reference these Terms (“Site”). By accessing or using the Site, you are agreeing to these Terms and concluding a legally binding contract with Luxury Rehab Atlas (“Company,” “we,” “us,” or “our”), operated by Numa Recovery Centers in Los Angeles, California. Do not access or use the Site if you are unwilling or unable to be bound by the Terms.

Luxury Rehab Atlas is committed to protecting your privacy and ensuring the confidentiality of your health information. This document contains two important policies:

By using our services or website, you acknowledge that you have read and understand both policies.

HIPAA NOTICE OF PRIVACY PRACTICES

WHO WE ARE

Luxury Rehab Atlas provides addiction treatment services and care coordination. Your health information is contained in records that are the physical property and responsibility of Luxury Rehab Atlas.

HOW WE MAY USE AND DISCLOSE YOUR PROTECTED HEALTH INFORMATION

Routine Uses and Disclosures (No Authorization Required)

We are permitted under federal law to use and disclose PHI without your written authorization for certain routine purposes:

For Treatment:

For Payment:

For Health Care Operations:

Other Permitted Uses and Disclosures (No Authorization Required)

Required by Law:

Public Health Activities:

Health Oversight Activities:

Judicial and Administrative Proceedings:

Law Enforcement:

Serious Threats to Health or Safety:

Specialized Government Functions:

Workers’ Compensation:

Coroners, Medical Examiners, and Funeral Directors:

Organ Donation:

Research:

Business Associates:

Uses and Disclosures With Your Agreement or Opportunity to Object

Family and Friends:

Uses and Disclosures Requiring Your Written Authorization

Marketing:

Sale of PHI:

Psychotherapy Notes:

Other Uses:

SPECIAL PROTECTIONS FOR REPRODUCTIVE HEALTH INFORMATION

In compliance with 2024 HIPAA regulations, we provide enhanced protections for reproductive health information:

SPECIAL PROTECTIONS FOR SUBSTANCE USE DISORDER INFORMATION

Information related to substance use disorder treatment receives additional federal protection under 42 CFR Part 2:

WEBSITE PRIVACY POLICY

INFORMATION WE COLLECT

Personal Information You Provide

Information Collected Automatically

Information from Third Parties

HOW WE USE YOUR INFORMATION

Primary Purposes

Secondary Purposes

COOKIES AND TRACKING TECHNOLOGIES

We use the following types of cookies:

Essential Cookies:

Analytics Cookies:

Marketing Cookies (with consent):

Cookie Management: You can control cookies through your browser settings. Note that disabling cookies may limit some website functionality.

THIRD-PARTY SERVICES

We work with HIPAA-compliant third-party services:

Analytics Providers:

Communication Services:

Payment Processors:

Treatment Partners:

All third-party providers handling PHI have signed Business Associate Agreements ensuring HIPAA compliance.

DATA SECURITY

We implement comprehensive security measures:

Technical Safeguards:

Administrative Safeguards:

Physical Safeguards:

DATA RETENTION

We retain your information as follows:

Medical Records: Minimum 6 years from last service date or as required by state law Website Data: Generally 3 years unless longer retention is required Marketing Data: Until you opt out or as required for business purposes Legal Compliance: As required by applicable laws and regulations

YOUR PRIVACY RIGHTS

HIPAA Rights

Right to Access:

Right to Amendment:

Right to Restrictions:

Right to Confidential Communications:

Right to Accounting:

Right to Notification:

Right to Opt-Out:

General Privacy Rights

Access and Portability:

Correction:

Deletion:

Objection:

California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

Right to Know:

Right to Delete:

Right to Opt-Out:

Exercising Your Rights

To exercise any privacy rights:

  1. Submit Written Request: Email privacy@numabh.com
  2. Verify Identity: We may request additional information to confirm identity
  3. Specify Request: Clearly describe the right you wish to exercise
  4. Receive Response: We will respond within required timeframes

No Retaliation: We will not discriminate against you for exercising your privacy rights.

SPECIAL CIRCUMSTANCES

Minors (Under 18)

Emergency Situations

Legal Proceedings

Business Transfers

BREACH NOTIFICATION

If your PHI is breached, we will:

  1. Investigate: Assess the scope and cause of the breach
  2. Notify You: Within 60 days of discovery (30 days for electronic breaches affecting 500+ individuals)
  3. Notify Authorities: Report to Department of Health and Human Services as required
  4. Media Notice: If breach affects 500+ individuals in same state/jurisdiction
  5. Remediate: Take steps to prevent future breaches

UPDATES TO THIS POLICY

We may update this policy to reflect:

Notification of Changes:

Your Continued Use: Continued use of our services after changes indicates acceptance of the updated policy.

COMPLAINTS

You may file complaints about our privacy practices:

With Us:

With Government:

No Retaliation: We will not retaliate against you for filing complaints.

CONTACT INFORMATION

Privacy Officer:

General Inquiries:

Notice Effective Date: 9/22/2025