Privacy Policy & Notice of Privacy Practices
Effective Date: January 19, 2026 (Updated to comply with 42 CFR Part 2 alignment requirements)
Balance Integrated Health ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.balanceintegratedhealth.com (the "Site"), contact us, or receive services from our clinic.
As a healthcare provider, we also comply with the Health Insurance Portability and Accountability Act (HIPAA) and, where applicable, the Confidentiality of Substance Use Disorder Patient Records regulations (42 CFR Part 2). This document includes our Notice of Privacy Practices for protected health information (PHI) as required by HIPAA, and provides notice regarding substance use disorder (SUD) records protected under 42 CFR Part 2.
Please read this policy carefully. By using the Site or our services, you agree to these practices.
1. Information We Collect We collect information in two main ways:
Personal Information You Provide: Name, email, phone, address, health history, payment details (for membership), or messages via forms/contact.
Protected Health Information (PHI): Medical records, diagnoses, treatment plans, or notes from visits (collected during care). This may include records related to substance use disorders protected under 42 CFR Part 2.
Automatically Collected Information: IP address, browser type, device info, pages visited, and cookies (for Site functionality/analytics).
2. How We Use Your Information
Provide and manage healthcare services (treatment, appointments, membership).
Process payments and communicate (confirmations, reminders, newsletters).
Improve the Site and services (analytics).
Comply with laws (HIPAA reporting, audits).
For PHI, we use/disclose only as permitted/required by HIPAA:
Treatment, payment, operations (TPO).
With your authorization for other uses.
As required by law (public health, abuse reporting).
Special rules apply to SUD records (see Section 2.5 below).
2.5 Substance Use Disorder (SUD) Records Protected Under 42 CFR Part 2 Federal law (42 CFR Part 2) provides heightened confidentiality protections for records related to substance use disorder diagnosis, treatment, or referral for treatment ("Part 2 records"). These protections are generally stricter than standard HIPAA rules.
We may create, maintain, receive, or transmit Part 2 records in the course of providing or coordinating care. If we do:
We will only use or disclose Part 2 records as permitted by 42 CFR Part 2. For example, disclosures for treatment, payment, or health care operations typically require your specific written consent (unlike regular PHI under HIPAA).
We will not disclose information that identifies you as having or having had a substance use disorder without your consent, except in limited circumstances allowed by law (e.g., medical emergencies, court orders, research under specific conditions, or reporting child abuse/neglect).
If we disclose Part 2 records with your consent, the recipient may redisclose the information only as permitted by law. For HIPAA-covered recipients, redisclosure may be allowed for treatment, payment, or health care operations under HIPAA, but federal Part 2 rules prohibit unauthorized redisclosure in many cases (e.g., no use in civil, criminal, administrative, or legislative proceedings against you without your consent or a qualifying court order).
You have the right to receive this adequate notice of uses/disclosures of Part 2 records, your rights, and our legal duties regarding such records.
For more details on your rights related to Part 2 records, contact our Privacy Officer.
3. Sharing Your Information We do not sell personal information. We share only when necessary:
With team members for care.
Business associates (billing, IT) under HIPAA agreements.
As required by law or to protect rights/safety.
For PHI: Limited to minimum necessary; disclosures for marketing/research require authorization. For Part 2 records: Subject to stricter restrictions (see Section 2.5); we will not disclose without your specific consent except as expressly allowed.
4. Your Rights Under HIPAA (PHI) You have the right to:
Request access/copy of your PHI.
Request amendments.
Receive accounting of disclosures.
Request restrictions/confidential communications.
File complaints with us or HHS (contact info below).
Additional rights may apply to Part 2 records (e.g., more enforceable restrictions on use/disclosure). Contact us for details.
5. Data Security We implement safeguards (administrative, physical, technical) to protect information. No method is 100% secure—report suspected breaches.
6. Cookies & Tracking We use cookies for functionality/analytics (Google Analytics). Manage preferences via browser or our cookie banner.
7. Children's Privacy We do not knowingly collect information from children under 13 (or 16 for online). Contact us if aware.
8. Changes to This Policy We update as needed and notify via Site/email for material changes.
9. Contact Us Questions about this policy, PHI rights, or Part 2 records: Privacy Officer Balance Integrated Health 336 S 10th St, Suite 107 Montrose, CO 81401 Phone: (970) 514-5463 Email: privacy@balanceintegratedhealth.com
For HIPAA complaints: U.S. Department of Health and Human Services (hhs.gov/ocr).
Acknowledgment: By using our services, you acknowledge this Notice.