Privacy Policy

Effective date: August 1, 2025

Our privacy policy is compliant with relevant laws and regulations, including, but not limited to, the United States Health Insurance Portability and Accountability Act of 1996 (HIPAA). We will only provide information to third parties as permitted by applicable laws.

Our Privacy Policy

Intervention NY is committed to protecting your health information according to applicable law. This Notice (“Notice of Privacy Practices”) describes your rights and our duties under federal law. Protected health information (“PHI”) is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health or condition; the provision of healthcare services; or the past, present, or future payment for the provision of healthcare services to you.

Use of Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. Cookies are small text files placed on your device by your browser that allow us or third parties to recognize you and make your next visit easier and more useful to you.

We use the following types of cookies:

• Necessary cookies – Required for the website to function and cannot be switched off.
• Functional cookies – Enable enhanced functionality and personalization.
• Analytics cookies – Help us understand how visitors interact with our site (e.g., Google Analytics).
• Advertising cookies – May be set by advertising partners to deliver relevant ads.

You can manage or disable cookies in your browser settings. If you are located in the European Union or other regions with laws governing data collection, you may be asked to consent to the use of cookies before they are placed on your device. Disabling certain cookies may impact the functionality of our website.

Our Duties

• Maintain the privacy of your PHI.
• Provide you with notice of our legal duties and privacy practices with respect to your PHI.
• Notify you following a breach of unsecured PHI related to you.
• Abide by the terms of this Notice of Privacy Practices.

This Notice is effective as of the date above and remains in effect until revised. We may update this Notice when there are material changes to your rights, our duties, or other practices. Any new Notice will be effective for all PHI we maintain at that time. We will notify you of revisions:

• Upon request;
• Electronically via our website or other electronic means; and
• By posting at our place of business.

We respond to requests regarding your rights in a timely and appropriate manner and maintain reasonable and appropriate safeguards for your PHI.

Confidentiality of Addiction Treatment Records

The confidentiality of alcohol and drug abuse patient records maintained by us is protected by federal law and regulations. Generally, we may not say to a person outside our practice that you are a patient, or disclose any information identifying you as an alcohol or drug abuser, unless:

• You consent in writing (see “Authorization to Use or Disclose PHI”);
• The disclosure is allowed by a court order; or
• The disclosure is made to medical personnel in a medical emergency or to qualified personnel for research, audit, or program evaluation.

Violation of these federal laws and regulations is a crime. Suspected violations may be reported to appropriate authorities. Federal law does not protect information about crimes committed by you at our facility or against any person working for us, threats to commit such crimes, or suspected child abuse or neglect, which must be reported under state law.

Uses and Disclosures

We may use and disclose your PHI in the following situations:

Among Intervention NY Personnel

We may use or disclose information among personnel for diagnosis, treatment, or referral for treatment of alcohol or drug abuse. This includes billing statements, insurance eligibility checks, claim preparation, accreditation, and licensing.

Secretary of Health and Human Services

We are required to disclose PHI to the U.S. Department of Health and Human Services to determine compliance with HIPAA.

Business Associates

We may disclose your PHI to contracted business associates who must: (i) protect your PHI; (ii) use and disclose it only for agreed purposes; (iii) comply with 42 CFR Part 2 as applicable; and (iv) if necessary, resist in judicial proceedings any efforts to obtain patient records except as permitted by law.

Crimes on Premises

We may disclose to law enforcement information directly related to a crime on the premises or against our personnel, or a threat to commit such a crime.

Reports of Suspected Child Abuse and Neglect

We may disclose information required under state law to appropriate authorities. Original patient records will not be disclosed for civil or criminal proceedings arising from such reports without consent, unless otherwise permitted by law.

Court Orders

We may disclose information required by a court order, subject to regulatory requirements.

Emergency Situations

We may disclose information to medical personnel to treat you in an emergency.

Research

We may use and disclose information for research if requirements are met, such as review and approval by an Institutional Review Board.

Audit and Evaluation Activities

We may disclose information to persons conducting certain audit and evaluation activities, provided they agree to restrictions on further disclosure.

Reporting of Death

We may disclose information related to cause of death to an authorized public health authority.

Authorization to Use or Disclose PHI

Other than as stated above, we will not use or disclose your PHI without your written authorization. Subject to limited exceptions, we will not use or disclose psychotherapy notes, use or disclose your PHI for marketing, or sell your PHI without your authorization. You may revoke your authorization at any time by writing to us. Your revocation will not affect uses or disclosures already made in reliance on your authorization.

Your Rights

Right to Notice

You have the right to adequate notice of the uses and disclosures of your PHI and our duties regarding same, as provided herein. You may request a paper or electronic copy of this Notice at any time, or obtain it on our website or in person.

Right of Access to Inspect and Copy

You have the right to access, inspect, and obtain a copy of your PHI for as long as we maintain it, except in limited circumstances under applicable law. Requests must be made in writing. If access is denied, you may request review by another licensed health care professional not involved in the denial. We may charge a reasonable, cost-based fee for copying and/or mailing. If your PHI is maintained electronically, you may request an electronic copy in a readily producible format (e.g., PDF) or as otherwise agreed, and you may direct transmittal to another person or entity.

Right to Amend

If you believe your PHI is incorrect or incomplete, you may request an amendment in writing, stating the reason. We may deny requests in certain cases (e.g., we did not create the information; the information is accurate and complete). If denied, you may submit a statement of disagreement to be included with future disclosures. If accepted, we will identify other stakeholders to notify and provide the amendment.

Right to Request an Accounting of Disclosures

You may request an accounting of certain disclosures for a period permitted by law (up to six years prior to the request). Requests must be in writing. Certain disclosures are not required to be listed (e.g., those you authorized). If you request more than once in a 12-month period, a reasonable, cost-based fee may apply; we will inform you of any fee before processing.

Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI for treatment, payment, or operations. We are not required to agree, except as described under “Out-of-Pocket Payments.” If we agree, we will comply unless you revoke the restriction in writing, an emergency warrants otherwise, or the law permits use or disclosure. In rare cases, we may terminate an agreed restriction with prior notice.

Out-of-Pocket Payments

If you pay in full out-of-pocket for a specific item or service, you may request that we not disclose related PHI to a health plan for payment or operations; we will honor this request unless disclosure is required by law. Requests must be in writing.

Right to Confidential Communication

You may request that we communicate with you about PHI by alternative means or at alternative locations. Requests must be in writing and specify your preferred method or location. We will accommodate reasonable requests.

Right to Notification of a Breach

You have the right to be notified if we (or a business associate) discover a breach involving unsecured PHI.

Right to Voice Concerns

You may file a complaint in writing with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.

Questions, Requests for Information, and Complaints

For questions, requests, or complaints about this Privacy Policy, please contact:

We support your right to privacy of your Protected Health Information. You will not be retaliated against in any way if you choose to file a complaint with us or with the U.S. Department of Health and Human Services.