Privacy Policy

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review this notice carefully.

This document combines two notices in one. Part A is the Website Privacy Policy that governs information collected through www.goldenstate-rehab.com. Part B is the HIPAA Notice of Privacy Practices that governs Protected Health Information held by Golden State Rehab as a covered health care provider.

1. Introduction

Golden State Rehab ("Company," "we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.goldenstate-rehab.com (the "Website"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Website.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Effective Date" of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

2. Information We Collect

2.1 Information You Provide Voluntarily

We may collect personal information that you voluntarily provide to us when you:

• Fill out a contact, inquiry, or appointment request form on the Website.
• Subscribe to our newsletter or email communications.
• Participate in promotions, surveys, or other Website features.
• Send us communications, including emails or phone calls initiated through the Website.

The personal information we collect may include: your name, email address, phone number, mailing address, and any other information you choose to provide. We do not collect Protected Health Information ("PHI") through the Website's standard forms. If you are a current or prospective patient, your health information is collected and handled under our HIPAA Notice of Privacy Practices in Part B below.

2.2 Information Collected Automatically

When you visit the Website, certain information is collected automatically through cookies and similar tracking technologies, including:

• Log and usage data: IP address, browser type and version, operating system, referring URLs, pages viewed, and time spent on pages.
• Device data: information about the device you use to access the Website, including device type and identifiers.
• Location data: general geographic location derived from your IP address.
• Cookie data: session cookies, preference cookies, and analytics cookies as described in Section 7 below.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries, appointment requests, and provide customer service.
• To send you administrative information, including changes to our terms and policies.
• To send marketing and promotional communications, where you have opted in to receive them.
• To improve and optimize the Website and user experience through analytics.
• To protect against fraudulent, unauthorized, or illegal activity.
• To comply with applicable legal obligations, including those under California law and HIPAA.
• To enforce our Terms and Conditions and protect our legal rights.

4. Disclosure of Your Information

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

4.1 Service Providers

We may share your information with third-party vendors and service providers that perform services on our behalf, such as website hosting, data analytics, email delivery, and customer service. These service providers are contractually obligated to use your information only to provide services to us and may not use it for their own commercial purposes.

4.2 Business Transfers

If we undergo a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to a successor entity as part of that transaction, subject to an equivalent or greater level of privacy protection.

4.3 Legal Obligations

We may disclose your information if required to do so by law, court order, subpoena, or other governmental authority, or if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of the Company; (c) prevent or investigate possible wrongdoing in connection with the Website; or (d) protect the personal safety of users or the public.

4.4 With Your Consent

We may disclose your personal information for any other purpose with your explicit consent.

5. Your California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), including:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request that we delete personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information. We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below. We will respond to verifiable consumer requests within 45 days as required by law. We may need to verify your identity before processing your request.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Website. Cookies are small data files placed on your device. We use the following types:

• Essential Cookies: Required for the Website to function properly. These cannot be disabled.
• Analytics Cookies: Used to understand how visitors interact with the Website (e.g., Google Analytics). Data collected is aggregated and anonymized.
• Preference Cookies: Used to remember your settings and preferences.

Most web browsers allow you to control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website. You may also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7. Data Security

We implement commercially reasonable technical and organizational measures designed to protect your personal information from unauthorized access, use, alteration, and destruction. These measures include SSL/TLS encryption for data in transit, access controls, and regular security assessments.

However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security of your data. If you become aware of any breach or unauthorized use of your information, please contact us immediately.

8. Data Retention

We retain personal information collected through the Website for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need personal information, we will securely delete or anonymize it.

Your Information. Your Rights. Our Responsibilities.

Your health record contains personal information about you and your health. State and federal law protect the confidentiality of this information. "Protected health information" is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health condition and related health care services. The confidentiality of alcohol and drug abuse patient records is specifically protected by federal law and regulations (42 CFR Part 2).

Golden State Rehab is required to comply with these additional restrictions. This includes a prohibition, with very few exceptions, on informing anyone outside the program that you attend the program or disclosing any information that identifies you as an alcohol or drug abuser. The violation of federal laws or regulations by this program is a crime. If you suspect a violation, you may file a report with the appropriate authorities in accordance with federal regulations.

This Notice of Privacy Practices describes how we may use and disclose your PHI in accordance with all applicable law. It also describes your rights regarding how you may gain access to and control your PHI. We are required by law to maintain the privacy of PHI and to provide you with notice of our privacy practices. We reserve the right to change the terms of this Notice at any time. Any new Notice will be effective for all PHI that we maintain at that time. We will make a revised Notice available by posting a copy on this website, sending a copy to you upon request, or providing one to you at your next appointment.

9. How We May Use and Disclose Health Information About You

The categories below describe how Golden State Rehab may use and disclose your PHI. The examples are not meant to be exhaustive — rather, they describe the types of uses and disclosures that may be made.

9.1 Treatment

Your PHI may be used and disclosed by your physician, counselor, program staff, and others outside of our program who are involved in your care for the purpose of providing, coordinating, or managing your health care treatment and any related services. This includes coordination or management of your health care with a third party, consultation with other health care providers, or referral to another provider for treatment. For example, your PHI may be provided to the state agency that referred you to our program to ensure that you are participating in treatment. We may also disclose your PHI from time to time to another physician or health care provider (e.g., a specialist or laboratory) who, at our request, becomes involved in your care.

9.2 Payment

With your written authorization, we may use and disclose your PHI to obtain payment for the treatment services provided to you. Examples of payment-related activities include: making a determination of eligibility or coverage for insurance benefits, processing claims with your insurance company, reviewing services provided to you to determine medical necessity, or undertaking utilization review activities.

9.3 Health Care Operations

We may use or disclose your PHI as needed to support the business activities of our program, including but not limited to quality assessment activities, employee review activities, training of students, licensing, and conducting or arranging for other business activities. For example, we may use a sign-in sheet at the registration desk where you will be asked to sign your name and indicate your physician or counselor. We may also call you by name in the waiting room when it is time to be seen. We may share your PHI with third parties that perform business activities (e.g., billing or transcription services) for Golden State Rehab, provided we have a written contract requiring those parties to safeguard your PHI and prohibiting re-disclosure.

We may contact you to remind you of your appointments or to provide information about treatment alternatives or other health-related benefits and services that may be of interest to you.

10. Other Uses and Disclosures That Do Not Require Your Authorization

10.1 Required by Law

We may use or disclose your PHI to the extent the use or disclosure is required by law, made in compliance with the law, and limited to the relevant requirements of the law. You will be notified, as required by law, of any such uses or disclosures. We must also make disclosures to you upon your request and to the Secretary of the U.S. Department of Health and Human Services for the purpose of investigating or determining our compliance with the Privacy Rule.

10.2 Health Oversight

We may disclose PHI to a health oversight agency for activities authorized by law, such as audits, investigations, and inspections. Oversight agencies seeking this information include government agencies and organizations that provide financial assistance to the program (such as third-party payors) and peer review organizations performing utilization and quality control. If we disclose PHI to a health oversight agency, we will have an agreement in place that requires the agency to safeguard the privacy of your information.

10.3 Medical Emergencies

We may use or disclose your PHI in a medical emergency situation to medical personnel only. Our staff will try to provide you a copy of this Notice as soon as reasonably practicable after the resolution of the emergency.

10.4 Child Abuse or Neglect

We may disclose your PHI to a state or local agency that is authorized by law to receive reports of child abuse or neglect. The information we disclose is limited to only that information which is necessary to make the initial mandated report.

10.5 Deceased Patients

We may disclose PHI regarding deceased patients for the purpose of determining the cause of death, in connection with laws requiring the collection of death or other vital statistics, or permitting inquiry into the cause of death.

10.6 Research

We may disclose PHI to researchers if (a) an Institutional Review Board reviews and approves the research and a waiver of the authorization requirement; (b) the researchers establish protocols to ensure the privacy of your PHI; (c) the researchers agree to maintain the security of your PHI in accordance with applicable laws and regulations; and (d) the researchers agree not to redisclose your PHI except back to Golden State Rehab.

10.7 Criminal Activity on Program Premises or Against Program Personnel

We may disclose your PHI to law enforcement officials if you have committed a crime on program premises or against program personnel.

10.8 Court Order

We may disclose your PHI if a court issues an appropriate order and the required procedures are followed.

10.9 Public Health and Safety

We may share PHI for certain public-health and safety situations, such as preventing disease, helping with product recalls, reporting adverse reactions to medications, reporting suspected abuse, neglect, or domestic violence, and preventing or reducing a serious threat to anyone's health or safety.

10.10 Workers' Compensation, Law Enforcement, and Other Government Requests

We may use or share your PHI for workers' compensation claims, for law enforcement purposes or with a law enforcement official, with health oversight agencies for activities authorized by law, and for special government functions such as military, national security, and presidential protective services.

10.11 Organ and Tissue Donation; Medical Examiners and Funeral Directors

We may share PHI with organ procurement organizations and with a coroner, medical examiner, or funeral director when an individual dies.

11. Uses and Disclosures of PHI With Your Written Authorization

Other uses and disclosures of your PHI will be made only with your written authorization. You may revoke this authorization at any time, unless the program or its staff has already taken action in reliance on the authorization. The following uses and disclosures will be made only with your written permission:

• Marketing purposes
• Sale of your information
• Most sharing of psychotherapy notes

If we contact you for fundraising efforts, you can tell us not to contact you again.

12. Your Choices

For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.

You have both the right and choice to tell us to:

• Share information with your family, close friends, or others involved in your care.
• Share information in a disaster relief situation.
• Include your information in a hospital directory.
• Contact you for fundraising efforts.

If you are not able to tell us your preference (for example, if you are unconscious), we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.

13. Your Rights Regarding Your Protected Health Information

You have the following rights regarding PHI we maintain about you. Any request must be made in writing.

13.1 Right to Inspect and Copy

You may inspect and obtain a copy of your PHI that is contained in a "designated record set" for as long as we maintain the record. A designated record set contains medical and billing records and any other records that the program uses for making decisions about you. We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee for copies. We can deny you access to your PHI in certain circumstances; in some cases you will have a right to appeal the denial. Please contact our Privacy Officer if you have questions about access to your medical record.

13.2 Right to Amend

If you feel that the PHI we have about you is incorrect or incomplete, you may ask us to amend the information. We are not required to agree to the amendment. We may say "no" to your request, but we will tell you why in writing within 60 days.

13.3 Right to an Accounting of Disclosures

You may request an accounting of the disclosures we make of your PHI for a period of up to six years prior to the date you ask, excluding disclosures made to you, made for treatment, payment, or health care operations, and certain other disclosures. We will provide one accounting per 12-month period for free; we may charge a reasonable, cost-based fee for additional accountings within the same 12-month period.

13.4 Right to Request Restrictions

You have the right to ask us not to use or disclose any part of your PHI for treatment, payment, or health care operations, or to family members involved in your care. Your request must be in writing, and we are not required to agree to the restrictions. If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or operations with your health insurer, and we will say "yes" unless a law requires us to share that information.

13.5 Right to Request Confidential Communications

You have the right to request that we communicate with you about medical matters by alternative means or at an alternative location. We will accommodate reasonable, written requests. We may also condition this accommodation by asking how payment will be handled or for the specification of an alternative address or method of contact. We will not ask you why you are making the request.

13.6 Right to a Paper Copy of This Notice

You have the right to obtain a paper copy of this Notice from us at any time, even if you have agreed to receive the Notice electronically. Please contact our Privacy Officer.

13.7 Right to Choose Someone to Act for You

If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority and can act for you before we take any action.

14. Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this Notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

For more information, see hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html.

15. Complaints

If you believe we have violated your privacy rights, you may file a complaint in writing by notifying our Privacy Officer using the contact information in the Contact Us section below. We will not retaliate against you for filing a complaint.

You may also file a complaint with the U.S. Secretary of Health and Human Services:

Complaints of discrimination may be filed with our Privacy Officer, who will also supply you with a written statement summarizing your rights in this area. If you are not satisfied with the response, you may appeal to:

To file a complaint with the Joint Commission on Accreditation of Healthcare Organizations (JCAHO), use the link or address below. JCAHO does not accept faxed or emailed complaint submissions.

We will not retaliate against you for filing a complaint.

16. Contact Us

17. Changes to This Notice

We reserve the right to update or change this Privacy Policy and HIPAA Notice of Privacy Practices at any time. When we do, we will revise the Effective Date at the top of this document. Any new Notice of Privacy Practices will be effective for all PHI that we maintain at that time. Your continued use of the Website after any modifications will constitute your acknowledgment of the modifications.

This Notice of Privacy Practices applies to Golden State Rehab.

Last Updated: May 7, 2026