Privacy Policy

Effective Date: March 1, 2026

Last Updated: March 1, 2026

ALRA Rehab ("we," "our," or "us") operates a treatment center located at 18734 Colima Rd, Rowland Heights, CA 91748. This Privacy Policy describes how our facility collects, uses, discloses, and protects your personal information and protected health information (PHI) when you visit our campus, use our website, or receive treatment at our treatment center.

1. Information We Collect

Our treatment center may collect the following types of information:

Personal Information

• Full name, date of birth, and contact information (phone number, email address, mailing address)
• Emergency contact information
• Insurance information and billing details
• Government-issued identification for verification purposes

Protected Health Information (PHI)

• Medical history and current health conditions
• Substance use disorder treatment records
• Mental health assessments and diagnoses
• Treatment plans, progress notes, and discharge summaries
• Medication records
• Laboratory and diagnostic test results

Website Information

• IP address, browser type, and device information
• Pages visited and time spent on our website
• Referring website addresses
• Information submitted through contact forms on our website

2. How We Use Your Information

Our facility uses your information for the following purposes:

• Treatment: To provide, coordinate, and manage your care at our treatment center in Rowland Heights, California
• Payment: To process insurance claims, verify coverage, and handle billing for services provided at our facility
• Healthcare Operations: To support quality improvement, staff training, compliance audits, and the daily operations of our campus
• Communication: To respond to your inquiries, schedule appointments, and provide treatment-related information
• Legal Compliance: To comply with federal, state, and local laws and regulations

3. HIPAA Compliance

ALRA Rehab complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. Our treatment center maintains administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of your protected health information.

Under HIPAA, you have the following rights regarding your PHI:

• Right to Access: You may request access to your medical records maintained at our facility
• Right to Amend: You may request corrections to your PHI if you believe it is inaccurate or incomplete
• Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI made by our treatment center
• Right to Request Restrictions: You may request limitations on how our facility uses or discloses your PHI
• Right to Request Confidential Communications: You may request that our on-site team communicate with you through specific methods or at specific locations
• Right to a Copy of This Notice: You may request a paper copy of this Privacy Policy at any time from our facility

4. 42 CFR Part 2 Protections

As a treatment center that provides substance use disorder treatment, ALRA Rehab is subject to the federal confidentiality regulations found in 42 CFR Part 2. These regulations provide additional protections for substance use disorder treatment records beyond those required by HIPAA.

Under 42 CFR Part 2:

• Your substance use disorder treatment records maintained at our facility may not be disclosed without your written consent, except in limited circumstances permitted by law
• Our treatment center may not disclose that you are or have been a patient at our facility without your written authorization
• Any information that could identify you as a person with substance use disorder is protected by federal law
• Violations of 42 CFR Part 2 are subject to federal criminal penalties
• Records protected under 42 CFR Part 2 may not be used in civil, criminal, administrative, or legislative proceedings against you without your consent or a court order

Written consent for disclosure of 42 CFR Part 2 protected records must include specific elements as required by the regulation, including the purpose of the disclosure, the recipient, and the extent of information to be disclosed.

5. When We May Disclose Your Information

Our treatment center may disclose your information in the following situations:

• With Your Written Consent: When you provide a signed authorization for release of information
• For Treatment: To other healthcare providers involved in your care, with your consent as required by 42 CFR Part 2
• For Payment: To your insurance provider or other payers for services rendered at our facility, with your consent as required
• Medical Emergencies: To medical personnel in situations that pose an immediate threat to your health or safety
• Reporting Requirements: When required by law, such as cases involving suspected child or elder neglect
• Research: For approved research purposes, with appropriate safeguards and approvals in place
• Audit and Evaluation: To authorized individuals conducting audits or evaluations of our programs
• Court Orders: In response to a court order that meets the requirements of 42 CFR Part 2

6. Data Security

Our facility implements comprehensive security measures to protect your information, including:

• Encrypted electronic health record systems
• Secure, access-controlled physical records storage at our campus
• Role-based access controls for our on-site staff and digital systems
• Regular security training for all employees at our treatment center
• Secure disposal procedures for paper and electronic records
• SSL/TLS encryption for data transmitted through our website
• Regular security assessments and vulnerability testing

7. Cookies and Website Tracking

Our website uses cookies and similar technologies to improve your browsing experience. These include:

• Essential Cookies: Required for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our website so we can improve the experience

You can control cookie settings through your browser preferences. Disabling cookies may affect certain features of our website but will not impact your ability to contact our facility or receive treatment at our treatment center.

8. Third-Party Links

Our website may contain links to third-party websites. ALRA Rehab is not responsible for the privacy practices or content of external sites. We encourage you to read the privacy policies of any third-party websites you visit.

9. Minors

Our treatment center takes additional precautions to protect the privacy of minors. We do not knowingly collect personal information from individuals under the age of 13 through our website. Treatment of minors at our facility follows all applicable federal and state privacy regulations, including additional consent requirements.

10. Data Retention

Our facility retains your personal and health information in accordance with federal and California state law. Medical records are retained for the period required by applicable regulations. When records are no longer required to be maintained, they are securely destroyed in compliance with HIPAA and 42 CFR Part 2 requirements.

11. Changes to This Policy

ALRA Rehab reserves the right to update this Privacy Policy at any time. Changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically. Continued use of our website or services at our treatment center after changes are posted constitutes acceptance of the updated policy.

12. Your California Privacy Rights

California residents may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). However, medical information governed by HIPAA and 42 CFR Part 2 is exempt from these laws. For non-medical personal information, California residents may request:

• Disclosure of the categories and specific pieces of personal information collected
• Deletion of personal information
• Information about whether personal information has been sold or disclosed for a business purpose

ALRA Rehab does not sell personal information.

13. Breach Notification

In the event of a breach of unsecured protected health information, our treatment center will notify affected individuals, the U.S. Department of Health and Human Services, and, when required, the media, in accordance with the HIPAA Breach Notification Rule. We take all breaches seriously and will take immediate steps to mitigate harm and prevent future incidents at our facility.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or need to report a privacy concern, please contact our facility:

ALRA Rehab
18734 Colima Rd
Rowland Heights, CA 91748

Phone: (626) 681-1857
Email: [email protected]

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated. Our treatment center will not retaliate against you for filing a complaint.