Privacy Policy

LANTANA RECOVERY
NOTICE OF PRIVACY PRACTICES
Effective Date: February 16, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION.

Please review it carefully.

OUR COMMITMENT TO YOUR PRIVACY

Lantana Recovery is committed to protecting the privacy and confidentiality of your health information. We create and maintain records of the care and services you receive to provide quality treatment and to comply with legal requirements.

This Notice describes:

• How we may use and disclose your Protected Health Information (“PHI”)
• Your rights regarding your health information
• Our legal duties regarding your information
• How to file a complaint if you believe your privacy rights have been violated

Protected Health Information (PHI) includes information that identifies you and relates to your physical or mental health condition, substance use disorder treatment, health care services, or payment for services.

SPECIAL PROTECTIONS FOR SUBSTANCE USE DISORDER RECORDS

Lantana Recovery is a federally assisted program that provides substance use disorder diagnosis, treatment, and referral for treatment services.

Records relating to substance use disorder treatment are protected under:

• The Health Insurance Portability and Accountability Act (HIPAA)
• The Confidentiality of Substance Use Disorder Patient Records regulations (42 C.F.R. Part 2)

Because we provide substance use disorder treatment services, your records may receive additional protections beyond HIPAA.

Under federal law:

• We may not use or disclose your substance use disorder treatment records without your written consent, except as expressly permitted by federal law.
• We may not use or disclose your substance use disorder records in civil, criminal, administrative, or legislative proceedings without your written consent or a court order issued in accordance with 42 C.F.R. Part 2.
• A subpoena alone is not sufficient to release substance use disorder treatment records.
• A general medical authorization is not sufficient to release substance use disorder treatment records unless it meets Part 2 requirements.

Any disclosure made with your written consent may be subject to federal redisclosure restrictions.

HOW WE MAY USE AND DISCLOSE YOUR INFORMATION

The law allows us to use or disclose your health information for the following purposes without your written authorization, except where additional Part 2 protections apply:

1. For Treatment

We may use or disclose your PHI to physicians, nurses, therapists, counselors, case managers, and other healthcare professionals involved in your care to coordinate, manage, and provide treatment services.

If your care involves substance use disorder treatment records, disclosures will comply with 42 C.F.R. Part 2 requirements.

2. For Payment

We may use or disclose your PHI to insurance companies, health plans, or government agencies to obtain payment for services we provide to you.

This may include:

• Verification of eligibility
• Submission of claims
• Utilization review
• Billing audits

Substance use disorder treatment information will only be disclosed in accordance with federal law.

3. For Health Care Operations

We may use or disclose PHI to support our operations, including:

• Quality assessment and improvement
• Staff training and supervision
• Accreditation and licensing activities
• Business planning and management

We may share information with Business Associates who assist us in operating our program. We require all Business Associates to protect your information in accordance with federal law.

4. As Required by Law

We may disclose PHI when required by applicable federal or state law.

However:

Substance use disorder treatment records will not be disclosed for legal proceedings without your written consent or a court order issued in compliance with 42 C.F.R. Part 2.

Subpoenas alone are not sufficient to authorize release of substance use disorder records.

5. Public Health and Health Oversight Activities

We may disclose PHI:

• For public health reporting required by law
• For governmental oversight activities such as audits, inspections, investigations, or licensure reviews

Substance use disorder records will be disclosed only as permitted under federal law.

6. To Avert a Serious Threat to Health or Safety

We may disclose PHI if we believe in good faith that disclosure is necessary to prevent or lessen a serious and imminent threat to your health or safety or that of another person, consistent with applicable law.

7. To Personal Representatives

We may disclose PHI to a person authorized by law to act on your behalf, such as a legal guardian or health care power of attorney.

8. To Family and Friends Involved in Your Care

With your agreement, or when permitted by law, we may disclose limited PHI to individuals involved in your care or payment for your care.

You may limit or revoke such permissions at any time.

9. Incidental Disclosures

Certain incidental disclosures may occur as a by-product of an otherwise permitted use, provided we have applied reasonable safeguards and limited information to the minimum necessary.

USES AND DISCLOSURES REQUIRING YOUR WRITTEN AUTHORIZATION

Except as described above, we will not use or disclose your PHI without your written authorization.

You may revoke your authorization at any time in writing, except to the extent that we have already relied upon it.

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

You have the following rights:

Right to Access

You have the right to inspect and obtain a copy of your PHI contained in a designated record set, subject to limited exceptions permitted by law.

We may charge a reasonable fee for copies.

Right to Request Amendment

You may request an amendment if you believe your information is incorrect or incomplete. We may deny your request under certain circumstances but will provide a written explanation.

Right to an Accounting of Disclosures

You have the right to receive an accounting of certain disclosures of your PHI made within the previous six (6) years.

This includes disclosures of substance use disorder records as required by federal law.

Right to Request Restrictions

You may request restrictions on certain uses and disclosures of your PHI. We are not required to agree to all requested restrictions.

Right to Confidential Communications

You may request that we communicate with you by alternative means or at an alternative location.

Right to Revoke Authorization

You may revoke any authorization you have provided, except to the extent we have already relied on it.

OUR LEGAL DUTIES

We are required by law to:

• Maintain the privacy of your PHI
• Provide you with this Notice
• Follow the terms of this Notice currently in effect
• Notify you in the event of a breach of unsecured PHI

We reserve the right to change this Notice at any time. Revised Notices will apply to all PHI we maintain and will be available upon request and posted on our website.

COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with:

Privacy Officer
Lantana Recovery
65 Gadsden St
Charleston, SC 29401
Phone: (843) 281-7964

You may also file a complaint with:

U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
Toll-Free: 1-877-696-6775

You may also file a complaint regarding violations of 42 C.F.R. Part 2 with the U.S. Department of Health and Human Services.

We will not retaliate against you for filing a complaint.

ACKNOWLEDGMENT OF RECEIPT

I acknowledge that I have received a copy of Lantana Recovery’s Notice of Privacy Practices.