Privacy Policy

Last Updated: March 1, 2026

Carlsbad Behavioral Health Solutions ("we," "us," or "our") is committed to protecting your privacy and safeguarding the personal and health information you share with us. This Privacy Policy describes how we collect, use, disclose, and protect your information when you visit our website at rehabcarlsbad.com, contact our facility, or receive treatment services from us.

Information We Collect

We may collect the following types of information depending on how you interact with our website and services:

• Personal Information: Name, email address, phone number, mailing address, date of birth, and insurance details that you voluntarily provide when completing forms, scheduling assessments, or contacting us.
• Protected Health Information (PHI): Medical history, treatment records, diagnosis information, and other health-related data collected as part of clinical intake and treatment processes.
• Website Usage Data: IP addresses, browser type, device information, pages visited, time spent on pages, and referral sources collected automatically through cookies and analytics tools.
• Communication Records: Records of phone calls, emails, live chat conversations, and form submissions you initiate with our team.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, coordinate, and manage your mental health treatment and care.
• To verify insurance coverage and process billing and payment.
• To respond to inquiries, schedule appointments, and follow up on your requests.
• To improve our website, services, and patient experience through aggregated analytics.
• To send important notifications about your care, appointments, and our services when you have opted in to receive such communications.
• To comply with legal and regulatory obligations.

HIPAA Compliance

As a mental health treatment provider, Carlsbad Behavioral Health Solutions is subject to the Health Insurance Portability and Accountability Act (HIPAA). We maintain strict compliance with HIPAA Privacy, Security, and Breach Notification Rules. Your Protected Health Information is handled in accordance with our Notice of Privacy Practices, which is provided to all patients at the time of admission. PHI is only disclosed with your written authorization unless otherwise permitted or required by law, such as for treatment coordination, payment processing, or healthcare operations.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. These include:

• Essential Cookies: Required for basic website functionality, such as page navigation and form submissions.
• Analytics Cookies: Help us understand how visitors use our site so we can improve content and performance. We use industry-standard analytics platforms that collect anonymized, aggregated data.
• Marketing Cookies: May be used to deliver relevant information about our services. These cookies do not track or store PHI.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit the functionality of our website.

Third-Party Sharing

We do not sell, rent, or trade your personal information or PHI to third parties. We may share information with trusted third parties only in the following circumstances:

• Treatment Partners: Other healthcare providers involved in your care, with your consent or as permitted under HIPAA.
• Insurance Companies: For verification of benefits, claims processing, and payment activities.
• Service Providers: Contracted vendors who assist with website hosting, analytics, and IT services, all of whom are bound by Business Associate Agreements (BAAs) as required by HIPAA.
• Legal Requirements: When required by law, court order, or government regulation.

Data Security

We implement administrative, technical, and physical safeguards to protect your information from unauthorized access, disclosure, alteration, and destruction. Our security measures include encrypted data transmission (SSL/TLS), access controls, secure server environments, regular security audits, and staff training on privacy and security protocols. While no method of electronic transmission or storage is completely secure, we are committed to protecting your information using industry best practices.

Your Rights

Under HIPAA and applicable California privacy laws, you have the right to:

• Access and obtain a copy of your PHI maintained by our facility.
• Request corrections or amendments to your health records.
• Request restrictions on certain uses and disclosures of your PHI.
• Receive an accounting of disclosures of your PHI.
• Request confidential communications by alternative means or at alternative locations.
• Opt out of marketing communications at any time.
• File a complaint with us or the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.

Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 through our website. If you are a parent or guardian and believe your child has provided us with personal information online, please contact us so we can take appropriate action.

Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is being handled, please contact us:

• Phone: (760) 400-6412
• Address: 6005 Hidden Valley Rd, Suite 215, Carlsbad, CA 92011
• Email: [email protected]