Effective Date: [Jan 1, 2025]
Last Updated: [Dec 19, 2025]
Echo Ridge Wellness (“Echo Ridge,” “we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect information obtained through our website and online services.
By using our website, you agree to the practices described in this Privacy Policy.
1. Information We Collect
We may collect the following types of information:
a. Personal Information
Name
Email address
Phone number
Date of birth
Insurance information
Any information you voluntarily submit through forms, chat, or contact requests
b. Health Information (PHI)
Because Echo Ridge Wellness provides mental health and substance use treatment services, we may collect Protected Health Information (PHI) through:
Online intake forms
Secure client portals
Appointment requests
Communications related to treatment
PHI is handled in accordance with HIPAA and applicable state laws.
c. Technical & Usage Information
IP address
Browser type
Device information
Pages visited
Cookies and tracking technologies
This data is used to improve website performance and user experience.
2. How We Use Your Information
We use your information to:
Respond to inquiries and contact requests
Provide and coordinate treatment services
Verify insurance and eligibility
Facilitate secure portal access
Communicate regarding appointments, services, or program updates
Improve website functionality and user experience
Comply with legal, regulatory, and clinical requirements
3. HIPAA & Health Information
Echo Ridge Wellness is a covered healthcare provider. Any PHI collected through our website or portals is protected under the Health Insurance Portability and Accountability Act (HIPAA).
Your PHI will only be used or disclosed:
For treatment, payment, and healthcare operations
With your written authorization
When required or permitted by law
For more detailed information regarding your rights under HIPAA, please refer to our Notice of Privacy Practices.
4. Client Portals & Secure Areas
Our website may include secure login portals for clients. These areas:
Require authentication credentials
Use encryption and security safeguards
Are intended only for authorized users
You are responsible for maintaining the confidentiality of your login information.
5. Sharing of Information
We do not sell your personal information.
We may share information with:
Licensed clinicians and staff involved in your care
HIPAA-compliant third-party service providers (e.g., EHR systems, billing, scheduling platforms)
Insurance providers for verification and billing
Legal or regulatory authorities when required by law
All vendors handling PHI are required to maintain appropriate safeguards.
6. Cookies & Tracking Technologies
We may use cookies, pixels, or analytics tools (such as Google Analytics) to:
Understand website usage
Improve performance
Measure marketing effectiveness
These tools do not collect PHI.
You can control cookies through your browser settings.
7. Your Privacy Rights (California Residents)
If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including:
The right to know what personal information is collected
The right to request deletion of personal information (subject to healthcare record retention laws)
The right to request corrections
The right to non-discrimination for exercising privacy rights
Requests can be submitted using the contact information below.
8. Data Security
We implement administrative, technical, and physical safeguards to protect your information, including:
Encryption
Secure servers
Access controls
HIPAA-compliant platforms
While no system is 100% secure, we take reasonable measures to protect your data.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies.
10. Children’s Privacy
Echo Ridge Wellness does not knowingly collect personal information from children under 13 without appropriate consent. Our services are intended for adolescents and adults receiving behavioral health care with proper authorization.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.
NOTICE OF PRIVACY PRACTICES
Echo Ridge Wellness
Effective Date: [Insert Date]
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Responsibilities
Echo Ridge Wellness is required by law to:
Maintain the privacy of your Protected Health Information (PHI)
Provide you with this Notice of Privacy Practices
Follow the terms of this notice
Notify you if a breach occurs that may compromise your information
Your Rights
You have the right to:
1. Get a Copy of Your Records
You may request access to or a copy of your health records in electronic or paper form.
2. Request Corrections
If you believe information in your record is incorrect or incomplete, you may request an amendment.
3. Request Confidential Communications
You may ask us to contact you in a specific way (e.g., phone instead of email) or at a specific location.
4. Ask Us to Limit What We Use or Share
You may request restrictions on certain uses or disclosures. We are not required to agree in all cases.
5. Get a List of Disclosures
You may request a list of certain disclosures we have made of your PHI.
6. Receive a Copy of This Notice
You may request a paper or electronic copy at any time.
7. File a Complaint
If you believe your privacy rights have been violated, you may file a complaint with Echo Ridge Wellness or with the U.S. Department of Health and Human Services without fear of retaliation.
How We May Use and Disclose Your Information
1. For Treatment
We may use your PHI to provide, coordinate, or manage your care, including sharing information with licensed clinicians, care coordinators, or treatment team members involved in your services.
2. For Payment
We may use and disclose your PHI to bill insurance companies, verify benefits, determine eligibility, and collect payment for services rendered.
3. For Healthcare Operations
We may use your PHI for quality improvement, supervision, training, accreditation, compliance, and administrative purposes.
Other Permitted Uses and Disclosures
We may also disclose your PHI:
When required by law
To prevent a serious threat to health or safety
For public health reporting
For oversight activities (e.g., audits, investigations)
To comply with court orders or legal processes
Uses and Disclosures That Require Your Authorization
We will not use or disclose your PHI for:
Marketing purposes
Sale of your information
Psychotherapy notes (except as permitted by law)
…without your written authorization.
You may revoke an authorization at any time in writing.
Telehealth & Electronic Communications
Because Echo Ridge Wellness provides virtual treatment services, PHI may be communicated via:
Secure telehealth platforms
HIPAA-compliant client portals
Encrypted email or messaging systems
We take reasonable steps to ensure these communications are secure, but electronic communications carry inherent risks.
Client Portals
If you access your records through a secure client portal:
You are responsible for maintaining the confidentiality of your login credentials
Activity within the portal may be logged for security and compliance purposes
Changes to This Notice
We reserve the right to change this Notice at any time. Changes will apply to all PHI we maintain. Updated notices will be posted on our website and available upon request.
