Effective Date: [Jan 1, 2025]
Last Updated: [Dec 19, 2025]
Echo Ridge Wellness (“Echo Ridge,” “we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect information obtained through our website and online services.
By using our website, you agree to the practices described in this Privacy Policy.
We may collect the following types of information:
Name
Email address
Phone number
Date of birth
Insurance information
Any information you voluntarily submit through forms, chat, or contact requests
Because Echo Ridge Wellness provides mental health and substance use treatment services, we may collect Protected Health Information (PHI) through:
Online intake forms
Secure client portals
Appointment requests
Communications related to treatment
PHI is handled in accordance with HIPAA and applicable state laws.
IP address
Browser type
Device information
Pages visited
Cookies and tracking technologies
This data is used to improve website performance and user experience.
We use your information to:
Respond to inquiries and contact requests
Provide and coordinate treatment services
Verify insurance and eligibility
Facilitate secure portal access
Communicate regarding appointments, services, or program updates
Improve website functionality and user experience
Comply with legal, regulatory, and clinical requirements
Echo Ridge Wellness is a covered healthcare provider. Any PHI collected through our website or portals is protected under the Health Insurance Portability and Accountability Act (HIPAA).
Your PHI will only be used or disclosed:
For treatment, payment, and healthcare operations
With your written authorization
When required or permitted by law
For more detailed information regarding your rights under HIPAA, please refer to our Notice of Privacy Practices.
Our website may include secure login portals for clients. These areas:
Require authentication credentials
Use encryption and security safeguards
Are intended only for authorized users
You are responsible for maintaining the confidentiality of your login information.
We do not sell your personal information.
We may share information with:
Licensed clinicians and staff involved in your care
HIPAA-compliant third-party service providers (e.g., EHR systems, billing, scheduling platforms)
Insurance providers for verification and billing
Legal or regulatory authorities when required by law
All vendors handling PHI are required to maintain appropriate safeguards.
We may use cookies, pixels, or analytics tools (such as Google Analytics) to:
Understand website usage
Improve performance
Measure marketing effectiveness
These tools do not collect PHI.
You can control cookies through your browser settings.
If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including:
The right to know what personal information is collected
The right to request deletion of personal information (subject to healthcare record retention laws)
The right to request corrections
The right to non-discrimination for exercising privacy rights
Requests can be submitted using the contact information below.
We implement administrative, technical, and physical safeguards to protect your information, including:
Encryption
Secure servers
Access controls
HIPAA-compliant platforms
While no system is 100% secure, we take reasonable measures to protect your data.
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies.
Echo Ridge Wellness does not knowingly collect personal information from children under 13 without appropriate consent. Our services are intended for adolescents and adults receiving behavioral health care with proper authorization.
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.
Echo Ridge Wellness
Effective Date: [Insert Date]
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Echo Ridge Wellness is required by law to:
Maintain the privacy of your Protected Health Information (PHI)
Provide you with this Notice of Privacy Practices
Follow the terms of this notice
Notify you if a breach occurs that may compromise your information
You have the right to:
You may request access to or a copy of your health records in electronic or paper form.
If you believe information in your record is incorrect or incomplete, you may request an amendment.
You may ask us to contact you in a specific way (e.g., phone instead of email) or at a specific location.
You may request restrictions on certain uses or disclosures. We are not required to agree in all cases.
You may request a list of certain disclosures we have made of your PHI.
You may request a paper or electronic copy at any time.
If you believe your privacy rights have been violated, you may file a complaint with Echo Ridge Wellness or with the U.S. Department of Health and Human Services without fear of retaliation.
We may use your PHI to provide, coordinate, or manage your care, including sharing information with licensed clinicians, care coordinators, or treatment team members involved in your services.
We may use and disclose your PHI to bill insurance companies, verify benefits, determine eligibility, and collect payment for services rendered.
We may use your PHI for quality improvement, supervision, training, accreditation, compliance, and administrative purposes.
We may also disclose your PHI:
When required by law
To prevent a serious threat to health or safety
For public health reporting
For oversight activities (e.g., audits, investigations)
To comply with court orders or legal processes
We will not use or disclose your PHI for:
Marketing purposes
Sale of your information
Psychotherapy notes (except as permitted by law)
…without your written authorization.
You may revoke an authorization at any time in writing.
Because Echo Ridge Wellness provides virtual treatment services, PHI may be communicated via:
Secure telehealth platforms
HIPAA-compliant client portals
Encrypted email or messaging systems
We take reasonable steps to ensure these communications are secure, but electronic communications carry inherent risks.
If you access your records through a secure client portal:
You are responsible for maintaining the confidentiality of your login credentials
Activity within the portal may be logged for security and compliance purposes
We reserve the right to change this Notice at any time. Changes will apply to all PHI we maintain. Updated notices will be posted on our website and available upon request.
