Privacy Policy & HIPAA Notice

1. Introduction

Speranza Behavioral Health ("Speranza," "we," "us," or "our") is committed to protecting the privacy and confidentiality of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website at speranzabehavioralhealth.com (the "Site") or contact us regarding our services.

This policy is effective as of July 2026 and applies to all visitors and users of our Site. By using the Site, you agree to the terms of this Privacy Policy.

2. HIPAA Notice & Protected Health Information

Speranza Behavioral Health is a HIPAA-covered entity. We are required by law to maintain the privacy and security of your Protected Health Information (PHI). PHI includes any individually identifiable health information relating to your past, present, or future physical or mental health condition, treatment, or payment for treatment.

We do not collect PHI through this website. Any clinical information you share when contacting us by phone, form, or email for the purpose of seeking treatment is governed by our separate Notice of Privacy Practices (NPP), which will be provided to you upon intake. You have the right to request a copy of our NPP at any time by contacting us at the information below.

Under HIPAA and 42 CFR Part 2 (which governs the confidentiality of substance use disorder records), we cannot disclose any information about whether you are or have been a patient at Speranza Behavioral Health, or any clinical information about your care, without your written authorization — except as permitted or required by law.

3. Information We Collect on This Website

We may collect the following types of non-clinical information when you use this Site:

• Contact Information: Name, email address, phone number, and ZIP code when you submit an inquiry form, insurance verification request, or contact us directly.

• Usage Data: IP address, browser type, pages visited, time spent on pages, and referring URLs — collected automatically via Google Analytics and similar tools to help us improve the Site.

• Call Data: If you call us via a phone number displayed on this Site, our call tracking provider (Call Tracking Metrics) may record metadata such as the time, duration, and originating number of the call for quality assurance and marketing attribution purposes. We do not record clinical conversations without your consent.

• Cookies & Tracking Technologies: We use cookies and similar tracking technologies (including Google Tag Manager and Google Analytics) to analyze traffic patterns and measure the performance of our marketing campaigns. You may disable cookies through your browser settings, though some Site features may not function as intended.

4. How We Use Your Information

We use the information collected through this Site to:

• Respond to your inquiries and connect you with our admissions team • Verify insurance benefits on your behalf • Improve our website content and user experience • Measure and optimize our marketing campaigns • Comply with applicable legal and regulatory obligations

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

5. Information Sharing & Disclosure

We may share non-clinical information collected through the Site in the following limited circumstances:

• Service Providers: We work with trusted third-party vendors (such as Google Analytics, Call Tracking Metrics, and our website platform) who assist us in operating the Site and analyzing usage data. These providers are contractually prohibited from using your information for any purpose other than providing services to us.

• Legal Requirements: We may disclose information when required to do so by law, court order, or governmental authority.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to this Privacy Policy.

We will never disclose Protected Health Information (PHI) or substance use disorder treatment records through this website. Any such disclosures are governed exclusively by HIPAA, 42 CFR Part 2, and our Notice of Privacy Practices.

6. Confidentiality of Substance Use Disorder Records

Federal law (42 CFR Part 2) provides special protections for records relating to substance use disorder treatment. These records may only be disclosed with your written consent, or in very limited circumstances defined by law (such as a medical emergency or a court order). Speranza Behavioral Health strictly complies with these requirements. Any violation of 42 CFR Part 2 may be reported to the U.S. Attorney's Office.

7. Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect the information collected through this Site. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of any information you transmit to us.

If you have reason to believe your interaction with us is no longer secure, please notify us immediately at info@speranzabehavioralhealth.com.

8. Children's Privacy

Our Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, please contact us and we will promptly delete it.

9. Third-Party Links

This Site may contain links to third-party websites (such as government health agencies, national mental health organizations, and insurance providers) for informational purposes. We are not responsible for the privacy practices or content of those sites and encourage you to review their respective privacy policies.

10. Your Rights

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you • Request correction of inaccurate information • Request deletion of your personal information (subject to our legal retention obligations) • Opt out of marketing communications

For rights related to your Protected Health Information or treatment records, please refer to our Notice of Privacy Practices or contact our Privacy Officer directly.

To exercise any of the rights above, contact us at info@speranzabehavioralhealth.com or (866) 814-0126.

10A. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you additional rights regarding your personal information, including the rights to know, access, delete, correct, opt out of the sale or sharing, limit use of sensitive personal information, and non-discrimination for exercising these rights. Speranza Behavioral Health does not sell or share your personal information for monetary consideration or for cross-context behavioral advertising, and we do not collect sensitive personal information as defined by the CPRA through this website. To submit a verifiable consumer request, contact us at info@speranzabehavioralhealth.com or (866) 814-0126. We will respond within 45 days, as required by California law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The date of the most recent revision will be noted at the top of this page. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

12. Contact Our Privacy Officer

If you have questions about this Privacy Policy, our HIPAA practices, or how your information is handled, please contact us:

Speranza Behavioral Health 814 N. Broad Street, Woodbury, NJ 08096 Phone: (866) 814-0126 Email: info@speranzabehavioralhealth.com