Effective Date:‍ August 19, 2026 ‍

Your Information. Your Rights. Our Responsibilities.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Ground Up Recovery, LLC is committed to protecting the privacy and security of your health information.

This Notice describes our privacy practices, our responsibilities regarding protected health information, and your rights concerning your information.

Additional protections may apply to certain behavioral health, substance use disorder, and other specially protected records under federal or Colorado law.

When it comes to your health information, you have certain rights.

Obtain a Copy of Your Health Records

You may ask to inspect or obtain an electronic or paper copy of your medical record and other health information we maintain about you.

We will provide access as required by applicable law.

Request Corrections

If you believe information in your record is incorrect or incomplete, you may ask us to correct or amend it.

We may deny certain requests when permitted by law, but we will explain the reason for the denial.

Request Confidential Communications

You may ask us to communicate with you in a particular manner or at a particular location.

For example, you may ask us to contact you only at a particular telephone number or email address when reasonable and permitted.

Ask Us to Limit What We Use or Share

You may request restrictions on certain uses or disclosures of your health information.

We are not required to agree to every request, except where applicable law requires us to do so.

If you pay for a healthcare service or item completely out of pocket, you may ask us not to disclose information about that service to your health plan for payment or healthcare operations when applicable law requires us to honor that request.

Obtain an Accounting of Disclosures

You may request information regarding certain disclosures of your health information made during the period permitted by law.

Certain disclosures, including many disclosures for treatment, payment, and healthcare operations, may not appear in this accounting.

Obtain a Copy of This Notice

You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

Choose Someone to Act for You

If another person has legal authority to act on your behalf, such as a legal guardian or healthcare power of attorney, that individual may exercise applicable rights concerning your health information.

We may verify that person's authority before taking action.

File a Privacy Complaint

You may file a complaint with Ground Up Recovery if you believe your privacy rights have been violated.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

Ground Up Recovery will not retaliate against you for filing a privacy complaint or exercising your privacy rights.

For certain health information, you may tell us your preferences regarding what we share.

Depending on the circumstances and applicable law, these choices may include:

• Sharing information with family members, friends, caregivers, or others involved in your care

• Sharing information during disaster-relief situations

• Certain communications regarding services

• Certain marketing activities

• Other disclosures requiring your authorization

Where written authorization is required, Ground Up Recovery will obtain it before making the applicable use or disclosure.

You may generally revoke an authorization in writing, subject to limitations permitted by law.

Federal and state law permits or requires healthcare providers to use or disclose health information under certain circumstances.

Treatment

We may use or disclose your health information to provide, coordinate, or manage your care.

For example, appropriate information may be shared among authorized members of your care team or with another healthcare provider involved in your treatment when permitted by law.

Payment

We may use or disclose health information to obtain payment for healthcare services.

For example, information may be provided to a health plan or other payer when necessary to determine eligibility, obtain authorization, submit a claim, or receive payment.

Healthcare Operations

We may use health information to operate Ground Up Recovery and improve the quality of services.

This may include activities involving:

• Quality improvement

• Compliance

• Auditing

• Credentialing

• Training

• Care coordination

• Business administration

• Legal and regulatory compliance

When Required by Law

We may disclose health information when federal, state, or local law requires us to do so.

Preventing Serious Threats to Health or Safety

Information may be disclosed when permitted or required by law to prevent or reduce a serious and imminent threat to health or safety.

Public Health and Safety Activities

Information may be disclosed for certain legally authorized public-health activities.

Health Oversight Activities

We may disclose information to authorized government agencies responsible for healthcare oversight when permitted or required by law.

Workers' Compensation

We may disclose information for workers' compensation purposes as permitted by applicable law.

Law Enforcement and Legal Proceedings

Information may be disclosed in response to certain lawful requests, court orders, subpoenas, or other legal requirements, subject to applicable privacy protections.

Certain mental health, behavioral health, and substance use disorder records may receive protections beyond those generally applicable to other health information.

Ground Up Recovery will comply with applicable federal and Colorado requirements governing these records.

If Ground Up Recovery operates a program subject to 42 CFR Part 2, applicable substance use disorder patient records will receive the additional protections required by federal law.

Uses and disclosures requiring specific patient consent or authorization will not be made without that consent or authorization unless another provision of law permits or requires the disclosure.

[This section must be finalized based on Ground Up Recovery's actual HIPAA and 42 CFR Part 2 status before adoption.]

Item descriptionGround Up Recovery is committed to protecting your health information.

When applicable, we are required by law to:

• Maintain the privacy and security of protected health information

• Follow the privacy practices described in the current Notice

• Provide you with this Notice

• Notify affected individuals following certain breaches of unsecured protected health information

• Comply with applicable federal and Colorado privacy requirements

We will not use or disclose health information in a manner inconsistent with this Notice unless permitted or required by law or authorized by you.

Ground Up Recovery may change the terms of this Notice and may make the revised Notice applicable to health information already maintained by the organization where permitted by law.

The current Notice will be available on our website and upon request.

For questions regarding this Notice, requests involving your privacy rights, or privacy complaints, contact:

Ground Up Recovery, LLC
Privacy Officer: Mandy Washington (Owner)
Colorado Springs, Colorado

Phone: 719-642-6442
Email: privacy@grounduprecovery.org

You may also submit a complaint to the U.S. Department of Health and Human Services Office for Civil Rights.

Ground Up Recovery will not retaliate against anyone for exercising a privacy right or filing a privacy complaint.