Privacy Policy

Effective Date: February 16, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU, INCLUDING RECORDS RELATING TO SUBSTANCE USE DISORDER (SUD) DIAGNOSIS, TREATMENT, OR REFERRAL, MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

WHO WE ARE

Radar Recovery Center provides substance use disorder treatment services. We are a “covered entity” under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and a federally assisted “Part 2 program” under 42 CFR Part 2. This Notice applies to all protected health information (PHI) we create or receive about you, including SUD patient records protected by Part 2.

OUR LEGAL DUTIES

We are required by law to maintain the privacy and security of your PHI, including SUD records protected by Part 2; to provide you with this Notice of our legal duties and privacy practices; and to follow the terms of this Notice currently in effect. We will notify you following a breach of unsecured PHI affecting you. We will make reasonable efforts to use, disclose, or request only the minimum amount of PHI necessary to accomplish the intended purpose of the use, disclosure, or request.

State laws may provide additional privacy protections beyond those required by HIPAA and Part 2. When state law is more stringent or provides greater privacy protections than federal law, we will comply with the more protective state law requirements.

HOW WE MAY USE AND DISCLOSE YOUR INFORMATION

Minimum Necessary Standard

When using or disclosing your PHI or requesting PHI from others, we will make reasonable efforts to limit the information to the minimum amount necessary to accomplish the purpose. This means we will try to use, disclose, or request only the specific information needed for a particular purpose, rather than your entire medical record, whenever reasonably possible. This standard helps protect your privacy by limiting unnecessary access to your health information. The minimum necessary standard does not apply to disclosures to or requests by healthcare providers for treatment purposes, or to uses or disclosures that are required by law.

Treatment, Payment, and Health Care Operations

We may use and disclose your PHI, including SUD records, for treatment, payment, and health care operations as permitted by HIPAA and Part 2. Under the 2024 Part 2 rule, if you sign a written consent allowing us to disclose your SUD records for treatment, payment, and health care operations, we may disclose those records to HIPAA covered entities and their business associates for their treatment, payment, and health care operations. Those recipients may further use and disclose the SUD records for their own treatment, payment, and health care operations in accordance with HIPAA and the scope of your consent.

Examples include:

• for treatment purposes, sharing information with physicians, nurses, therapists, and other healthcare providers involved in your care, including specialists to whom we refer you and pharmacists who fill your prescriptions;
• for payment purposes, billing and payment activities, prior authorization, and claims management; and
• for health care operations purposes, care coordination, quality assessment, accreditation, licensing, compliance, and administrative operations.

Uses and Disclosures Requiring Your Written Authorization

Except as described in this Notice or otherwise permitted by law, we will not use or disclose your PHI, including SUD records, without your written authorization or Part 2 consent. Uses and disclosures that always require authorization include most disclosures of SUD records outside treatment, payment, and health care operations; marketing communications where required by HIPAA; and any sale of PHI. Psychotherapy notes require written authorization for any use or disclosure except in limited circumstances: (1) use by the mental health professional who created the notes for treatment, (2) use for training purposes, or (3) use in legal proceedings to defend against claims.

You may revoke your authorization in writing at any time by submitting your written revocation to our Privacy Officer at the address listed in the Contact Information section of this Notice, except to the extent we have already relied on it. When you request disclosure of your own PHI or authorize a specific disclosure, the minimum necessary standard does not apply, and we may disclose the PHI as you have requested or authorized.

We will not condition treatment, payment, enrollment, or eligibility for benefits on your providing authorization for uses and disclosures of your PHI, except as permitted by law or when the authorization is necessary to obtain treatment, payment, or health care operations that you are requesting.

Psychotherapy Notes: Psychotherapy notes are notes recorded by a mental health professional documenting or analyzing the contents of a conversation during a private counseling session or a group, joint, or family counseling session. Psychotherapy notes are kept separate from your general medical record and do not include medication prescription and monitoring, counseling session start and stop times, treatment modalities and frequencies, clinical test results, or any summary of diagnosis, functional status, treatment plan, symptoms, prognosis, or progress to date. Because of their sensitive and personal nature, psychotherapy notes receive heightened protection and are treated differently from other mental health records in your medical record. Psychotherapy notes require written authorization for any use or disclosure except in limited circumstances: (1) use by the mental health professional who created the notes for treatment, (2) use for training purposes, or (3) use in legal proceedings to defend against claims.

Uses and Disclosures Permitted or Required Without Authorization

We may use or disclose your PHI, including SUD records where Part 2 permits, without your authorization in the following circumstances:

• Public health activities. For public health purposes required by law, such as reporting disease, injury, or vital events, consistent with HIPAA and Part 2.
• Health oversight activities. For audits, investigations, inspections, licensure, or other oversight authorized by law. The minimum necessary standard does not apply to disclosures to the Secretary of the U.S. Department of Health and Human Services for compliance investigations or reviews.
• Judicial and administrative proceedings. In response to a valid court order that meets Part 2 requirements.
• Medical emergencies. To medical personnel as necessary to treat a condition posing an immediate threat to health. Serious threat to health or safety. To prevent or lessen a serious and imminent threat, consistent with applicable law. 
• Abuse, neglect, or domestic violence. To appropriate authorities if we believe you are a victim of abuse, neglect, or domestic violence, consistent with 45 CFR § 164.512(c) and applicable state law. We may disclose your PHI to social services or protective services personnel, law enforcement, health authorities, or other government agencies authorized to receive such reports.
• Research. For research purposes when an institutional review board or privacy board has approved a waiver or alteration of authorization, or when researchers are preparing a research protocol or for research solely on decedents’ information, as permitted by law.
• Decedents. To coroners, medical examiners, or funeral directors as permitted by law.
• Organ and tissue donation. As permitted by law.
• Specialized government functions. For certain lawful national security or protective service activities.
• Law Enforcement. We may disclose your PHI for law enforcement purposes, including:
  • as required by law or legal process such as a court order, subpoena, warrant, or summons;
  • to identify or locate a suspect, fugitive, material witness, or missing person;
  • about a victim of a crime in limited circumstances;
  • about a death we believe may be the result of criminal conduct;
  • about criminal conduct that occurred on our premises; or
  • in a medical emergency to report a crime, the location of the crime or victims, or the identity, description, or location of the person who committed the crime.
• Workers’ compensation. As authorized by workers’ compensation laws.
• As required by law. When a law requires disclosure.

Business Associates

A business associate is a person or entity that performs certain functions or activities on our behalf that involve the use or disclosure of your PHI. Business associates include vendors, contractors, consultants, and other third parties who provide services such as billing, claims processing, data analysis, legal services, accounting, or information technology support.

We may disclose your PHI to business associates who perform services on our behalf. Before disclosing PHI to a business associate, we require the business associate to enter into a written Business Associate Agreement (BAA) that obligates them to safeguard your PHI and use or disclose it only as permitted by the agreement or required by law. Our business associates are required to notify us of any breaches of your unsecured PHI, and we will in turn notify you as required by law. Business associates are also required to implement appropriate safeguards to protect your PHI and report any breaches of unsecured PHI.

PROHIBITION ON USE IN PROCEEDINGS

Federal law prohibits the use of SUD patient records in civil, criminal, administrative, or legislative proceedings against you unless you provide specific written consent or a court issues a Part 2 compliant order. Recipients of your SUD records are bound by this prohibition.

YOUR RIGHTS

Right to Access and Obtain a Copy

You have the right to inspect and obtain a copy of your PHI, including SUD records, in the form and format you request if readily producible. To exercise this right, you must submit a written request to our Privacy Officer at the contact information listed in the Contact Information section of this Notice. We will respond to your request within 30 days. We may charge a reasonable, cost-based fee as permitted by law. Limited exceptions apply.

Right to Request Amendment

You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. We may deny your request for amendment if: (1) the information was not created by us (unless the person or entity that created the information is no longer available to act on the requested amendment); (2) the information is not part of the PHI maintained by or for the facility; (3) the information is not part of the information you would be permitted to inspect and copy; or (4) the information is accurate and complete. If we deny your request, we will provide you with a written denial that explains the basis for the denial. You have the right to submit a written statement disagreeing with the denial, and we may prepare a written rebuttal. All information related to any request to amend will be included with your PHI for future disclosures.

Right to an Accounting of Disclosures

You have the right to receive a list of certain disclosures of your PHI, including SUD disclosures not made for treatment, payment, or health care operations or otherwise exempted by law, for the period required by law.

Right to Request Restrictions

You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree except where HIPAA requires, such as restrictions on disclosures to a health plan when you pay in full out of pocket for the service and the disclosure is not otherwise required by law.

Right to Confidential Communications

You have the right to request that we communicate with you about your health information in a certain way or at a certain location. We will accommodate reasonable requests.

Right to Be Notified of a Breach

You have the right to be notified following a breach of your unsecured PHI. A “breach” means the unauthorized acquisition, access, use, or disclosure of your PHI that compromises the security or privacy of the information, except where an unauthorized person to whom such information is disclosed would not reasonably have been able to retain such information.

We will notify you of any breach by written notice sent by first-class mail to your last known address. If you have agreed to receive communications electronically and provided a valid email address, we may notify you by email. If we have insufficient or out-of-date contact information for 10 or more individuals affected by a breach, we will provide substitute notice by conspicuously posting the notification on the home page of our website for at least 90 days and by providing notice in major print or broadcast media in the geographic areas where the affected individuals likely reside. If we have insufficient or out-of-date contact information for fewer than 10 individuals, we will provide substitute notice by an alternative form of written notice, by telephone, or other means.

In addition to notifying affected individuals, we are required by law to report breaches of unsecured PHI. If a breach affects 500 or more individuals, we will notify the Secretary of the U.S. Department of Health and Human Services without unreasonable delay and in no case later than 60 days following discovery of the breach. For breaches affecting 500 or more residents of a state or jurisdiction, we will also notify prominent media outlets serving that area as required by law. Breaches affecting fewer than 500 individuals will be reported to the Secretary annually.

Right to a Paper Copy of This Notice

You have the right to obtain a paper copy of this Notice upon request at any time, even if you have agreed to receive it electronically.

Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer at the contact information listed in this Notice, or you may file a complaint or with the Secretary of the U.S. Department of Health and Human Services Office for Civil Rights. You may also file a complaint with OCR for alleged violations of 42 CFR Part 2. We will not retaliate against you for filing a complaint.

OTHER IMPORTANT INFORMATION

Fundraising

We do not use or disclose your PHI for fundraising communications.

Marketing and Sale of PHI

We will not use or disclose your PHI for marketing purposes or sell your PHI without your written authorization, except as permitted by HIPAA.

We specifically prohibit the use or disclosure of sensitive health information categories, including substance use disorder records, mental health information, psychotherapy notes, HIV/AIDS-related information, genetic information, and reproductive health information, for any marketing purposes without your specific written authorization that explicitly addresses the use of such sensitive information for marketing.

CONTACT INFORMATION

Privacy Officer: Radar Recovery Center

1119 28th St, San Diego, California

1-888-502-1998

info@radar-recovery.com

HOW TO FILE A COMPLAINT WITH OCR

You may file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights electronically through the OCR complaint portal at https://www.hhs.gov/ocr/privacy/hipaa/complaints/ or by mail. Complaints generally must be filed within 180 days of when you knew or should have known of the violation.

CHANGES TO THIS NOTICE

We reserve the right to change this Notice and to make the revised Notice effective for all PHI we maintain, including information created or received before the change. The current Notice will be posted at our facility and on our website, and copies will be available upon request. We will make this Notice available for at least three years from the date of its creation or last effective date.

ACKNOWLEDGMENT OF RECEIPT

We will ask you to acknowledge receipt of this Notice. Your treatment is not conditioned on signing the acknowledgment.

 

Additional Website Privacy Notices

The following sections provide additional information regarding our general website privacy practices for non-PHI data collected through our website and services, such as browsing activity, cookies, and other non-health-related information. These practices supplement the Notice of Privacy Practices above and apply to information that is not considered protected health information under HIPAA.

 

INTRODUCTION

Your privacy is important to us at Radar Recovery Center. As part of our efforts to make your experience at Radar Recovery Center as user-friendly and enjoyable as possible, we may collect and use certain information you provide to us. This Website Privacy Policy addresses the collection, use, and disclosure of information that Radar Recovery Center may gather during your Radar Recovery Center experience, including when you access or use the Website or Services, as defined in our Terms and Conditions. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in the TERMS AND CONDITIONS.

 

Please review the entire policy to learn the types of End User information Radar Recovery Center gathers, how Radar Recovery Center uses that End User information, what End User information is disclosed and to what third parties, and how Radar Recovery Center safeguards your End User information. As used in this Privacy Policy, the terms “use,” ”using,” “process,” and “processing” information include using cookies on a computer, subjecting the information to statistical or other analysis, and using or handling information in any way, including, but not limited to, collecting, storing, evaluating, modifying, deleting, using, combining, disclosing, and transferring information within the Radar Recovery Center enterprise or among its affiliates.

 

Please also check back periodically as this Privacy Policy may change from time to time. We will notify you of any material changes by publishing the new Privacy Policy through the Website. The End User information Radar Recovery Center gathers is and will be subject to the Privacy Policy in effect at the time the information is gathered. Should you have any questions or concerns at any time, please feel free to contact us.

 

This Privacy Policy applies only to the Radar Recovery Center Website and Services. This Privacy Policy does not apply to any websites managed, maintained, and/or hosted by third parties not directly affiliated with Radar Recovery Center that you may visit, e.g., via a link provided through the Website or Services or on a website maintained by any third party. Radar Recovery Center does not control the privacy policies of other websites to which we may provide hyperlinks. We encourage you to learn more about the online privacy and data security policies of third party websites directly from such third parties, as their policies may differ from ours.

 

By submitting your information to us and by using the Website or Services, Radar Recovery Center will assume that you have read, understood, and consent to this Privacy Policy, our Terms and Conditions, all amendments, addenda, and licenses to the Privacy Policy and Terms and Conditions, and all applicable Radar Recovery Center rules and policies (collectively, the “Agreement”). We also assume that you consent to Radar Recovery Center’s use of your information and data as described in the Agreement. If you do not consent, you should not access or use the Website or Services.

 

I. Information Radar Recovery Center Collects

A. Personal Information and Non-Identifying Information

When you access or use our Website or Services, we may ask you for personally identifiable information. This refers to information about you that can be used to contact or identify you (“Personal Information”). Personal Information may include, but is not limited to, your name, username (if it identifies you), phone number, email address, home and business postal addresses, and any other information that you provide to Radar Recovery Center that could be used to personally identify you.

We also collect other information that you may provide when using our Website or Services that does not identify you (“Non-Identifying Information”). Non-Identifying Information includes, but is not limited to, your zip code (on its own), gender, age, and individual preferences. Certain Non-Identifying Information would be considered a part of your Personal Information if it were combined with other identifiers (for example, combining your zip code with your street address) in a way that enables you to be identified. But the same pieces of information are considered Non-Identifying Information when they are taken alone or combined only with other non-identifying information (for example, your viewing preferences).

We use your Personal Information (in some cases, in conjunction with your Non-Identifying Information) mainly to provide portions of the Website and Services and respond to correspondence from you. For example, we may use your Personal Information to contact you with newsletters and other information that you request. If you decide at any time that you no longer wish to receive such communications from us, please follow the unsubscribe instructions provided in any of the communications.

We may also combine your Personal Information with Non-Identifying Information and aggregate it with information collected from other End Users to attempt to provide you with a better experience, to improve the quality and value of the Website and Services, and to analyze and understand how the Website and Services are used.

B. Usage Data

When you visit the Website, our servers automatically record information that your browser sends whenever you visit a website. The information sent automatically by your browser is referred to as “Usage Data.” This Usage Data may include information such as the manufacturer and model of your mobile device or other hardware; your Internet Service Provider (ISP); your device’s Internet Protocol (“IP”) address (or other device identifier), browser type, and operating system; referring/exit pages; clickstream data; pages of the Website that you visit, the time spent on those pages or interacting with certain portions of the Website or Services, information you search for on the Website and Services, Website access times and dates; and other statistics. Usage Data may also include certain geographic data that identifies your general location when accessing the Website and Services.

We use this information to monitor and analyze use of the Website and Services and for technical administration of the same, to increase the functionality and user-friendliness of the Website and Services, and to better tailor it to our End Users’ needs. For example, some of this information is collected so that when you visit the Website time after time, it will recognize you and serve information appropriate to your interests. Geographic Usage Data may be used to prioritize information about a Radar Recovery Center location near you.

Usage Data may be non-identifying or it may be associated with you. Whenever we associate Usage Data with Personal Information, we will treat it as Personal Information.

II. Collection of Information

Radar Recovery Center may use a number of different techniques and technologies to collect Personal Information, Non-Identifying Information, and Usage Data. For example, Radar Recovery Center may use cookies, log files, clear gifs, pixel tags, embedded scripts, and/or other technology used to monitor your Radar Recovery Center experience.

A. Collection of Personal Information and Non-Identifying Information

As is regular practice on many websites, the Website and Services use cookies and other technologies to help us understand which parts of the Website and Services are more popular and how much time End Users spend there. A cookie is a small amount of data that is sent to and stored on your device from our server. Cookies allow you, for example, to enter your password less frequently or to remember your preferences during an online session. The Website and Services use only first-party cookies (i.e., no third-party cookies that send data directly to a third party). The cookies that the Website and Services use do not store Personal Information, but they may store Non-Identifying Information. Since cookies are now used as industry standard, most devices automatically accept cookies, but you can usually change your device’s settings to decline them. If you prefer not to enable cookies, you may choose to disable them; however, please note that certain features on the Website and Services will not be available to you once cookies are disabled.

Please note that if you use any blog, bulletin board, chat room, comment posting feature, or other public communication service, forum, or feature offered through the Website or Services, or post any information available for viewing by other End Users, any of the information that you share will be visible to other End Users. The information that you make available can be read, used, and collected by other End Users to send you unsolicited messages outside of the Website and Services. Radar Recovery Center is not responsible for the manner in which the Personal Information that you decide to share will be used by other End Users.

B. Collection of Usage Data

Usage Data are collected automatically by the Website and Services servers and software. For example, because the Website automatically collects Usage Data for all End Users that visit the Website, your session on our Website will be tracked by Radar Recovery Center.

Additionally, in some of our email messages, Radar Recovery Center may use a “click-through URL” linked to content on the Website and Services. When an End User clicks onto one of these URLs, the End User will pass through our server before arriving at the destination Web page. Radar Recovery Center tracks this click-through data to help us determine End User interest in certain subject matter and measure the effectiveness of these End User communications. You can avoid being tracked in this way by not clicking text or graphic links in emails from Radar Recovery Center.

Finally, we may use clear gifs or pixel tags, which are tiny graphic images, in order: (i) to advise us of what parts of the Website and Services End Users have visited, (ii) to measure the effectiveness of any searches End Users perform, and (iii) to enable us to send emails in a format that End Users can read and tell us whether such emails have been opened in order to ensure us that we are sending messages that are of interest to End Users.

C. Tracking

Some Web browsers may be configured to send Do Not Track signals to websites, or users may use similar mechanisms, to indicate a user’s preference that certain web technologies not be used to track the user’s online activity. Our Website does not accept or process such Do Not Track signals or similar mechanisms.

III. Use and Sharing of Information by Radar Recovery Center

The End User information that Radar Recovery Center collects may be added to our databases and used for business purposes, including for Radar Recovery Center’s marketing and promotional purposes, for a statistical analysis of End Users’ behavior, for product development, for content improvement, or to customize the content and layout of the Website and Services. If you’ve provided information to Radar Recovery Center in order to receive e-mail content and at any time do not want to receive email from us, visit the “Opt Out” or “Unsubscribe” link at the bottom of any Radar Recovery Center email to remove yourself from continued receipt of such email messages.

Radar Recovery Center’s policy is not to share the End User information it collects with third parties other than as specified below, or where an End User expressly consents to our sharing of certain information with a third party. We may share End User information with third parties under the following circumstances:

A. Vendors

We may employ third party companies and individuals for any of the following: to facilitate the Website and Services; to provide the Website and Services or portions of the Website and Services on our behalf; to perform related services, including without limitation, maintenance services, database management, fulfillment, web analytics, and improvement of the features or functionality; or to assist us in analyzing how the Website and Services are being used. Such parties may have access to and use End User information in order to provide such services to or on behalf of Radar Recovery Center.

B. Campaigns and Promotions

From time to time, we may run campaigns or offer promotions through the Website and Services that require a separate registration. By participating in such a campaign or promotion, you agree to the official rules for the campaign or promotion, which may require that you provide certain information. Information collected in connection with a campaign or promotion will be used consistently with the campaign’s or promotion’s official rules and this Privacy Policy.

C. Business Transfers

As we continue to develop our business, we may buy, sell, or share assets in connection with, for example, a merger, acquisition, reorganization, sale of assets, or bankruptcy. In such transactions, information about End Users is often a transferred business asset. In the event of such a business transaction, information about our End Users may be one of the transferred assets.

D. Compliance with Law and Protection of Radar Recovery Center and Others

We may release End User information when we believe, in our sole discretion, that release is appropriate: to comply with the law, including but not limited to, in response to a subpoena served on Radar Recovery Center; to enforce or apply the Agreement, including the Terms and Conditions and other agreements, rules, and policies; to protect the rights, property, or safety of Radar Recovery Center, our End Users, or others; or to prevent activity that we believe, in our sole discretion, may be or may become illegal, unethical, or legally actionable (including exchanging End User information with other companies and organizations for fraud protection).

E. Aggregate Site Use Information

We may release aggregate End User information (without revealing any Personal Information about you) to advertisers and other third parties in order to promote or describe use of the Website and Services.

IV. International Transfer

Your information may be transferred to and maintained on computers and servers located outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. Please note that Radar Recovery Center may transfer Personal Information to its servers in the United States and process it in any of those countries. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to the transfer of such information to the United States.

 

V. Deleting Your Information

You may request that Radar Recovery Center completely delete all Personal Information you have provided to Radar Recovery Center through the Website or Services by contacting info@flyland.com. We will use commercially reasonable efforts to honor such a request. We may, however, retain an archived copy of your records consistent with our records retention policies or as required by law.

VI. Security

We are very concerned with safeguarding your information. We employ administrative, physical, and electronic measures designed to protect your information from unauthorized access. For example, we use commercially reasonable security measures such as encryption, firewalls, and secure socket layers (SSL) to protect End User information.

Please note that no security system is impenetrable. Accordingly, we do not guarantee the security of our databases, nor that information you supply won’t be intercepted while being transmitted to us over the Internet or other network. Any information you transmit to Radar Recovery Center, you do at your own risk. We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored “personal data