• We are available 24*7 to help
Let's Talk

Privacy Policy

THE HAVEN TEXAS

Haven Privacy Policy and Website Updates
Website Privacy Policy | Consumer Health Data Privacy Notice | Website Implementation Updates

Effective Date: September 2, 2026
Last Updated: September 2, 2026

Privacy Contact: privacy@thehaventx.com | (888) 219-6895 | www.thehaventx.com

 

WEBSITE IMPLEMENTATION UPDATES
The following items are recommended implementation steps for thehaventx.com. These are internal website
instructions and are not intended to appear as part of the public Privacy Policy itself.
1. Create Three Separate Privacy Links in the Website Footer
For the clearest and most defensible website structure, maintain three distinct footer links. Each link should take the
visitor directly to its own page rather than placing all three notices behind a single generic link.
 Privacy Policy – recommended URL: thehaventx.com/privacy-policy/
 Consumer Health Data Privacy Notice – recommended URL: thehaventx.com/consumer-health-data-privacy/
 Notice of Privacy Practices (HIPAA / 42 C.F.R. Part 2) – recommended URL: thehaventx.com/notice-of-
privacy-practices/
Recommended footer display: Privacy Policy | Consumer Health Data Privacy Notice | Notice of Privacy Practices
2. Add Privacy Language Beneath the Contact Form
Place a short privacy and emergency notice immediately beneath the Website contact form. Recommended
language:
By submitting this form, you acknowledge that the information you provide will be used to respond to your request
in accordance with our Privacy Policy. Do not use this form for a medical emergency. Call 911 for an emergency.
3. Audit Google Tag Manager and Other Tracking Technologies
Confirm which analytics, advertising, call-tracking, session-replay, pixel, or other tags fire on treatment,
admissions, contact, insurance, or similar pages. Tracking technologies should be configured so that protected or
sensitive health information is not impermissibly disclosed to third parties.
4. Maintain a Separate Notice of Privacy Practices
The Haven should separately maintain and publish its current patient-facing Notice of Privacy Practices addressing
HIPAA and applicable 42 C.F.R. Part 2 requirements. The Website Privacy Policy and Consumer Health Data
Privacy Notice do not replace that patient notice.
5. Use a Dedicated Privacy Contact
Use privacy@thehaventx.com as the dedicated contact address for privacy questions, consumer privacy requests,
and privacy appeals, with routing to the appropriate legal/compliance personnel.

PRIVACY POLICY

The Haven Texas (“The Haven,” “we,” “us,” or “our”) respects the privacy of individuals who visit our website, communicate with us, seek information about our services, or otherwise interact with us online.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through www.thehaventx.com and other websites, webpages, forms, and online services that link to this Privacy Policy (collectively, the “Website”).

Because The Haven provides services relating to substance use disorder treatment and medical stabilization, information you provide to us may be particularly sensitive. We are committed to treating such information with appropriate care and in accordance with applicable federal and state privacy laws.

This Privacy Policy applies to information collected through the Website. It does not replace any Notice of Privacy Practices or other notice that may apply to protected health information under the Health Insurance Portability and Accountability Act (“HIPAA”), the Health Information Technology for Economic and Clinical Health Act (“HITECH”), 42 C.F.R. Part 2 (“Part 2”), or other health-information privacy laws.

1. INFORMATION WE COLLECT

Depending on how you interact with us, we may collect the following categories of information.

Information You Provide Directly

We may collect information that you voluntarily provide when you contact us, request information, communicate with our admissions team, inquire about treatment, verify insurance, submit a form, apply for employment, communicate with one of our representatives, or otherwise interact with us.

Please provide only information reasonably necessary for us to assist you.

Information Collected Automatically

When you visit the Website, we and service providers acting on our behalf may automatically collect certain information concerning your device and use of the Website, including:

We may collect this information through cookies, pixels, tags, scripts, web beacons, server logs, analytics technologies, and similar technologies.

Sensitive and Health-Related Information

Because of the nature of our services, information submitted to us may reveal or relate to an individual’s:

We collect and process such information only as reasonably necessary for the purposes described in this Policy, as authorized or requested by you, or as otherwise permitted by law.

2. HOW WE USE INFORMATION

We may use personal information to:

We seek to limit our collection and use of personal information to information that is adequate, relevant, and reasonably necessary for the purposes for which it is collected.

3. HEALTH INFORMATION, HIPAA, AND 42 C.F.R. PART 2

Some information collected by or provided to The Haven may constitute protected health information (“PHI”) under HIPAA or a substance use disorder patient record protected by Part 2.

When HIPAA, Part 2, or another healthcare privacy law applies to particular information, our use and disclosure of that information is governed by the applicable law and by our applicable Notice of Privacy Practices and/or Part 2 Patient Notice, rather than solely by this Website Privacy Policy.

Part 2 provides heightened protections for certain records relating to the identity, diagnosis, prognosis, or treatment of individuals receiving substance use disorder services from covered programs.

Nothing in this Website Privacy Policy is intended to authorize a use or disclosure of PHI or Part 2 information that is otherwise prohibited by applicable law.

Our patient privacy notices should be consulted for additional information concerning patient rights and our obligations regarding medical and substance use disorder treatment records.

4. HOW WE DISCLOSE INFORMATION

We may disclose personal information as reasonably necessary for the purposes described in this Policy.

Service Providers

We may provide information to companies that perform services on our behalf, including providers of:

Service providers are permitted to process information only for authorized purposes and are subject to contractual and legal requirements where required by applicable law.

For SMS communications, we may use contracted messaging platforms and carriers to transmit, route, deliver, and manage messages and opt-outs. We assess access restrictions, retention, confidentiality, security, and business-associate obligations where applicable; mobile carriers and device providers may process message-related data independently in accordance with applicable law.

Where a service provider creates, receives, maintains, or transmits PHI on our behalf and qualifies as a HIPAA business associate, we require an appropriate Business Associate Agreement when required by HIPAA.

Healthcare and Treatment-Related Parties

Where authorized or permitted by applicable law, information may be shared with hospitals, healthcare providers, insurers, health plans, treatment facilities, laboratories, pharmacies, transportation providers, aftercare providers, referral sources, or other parties involved in providing or coordinating requested services.

Any disclosure of information protected by HIPAA or Part 2 is subject to applicable healthcare privacy requirements.

Legal and Safety Purposes

We may disclose information when reasonably necessary to:

Business Transactions

Information may be disclosed as part of an actual or proposed merger, acquisition, financing, reorganization, sale of assets, restructuring, or similar business transaction, subject to applicable healthcare privacy and confidentiality laws.

5. SALE OF PERSONAL AND HEALTH INFORMATION

The Haven does not sell patient health information or consumer health data for monetary consideration.

The Haven does not sell substance use disorder treatment records.

We do not disclose PHI or Part 2-protected information to advertising or tracking technology providers in a manner prohibited by applicable law.

Certain state privacy statutes define “sale” or “sharing” more broadly than an exchange of information for money and may include some advertising or analytics-related disclosures. Where applicable law treats our use of a particular technology as a sale, sharing, or targeted advertising activity, we will provide the disclosures and opt-out mechanisms required by that law.

We do not knowingly use sensitive health information to create advertising profiles concerning an individual’s substance use disorder or treatment status.

6. COOKIES, ANALYTICS, AND ONLINE TRACKING TECHNOLOGIES

The Website may use cookies and similar technologies to operate and secure the Website, remember preferences, measure Website traffic, analyze Website performance, and understand how visitors interact with the Website.

We may use third-party technology providers for these purposes.

Because healthcare websites present special privacy concerns, we evaluate the use of tracking technologies in light of applicable privacy requirements. We do not intend for advertising or analytics technologies to collect information from authenticated patient portals or other areas containing PHI unless such collection and disclosure are permitted by applicable law and appropriate contractual protections are in place.

Where required by applicable law, visitors may be given the ability to consent to, reject, or manage non-essential cookies or tracking technologies.

Browser settings may also allow you to block or delete cookies, although doing so may affect Website functionality.

7. COMMUNICATIONS BY TELEPHONE, TEXT MESSAGE, OR EMAIL

If you provide a telephone number or email address, we may use that information to respond to your request and communicate with you regarding services you requested or expressed interest in receiving, in accordance with applicable law and any required consent. Our communications may include individualized, two-way SMS messages concerning inquiries, call-backs, appointment logistics, eligibility and insurance-verification coordination, admissions, transportation, and requested follow-up. A request for information or provision of a telephone number does not, standing alone, constitute blanket consent to receive automated or promotional text messages.

Before initiating SMS or automated communications, we will obtain consent required for the particular message, technology, recipient, and applicable federal and state law, including the Telephone Consumer Protection Act (TCPA). We will obtain any required prior express written consent for marketing or promotional automated messages separately from consent for service-related or informational messages. We will not rely on this Privacy Policy alone to establish consent. An individual who texts us first or requests a text response may receive communications reasonably responsive to that interaction, subject to applicable law and documented preferences.

Consent to receive marketing or promotional text messages is voluntary and is not a condition of admission, treatment, payment, or receiving healthcare services from The Haven. Text messages may be sent by The Haven or by a communications vendor acting on our behalf; message frequency may vary, and message and data rates may apply. Where applicable, we will identify The Haven as the sender and provide HELP and opt-out instructions.

You may withdraw SMS consent or opt out of future text messages by replying STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE, or by communicating an opt-out through another reasonable method. We will honor revocation and suppression requests in accordance with applicable law, including applicable time limits, and may send a single non-promotional opt-out confirmation where permitted. Requests for HELP will be directed to appropriate contact information. We maintain records of applicable consents, preferences, and opt-outs. An opt-out from optional text messaging will not affect access to services or legally required communications sent through other appropriate channels.

Ordinary SMS and email may not be encrypted and may be accessible to persons with access to your device, carrier account, or communications. Even a brief message from The Haven could reveal that you have contacted a substance-use-related healthcare organization. We therefore seek to minimize sensitive information in SMS and use approved, secure channels for medical records, clinical details, and other protected information where appropriate. We will comply with applicable HIPAA, 42 C.F.R. Part 2, and state-law requirements, including any required patient preference, consent, authorization, safeguard, and vendor agreement. Consent to receive SMS under telecommunications law is not, by itself, authorization to disclose protected health information or Part 2 records. Do not send sensitive medical information by ordinary text unless you have been directed to an appropriate communication channel. Text messaging is not monitored for emergencies; call 911 for an emergency.

8. DATA SECURITY

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, destruction, loss, misuse, alteration, or disclosure.

These safeguards are designed to be appropriate to the nature and sensitivity of the information we maintain.

No Internet transmission, electronic storage system, or information-security program can guarantee absolute security. Accordingly, we cannot guarantee that unauthorized persons will never defeat our safeguards.

If we become aware of a data-security incident involving information subject to breach-notification requirements, we will provide notifications as required by applicable law.

9. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which the information was collected, including to:

Retention periods vary depending on the nature of the information and applicable law.

PHI, medical records, and Part 2 records are retained in accordance with applicable healthcare record-retention requirements and our internal policies.

10. YOUR PRIVACY RIGHTS

Depending on where you reside and the law applicable to your information, you may have the right to:

These rights are subject to exceptions and limitations under applicable law.

Certain information may be exempt from consumer privacy statutes because it is regulated by HIPAA, HITECH, Part 2, or another healthcare privacy law. Those exemptions do not affect rights you may separately have under those healthcare laws.

Submitting a Privacy Request

You may submit a privacy request by contacting us at:

Please indicate that your communication concerns a Privacy Request.

We may need to verify your identity before processing a request. Verification requirements will depend on the nature of the request and the sensitivity of the information involved.

You may also use an authorized agent to submit certain requests where permitted by law. We may require evidence of the agent’s authority and may separately verify your identity.

If we deny a request and applicable law provides a right to appeal, you may appeal by contacting us through the same methods and stating that you are submitting a Privacy Appeal.

11. TEXAS PRIVACY RIGHTS

Texas residents may have rights under the Texas Data Privacy and Security Act (“TDPSA”), including the rights to:

Where the TDPSA requires consent before processing sensitive data, we will obtain such consent unless an applicable exception applies.

Information processed in accordance with HIPAA and certain other regulated healthcare information may be exempt from some provisions of the TDPSA.

Texas residents may exercise applicable rights using the methods described in Section 10.

12. OTHER U.S. STATE PRIVACY RIGHTS

Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, Virginia, Texas, and other states that have enacted comprehensive privacy legislation may have additional rights regarding their personal information.

The availability and scope of these rights vary by state and are subject to statutory exemptions, including exemptions relating to HIPAA-regulated information, healthcare providers, nonprofit organizations, employment information, or other regulated information.

Where an applicable state law provides you with additional privacy rights, The Haven will honor those rights as required by law.

13. CONSUMER HEALTH DATA

Certain states have enacted laws specifically governing consumer health data that may fall outside HIPAA.

If one of these laws applies to our collection or processing of your information, we will process consumer health data only as permitted by applicable law and will provide any additional notice, consent, authorization, access, deletion, withdrawal, or other rights required by that law.

The Haven does not sell consumer health data without any authorization specifically required by applicable law.

Where required, a separate Consumer Health Data Privacy Notice will supplement this Privacy Policy.

14. CALIFORNIA PRIVACY DISCLOSURES

To the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), applies to personal information we process and that information is not otherwise exempt, California residents may have rights to know, access, correct, delete, and obtain information concerning certain disclosures, and to opt out of certain sales or sharing of personal information.

The categories of personal information we may collect are described in Section 1.

The purposes for which we use those categories are described in Section 2.

The categories of recipients to whom information may be disclosed are described in Section 4.

We do not discriminate against individuals for exercising rights provided by applicable privacy law.

15. CHILDREN’S PRIVACY

The Website is intended for a general adult audience and is not directed to children under 13.

We do not knowingly collect personal information online directly from a child under 13 without appropriate authorization where required by the Children’s Online Privacy Protection Act (“COPPA”).

If you believe a child under 13 has provided personal information directly to us through the Website without appropriate authorization, please contact us so that we may take appropriate action.

Parents, guardians, and other adults seeking treatment information on behalf of a minor may contact us directly.

16. INFORMATION ABOUT OTHER PEOPLE

If you provide personal information concerning another individual, such as a family member, prospective patient, employee, or other third party, you represent that you are authorized to provide the information or otherwise have a lawful basis to do so.

Providing information concerning another person through the Website does not itself authorize The Haven to disclose protected medical or treatment information about that individual to you.

17. THIRD-PARTY WEBSITES

The Website may contain links to websites or services operated by third parties.

We are not responsible for the privacy, security, or information practices of independently operated third-party websites. We encourage you to review the privacy policies of third-party websites before providing them with personal information.

18. EMPLOYMENT APPLICANTS

When individuals apply for employment with The Haven, we may collect information concerning employment history, education, qualifications, professional licenses, references, contact information, and other information relevant to recruiting and employment.

We use applicant information for recruiting, evaluating candidates, conducting background or credential checks where permitted by law, complying with legal obligations, communicating with applicants, and administering our employment processes.

Employee and workforce-member information may be subject to separate internal privacy and employment policies.

19. DO NOT TRACK AND UNIVERSAL OPT-OUT MECHANISMS

Some browsers offer “Do Not Track” signals.

Because there is not a single universally accepted standard governing all Do Not Track signals, our Website may not respond to every such signal.

Where applicable law requires recognition of an approved universal opt-out mechanism or preference signal, we will process qualifying signals as required by law.

20. EMERGENCY COMMUNICATIONS

The Website, Website forms, email, and other electronic communications should not be used for a medical emergency.

If you or another person is experiencing a medical emergency, call 911 or go to the nearest emergency department.

If you are seeking information concerning admission to The Haven, our admissions team is available at (888) 219-6895.

21. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, services, or legal obligations.

When we make material changes, we will update the “Last Updated” date above and provide additional notice where required by applicable law.

Your continued use of the Website following an update is subject to the updated Privacy Policy, except where applicable law requires additional consent.

22. CONTACT US

Questions, concerns, complaints, and privacy requests concerning this Privacy Policy may be directed to:

The Haven Texas

Email: privacy@thehaventx.com

Telephone: (888) 219-6895

Website: www.thehaventx.com

For requests concerning medical records, protected health information, or substance use disorder treatment records, please identify the nature of your request so that it may be directed to the appropriate privacy or records personnel.

 

IMPORTANT HEALTH PRIVACY NOTICE: This Website Privacy Policy governs general Website information practices. If your information is protected by HIPAA, HITECH, 42 C.F.R. Part 2, or another healthcare privacy law, additional privacy protections, restrictions, and rights may apply. Please refer to The Haven’s applicable Notice of Privacy Practices and Part 2 Patient Notice.