THE HAVEN TEXAS
Haven Privacy Policy and Website Updates
Website Privacy Policy | Consumer Health Data Privacy Notice | Website Implementation Updates
Effective Date: September 2, 2026
Last Updated: September 2, 2026
Privacy Contact: privacy@thehaventx.com | (888) 219-6895 | www.thehaventx.com
WEBSITE IMPLEMENTATION UPDATES
The following items are recommended implementation steps for thehaventx.com. These are internal website
instructions and are not intended to appear as part of the public Privacy Policy itself.
1. Create Three Separate Privacy Links in the Website Footer
For the clearest and most defensible website structure, maintain three distinct footer links. Each link should take the
visitor directly to its own page rather than placing all three notices behind a single generic link.
Privacy Policy – recommended URL: thehaventx.com/privacy-policy/
Consumer Health Data Privacy Notice – recommended URL: thehaventx.com/consumer-health-data-privacy/
Notice of Privacy Practices (HIPAA / 42 C.F.R. Part 2) – recommended URL: thehaventx.com/notice-of-
privacy-practices/
Recommended footer display: Privacy Policy | Consumer Health Data Privacy Notice | Notice of Privacy Practices
2. Add Privacy Language Beneath the Contact Form
Place a short privacy and emergency notice immediately beneath the Website contact form. Recommended
language:
By submitting this form, you acknowledge that the information you provide will be used to respond to your request
in accordance with our Privacy Policy. Do not use this form for a medical emergency. Call 911 for an emergency.
3. Audit Google Tag Manager and Other Tracking Technologies
Confirm which analytics, advertising, call-tracking, session-replay, pixel, or other tags fire on treatment,
admissions, contact, insurance, or similar pages. Tracking technologies should be configured so that protected or
sensitive health information is not impermissibly disclosed to third parties.
4. Maintain a Separate Notice of Privacy Practices
The Haven should separately maintain and publish its current patient-facing Notice of Privacy Practices addressing
HIPAA and applicable 42 C.F.R. Part 2 requirements. The Website Privacy Policy and Consumer Health Data
Privacy Notice do not replace that patient notice.
5. Use a Dedicated Privacy Contact
Use privacy@thehaventx.com as the dedicated contact address for privacy questions, consumer privacy requests,
and privacy appeals, with routing to the appropriate legal/compliance personnel.
PRIVACY POLICY
The Haven Texas ("The Haven," "we," "us," or "our") respects the privacy of individuals who visit our website,
communicate with us, seek information about our services, or otherwise interact with us online.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through
www.thehaventx.com and other websites, webpages, forms, and online services that link to this Privacy Policy
(collectively, the "Website").
Because The Haven provides services relating to substance use disorder treatment and medical stabilization,
information you provide to us may be particularly sensitive. We are committed to treating such information with
appropriate care and in accordance with applicable federal and state privacy laws.
This Privacy Policy applies to information collected through the Website. It does not replace any Notice of Privacy
Practices or other notice that may apply to protected health information under the Health Insurance Portability and
Accountability Act ("HIPAA"), the Health Information Technology for Economic and Clinical Health Act
("HITECH"), 42 C.F.R. Part 2 ("Part 2"), or other health-information privacy laws.
1. INFORMATION WE COLLECT
Depending on how you interact with us, we may collect the following categories of information.
Information You Provide Directly
We may collect information that you voluntarily provide when you contact us, request information, communicate
with our admissions team, inquire about treatment, verify insurance, submit a form, apply for employment,
communicate with one of our representatives, or otherwise interact with us.
name;
email address;
telephone number;
mailing address;
date of birth or age;
information contained in messages or communications you send to us;
insurance or health-plan information;
information concerning treatment needs, substance use, medical conditions, medications, symptoms, treatment
history, or other health-related information;
information concerning a family member or other person for whom you are seeking assistance;
demographic information;
employment and applicant information, including resume, employment history, education, professional
credentials, and other job-application information;
information necessary to respond to privacy or legal requests; and
any other information you choose to provide.
Please provide only information reasonably necessary for us to assist you.
Information Collected Automatically
When you visit the Website, we and service providers acting on our behalf may automatically collect certain
information concerning your device and use of the Website, including:
Internet Protocol ("IP") address;
browser type and version;
device type;
operating system;
referring and exit webpages;
pages viewed;
links clicked;
date and time of access;
approximate geographic location derived from an IP address;
Website interactions and navigation information;
cookie or similar technology identifiers; and
information regarding the performance and operation of the Website.
We may collect this information through cookies, pixels, tags, scripts, web beacons, server logs, analytics
technologies, and similar technologies.
Sensitive and Health-Related Information
Because of the nature of our services, information submitted to us may reveal or relate to an individual's:
physical or mental health;
substance use or substance use disorder;
treatment or treatment-seeking activity;
health insurance;
medications;
medical conditions;
disability;
precise location in limited circumstances; or
other information classified as "sensitive data," "consumer health data," or a similar term under applicable law.
We collect and process such information only as reasonably necessary for the purposes described in this Policy, as
authorized or requested by you, or as otherwise permitted by law.
2. HOW WE USE INFORMATION
We may use personal information to:
respond to inquiries and requests;
connect individuals with our admissions team;
assist individuals seeking information about detoxification, medical stabilization, substance-use treatment, or
related services;
conduct preliminary intake or assessment activities;
verify or assist with insurance coverage and benefits;
coordinate admissions, transportation, referrals, or other requested services;
communicate with patients, prospective patients, family members, referral sources, healthcare professionals, or
others;
provide requested information;
operate, maintain, secure, troubleshoot, and improve our Website;
understand Website usage and performance;
prevent fraud, misuse, security incidents, or unlawful activity;
maintain appropriate business and compliance records;
recruit and evaluate applicants for employment;
comply with applicable laws, regulations, court orders, subpoenas, governmental requests, accreditation
requirements, and legal obligations;
establish, exercise, or defend legal rights;
protect the rights, safety, property, or security of The Haven, our patients, visitors, workforce members, or
others; and
carry out other purposes disclosed to you at the time information is collected or with your consent.
We seek to limit our collection and use of personal information to information that is adequate, relevant, and
reasonably necessary for the purposes for which it is collected.
3. HEALTH INFORMATION, HIPAA, AND 42 C.F.R. PART 2
Some information collected by or provided to The Haven may constitute protected health information ("PHI") under
HIPAA or a substance use disorder patient record protected by Part 2.
When HIPAA, Part 2, or another healthcare privacy law applies to particular information, our use and disclosure of
that information is governed by the applicable law and by our applicable Notice of Privacy Practices and/or Part 2
Patient Notice, rather than solely by this Website Privacy Policy.
Part 2 provides heightened protections for certain records relating to the identity, diagnosis, prognosis, or treatment
of individuals receiving substance use disorder services from covered programs.
Nothing in this Website Privacy Policy is intended to authorize a use or disclosure of PHI or Part 2 information that
is otherwise prohibited by applicable law.
Our patient privacy notices should be consulted for additional information concerning patient rights and our
obligations regarding medical and substance use disorder treatment records.
4. HOW WE DISCLOSE INFORMATION
We may disclose personal information as reasonably necessary for the purposes described in this Policy.
Service Providers
We may provide information to companies that perform services on our behalf, including providers of:
website hosting;
information technology;
cybersecurity;
cloud storage;
communications;
telephone or call-center technology;
form processing;
analytics;
insurance verification;
admissions support;
recruiting;
professional services; and
other operational services.
Service providers are permitted to process information only for authorized purposes and are subject to contractual
and legal requirements where required by applicable law.
Where a service provider creates, receives, maintains, or transmits PHI on our behalf and qualifies as a HIPAA
business associate, we require an appropriate Business Associate Agreement when required by HIPAA.
Healthcare and Treatment-Related Parties
Where authorized or permitted by applicable law, information may be shared with hospitals, healthcare providers,
insurers, health plans, treatment facilities, laboratories, pharmacies, transportation providers, aftercare providers,
referral sources, or other parties involved in providing or coordinating requested services.
Any disclosure of information protected by HIPAA or Part 2 is subject to applicable healthcare privacy
requirements.
Legal and Safety Purposes
We may disclose information when reasonably necessary to:
comply with law;
respond to lawful governmental requests;
comply with court orders or legal process;
investigate suspected fraud, abuse, security incidents, or violations of law;
protect the safety of an individual or the public as permitted by law; or
establish, exercise, or defend legal claims.
Business Transactions
Information may be disclosed as part of an actual or proposed merger, acquisition, financing, reorganization, sale of
assets, restructuring, or similar business transaction, subject to applicable healthcare privacy and confidentiality
laws.
5. SALE OF PERSONAL AND HEALTH INFORMATION
The Haven does not sell patient health information or consumer health data for monetary consideration.
The Haven does not sell substance use disorder treatment records.
We do not disclose PHI or Part 2-protected information to advertising or tracking technology providers in a manner
prohibited by applicable law.
Certain state privacy statutes define "sale" or "sharing" more broadly than an exchange of information for money
and may include some advertising or analytics-related disclosures. Where applicable law treats our use of a
particular technology as a sale, sharing, or targeted advertising activity, we will provide the disclosures and opt-out
mechanisms required by that law.
We do not knowingly use sensitive health information to create advertising profiles concerning an individual's
substance use disorder or treatment status.
6. COOKIES, ANALYTICS, AND ONLINE TRACKING
TECHNOLOGIES
The Website may use cookies and similar technologies to operate and secure the Website, remember preferences,
measure Website traffic, analyze Website performance, and understand how visitors interact with the Website.
We may use third-party technology providers for these purposes.
Because healthcare websites present special privacy concerns, we evaluate the use of tracking technologies in light
of applicable privacy requirements. We do not intend for advertising or analytics technologies to collect information
from authenticated patient portals or other areas containing PHI unless such collection and disclosure are permitted
by applicable law and appropriate contractual protections are in place.
Where required by applicable law, visitors may be given the ability to consent to, reject, or manage non-essential
cookies or tracking technologies.
Browser settings may also allow you to block or delete cookies, although doing so may affect Website functionality.
7. COMMUNICATIONS BY TELEPHONE, TEXT MESSAGE, OR
EMAIL
If you provide a telephone number or email address, we may use that information to respond to your request and
communicate with you regarding services you requested or expressed interest in receiving.
Where required by law, we will obtain appropriate consent before sending marketing text messages, automated
calls, or commercial electronic communications.
Consent to receive marketing communications is not a condition of receiving healthcare services from The Haven.
You may opt out of marketing text messages by replying STOP or by following another opt-out instruction
contained in the communication.
Please understand that ordinary email and SMS text messaging may not always be secure. Do not use ordinary
email or text messaging to communicate sensitive medical information unless you understand and accept the
associated risks or we have directed you to an appropriate secure communication channel.
8. DATA SECURITY
We maintain administrative, technical, and physical safeguards designed to protect personal information against
unauthorized access, acquisition, destruction, loss, misuse, alteration, or disclosure.
These safeguards are designed to be appropriate to the nature and sensitivity of the information we maintain.
No Internet transmission, electronic storage system, or information-security program can guarantee absolute
security. Accordingly, we cannot guarantee that unauthorized persons will never defeat our safeguards.
If we become aware of a data-security incident involving information subject to breach-notification requirements,
we will provide notifications as required by applicable law.
9. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes for which the information
was collected, including to:
provide requested services;
satisfy legal, regulatory, clinical, contractual, or accreditation obligations;
maintain appropriate business and compliance records;
resolve disputes; and
enforce agreements or protect legal rights.
Retention periods vary depending on the nature of the information and applicable law.
PHI, medical records, and Part 2 records are retained in accordance with applicable healthcare record-retention
requirements and our internal policies.
10. YOUR PRIVACY RIGHTS
Depending on where you reside and the law applicable to your information, you may have the right to:
confirm whether we process personal information about you;
access personal information we maintain about you;
obtain a copy of certain personal information;
correct inaccuracies;
request deletion;
obtain certain information in a portable format;
withdraw consent where processing is based on consent;
opt out of certain sales of personal information;
opt out of targeted advertising;
opt out of certain profiling or automated decision-making activities;
obtain information regarding categories of third parties to which information has been disclosed;
appeal a decision we make concerning a privacy request; and
exercise privacy rights without unlawful discrimination or retaliation.
These rights are subject to exceptions and limitations under applicable law.
Certain information may be exempt from consumer privacy statutes because it is regulated by HIPAA, HITECH,
Part 2, or another healthcare privacy law. Those exemptions do not affect rights you may separately have under
those healthcare laws.
Submitting a Privacy Request
You may submit a privacy request by contacting us at:
Email: privacy@thehaventx.com
Telephone: (888) 219-6895
Please indicate that your communication concerns a Privacy Request.
We may need to verify your identity before processing a request. Verification requirements will depend on the
nature of the request and the sensitivity of the information involved.
You may also use an authorized agent to submit certain requests where permitted by law. We may require evidence
of the agent's authority and may separately verify your identity.
If we deny a request and applicable law provides a right to appeal, you may appeal by contacting us through the
same methods and stating that you are submitting a Privacy Appeal.
11. TEXAS PRIVACY RIGHTS
Texas residents may have rights under the Texas Data Privacy and Security Act ("TDPSA"), including the rights to:
confirm whether we process their personal data;
access personal data;
correct inaccuracies;
delete certain personal data;
obtain a portable copy of certain personal data; and
opt out of processing for targeted advertising, the sale of personal data, or certain profiling.
Where the TDPSA requires consent before processing sensitive data, we will obtain such consent unless an
applicable exception applies.
Information processed in accordance with HIPAA and certain other regulated healthcare information may be
exempt from some provisions of the TDPSA.
Texas residents may exercise applicable rights using the methods described in Section 10.
12. OTHER U.S. STATE PRIVACY RIGHTS
Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota,
Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, Virginia, Texas, and
other states that have enacted comprehensive privacy legislation may have additional rights regarding their personal
information.
The availability and scope of these rights vary by state and are subject to statutory exemptions, including
exemptions relating to HIPAA-regulated information, healthcare providers, nonprofit organizations, employment
information, or other regulated information.
Where an applicable state law provides you with additional privacy rights, The Haven will honor those rights as
required by law.
13. CONSUMER HEALTH DATA
Certain states have enacted laws specifically governing consumer health data that may fall outside HIPAA.
If one of these laws applies to our collection or processing of your information, we will process consumer health
data only as permitted by applicable law and will provide any additional notice, consent, authorization, access,
deletion, withdrawal, or other rights required by that law.
The Haven does not sell consumer health data without any authorization specifically required by applicable law.
Where required, a separate Consumer Health Data Privacy Notice will supplement this Privacy Policy.
14. CALIFORNIA PRIVACY DISCLOSURES
To the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act
("CCPA/CPRA"), applies to personal information we process and that information is not otherwise exempt,
California residents may have rights to know, access, correct, delete, and obtain information concerning certain
disclosures, and to opt out of certain sales or sharing of personal information.
The categories of personal information we may collect are described in Section 1.
The purposes for which we use those categories are described in Section 2.
The categories of recipients to whom information may be disclosed are described in Section 4.
We do not discriminate against individuals for exercising rights provided by applicable privacy law.
15. CHILDREN'S PRIVACY
The Website is intended for a general adult audience and is not directed to children under 13.
We do not knowingly collect personal information online directly from a child under 13 without appropriate
authorization where required by the Children's Online Privacy Protection Act ("COPPA").
If you believe a child under 13 has provided personal information directly to us through the Website without
appropriate authorization, please contact us so that we may take appropriate action.
Parents, guardians, and other adults seeking treatment information on behalf of a minor may contact us directly.
16. INFORMATION ABOUT OTHER PEOPLE
If you provide personal information concerning another individual, such as a family member, prospective patient,
employee, or other third party, you represent that you are authorized to provide the information or otherwise have a
lawful basis to do so.
Providing information concerning another person through the Website does not itself authorize The Haven to
disclose protected medical or treatment information about that individual to you.
17. THIRD-PARTY WEBSITES
The Website may contain links to websites or services operated by third parties.
We are not responsible for the privacy, security, or information practices of independently operated third-party
websites. We encourage you to review the privacy policies of third-party websites before providing them with
personal information.
18. EMPLOYMENT APPLICANTS
When individuals apply for employment with The Haven, we may collect information concerning employment
history, education, qualifications, professional licenses, references, contact information, and other information
relevant to recruiting and employment.
We use applicant information for recruiting, evaluating candidates, conducting background or credential checks
where permitted by law, complying with legal obligations, communicating with applicants, and administering our
employment processes.
Employee and workforce-member information may be subject to separate internal privacy and employment policies.
19. DO NOT TRACK AND UNIVERSAL OPT-OUT MECHANISMS
Some browsers offer "Do Not Track" signals.
Because there is not a single universally accepted standard governing all Do Not Track signals, our Website may
not respond to every such signal.
Where applicable law requires recognition of an approved universal opt-out mechanism or preference signal, we
will process qualifying signals as required by law.
20. EMERGENCY COMMUNICATIONS
The Website, Website forms, email, and other electronic communications should not be used for a medical
emergency.
If you or another person is experiencing a medical emergency, call 911 or go to the nearest emergency department.
If you are seeking information concerning admission to The Haven, our admissions team is available at (888) 219-
6895.
21. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically to reflect changes in our practices, technologies, services, or legal
obligations.
When we make material changes, we will update the "Last Updated" date above and provide additional notice
where required by applicable law.
Your continued use of the Website following an update is subject to the updated Privacy Policy, except where
applicable law requires additional consent.
22. CONTACT US
Questions, concerns, complaints, and privacy requests concerning this Privacy Policy may be directed to:
The Haven Texas
Email: privacy@thehaventx.com
Telephone: (888) 219-6895
Website: www.thehaventx.com
For requests concerning medical records, protected health information, or substance use disorder treatment records,
please identify the nature of your request so that it may be directed to the appropriate privacy or records personnel.
IMPORTANT HEALTH PRIVACY NOTICE: This Website Privacy Policy governs general Website
information practices. If your information is protected by HIPAA, HITECH, 42 C.F.R. Part 2, or another
healthcare privacy law, additional privacy protections, restrictions, and rights may apply. Please refer to The
Haven's applicable Notice of Privacy Practices and Part 2 Patient Notice.