Skip to main content

Privacy Policy

Effective date: 05/06/2026

  1. Introduction Emerald Care Behavioral Health (“we,” “us,” or “our”) is committed to protecting the privacy and security of your health information. This Privacy Policy explains how we collect, use, disclose, and protect individually identifiable health information (protected health information or PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable New Hampshire laws. By using www.emeraldcarebehavioralhealth.com and our services, you agree to the terms described here.
  2. Scope This policy applies to PHI created or received by Emerald Care Behavioral Health in the course of providing behavioral health services, including medication management for addiction and/or mental health, and to information collected through our website.
  3. What information we collect
  • PHI: information that identifies you and relates to your past, present, or future physical or mental health condition, the provision of health care to you, or payment for health care.
  • Non-PHI: information collected for site functionality (e.g., cookies, IP addresses) and general contact information when you request information.
  1. How we use PHI We may use PHI for:
  • Treatment: to provide, coordinate, and manage your care (including sharing with other providers involved in your care).
  • Payment: to obtain payment for services (including claims to insurance and communications with payers).
  • Health care operations: quality assessment, credentialing, training, compliance, and business operations necessary to provide services.
  1. When we may disclose PHI We may disclose PHI when:
  • You authorize the disclosure in writing.
  • Required for treatment, payment, or health care operations as described above.
  • Required by law (e.g., court orders, mandatory reporting of abuse, or public health reporting).
  • For public health activities, law enforcement, or national security reasons when required by law.
  • In the event of a sale or transfer of business assets involving PHI, subject to your rights and required protections.
  1. Uses and disclosures that require authorization Uses or disclosures of psychotherapy notes, most uses of PHI for marketing, and disclosures that constitute a sale of PHI will be made only with your written authorization except as otherwise permitted by law.
  2. Patient rights You have the right to:
  • Inspect and obtain a copy of your PHI (subject to limited exceptions).
  • Request amendment of your PHI that you believe is incorrect or incomplete.
  • Request an accounting of certain disclosures of your PHI.
  • Request restrictions on certain uses and disclosures of PHI (we are not required to agree but will comply when required by law).
  • Request confidential communications (for example, alternative contact methods or locations).
  • Receive a paper copy of this Privacy Policy.

To exercise any of these rights, contact our Privacy Officer (contact information below). We will respond within the timeframes required by HIPAA and New Hampshire law.

  1. Security and safeguards We implement administrative, physical, and technical safeguards to protect PHI, including:
  • Access controls and authentication for electronic systems.
  • Encryption where feasible for electronic PHI.
  • Secure physical storage for paper records.
  • Training and policies for workforce members regarding privacy and security. While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. If you have concerns about electronic communication, please notify us to discuss alternatives.
  1. Website and electronic communications
  • The website may use cookies and collect usage data for site functionality and analytics. This information is generally non-identifiable and not treated as PHI unless combined with PHI you provide.
  • Do not use the website, email, or contact forms to transmit highly sensitive PHI unless encrypted or otherwise instructed.
  • We are not responsible for the privacy practices of third-party websites or services linked from our site.
  1. Breach notification If we discover a breach of unsecured PHI, we will follow HIPAA breach notification requirements, including notifying affected individuals, the Department of Health and Human Services (HHS), and, when required, media as appropriate, in accordance with required timeframes.
  2. Business associates We may share PHI with third-party service providers (business associates) who perform functions on our behalf (e.g., billing, IT, analytics). We require business associates to protect PHI through written agreements that meet HIPAA standards.
  3. Minors and parental access State law may affect parental access to a minor’s PHI. We will follow applicable New Hampshire law and HIPAA when responding to requests for access to minors’ records.
  4. Changes to this Privacy Policy We may modify this Privacy Policy. Material changes will be posted on the website with an updated effective date. Non-material changes may be implemented without prior notice as permitted by law.
  5. Complaints If you believe your privacy rights have been violated, you may file a complaint with Emerald Care Behavioral Health’s Privacy Officer using the contact information below or with the HHS Office for Civil Rights. We will not retaliate against you for filing a complaint.
  6. Contact information Privacy Officer Emerald Care Behavioral Health 814 Elm Street [City], New Hampshire [ZIP] Phone: [phone number] Email: [privacy@emeraldcarebehavioralhealth.com]

For legal or compliance questions about this policy, you may also contact: U.S. Department of Health & Human Services, Office for Civil Rights Website: https://www.hhs.gov/hipaa Phone: 1-800-368-1019

  1. Additional disclosures required by New Hampshire law We comply with New Hampshire laws regarding confidentiality of behavioral health and substance-use disorder records, including restrictions on disclosure and enhanced protections where applicable. Certain disclosures may require additional authorizations or court orders under state law.