Notice of Privacy Practices
Effective Date: 10/28/2026 · Last Updated: 10/28/2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This notice applies to the health care services Higher Purpose Recovery (“HPR,” “we,” “us”) provides, including our virtual intensive outpatient and outpatient programs. For how we handle information on our website, forms, calls and texts, see our Privacy Policy. For the terms governing your use of this website, see our Terms of Use.
higherpurposerecovery.com is owned and operated by Higher Purpose Recovery.
Our duties
We are required by law to:
- protect the privacy and security of your health information
- give you this notice of our legal duties and privacy practices
- follow the terms of the notice currently in effect
- tell you promptly if a breach occurs that may have compromised the privacy or security of your information
We will not use or share your information in ways other than those described here unless you tell us we can in writing. If you give us permission, you can change your mind at any time by telling us in writing.
How we may use and share your information
Treatment
We can use your information and share it with other professionals who are treating you. Example: your therapist may talk with your psychiatrist about your care plan.
Payment
We can use and share your information to bill and get payment from health plans or others. Example: we give information about you to your health insurance plan to check your benefits and so it will pay for your services.
Health care operations
We can use and share your information to run our organization, improve your care and contact you when needed. Example: we review records to check the quality of care our clinicians provide, and we may contact you with appointment reminders.
Telehealth services
We provide services by telehealth using a platform that supports the safeguards required for electronic protected health information, including encryption in transit and access controls.
- Technology risks. Telehealth depends on your internet connection and device. While we use secure platforms, no electronic transmission can be guaranteed completely secure. We do not record telehealth sessions except where you have given written authorization.
- Informed consent. Before your first telehealth session, we will obtain your consent to receive services this way, including an explanation of its benefits and limitations and your right to request an in-person visit instead.
- Licensing. Our clinicians are licensed in specific states. We can provide telehealth services only where our treating clinician holds the required license. Your physical location at the time of a session determines which licensing rules apply.
Other ways we can use or share your information
We are allowed or required to share your information in other ways, usually in ways that contribute to the public good. We have to meet many conditions in the law before we can share it for these purposes:
- Public health and safety: reporting suspected abuse, neglect or domestic violence, and preventing or reducing a serious threat to anyone’s health or safety, including warning someone a patient has threatened.
- Research: for health research that meets the law’s privacy safeguards.
- Complying with the law: when state or federal law requires it, including with the U.S. Department of Health and Human Services if it wants to confirm we are following privacy law.
- Medical examiners and funeral directors: when an individual dies.
- Government requests: for workers’ compensation claims, law enforcement purposes or with a law enforcement official, health oversight agencies for activities authorized by law, and special government functions such as military, national security and presidential protective services.
- Lawsuits and legal actions: in response to a court or administrative order, or in response to a subpoena when the law allows.
- Family and friends: with people involved in your care or payment for your care, unless you tell us not to. If you are not able to tell us your preference, for example in an emergency, we may share information if we believe it is in your best interest.
Some laws give certain information more protection than federal privacy law does, including California law and the federal law for substance use disorder records (42 CFR Part 2). When another law is stricter, we follow the stricter law. See Substance use disorder records and California protections.
Uses that need your written permission
We will never use or share your information for these purposes unless you give us written permission:
- most uses and sharing of psychotherapy notes
- marketing
- sale of your information
Any other use not described in this notice also needs your written permission. You can take back your permission at any time in writing, except for actions we have already taken based on it.
Your rights
When it comes to your health information, you have the rights below. To use any of them, send your request in writing to our Privacy Officer (see Contact).
See or get a copy of your record
You can ask to see your health record, or to get an electronic or paper copy. Under California law, we will let you see your record within five working days and send copies within 15 days of your request. We may charge a reasonable, cost-based fee for copies. If we determine that seeing your mental health record would create a substantial risk of significant harm to you, we may decline. If we do, we will tell you, note the reason in your record, and give the record instead to a licensed professional you choose, such as a physician, psychologist, marriage and family therapist, clinical social worker or professional clinical counselor.
Ask us to correct your record
You can ask us to correct health information you think is wrong or incomplete. We may say no, but we will tell you why in writing within 60 days. You can also add a written statement of up to 250 words to your record about anything you believe is incorrect or incomplete.
Request confidential communications
You can ask us to contact you in a specific way, such as by your mobile phone only, or to send mail to a different address. We will say yes to all reasonable requests.
Ask us to limit what we use or share
You can ask us not to use or share certain information for treatment, payment or operations. We are not required to agree, and we may say no if it would affect your care. If you pay for a service in full out of pocket, you can ask us not to share that information with your health insurer for payment or operations. We will say yes unless a law requires us to share it.
Get a list of those we’ve shared information with
You can ask for a list of the times we have shared your health information in the six years before your request, who we shared it with and why. It will include all disclosures except those for treatment, payment and health care operations, and certain others, such as any you asked us to make. We provide one list a year for free and may charge a reasonable, cost-based fee for another within 12 months.
Get a paper copy of this notice
You can ask for a paper copy of this notice at any time, even if you agreed to receive it electronically.
Choose someone to act for you
If you have given someone medical power of attorney, or someone is your legal guardian, that person can use your rights and make choices about your health information. We will make sure the person has this authority before we act.
Substance use disorder records
Substance use disorder treatment records are protected under 42 CFR Part 2. These records may not be used or disclosed in any civil, criminal, administrative, or legislative proceeding against the individual without written consent or a court order. Penalties for violations align with HIPAA civil and criminal enforcement. A court can order disclosure only after you have been given notice and a chance to be heard, and the order must come with a subpoena or other legal requirement compelling disclosure.
Federal law protects the confidentiality of substance use disorder patient records. HPR provides substance use disorder treatment covered by 42 CFR Part 2. In most cases we need your written consent before we share these records, including for treatment, payment and health care operations. You can give one consent for all future treatment, payment and health care operations uses, and you can revoke it in writing at any time.
If we share records under your consent for treatment, payment or health care operations, the people who receive them may share them again as federal privacy law allows. Records shared this way still may not be used against you in legal proceedings without your consent or a court order.
For these records you also have the right to ask us to limit what we share, to get a list of disclosures, to get a copy of this notice, and to discuss it with our Privacy Officer.
California protections
California’s Confidentiality of Medical Information Act gives you protections in addition to federal law. Where California law is stricter, we follow it.
- We need your written authorization to share your medical information, except where California law allows or requires us to share it without one.
- Information from outpatient psychotherapy has extra limits on sharing, even with other health care providers.
- We will not use your medical information for marketing without your written authorization.
- You have faster access to your records under California law, as described in Your rights.
How to file a complaint
If you believe we have violated your privacy rights, you can file a complaint:
- With us: contact our Privacy Officer using the details in Contact.
- With the U.S. Department of Health and Human Services Office for Civil Rights: online at ocrportal.hhs.gov, by mail to 200 Independence Avenue, S.W., Washington, D.C. 20201, or by phone at 1-800-368-1019 (TDD 1-800-537-7697).
We will not retaliate against you for filing a complaint.
Changes to this notice
We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on request and on this website.
Contact and effective date
For questions about this notice, or to use any of your rights, contact our Privacy Officer.
HIPAA Privacy Officer, Higher Purpose Recovery Email: wren@hproutpatient.com Phone: (949) 844-3813 Mail: Higher Purpose Recovery, Attn: Privacy Officer, 2737 East Coast Hwy, Suite B, Corona Del Mar, CA 92625This notice is effective 10/28/2026.