Privacy Policy

Effective date: TBD (upon counsel approval) · Last updated draft: 2026-05-15

Paramount Rehabilitation Center ("Paramount," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you visit https://paramountrehabcenter.com (our "Website"), how we use that information, with whom we share it, and the choices you have.

If you are a current or prospective patient and want to understand how we handle your health information, please also read our Notice of Privacy Practices, which is governed by stricter federal laws including the Health Insurance Portability and Accountability Act ("HIPAA") and the federal confidentiality regulations for substance use disorder treatment records ("42 CFR Part 2").

1. Information we collect

We collect information in two ways:

1a. Information you give us directly

When you submit one of our website forms (Insurance Verification, Request a Callback, or Refer Someone), we collect the fields you provide. These typically include:

• Your name and contact information (phone, email)
• Insurance carrier name (Verify Insurance form only)
• Optional free-text information about your situation or that of the person you are referring
• How you found us (UTM parameters and referring URL) when applicable

The forms are designed to collect only the minimum information needed for our admissions team to call you back. We deliberately do NOT request protected health information such as your diagnosis, medications, member ID, or date of birth on the public website. Those conversations happen by phone with a trained admissions counselor, after appropriate consents are obtained.

1b. Information collected automatically

When you visit our Website, we automatically collect:

• Your IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages you viewed and time spent on each
• The website that referred you to us, if any

We use this information for security (rate-limiting, abuse detection), analytics (understanding which pages are useful), and improving the Website. We do not sell or rent it to anyone.

2. How we use your information

We use the information we collect to:

• Contact you in response to a form you submitted, by phone, text, or email as you have authorized on the form
• Verify your insurance benefits if you submitted the Verify Insurance form
• Coordinate with a referring partner if you submitted the Refer Someone form
• Operate, secure, and improve the Website
• Comply with applicable laws and respond to lawful requests

We do not use information collected on this Website to make determinations about treatment, payment, or healthcare operations until you become a patient of record. Those activities are governed by our Notice of Privacy Practices.

3. SMS messaging and consent

By submitting your phone number through any of our forms, you consent to receive communications by phone or text message from Paramount about treatment options, scheduling, and follow-up. You may opt out at any time by replying STOP to a text or telling any Paramount staff member. Message and data rates may apply. Message frequency varies. We will never sell or share your phone number with marketers.

4. Cookies and similar technologies

We use cookies and similar technologies for essential website function (such as remembering your session if you sign in as staff) and to understand how visitors use the Website. We do not use third-party advertising cookies or behavioral retargeting.

You can disable cookies in your browser settings; some parts of the Website may not function correctly without them.

5. Third-party service providers

We engage service providers to operate our Website and contact you on our behalf. Where these providers handle any information that could identify you as a patient or prospective patient, we require them to sign a HIPAA Business Associate Agreement and to maintain at least the same level of confidentiality we do.

Categories of providers we use:

• Hosting and storage — for running the website and storing form submissions
• Email and SMS delivery — to send the messages you have authorized
• Insurance verification — to look up your benefits when you request that service
• Telephony and call analytics — to manage incoming and outgoing calls

A current list of our service providers and their Business Associate Agreement status is available on request. We do not sell your information.

6. How long we keep information

Information you submit through our Website is retained for as long as is necessary to respond to your inquiry and to meet our regulatory record-keeping obligations. For patients of record, retention is governed by the Notice of Privacy Practices and Colorado state record retention requirements (typically seven years from the last date of service, longer for minors).

If you submit a form and never become a patient and never ask us to contact you again, you may request deletion of your information at any time using the contact information below.

7. Security

We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, access controls scoped by role, audit logging of access to records, and rate-limiting on all public forms. We test these controls regularly. No method of internet transmission is 100% secure; if a security incident occurs that compromises any protected information, we will follow our breach notification procedure and notify affected individuals and regulators as required by HIPAA and Colorado law.

8. Children's privacy

Our Website and treatment programs are intended for adults aged 18 and older. We do not knowingly collect information from children under 13. If you believe we have collected information from a child, please contact us using the information below and we will delete it promptly.

9. Your rights

Depending on where you live, you may have the right to:

• Request access to the information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to record retention requirements
• Opt out of certain uses of your information
• Receive a copy of your information in a portable format

Colorado residents have additional rights under the Colorado Privacy Act ("CPA"). Patients of record have additional rights under HIPAA described in our Notice of Privacy Practices. To exercise any of these rights, contact our Privacy Officer using the information below.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date above. For material changes, we will provide additional notice on the homepage or by direct contact to active patients.

11. Contact us

Questions about this Privacy Policy, requests to exercise your rights, or complaints can be directed to our Privacy Officer:

You also have the right to file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, if you believe your privacy rights have been violated. Information on how to file a complaint is available at www.hhs.gov/ocr.