Effective Date: January 1, 2025
Last Updated: December 28, 2025
1. Introduction
Bluegrass Recovery Homes is committed to protecting the privacy and confidentiality of our website visitors and residents. This policy explains how we collect, use, and safeguard your personal and health information in compliance with federal laws, including 42 CFR Part 2 and HIPAA.
2. Information We Collect
- Personal Information: Name, email, and phone number provided via contact forms.
- Protected Health Information (PHI): Any information relating to your recovery status, history, or participation in our program.
- Automatic Data: IP addresses, browser types, and cookies used to improve website functionality.
3. Confidentiality of Recovery Records (42 CFR Part 2)
The confidentiality of alcohol and drug abuse records is protected by Federal law. Generally, we may not say to a person outside the program that you are a resident, or disclose any information identifying you as a person in recovery, unless:
- You consent in writing.
- The disclosure is allowed by a court order.
- The disclosure is made to medical personnel in a health emergency.
- The disclosure is for mandated reporting of suspected child abuse or neglect.
4. How We Use and Share Your Information
- Service Delivery: To respond to inquiries and manage your residence.
- Third Parties: We do not sell, rent, or trade your personal information. We only share data with trusted service providers (e.g., encrypted hosting) who agree to maintain strict confidentiality.
- Electronic Communications: In accordance with 2025 standards, all PHI transmitted electronically is encrypted.
5. Your Rights
- Right to Revoke Consent: You may revoke any written consent for information disclosure at any time.
- Right to Access: You may request a copy of the records we maintain about you.
- Right to Amend: You may request corrections to inaccurate information in your file.
6. Security Measures
We implement multi-factor authentication (MFA), end-to-end encryption for data at rest and in transit, and regular 2025-compliant security audits to protect your data.
7. Contact Us
For questions regarding this policy or to file a privacy complaint without fear of retaliation, contact:
Derek Amburgey: Executive Director
Phone: 859-302-5806
Back to Home