The short version

This website is operated by Advanced Recovery Systems, LLC, the company behind The Recovery Village and its affiliated treatment brands. Because this is an addiction and mental health treatment site, we treat the information we collect here with more care than an ordinary website would. Here is what that means in practice:

• We do not sell your personal information, and we do not share it for targeted advertising.
• No optional cookies or analytics run until you click “Accept All” or choose a category in the cookie banner. If you click “Deny,” only the cookies the site needs to work are used.
• Our analytics tools use a persistent identifier for your browser. They are not anonymous, which is why we ask before turning them on.
• Information you give us to check your insurance or to start admission is protected health information. It is governed by our Notice of Privacy Practices, not by this Policy.
• You can see, correct, or delete the information we hold about you, and you can withdraw consent at any time. Instructions are in Section 9.

1. Who we are and what this Policy covers

This Privacy Policy (the “Policy”) explains how Advanced Recovery Systems, LLC (“ARS,” “we,” “us,” or “our”) collects, uses, and discloses information about you when you visit this website and any other ARS website that links to this Policy (each a “Site”). Sites operated by our affiliate Promises Behavioral Health, LLC also link to this Policy; on those Sites, “ARS,” “we,” “us,” and “our” mean Promises Behavioral Health, LLC. ARS is a Delaware limited liability company headquartered at 2200 N. Commerce Parkway, Suite 200, Weston, FL 33326. ARS owns and operates treatment facilities through its subsidiaries, which do business under The Recovery Village and related brand names. When we refer to “affiliates,” we mean ARS’s parent company, Project Build Behavioral Health, LLC, and the companies under common ownership with ARS, including its treatment subsidiaries and Promises Behavioral Health, LLC.

This Policy covers information collected through the Sites, including contact forms, screening quizzes, live chat, telephone calls placed to numbers displayed on the Sites, and the cookies and similar technologies described in the Cookie Policy below. It does not cover information we collect offline at our facilities, information collected by websites we do not control, or protected health information, which is described next.

Protected health information and the insurance verification tool

When you use the insurance verification tool, the online admission form, or otherwise give us information so that we can evaluate you for treatment, that information is protected health information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”) and, where it relates to substance use disorder treatment, is further protected by 42 C.F.R. Part 2. We handle PHI under our Notice of Privacy Practices, which is available at the link in the footer of the Site you are visiting. The vendor that runs the insurance verification tool works for us under a business associate agreement and may use the information only to provide that service to us. The tool runs whether or not you accept optional cookies, because it is necessary to provide the service you asked for. Our session analytics tool is configured to mask the fields in that tool so it does not record what you type. Where this Policy and the Notice of Privacy Practices both apply to the same information, the Notice of Privacy Practices controls.

Consumer health data

Some of what we collect on the Sites, including your browsing activity, may reveal that you or someone you care about is seeking treatment for a substance use or mental health condition. Washington, Nevada, and Connecticut law treat that kind of information as consumer health data, and most other states with privacy laws treat it as sensitive data. Our separate Consumer Health Data Privacy Notice, available at https://www.advancedrecoverysystems.com/consumer-health-data-privacy-notice/, explains how we handle it. Read this Policy and that Notice together.

2. How you agree to this Policy

When you first arrive at a Site, the cookie banner asks you to make a choice before you browse. By clicking “Accept All,” “Deny,” or “Customize,” you acknowledge this Policy and our Terms and Conditions. Clicking “Accept All” or turning on a category in the preference center is your consent to the cookies in that category. Nothing optional runs before that click, and you can change your mind at any time through the cookie icon in the corner of every page. Submitting a form, starting a chat, or calling a number displayed on a Site is your agreement that we may use the information you provide as this Policy describes.

3. Information we collect

Information you give us

• Contact and inquiry information. Name, telephone number, email address, state or ZIP code, and anything you choose to tell us about yourself or a loved one when you fill out a contact form, request a callback, use live chat, subscribe to a newsletter, or call us.
• Screening and quiz responses. Answers you provide to self assessment tools on the Sites, such as substance use or mental health screening quizzes. We treat these as sensitive.
• Insurance and admission information. Collected through the insurance verification tool and admission forms. This is PHI and is handled under the Notice of Privacy Practices, as explained in Section 1.
• The content of emails, chats, and voicemails you send us, and recordings of calls to our admissions lines where we tell you the call is recorded.
• Job applicant information. If you apply for a position through a Site, we collect the information in your application. We use it only to evaluate your application.

Information collected automatically

When you visit a Site, we and the service providers described in Section 5 collect some information automatically. Which information depends on the cookie choice you make.

• Always collected (necessary). Our hosting and security provider, Cloudflare, logs your IP address, browser type, device type, operating system, the pages you request, and the date and time of each request. Cloudflare sets two cookies (__cf_bm and cf_clearance) to tell people from bots and to keep the Site secure. Our consent management platform, Cookiez, sets one cookie (cookiez-user-consent) to remember your choice.
• Collected only if you accept Analytics. Google Analytics and Microsoft Clarity assign a persistent identifier to your browser and record the pages you view, how long you stay, where you came from, how you move through the Site, and general location derived from your IP address. Clarity also records how you interact with a page (scrolling, clicking, and mouse movement) so we can see where pages are confusing. Clarity is configured to mask text you type into forms. We also use a segmentation tool (nabSegmentation) that groups visitors by how they arrived at and use the Site so we can test page layouts. These tools use persistent identifiers. The data they collect is pseudonymous, which means it identifies your browser rather than your name, but it is still personal information under state law, and we treat it that way.
• Also collected if you accept Analytics. Invoca displays a unique telephone number to your browser session and, when you call it, links the call to the pages you viewed before calling. Invoca also records calls to those numbers so our admissions team can review them for quality and training.
• Advertising cookies. We do not currently run advertising or retargeting tags on the Sites. If we add one, it will appear in the Cookie Policy below and in the “Advertising” category of the preference center, and it will not run unless you turn it on.

Information from other sources

We may receive information about you from a family member or other person who contacts us on your behalf, from a referring provider or employer assistance program, or from a treatment referral service. If we receive information about you from someone else, we use it only to respond to the inquiry and to evaluate whether we can help, and we protect it as this Policy and, where applicable, the Notice of Privacy Practices require.

4. How we use information

We use the information described above to:

• respond to your inquiry, connect you with an admissions coordinator, and help you or your loved one find appropriate care, including at an affiliated facility in another state;
• operate, secure, and troubleshoot the Sites and detect fraud and abuse;
• understand how visitors use the Sites and improve their content, layout, and accessibility, but only with your consent to Analytics cookies;
• evaluate how visitors find us and which pages lead people to call, but only with your consent to Analytics cookies;
• send you information you asked for, such as a newsletter or a follow up to your inquiry, and let you know about services that may help you, which you can stop at any time;
• comply with law, respond to lawful requests, enforce our Terms and Conditions, and protect the rights and safety of our patients, staff, and the public.

We do not use your personal information to make automated decisions that have a legal or similarly significant effect on you, and we do not build advertising profiles of visitors. We do not use website data to train artificial intelligence models.

5. How we disclose information

We disclose personal information only in the following ways.

• ARS treatment subsidiaries and, where a referral is appropriate, affiliated facilities under common ownership, so that the right facility can respond to your inquiry. Affiliates must handle the information under this Policy.
• Service providers. Companies that work for us under written contracts that restrict them to providing the service: website hosting and security (Cloudflare), analytics (Google, Microsoft), call tracking and recording (Invoca), consent management (Cookiez), forms (Typeform), customer relationship management (Salesforce), and email (Microsoft). Our analytics contracts and settings prohibit these providers from using our visitors’ data for their own advertising. Google Signals, advertising features, and data sharing with other Google products are turned off in our Google Analytics accounts.
• Professional advisors and successors. Lawyers, auditors, insurers, and, as described in Section 12, a buyer or successor in a business transition.
• Legal and safety. Courts, regulators, and law enforcement when the law requires it or when disclosure is needed to protect someone from serious harm. Disclosures of PHI are limited further by the Notice of Privacy Practices and 42 C.F.R. Part 2.

We do not sell personal information. We do not disclose personal information to third parties for their own marketing. We do not share personal information for targeted advertising across other websites and apps, which California law calls “sharing” for cross context behavioral advertising. We have not done so in the preceding 12 months. If a resident of Oregon, Minnesota, Connecticut, or another state that provides the right asks us, we will provide the list of specific third parties that have received that person’s personal information.

6. Categories of personal information (California and other state disclosures)

The table below lists the categories of personal information we have collected in the preceding 12 months, the sources, and the categories of recipients to which we have disclosed them for a business purpose. We disclose each category only to the recipients shown, and only for the purposes in Section 4.