(855) 408-5780Consumer Health Data Privacy Notice
Effective Date: September 14, 2026 | Last Updated: September 14, 2026
This Notice explains how Advanced Recovery Systems, LLC (“ARS,” “we,” or “us”) handles consumer health data collected through this website and any other ARS website that links to this Notice (each a “Site”). Sites operated by our affiliate Promises Behavioral Health, LLC also link to this Notice; on those Sites, “ARS,” “we,” and “us” mean Promises Behavioral Health, LLC. It is written to meet the Washington My Health My Data Act, Nevada Senate Bill 370 (Nevada Revised Statutes chapter 603A, as amended), and the consumer health data provisions of the Connecticut Data Privacy Act. We apply it to every visitor, not only to residents of those states. It supplements our Privacy Policy, available at https://www.advancedrecoverysystems.com/privacy-policy/. Where the two differ on consumer health data, this Notice controls.
1. What consumer health data is, and why this Site collects it
Consumer health data is personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. On a treatment website, that includes obvious things, like the answers you give to a screening quiz, and less obvious things, like the fact that a browser with a persistent identifier viewed a page about fentanyl withdrawal. We treat both as consumer health data.
Two categories of health information are outside this Notice because federal law already covers them more strictly. Protected health information under HIPAA, including everything you enter into the insurance verification tool or an admission form, is handled under our Notice of Privacy Practices at the link in the footer of the Site you are visiting. Substance use disorder treatment records are further protected by 42 C.F.R. Part 2. This Notice covers consumer health data that is not protected health information.
2. Categories of consumer health data we collect, and how we use it
| Category | What it includes | Why we collect it and how we use it |
|---|---|---|
| Health condition and treatment interest you tell us about | Information in a contact form, chat, callback request, or telephone call about a substance use or mental health condition, current use, prior treatment, medications, or the condition of a loved one | To respond to your inquiry, connect you with an admissions coordinator, and help you find appropriate care, including at an affiliated facility. Used for no other purpose. |
| Screening and quiz responses | Answers to self assessment tools on the Sites, such as alcohol or drug use screeners and mental health quizzes, and the result shown to you | To show you the result and, if you ask, to connect you with care. We do not store quiz answers with your identity unless you submit a form. |
| Website activity that reveals a health interest (with your consent) | Pages viewed, search terms entered on the Site, time on page, clicks and scrolling, referring site, general location from IP address, and the persistent browser identifier that ties them together. Collected only after you accept Analytics cookies. | To understand how visitors use the Site, improve its content and layout, and see which pages lead people to call. Never used for advertising. Never sold. |
| Call information (with your consent to Analytics) | The tracked telephone number you dialed, the pages you viewed before calling, the call's date, time, and length, and a recording of the call where we announce recording | To route your call, review admissions calls for quality and training, and measure which pages lead to calls. |
| Inferences | Which facility location or level of care appears to interest you, drawn from the information above | To route your inquiry to the right facility and improve the Site. |
We do not collect precise geolocation. We do not use geofencing around any health care facility. We do not collect biometric or genetic information on the Sites.
3. Sources
We collect consumer health data from you directly, when you fill out a form, take a quiz, chat with us, or call us; from your browser and device, through cookies and similar technologies after you consent; from a family member, friend, referring provider, or employee assistance program that contacts us on your behalf; and from our service providers, who process the data for us and report it back to us.
4. How we get your consent
- Consent to collect. Optional cookies are off when you arrive. Our cookie banner asks you to choose before you browse, and the analytics and call tracking tools that collect website activity run only after you click “Accept All” or turn on the category in “Customize.” The banner tells you that, because this is a treatment site, that activity may relate to your health. Closing the banner or scrolling past it is not consent.
- Requested service exception. When you submit a form, take a quiz, start a chat, use the insurance verification tool, or call us, we collect the information you provide because it is necessary to give you the service you asked for. The law permits that collection without separate consent. We still limit its use to that service.
- Separate consent to share. Before we share consumer health data with anyone other than the affiliates and service providers described in Section 5, we will ask for your separate, affirmative consent, and we will tell you what we want to share, with whom, and why. Consenting to cookies is not consent to share.
- Withdrawing consent. You can withdraw cookie consent at any time through the cookie icon in the corner of any page, and you can withdraw any other consent by contacting us as described in Section 7. Withdrawal stops future collection and sharing. It does not undo processing that already occurred, but you can ask us to delete what we hold.
5. Categories of consumer health data we share, and with whom
We share consumer health data only as follows. Each recipient is bound by contract to use it only for the purpose we disclose here.
| Category of recipient | Who | What we share and why |
|---|---|---|
| Affiliates | The ARS treatment subsidiaries and affiliated companies named in Section 6 | Health condition and treatment interest information from your inquiry, so the facility that can help you can respond. Affiliates must follow this Notice. |
| Website hosting and security providers | Cloudflare, Inc. | IP address, browser and device information, and the pages you request, to deliver the Site and block attacks. This is necessary to operate the Site. |
| Analytics providers (only with consent) | Google LLC (Google Analytics); Microsoft Corporation (Microsoft Clarity); the page testing tool the Site uses | Website activity with a persistent browser identifier. Our contracts and settings prohibit these providers from using the data for their own advertising or combining it with other data they hold about you. Clarity is set to mask text you type into forms. |
| Call tracking provider (only with consent) | Invoca, Inc. | The tracked number, pages viewed before calling, and the call recording, to connect and measure calls. |
| Consent management provider | Cookiez | Your cookie choice. Cookiez does not receive health data. |
| Form, chat, customer relationship, and email providers | Typeform (forms); Salesforce (customer relationship management); Microsoft (email) | The information you submit, so we can receive it, respond, and follow up. |
| Insurance verification provider | Buildship under a business associate agreement | Insurance and identifying information you enter, which is protected health information handled under the Notice of Privacy Practices. |
| Professional advisors and successors | Lawyers, auditors, insurers, and a buyer or successor in a merger, acquisition, or sale of assets | Only what is needed for the advice or transaction, under confidentiality obligations. A successor must honor this Notice. |
| Government and legal | Courts, regulators, and law enforcement | Only when the law requires it or to protect someone from serious harm, and, for substance use disorder information, only as 42 C.F.R. Part 2 permits. |
We do not sell consumer health data. We will not sell it without a valid written authorization that meets the requirements of Washington and Nevada law, which must be signed by you, identify the buyer and the data, state the purpose, tell you that you can revoke it, and expire within one year. We do not intend to seek such an authorization. We do not share consumer health data for targeted advertising, and we do not disclose it to data brokers.
6. Specific affiliates that may receive consumer health data
Washington law requires us to name the specific affiliates with which we share consumer health data. Web inquiries go first to our central admissions team, operated by Advanced Recovery Systems, LLC. We share your inquiry with Promises Behavioral Health, LLC, or with a treatment facility subsidiary of either company, only if we refer you to that facility. The facility subsidiaries are the treatment centers listed at https://www.advancedrecoverysystems.com/centers/.
We keep this list current. If we add an affiliate, we will update this Notice before sharing consumer health data with it.
7. Your rights and how to exercise them
You have the right to:
- Confirm and access. Learn whether we collect, share, or sell consumer health data about you; get a copy of it; and get a list of every third party and affiliate with which we shared it, with an email address or other online contact for each.
- Withdraw consent. Withdraw consent to our collection or sharing of your consumer health data at any time.
- Have your consumer health data deleted, including from our archives and backups on their normal cycle, and have us instruct our affiliates, processors, and other recipients to delete it too. We will keep information the law requires us to keep and will tell you if we do.
- If we decline a request, appeal by replying to our decision or by writing to us with “Health Data Appeal” in the subject line. We will answer within 45 days. If we deny the appeal, we will tell you how to contact the Washington, Nevada, or Connecticut Attorney General, as applicable.
To make a request, use any of these methods:
- Toll free telephone: [toll free number].
- Email: compliance@advancedrecoverysystems.com with “Consumer Health Data Request” in the subject line.
- Telephone: 754-300-3120, ext. 4019.
- Mail: Advanced Recovery Systems, LLC, Attention: Compliance and Privacy, 2200 N. Commerce Parkway, Suite 200, Weston, FL 33326.
We will respond within 45 days. If we need more time, we will tell you why and respond within a further 45 days. We must verify that a request comes from you, and we will use only the information reasonably needed to do that. We will not ask for your Social Security number or a payment card number. An authorized agent, a parent or guardian of a minor, or a person holding a power of attorney or court appointment may make a request on your behalf with proof of authority. We will not deny you service, charge you more, or treat you differently for exercising these rights.
Rights over protected health information, including insurance verification and admission information, are exercised under the Notice of Privacy Practices. If you send us a HIPAA request through the methods above, we will route it to our Privacy Officer.
8. How long we keep consumer health data
We keep consumer health data only as long as needed for the purpose we collected it. Inquiry records in Salesforce that do not lead to admission are kept for seven years after our last contact with you. Analytics data is kept for 14 months (Google Analytics) and 30 days for recordings and 9 months for click and aggregated data (Microsoft Clarity). Invoca call recordings are kept for seven years. Information that becomes part of a patient record is kept under our patient record retention schedule.
9. Changes to this Notice
We review this Notice at least once a year and whenever we add a tool, vendor, affiliate, or purpose that involves consumer health data. We will not collect, use, or share consumer health data for a new purpose, or with a new category of recipient, without first updating this Notice and obtaining your consent. The Effective Date at the top tells you when the current version took effect. Prior versions are available on request.
10. Contact us
Advanced Recovery Systems, LLC
Attention: Compliance and Privacy
2200 N. Commerce Parkway, Suite 200, Weston, FL 33326
Email: compliance@advancedrecoverysystems.com
Telephone: 754-300-3120, ext. 4019