The HopeQuest Ministry Group, Inc. (“HopeQuest,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the information entrusted to us. This page contains two notices:
This Website Privacy Policy explains how HopeQuest collects, uses, discloses, and protects personal information when you visit hopequestgroup.org or another website that links to this policy (collectively, the “Site”), contact us, request information, subscribe to communications, donate, register for an event, or purchase items through the Site.
This policy applies to personal information collected through the Site and related online interactions. It does not replace the Notice of Privacy Practices, which describes how HopeQuest’s covered health care programs use and disclose protected health information under HIPAA and, where applicable, substance use disorder patient records protected by 42 CFR Part 2.
If information is protected by HIPAA, Part 2, or another health-privacy law and this policy conflicts with the Notice of Privacy Practices or applicable law, the Notice of Privacy Practices and applicable law control.
Third-party websites and services linked from the Site, including payment, donation, social-media, and client-portal services, have their own privacy practices. This policy does not govern information you provide directly to those third parties.
Information you provide. Depending on how you interact with HopeQuest, we may collect:
Information collected automatically. When you use the Site, HopeQuest and its service providers may collect internet or electronic activity information, including your IP address, browser and device type, operating system, device identifiers, referring pages, pages viewed, links clicked, dates and times of access, general location inferred from your IP address, and information collected through cookies, pixels, tags, local storage, and similar technologies.
Information from other sources. We may receive information from service providers, referral sources, social-media platforms when you interact with us there, event partners, or people who contact us on your behalf, subject to applicable law.
We may use personal information to:
We may disclose personal information in the following circumstances:
HopeQuest does not sell personal information or consumer health data for money. HopeQuest does not use or disclose sensitive health information for targeted advertising.
Information you submit while asking about addiction treatment, mental-health services, counseling, recovery support, or related programs may qualify as consumer health data under certain state laws even when it is not protected health information under HIPAA.
Categories and sources. We may collect information about the health-related services you are researching or requesting, information you include in a form or message, and inferences that arise from your interaction with treatment-related pages. We collect this information directly from you, from a person contacting us on your behalf, from referral sources, and from service providers that support the interaction.
Purposes. We use consumer health data to respond to requests, assess or coordinate appropriate services and referrals, communicate with you, protect safety and security, comply with law, and carry out other purposes you authorize.
Disclosures. We may disclose consumer health data to vendors that process it for the purposes described above; to providers, referral sources, family members, or others at your direction or as authorized by law; and to regulators, law enforcement, courts, or other parties when legally required or permitted. We do not share consumer health data with affiliates for their independent use unless this policy is updated and any legally required consent is obtained.
Your rights. Depending on where you live and subject to legal exceptions, you may have the right to confirm whether we collect or share consumer health data; access, correct, or delete it; obtain a copy; withdraw consent; or appeal a decision concerning your request. To make a request, use the contact information under Contact Us. We may take reasonable steps to verify your identity and authority. If we deny an appeal, we will explain how to contact the appropriate regulator when required.
The Site may use essential technologies needed for security and functionality, preference technologies that remember choices, analytics technologies that help us understand Site use, and embedded or social-media technologies that allow third-party content or features to function. These technologies may collect the information described above.
You can adjust your browser settings and, where available, use the Site’s cookie-preference tool. Blocking some technologies may affect Site functionality. HopeQuest will honor browser-based opt-out preference signals when required by applicable law and supported by our systems.
We may use the contact information you provide to respond to you and communicate about services you requested. We may send promotional or fundraising emails where permitted by law. You may unsubscribe through the link in an email or contact us.
If HopeQuest offers text messaging, message frequency may vary and message and data rates may apply. You may opt out of nonessential texts by replying STOP and request help by replying HELP. Consent to receive marketing calls or texts is not a condition of receiving treatment or purchasing goods or services. HopeQuest will obtain any consent required for automated or prerecorded marketing communications where the telephone number is collected.
We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please do not send highly sensitive information through a general email address or form unless HopeQuest specifically instructs you that the channel is appropriate for that information. If you believe information you provided may have been compromised, contact us promptly.
We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to provide requested services, maintain business and transaction records, meet clinical, licensing, tax, accounting, contractual, and legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type and sensitivity of information, the context in which it was collected, and applicable law. We may retain aggregated or de-identified information that does not reasonably identify you.
The Site is not directed to children under 13, and HopeQuest does not knowingly collect personal information online directly from children under 13 without legally valid authorization. If you believe a child under 13 has provided personal information through the Site, contact us so we can review and take appropriate action. This section does not limit information a parent or legal guardian may provide when seeking lawful services or information.
You may ask to access, correct, or delete personal information you provided through the Site, or to withdraw consent, by contacting us. We will respond as required by applicable law. We may need to verify your identity or authority, and some information may be exempt from a request or retained when required by law. Requests concerning medical records or protected health information are governed by the Notice of Privacy Practices below.
We may update this policy to reflect changes in our practices, technology, services, or legal obligations. We will post the revised policy and update the effective date. If a change is material, we will provide additional notice or obtain consent when required by law.
For privacy questions or requests, contact:
Privacy Officer
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This notice applies to the health care programs and components of The HopeQuest Ministry Group, Inc. that are subject to HIPAA and, where applicable, to substance use disorder patient records protected by 42 CFR Part 2. In this notice, “we,” “us,” and “our” mean those covered programs and components.
When it comes to your health information, you have certain rights. This section explains those rights and some of our responsibilities.
You may ask to see or obtain an electronic or paper copy of your medical record and other health information we maintain about you. Ask us how to make the request. We generally will provide a copy or summary within 30 days and may charge a reasonable, cost-based fee. In limited circumstances permitted by law, we may deny access to some information and will explain your review rights.
You may ask us to correct health information you believe is incorrect or incomplete. We may deny the request, but we will explain why in writing, generally within 60 days, and describe any right to submit a statement of disagreement.
You may ask us to contact you in a specific way or at a different address. We will accommodate reasonable requests. Tell us if a particular communication method could place you at risk.
You may ask us not to use or share certain health information for treatment, payment, or health care operations. We generally are not required to agree. If we agree, we will comply except when the information is needed for emergency treatment or another exception applies. If you pay for a service in full out of pocket, you may ask us not to disclose information about that service to your health plan for payment or operations, and we will agree unless disclosure is required by law. Additional rights and restrictions may apply to Part 2 records.
You may ask for an accounting of certain disclosures of your health information made during the six years before your request. The accounting does not include certain disclosures, such as many disclosures for treatment, payment, or health care operations or disclosures you authorized. We will provide one accounting in a 12-month period without charge and may charge a reasonable, cost-based fee for additional accountings. Rights concerning Part 2 records apply to the extent and on the compliance date required by law.
You may ask for a paper copy at any time, even if you agreed to receive it electronically. We will provide it promptly.
If a person has legal authority to act as your personal representative, such as under a medical power of attorney or guardianship, that person may exercise your rights. We will verify the person’s authority before acting.
You may complain to HopeQuest if you believe your privacy rights were violated by contacting the Privacy Officer listed at the end of this notice. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting hhs.gov/hipaa/filing-a-complaint, calling 1-877-696-6775, or writing to 200 Independence Avenue, S.W., Washington, DC 20201. Complaints concerning Part 2 may also be filed with the Secretary of HHS. We will not retaliate against you for filing a complaint.
For certain health information, you may tell us your choices about what we share. If you have a clear preference, tell us what you want us to do.
You may tell us to share relevant information with family, close friends, or others involved in your care or payment for your care, or with disaster-relief organizations. If you cannot tell us your preference, we may share information when permitted by law if we believe it is in your best interest or is needed to lessen a serious and imminent threat. Part 2 and Georgia law may require your written consent in circumstances where HIPAA alone would permit disclosure.
We will obtain your written authorization before using or disclosing your information for marketing, selling your information, or most uses and disclosures of psychotherapy notes, unless a legal exception applies. We will obtain separate written consent for uses or disclosures of SUD counseling notes when Part 2 requires it. Other uses and disclosures not described in this notice will be made only with your written authorization. You may revoke an authorization in writing, except to the extent we have already relied on it.
HopeQuest may contact you to raise funds as permitted by law, and you may tell us not to contact you again for fundraising. Before using Part 2 records for fundraising, we will provide clear and conspicuous notice and an opportunity to opt out as required by law. To opt out, contact the Privacy Officer. Your treatment and payment will not be affected by your choice.
We may use and share health information to provide, coordinate, or manage your care. For example, members of your treatment team may share information with one another to coordinate counseling, medical services, medications, discharge planning, or referrals. Part 2 records are used and disclosed only as permitted by Part 2, including pursuant to a valid consent when required.
We may use and share health information to bill and obtain payment from you, a health plan, or another responsible party. For example, we may provide information to an insurer to determine eligibility, obtain authorization, or secure payment. Part 2 restrictions and your consent choices may apply.
We may use and share health information to run our programs, improve care, train and supervise staff, conduct quality assessment, perform audits and compliance activities, manage grievances, and carry out other lawful operations. We may disclose information to business associates and qualified service organizations that are contractually required to safeguard it.
We may contact you about appointments and about treatment alternatives or health-related services that may interest you, subject to your communication preferences and applicable confidentiality law.
We may use or disclose health information for the following purposes only when the legal requirements for the disclosure are met. More protective federal or state law controls.
To the extent we maintain substance use disorder patient records protected by 42 CFR Part 2, we generally must obtain your consent before using or disclosing those records, except as Part 2 permits or requires. A consent may, when legally valid, authorize future uses and disclosures for treatment, payment, and health care operations. Recipients that are HIPAA covered entities or business associates may redisclose records received under such a consent as permitted by HIPAA, but Part 2 continues to impose special protections.
Part 2 records, or testimony describing their contents, may not be used or disclosed in a civil, criminal, administrative, or legislative investigation or proceeding against you unless you provide specific written consent or a court issues an order and any required subpoena in accordance with Part 2. A consent for use or disclosure in a legal proceeding against you cannot be combined with consent for another purpose. We will not use or disclose SUD counseling notes based on a general treatment, payment, and operations consent when separate consent is required.
Georgia law and professional licensing rules may provide additional protection for mental-health, counseling, and substance use disorder records and communications. When another applicable law is more protective than HIPAA, we will follow the more protective law. This may mean that we need your written permission before a disclosure that HIPAA alone would permit.
We may change this notice and make the revised terms effective for health information we already maintain as well as information we receive in the future. The current notice will be available upon request, at our facilities, and on this website.
For questions, requests, or complaints, contact:
Privacy Officer