Privacy Statement

Please Read Carefully Before Using This Website

Privacy at HopeQuest

The HopeQuest Ministry Group, Inc. (“HopeQuest,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the information entrusted to us. This page contains two notices:

 

  • Website Privacy Policy, which explains how we collect, use, disclose, and protect personal information when you interact with us online.
  • Notice of Privacy Practices, which explains how HopeQuest’s covered health care programs use and disclose protected health information and describes your rights under the Health Insurance Portability and Accountability Act (HIPAA) and, where applicable, 42 CFR Part 2.

 


Website Privacy Policy

This Website Privacy Policy explains how HopeQuest collects, uses, discloses, and protects personal information when you visit hopequestgroup.org or another website that links to this policy (collectively, the “Site”), contact us, request information, subscribe to communications, donate, register for an event, or purchase items through the Site.

1. Scope and Relationship to Health-Information Notices

This policy applies to personal information collected through the Site and related online interactions. It does not replace the Notice of Privacy Practices, which describes how HopeQuest’s covered health care programs use and disclose protected health information under HIPAA and, where applicable, substance use disorder patient records protected by 42 CFR Part 2.

 

If information is protected by HIPAA, Part 2, or another health-privacy law and this policy conflicts with the Notice of Privacy Practices or applicable law, the Notice of Privacy Practices and applicable law control.

 

Third-party websites and services linked from the Site, including payment, donation, social-media, and client-portal services, have their own privacy practices. This policy does not govern information you provide directly to those third parties.

 

2. Information We Collect

Information you provide. Depending on how you interact with HopeQuest, we may collect:

 

  • Identifiers and contact details, such as your name, email address, telephone number, and mailing address.
  • Information in inquiries, admissions or referral requests, applications, assessments, messages, prayer requests, event registrations, surveys, or other forms you choose to submit. This information may reveal health concerns, treatment interests, family relationships, or other sensitive details.
  • Transaction information related to donations or store purchases, such as the amount, date, items purchased, billing and shipping details, and transaction status. Payment-card information is generally processed by a third-party payment provider rather than stored by HopeQuest.
  • Communication preferences, newsletter subscriptions, event interests, and records of communications with us.
  • Information you provide about another person. Please provide another person’s information only if you are authorized to do so.

 

Information collected automatically. When you use the Site, HopeQuest and its service providers may collect internet or electronic activity information, including your IP address, browser and device type, operating system, device identifiers, referring pages, pages viewed, links clicked, dates and times of access, general location inferred from your IP address, and information collected through cookies, pixels, tags, local storage, and similar technologies.

 

Information from other sources. We may receive information from service providers, referral sources, social-media platforms when you interact with us there, event partners, or people who contact us on your behalf, subject to applicable law.

 

3. How We Use Information

We may use personal information to:

 

  • Respond to inquiries and provide admissions, referral, program, event, donation, store, and support services.
  • Evaluate program interest or eligibility and coordinate next steps when you ask us to do so.
  • Process and document purchases, donations, registrations, and other transactions.
  • Send newsletters, fundraising messages, or marketing communications where permitted by law and consistent with your choices.
  • Operate, secure, troubleshoot, measure, and improve the Site and our services.
  • Detect and prevent fraud, misuse, security incidents, and other harmful activity.
  • Comply with legal obligations, enforce our terms, protect rights and safety, and establish or defend legal claims.
  • Create aggregated or de-identified information that is not reasonably capable of identifying you and use it for lawful purposes.

 

4. How We Disclose Information

We may disclose personal information in the following circumstances:

 

  • Service providers. We may provide information to vendors that perform services for us, such as website hosting, cybersecurity, analytics, communications, admissions or relationship management, data storage, event registration, payment processing, e-commerce, shipping, and donation processing. They may use information only as permitted by their agreements with us and applicable law.
  • Care and referral coordination. At your request or with your permission, and subject to applicable health-privacy law, we may share information with providers, referral sources, family members, or others involved in helping you obtain services.
  • Legal, safety, and compliance purposes. We may disclose information when we reasonably believe disclosure is required or permitted by law, legal process, licensing or regulatory obligations, or is necessary to protect the rights, safety, or security of HopeQuest, you, or others.
  • Organizational changes. Information may be reviewed or transferred in connection with a merger, reorganization, financing, sale of assets, or similar transaction, subject to applicable law and appropriate safeguards.
  • At your direction. We may disclose information when you ask or authorize us to do so.

 

HopeQuest does not sell personal information or consumer health data for money. HopeQuest does not use or disclose sensitive health information for targeted advertising.

 

5. Consumer Health Data

Information you submit while asking about addiction treatment, mental-health services, counseling, recovery support, or related programs may qualify as consumer health data under certain state laws even when it is not protected health information under HIPAA.

 

Categories and sources. We may collect information about the health-related services you are researching or requesting, information you include in a form or message, and inferences that arise from your interaction with treatment-related pages. We collect this information directly from you, from a person contacting us on your behalf, from referral sources, and from service providers that support the interaction.

 

Purposes. We use consumer health data to respond to requests, assess or coordinate appropriate services and referrals, communicate with you, protect safety and security, comply with law, and carry out other purposes you authorize.

 

Disclosures. We may disclose consumer health data to vendors that process it for the purposes described above; to providers, referral sources, family members, or others at your direction or as authorized by law; and to regulators, law enforcement, courts, or other parties when legally required or permitted. We do not share consumer health data with affiliates for their independent use unless this policy is updated and any legally required consent is obtained.

 

Your rights. Depending on where you live and subject to legal exceptions, you may have the right to confirm whether we collect or share consumer health data; access, correct, or delete it; obtain a copy; withdraw consent; or appeal a decision concerning your request. To make a request, use the contact information under Contact Us. We may take reasonable steps to verify your identity and authority. If we deny an appeal, we will explain how to contact the appropriate regulator when required.

 

6. Cookies and Similar Technologies

The Site may use essential technologies needed for security and functionality, preference technologies that remember choices, analytics technologies that help us understand Site use, and embedded or social-media technologies that allow third-party content or features to function. These technologies may collect the information described above.

 

You can adjust your browser settings and, where available, use the Site’s cookie-preference tool. Blocking some technologies may affect Site functionality. HopeQuest will honor browser-based opt-out preference signals when required by applicable law and supported by our systems.

 

7. Email, Calls, and Text Messages

We may use the contact information you provide to respond to you and communicate about services you requested. We may send promotional or fundraising emails where permitted by law. You may unsubscribe through the link in an email or contact us.

 

If HopeQuest offers text messaging, message frequency may vary and message and data rates may apply. You may opt out of nonessential texts by replying STOP and request help by replying HELP. Consent to receive marketing calls or texts is not a condition of receiving treatment or purchasing goods or services. HopeQuest will obtain any consent required for automated or prerecorded marketing communications where the telephone number is collected.

 

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please do not send highly sensitive information through a general email address or form unless HopeQuest specifically instructs you that the channel is appropriate for that information. If you believe information you provided may have been compromised, contact us promptly.

 

9. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to provide requested services, maintain business and transaction records, meet clinical, licensing, tax, accounting, contractual, and legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type and sensitivity of information, the context in which it was collected, and applicable law. We may retain aggregated or de-identified information that does not reasonably identify you.

 

10. Children’s Privacy

The Site is not directed to children under 13, and HopeQuest does not knowingly collect personal information online directly from children under 13 without legally valid authorization. If you believe a child under 13 has provided personal information through the Site, contact us so we can review and take appropriate action. This section does not limit information a parent or legal guardian may provide when seeking lawful services or information.

 

11. Your Choices and Requests

You may ask to access, correct, or delete personal information you provided through the Site, or to withdraw consent, by contacting us. We will respond as required by applicable law. We may need to verify your identity or authority, and some information may be exempt from a request or retained when required by law. Requests concerning medical records or protected health information are governed by the Notice of Privacy Practices below.

 

12. Changes to This Policy

We may update this policy to reflect changes in our practices, technology, services, or legal obligations. We will post the revised policy and update the effective date. If a change is material, we will provide additional notice or obtain consent when required by law.

 

13. Contact Us

For privacy questions or requests, contact:

 

Privacy Officer
The HopeQuest Ministry Group, Inc.
PO Box 2699
Woodstock, GA 30188
Phone: 678-391-5950
Email: info@hopequestgroup.org
 

Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

 

This notice applies to the health care programs and components of The HopeQuest Ministry Group, Inc. that are subject to HIPAA and, where applicable, to substance use disorder patient records protected by 42 CFR Part 2. In this notice, “we,” “us,” and “our” mean those covered programs and components.

 

Your Rights

When it comes to your health information, you have certain rights. This section explains those rights and some of our responsibilities.

 

Get an Electronic or Paper Copy of Your Record

You may ask to see or obtain an electronic or paper copy of your medical record and other health information we maintain about you. Ask us how to make the request. We generally will provide a copy or summary within 30 days and may charge a reasonable, cost-based fee. In limited circumstances permitted by law, we may deny access to some information and will explain your review rights.

 

Ask Us to Correct Your Record

You may ask us to correct health information you believe is incorrect or incomplete. We may deny the request, but we will explain why in writing, generally within 60 days, and describe any right to submit a statement of disagreement.

 

Request Confidential Communications

You may ask us to contact you in a specific way or at a different address. We will accommodate reasonable requests. Tell us if a particular communication method could place you at risk.

 

Ask Us to Limit What We Use or Share

You may ask us not to use or share certain health information for treatment, payment, or health care operations. We generally are not required to agree. If we agree, we will comply except when the information is needed for emergency treatment or another exception applies. If you pay for a service in full out of pocket, you may ask us not to disclose information about that service to your health plan for payment or operations, and we will agree unless disclosure is required by law. Additional rights and restrictions may apply to Part 2 records.

 

Get a List of Disclosures

You may ask for an accounting of certain disclosures of your health information made during the six years before your request. The accounting does not include certain disclosures, such as many disclosures for treatment, payment, or health care operations or disclosures you authorized. We will provide one accounting in a 12-month period without charge and may charge a reasonable, cost-based fee for additional accountings. Rights concerning Part 2 records apply to the extent and on the compliance date required by law.

 

Get a Copy of This Notice

You may ask for a paper copy at any time, even if you agreed to receive it electronically. We will provide it promptly.

 

Choose Someone to Act for You

If a person has legal authority to act as your personal representative, such as under a medical power of attorney or guardianship, that person may exercise your rights. We will verify the person’s authority before acting.

 

File a Complaint

You may complain to HopeQuest if you believe your privacy rights were violated by contacting the Privacy Officer listed at the end of this notice. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting hhs.gov/hipaa/filing-a-complaint, calling 1-877-696-6775, or writing to 200 Independence Avenue, S.W., Washington, DC 20201. Complaints concerning Part 2 may also be filed with the Secretary of HHS. We will not retaliate against you for filing a complaint.

 

Your Choices

For certain health information, you may tell us your choices about what we share. If you have a clear preference, tell us what you want us to do.

 

Family, Friends, and Disaster Relief

You may tell us to share relevant information with family, close friends, or others involved in your care or payment for your care, or with disaster-relief organizations. If you cannot tell us your preference, we may share information when permitted by law if we believe it is in your best interest or is needed to lessen a serious and imminent threat. Part 2 and Georgia law may require your written consent in circumstances where HIPAA alone would permit disclosure.

 

Uses That Generally Require Written Permission

We will obtain your written authorization before using or disclosing your information for marketing, selling your information, or most uses and disclosures of psychotherapy notes, unless a legal exception applies. We will obtain separate written consent for uses or disclosures of SUD counseling notes when Part 2 requires it. Other uses and disclosures not described in this notice will be made only with your written authorization. You may revoke an authorization in writing, except to the extent we have already relied on it.

 

Fundraising

HopeQuest may contact you to raise funds as permitted by law, and you may tell us not to contact you again for fundraising. Before using Part 2 records for fundraising, we will provide clear and conspicuous notice and an opportunity to opt out as required by law. To opt out, contact the Privacy Officer. Your treatment and payment will not be affected by your choice.

 

How We Typically Use and Disclose Health Information

Treatment

We may use and share health information to provide, coordinate, or manage your care. For example, members of your treatment team may share information with one another to coordinate counseling, medical services, medications, discharge planning, or referrals. Part 2 records are used and disclosed only as permitted by Part 2, including pursuant to a valid consent when required.

 

Payment

We may use and share health information to bill and obtain payment from you, a health plan, or another responsible party. For example, we may provide information to an insurer to determine eligibility, obtain authorization, or secure payment. Part 2 restrictions and your consent choices may apply.

 

Health Care Operations

We may use and share health information to run our programs, improve care, train and supervise staff, conduct quality assessment, perform audits and compliance activities, manage grievances, and carry out other lawful operations. We may disclose information to business associates and qualified service organizations that are contractually required to safeguard it.

 

Appointment Reminders and Treatment Alternatives

We may contact you about appointments and about treatment alternatives or health-related services that may interest you, subject to your communication preferences and applicable confidentiality law.

 

Other Uses and Disclosures Permitted or Required by Law

We may use or disclose health information for the following purposes only when the legal requirements for the disclosure are met. More protective federal or state law controls.

 

  • Public health and safety activities, such as preventing disease, reporting adverse events, reporting suspected abuse or neglect, or preventing or reducing a serious threat to health or safety.
  • Health oversight activities authorized by law, such as audits, inspections, investigations, licensing, accreditation, and compliance reviews.
  • Research that has been approved or otherwise satisfies applicable legal requirements, or use of de-identified information.
  • Compliance with federal or state law, including disclosure to HHS for an investigation or compliance review.
  • Medical examiners, coroners, funeral directors, and organ procurement organizations when applicable and permitted by law.
  • Workers’ compensation, special government functions, and law-enforcement requests when the request and disclosure satisfy applicable law.
  • Judicial and administrative proceedings when authorized by a valid court or administrative order or other lawful process and all special protections are met.
  • Medical emergencies and other circumstances expressly permitted by HIPAA, Part 2, and applicable Georgia law.

 

Special Protection for Substance Use Disorder Records

To the extent we maintain substance use disorder patient records protected by 42 CFR Part 2, we generally must obtain your consent before using or disclosing those records, except as Part 2 permits or requires. A consent may, when legally valid, authorize future uses and disclosures for treatment, payment, and health care operations. Recipients that are HIPAA covered entities or business associates may redisclose records received under such a consent as permitted by HIPAA, but Part 2 continues to impose special protections.

 

Part 2 records, or testimony describing their contents, may not be used or disclosed in a civil, criminal, administrative, or legislative investigation or proceeding against you unless you provide specific written consent or a court issues an order and any required subpoena in accordance with Part 2. A consent for use or disclosure in a legal proceeding against you cannot be combined with consent for another purpose. We will not use or disclose SUD counseling notes based on a general treatment, payment, and operations consent when separate consent is required.

 

More Protective Laws

Georgia law and professional licensing rules may provide additional protection for mental-health, counseling, and substance use disorder records and communications. When another applicable law is more protective than HIPAA, we will follow the more protective law. This may mean that we need your written permission before a disclosure that HIPAA alone would permit.

 

Our Responsibilities

  • We are required by law to maintain the privacy and security of protected health information and Part 2 records.
  • We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information, as required by law.
  • We must follow the duties and privacy practices described in the notice currently in effect and provide you with a copy.
  • We will not use or share your information other than as described in this notice unless you authorize us in writing or law otherwise permits or requires it. You may revoke an authorization in writing, subject to actions already taken in reliance on it.
  • We will not retaliate against you for exercising a privacy right or filing a complaint.

 

Changes to This Notice

We may change this notice and make the revised terms effective for health information we already maintain as well as information we receive in the future. The current notice will be available upon request, at our facilities, and on this website.

 

Privacy Contact

For questions, requests, or complaints, contact:

 

Privacy Officer
The HopeQuest Ministry Group, Inc.
PO Box 2699
Woodstock, GA 30188
Phone: 678-391-5950
Email: info@hopequestgroup.org