Important: This privacy policy is a starter document and should be reviewed by qualified legal counsel to ensure full compliance with applicable federal and state laws, including HIPAA, 42 CFR Part 2, and Ohio privacy regulations. This document does not constitute legal advice.
Vital Health LLC ("Vital Health," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at vitalhcare.com or interact with our services.
1. Information We Collect
We collect information that you voluntarily provide to us when you use our website, including:
- Contact Form Submissions: Name, phone number, email address, preferred service, insurance information, and any message content you provide.
- Referral Form Submissions: Referring provider name, organization, client information (name, date of birth, phone), and referral details.
- Housing Application Submissions: Name, contact information, recovery history, and move-in preferences.
- Career Applications: Name, email, phone, resume, and cover letter content.
We also automatically collect certain technical information when you visit our website, including your IP address (anonymized), browser type, device information, pages visited, and time spent on pages. This data is collected through cookies and analytics tools as described in Section 5.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your inquiries and schedule appointments
- To process referrals from healthcare providers
- To evaluate housing applications
- To process employment applications
- To improve our website and services
- To send appointment reminders or follow-up communications (with your consent)
- To comply with legal obligations
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
3. How We Protect Your Information
We implement industry-standard security measures to protect your personal information, including:
- SSL/TLS encryption for all data transmitted through our website
- Secure, access-controlled storage of form submissions
- Regular security assessments and updates
- Staff training on data privacy and security practices
- Limited access to personal data on a need-to-know basis
4. HIPAA Notice & Protected Health Information
As a behavioral healthcare provider, Vital Health is subject to the Health Insurance Portability and Accountability Act (HIPAA) and 42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records). These federal regulations provide additional protections for your health information.
Important distinctions:
- Website forms are not clinical records. Information submitted through our website contact forms is used for scheduling and intake purposes only. It is not part of your medical record until you become a patient.
- Protected Health Information (PHI) created during the course of treatment is governed by our separate Notice of Privacy Practices, which you will receive when you become a patient.
- Substance use disorder records receive heightened protection under 42 CFR Part 2 and cannot be disclosed without your written consent, except in limited circumstances defined by law.
For a complete copy of our HIPAA Notice of Privacy Practices, please contact our office or request one at your first appointment.
5. Third-Party Services
We use the following third-party services to operate our website and manage inquiries:
- Dazos (CRM): Contact form submissions are securely transmitted to our customer relationship management system for intake coordination. Dazos maintains HIPAA-compliant data handling practices.
- Google Analytics 4: We use Google Analytics with IP anonymization enabled and advertising features disabled to understand how visitors use our website. No personally identifiable information is sent to Google.
- Meta (Facebook) Pixel: We use the Meta Pixel with Limited Data Use enabled to measure the effectiveness of our outreach. No names, emails, phone numbers, or health information are transmitted to Meta.
- Google Tag Manager: Used to manage analytics and marketing tags. No personal data is stored by GTM itself.
We configure all third-party analytics tools in a HIPAA-friendly manner: no protected health information, no personally identifiable information, and no clinical data is ever transmitted to advertising or analytics platforms.
6. Cookies and Tracking
Our website uses cookies — small text files stored on your device — to improve your browsing experience and help us understand how our site is used.
- Essential Cookies: Required for basic website functionality (session management, security).
- Analytics Cookies: Help us understand traffic patterns and improve our content. These do not identify you personally.
- Marketing Cookies: Used by Meta Pixel to measure ad effectiveness. No health or personal data is included.
You can control cookies through your browser settings. Disabling cookies may affect some website functionality but will not prevent you from contacting us by phone.
7. Your Rights
You have the following rights regarding your personal information:
- Access: You may request a copy of the personal information we hold about you.
- Correction: You may request that we correct inaccurate information.
- Deletion: You may request that we delete your personal information, subject to legal retention requirements.
- Opt-Out: You may opt out of marketing communications at any time.
- Restrict Processing: You may request that we limit how we use your data.
If you are a patient, you have additional rights under HIPAA, including the right to access your medical records, request amendments, and receive an accounting of disclosures. These rights are detailed in our Notice of Privacy Practices.
8. Contact Us About Privacy
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how your information is handled, please contact us:
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The "Last updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this page periodically.