Privacy Policy

Lighthouse Behavioral Health Center ("we", "us", "our") is committed to protecting the privacy and security of personal information of residents, visitors, referral partners, and site users. This Privacy Policy describes how we collect, use, share, and protect personal information in compliance with laws including Maryland’s Data Privacy Act, HIPAA (if applicable), and relevant federal/state regulations.

1. Information We Collect

We collect information in these categories:

A. Information You Provide Directly

• Full name, date of birth, contact information (address, phone, email)
• Emergency contact, family members’ information
• Health information: medical history, treatment, medications, progress, behavioral health data
• Insurance or payment information
• Referral information (who referred, referral agency, etc.)
• Demographic information (gender, race, etc.), when voluntarily provided

B. Information Collected Automatically

• IP addresses, browser type, device type when using our website
• Cookies or similar tracking technologies (for site analytics, performance)
• Usage data: pages visited, time on page, clicks

2. How We Use Personal Information

We use personal information to:

• Provide, coordinate, and manage behavioral health services, residential care, support, treatment
• Process referrals, assessments, intake, discharge planning
• Administer medications, maintain medical records, measure outcomes
• Communicate with residents, families, referral sources, and providers
• Billing, insurance, and payment processing
• Quality assurance, compliance, audits, and safety oversight
• Improve our website, site user experience, and services
• Legal obligations and protection of rights

3. Legal Basis and Consent

For residents and clients, we obtain consent for collection of health information under HIPAA (if applicable) and Maryland regulations.

For website visitors: your use of the site constitutes consent to collecting usage data and cookies per this policy; you may opt out of non-essential cookies.

4. Sharing & Disclosure of Information

We may share information:

• With health care providers, clinicians, therapists, and other professionals involved in your care
• With our staff and contractors who are bound by confidentiality obligations
• With insurance providers, governmental agencies when required for payment or legal compliance
• With emergency services if needed for safety
• When required by law (e.g. court order, public health)

We do not sell or rent personal data for commercial marketing purposes.

5. Data Retention

We retain personal data as long as needed for the services you receive, for legal or regulatory obligations, for claims, or for quality improvement.

Health records retention will comply with Maryland law, HIPAA (if applicable), and our licensing requirements.

6. Security

• Administrative, physical, and technical safeguards in place to protect data confidentiality, integrity, and availability.
• Restricted access to sensitive health data by authorized individuals only.
• Regular audits, staff training, and secure data systems.

7. Residents’ Privacy Rights

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete health / demographic data
• Request deletion of data (where not required by law to retain)
• Restrict or limit certain uses of your data
• Receive information about data breaches, as required by law
• Withdraw consent where applicable

We will respond to these requests as required by Maryland law (typically within 30-45 days), after verifying identity.

8. Cookies, Tracking & Analytics

We use cookies or similar tools to monitor website performance, improve site features, and gather aggregated usage metrics.

Essential cookies are necessary for site functionality. Non-essential tracking cookies can be opted-out if your browser supports.

9. Children & Vulnerable Individuals

Our residential services are for adults. We do not intentionally collect personal data from minors under 18 for treatment without proper parental or guardian consent.

Special care is taken when handling health data of vulnerable individuals.

10. Changes to This Privacy Policy

We may update this policy occasionally. Significant changes will be posted on our website and/or communicated via email to affected individuals.

Continuing to use services or the website after changes implies acceptance.

11. Contact Information