Skip to main content

Double Peak Recovery

Menu

Privacy Policy

Notice of Privacy Practices & Website Privacy Policy

Double Peak Recovery, LLC · doublepeakrecovery.com

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

THIS NOTICE ALSO DESCRIBES HOW SUBSTANCE USE DISORDER TREATMENT RECORDS PROTECTED BY FEDERAL LAW (42 U.S.C. § 290dd-2 AND 42 C.F.R. PART 2) MAY BE USED AND DISCLOSED.

Effective date: August 11, 2026 · Last updated: August 11, 2026

Contents

1. Who this notice applies to

Double Peak Recovery, LLC (“Double Peak Recovery,” “we,” “us,” or “our”) is a licensed provider of detoxification, residential addiction treatment, medication-assisted treatment, and co-occurring mental health services, licensed by the California Department of Health Care Services (License #370261AP), operating in San Diego County, California.

We are a covered entity under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and a Part 2 program under 42 C.F.R. Part 2. We are required by law to maintain the privacy of your protected health information (“PHI”), to provide you with this notice of our legal duties and privacy practices with respect to your PHI, and to notify you following a breach of unsecured PHI.

This notice applies to all records of your care generated or maintained by Double Peak Recovery, whether created by our staff, contracted clinicians, or business associates acting on our behalf. It applies at every location we operate.

2. Special federal protection for substance use disorder records

The confidentiality of substance use disorder (“SUD”) treatment records created by Double Peak Recovery is protected by federal law and regulations at 42 U.S.C. § 290dd-2 and 42 C.F.R. Part 2. These protections are, in several respects, stricter than HIPAA. Where federal Part 2 rules or California law provide greater protection than HIPAA, we follow the stricter standard.

Generally, we may not tell a person outside our program that you attend the program, or disclose any information identifying you as having or having had a substance use disorder, unless:

  • You consent in writing (which, in electronic form, may include an electronic signature);
  • The disclosure is permitted by a court order that meets the requirements of 42 C.F.R. Part 2; or
  • The disclosure is made to medical personnel in a medical emergency, to qualified personnel for research, audit, or program evaluation, or otherwise as specifically permitted by 42 C.F.R. Part 2.

Single consent. Federal law permits you to provide a single written consent authorizing us to use and disclose your Part 2 records for all future purposes of treatment, payment, and health care operations, until you revoke that consent in writing. You are not required to give a single consent, and you may instead limit your consent to specific recipients and purposes. We will not condition your treatment on providing a broader consent than is necessary.

Redisclosure by recipients. If we disclose your Part 2 records based on your written consent to a HIPAA covered entity or business associate, that recipient may in some circumstances further use and disclose those records to the extent HIPAA permits, without obtaining your additional written consent. Once information is disclosed to a recipient who is not covered by HIPAA or Part 2, it may no longer be protected by these rules.

Violation is a federal offense. Violation of the federal law and regulations governing SUD records by a program is a crime. Suspected violations may be reported to the United States Attorney for the judicial district in which the violation occurs, or to the Secretary of the U.S. Department of Health and Human Services.

Not a basis for criminal charges. Federal law and regulations do not protect any information about suspected child abuse or neglect from being reported under state law to appropriate state or local authorities.

3. How we may use and disclose your health information

Treatment

We use and disclose your health information to provide, coordinate, and manage your care — for example, so that our physicians, nurses, therapists, case managers, and other members of your treatment team can develop and carry out your treatment plan, and so that a referring or receiving provider, a laboratory, or a pharmacy can serve you. Because we are a Part 2 program, we obtain your written consent before disclosing your SUD records to outside treatment providers, except where Part 2 permits disclosure without consent (for example, a medical emergency).

Payment

We use and disclose your health information to bill and collect payment for the services we provide — for example, to verify insurance eligibility and benefits, obtain prior authorization, submit claims to your health plan, and determine your financial responsibility. We obtain your written consent before disclosing SUD records for payment purposes.

Health care operations

We use and disclose your health information for activities necessary to run our program and ensure quality care — for example, quality assessment and improvement, clinical supervision, staff training and credentialing, licensing and accreditation surveys, internal audits, compliance activities, and general administrative functions. We obtain your written consent before disclosing SUD records for operations purposes, except where Part 2 permits disclosure without consent.

Business associates and qualified service organizations

We contract with outside vendors — such as electronic health record providers, billing companies, laboratories, and IT services — who may need access to your information to perform services for us.

We require each of these vendors to sign a HIPAA business associate agreement and, where they will handle Part 2 records, a qualified service organization agreement obligating them to protect your information under the same standards that apply to us.

Appointment reminders, treatment alternatives, and health-related services

We may contact you to remind you of an appointment, to follow up after discharge, or to tell you about treatment alternatives, alumni services, or other health-related benefits and services that may be of interest to you. We will contact you only through the channels and at the addresses and numbers you have authorized, and we will not identify Double Peak Recovery as a substance use disorder program to anyone other than you without your consent.

4. Disclosures we may make without your written consent

Federal and state law permit or require us to use or disclose your health information without your written consent or authorization in a limited set of circumstances, subject to the stricter conditions of 42 C.F.R. Part 2 where those records are involved:

  • Medical emergencies. To medical personnel to the extent necessary to treat a condition that poses an immediate threat to your health and requires immediate medical intervention.
  • Court order. Pursuant to a court order that meets the specific requirements of 42 C.F.R. Part 2 (a subpoena alone is not sufficient to compel disclosure of Part 2 records).
  • Research, audit, and program evaluation. To qualified personnel conducting scientific research, financial audits, or program evaluation, who may not identify you directly or indirectly in any report or otherwise disclose your identity.
  • Suspected child abuse or neglect. To appropriate state or local authorities as required by California mandatory reporting law.
  • Crimes on our premises or against our staff. To law enforcement, limited to the circumstances of the incident, your name and address, and your last known whereabouts.
  • Cause of death. To authorized personnel under applicable state law governing the reporting of cause of death, and to coroners and medical examiners.
  • Serious threat to health or safety. To prevent or lessen a serious and imminent threat to your health or safety or that of another person, consistent with applicable law and standards of ethical conduct.
  • Public health activities and health oversight. To public health authorities and health oversight agencies for activities authorized by law, such as communicable disease reporting, adverse event reporting, and licensure and certification oversight.
  • As required by law. Where a federal, state, or local law requires the use or disclosure and we may not lawfully assert a Part 2 protection.
  • Workers’ compensation, military, national security, correctional institutions, and organ donation — in the limited circumstances authorized by HIPAA, and only where Part 2 also permits the disclosure.
  • De-identified information and limited data sets, in accordance with HIPAA and Part 2 standards.

5. Uses and disclosures that require your written authorization

Uses and disclosures not described in this notice will be made only with your written authorization. In particular, we will obtain your written authorization before:

  • Using or disclosing psychotherapy notes, except in the narrow circumstances HIPAA permits;
  • Using or disclosing your information for marketing purposes, including any communication for which we receive payment from a third party;
  • Engaging in any sale of your protected health information;
  • Using or disclosing your information in any testimonial, photograph, video, review, or advertisement, including on our website or social media accounts;
  • Disclosing your information to family members, employers, courts, probation officers, referral sources, or any other third party not otherwise permitted above.

You may revoke an authorization or consent at any time, in writing, except to the extent we have already acted in reliance on it. Revoking a consent will not affect the lawfulness of disclosures we made while the consent was in effect. To revoke, contact our Privacy Officer using the information in Section 12.

6. Prohibited uses and disclosures

Federal law specifically prohibits certain uses of your information. We will not, without your specific written consent or an appropriate court order:

  • Use or disclose your Part 2 records to initiate or substantiate any criminal charge or investigation against you;
  • Use or disclose your Part 2 records as evidence in any civil, criminal, administrative, or legislative proceeding conducted by any federal, state, or local authority against you;
  • Use or disclose your health information for purposes of a criminal, civil, or administrative investigation or proceeding against any person for seeking, obtaining, providing, or facilitating lawful reproductive health care. Where such a request is made, we will require a valid attestation before considering any disclosure, as required by HIPAA;
  • Use or disclose your health information for marketing or the sale of information without authorization, as described above.

Redisclosure warning. Information disclosed to a person or entity that is not a HIPAA covered entity, business associate, or Part 2 program may be redisclosed by that recipient and may no longer be protected by federal privacy law.

7. Your rights regarding your health information

You have the following rights with respect to the health information we maintain about you. To exercise any of them, submit a written request to our Privacy Officer using the contact information in Section 12.

  • Right to inspect and obtain a copy. You may inspect and receive a copy of your health information, including an electronic copy of information we maintain electronically, and you may direct us to send a copy to a person or entity you designate. We will respond within 15 days as required by California law. We may charge a reasonable, cost-based fee. In limited circumstances we may deny a request, and certain denials are subject to review.
  • Right to request an amendment. If you believe information in your record is incorrect or incomplete, you may request that we amend it. We may deny your request in certain circumstances, and if we do, we will explain why in writing and you may submit a statement of disagreement to be included in your record.
  • Right to an accounting of disclosures. You may request a list of certain disclosures we have made of your health information, including disclosures of Part 2 records, generally for the six years prior to your request. The first accounting in any 12-month period is free.
  • Right to request restrictions. You may ask us to limit how we use or disclose your information for treatment, payment, or health care operations, or to a family member or other person involved in your care. We are not required to agree to every request, but we must agree to a request to withhold information from your health plan if you pay for the service in full, out of pocket, and the disclosure is not otherwise required by law.
  • Right to confidential communications. You may ask us to communicate with you in a specific way or at a specific location — for example, only by mobile phone, or only at a particular address. We will accommodate reasonable requests and will not ask you why.
  • Right to opt out of fundraising communications. If we ever contact you for fundraising purposes, you may elect not to receive further fundraising communications, and your election will not affect your treatment.
  • Right to a paper copy of this notice. You may request a paper copy of this notice at any time, even if you have agreed to receive it electronically.
  • Right to be notified of a breach. We will notify you if a breach occurs that may have compromised the privacy or security of your unsecured health information.
  • Right to revoke consent. You may revoke a written consent or authorization at any time, as described in Section 5.
  • Right to discuss this notice. You may ask questions about this notice and discuss any of its terms with our Privacy Officer at any time.

8. Our legal duties

  • We are required by law to maintain the privacy and security of your protected health information.
  • We are required to provide you with this notice of our legal duties and privacy practices with respect to your health information, and to abide by the terms of the notice currently in effect.
  • We are required to notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
  • We must obtain your written consent or authorization for uses and disclosures not described in this notice, and we must honor a revocation of that consent to the extent we have not already acted on it.

Changes to this notice. We reserve the right to change this notice and to make the revised notice effective for health information we already have as well as information we receive in the future. The current notice will always be posted at doublepeakrecovery.com/privacy-policy with its effective date, will be posted in a clear and prominent location at our facilities, and will be available in paper form upon request.

9. How to file a complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the federal government. You will not be retaliated against, penalized, or denied services in any way for filing a complaint.

With Double Peak Recovery:

Privacy Officer, Double Peak Recovery, LLC
422 S Spruce St, Escondido, CA 92025
Phone: (760) 579-1109
Email: privacy@doublepeakrecovery.com

With the U.S. Department of Health and Human Services:

Office for Civil Rights, U.S. Department of Health and Human Services
200 Independence Avenue SW, Room 509F, HHH Building, Washington, DC 20201
Phone: 1-877-696-6775
Online: hhs.gov/ocr/complaints

Complaints regarding the confidentiality of substance use disorder records may also be reported to the Office for Civil Rights above, to the Substance Abuse and Mental Health Services Administration, or to the United States Attorney for the judicial district in which the violation occurred.

10. Additional California protections

In addition to HIPAA and 42 C.F.R. Part 2, your medical information is protected by the California Confidentiality of Medical Information Act (Cal. Civ. Code § 56 et seq.) and other California laws. Where California law affords you greater protection or broader rights than federal law, we follow California law. Among other things:

  • We must respond to a request to inspect your records within 5 business days and to a request for copies within 15 days.
  • Information regarding HIV/AIDS testing and status, genetic testing, mental health treatment, and reproductive and gender-affirming care is subject to additional restrictions on disclosure under California law.
  • California law restricts the disclosure of medical information to out-of-state entities or law enforcement in connection with investigations of lawfully provided reproductive or gender-affirming health care.
  • If you are a minor who has lawfully consented to your own care under California law, we will not disclose that information to a parent or guardian without your authorization, except as permitted or required by law.

11. Website privacy policy

This section describes how we handle information collected through doublepeakrecovery.com and related digital properties. Information you submit through our website — including through an insurance verification form, contact form, chat widget, or a call placed from our site — may constitute protected health information, and once we receive it we treat it under the HIPAA and Part 2 standards described above.

Information we collect

  • Information you provide: name, phone number, email address, insurance information, and any details you choose to share about your situation when you contact us, request a callback, verify benefits, or use our chat feature.
  • Information collected automatically: IP address, browser and device type, operating system, pages visited, referring URL, and the date and time of your visit, collected through cookies and similar technologies.
  • Call and message data: if you call or text us, we may record the phone number, call time and duration, and — where you have been notified — the content of the call for quality and training purposes.

Cookies, analytics, and advertising technologies

We use cookies and similar technologies for essential site functionality, to measure site performance, and to understand how visitors find and use our site. These may include third-party analytics and advertising services.

We do not use protected health information for advertising. We do not permit tracking technologies to transmit protected health information, substance use disorder treatment information, or information identifying you as a prospective or current patient to advertising platforms or data brokers, and we do not build or share advertising audiences based on health conditions or treatment status. We do not sell your personal information, and we do not share personal information for cross-context behavioral advertising in a manner that would identify you as seeking treatment.

You can control cookies through your browser settings, and you can opt out of many analytics and advertising cookies through the tools those providers offer. Blocking cookies may affect how parts of our site function. We honor Global Privacy Control (GPC) signals where required by law.

How we use website information

We use information collected through our website to respond to your inquiry, verify insurance benefits, schedule an assessment or admission, provide the services you request, improve our website and services, maintain the security of our systems, and comply with legal obligations.

Text messages and calls

If you provide a phone number and consent to be contacted, we may call or text you about your inquiry or your care. Message and data rates may apply. You may opt out of text messages at any time by replying STOP, and opting out will not affect your ability to receive treatment. Consent to receive marketing calls or texts is never a condition of admission or treatment, and we do not share phone numbers collected on our site with third parties for their own marketing purposes.

California privacy rights (CCPA/CPRA)

Medical information governed by HIPAA and the California Confidentiality of Medical Information Act is exempt from the California Consumer Privacy Act. For personal information that is not covered by those laws — for example, ordinary website analytics data — California residents have the right to know what personal information we collect, use, and disclose; to request deletion or correction of that information; to opt out of sale or sharing (we do not sell or share personal information); to limit the use of sensitive personal information; and to be free from discrimination for exercising these rights. To submit a request, contact our Privacy Officer using the information below. We will verify your identity before responding, and you may designate an authorized agent to act on your behalf.

Security

We maintain administrative, physical, and technical safeguards designed to protect your information, including encryption in transit through SSL/TLS on all pages that collect information, access controls limiting staff access to the minimum necessary, workforce privacy and security training, and written agreements with vendors that handle your information. No method of transmission over the internet is completely secure, and we encourage you to avoid including detailed clinical information in unencrypted email.

Third-party links

Our website may link to other organizations, such as insurance carriers or public health resources. We are not responsible for the privacy practices of those sites, and we encourage you to review their privacy policies.

Children’s privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through our website. If you believe a child has provided us information through our site, please contact us and we will delete it.

Retention

We retain patient records for the period required by California licensing regulations and federal law, and we retain website inquiry data only as long as necessary for the purposes described in this policy or as required by law.

12. Contact us

To ask a question about this notice, exercise any of the rights described above, request a paper copy, revoke a consent, or file a privacy complaint, contact:

Privacy Officer

Double Peak Recovery, LLC
422 S Spruce St
Escondido, CA 92025
Phone: (760) 579-1109
Email: privacy@doublepeakrecovery.com

This Notice of Privacy Practices and Website Privacy Policy is effective August 11, 2026, and supersedes all prior versions. Double Peak Recovery, LLC · DHCS License #370261AP · 422 S Spruce St, Escondido, CA 92025.