Found Recovery, Inc. – Privacy Policy
Last Updated: August 24, 2026
- Introduction
Found Recovery, Inc. (“Found Recovery,” “we,” “our,” or “us”) is committed to safeguarding the privacy, security, and confidentiality of all individuals who receive our services. This Privacy Policy explains how we collect, use, disclose, and protect personal and health information in accordance with:
The Health Insurance Portability and Accountability Act (HIPAA)
42 CFR Part 2 (Confidentiality of Substance Use Disorder Treatment Records)
Applicable federal and state privacy laws
LegitScript Certification standards
By using our services or website, you acknowledge and consent to the practices described herein.
- HIPAA Compliance
Found Recovery adheres to the highest standards of HIPAA compliance. We maintain administrative, technical, and physical safeguards to ensure the confidentiality, integrity, and availability of all Protected Health Information (PHI).
All PHI is encrypted and stored on secure, access-controlled systems.
Access is restricted to authorized personnel who require information to perform their job duties.
We conduct regular audits, risk assessments, and training to maintain compliance with current regulations.
Our ongoing commitment to HIPAA ensures your health information remains protected and handled with integrity.
- Information We Collect
We may collect and maintain the following types of information:
Personal Information: Name, address, phone number, email, date of birth, emergency contact
Health Information: Medical history, diagnoses, treatment plans, progress notes, medications
Insurance and Billing Information: Provider name, policy number, payment details
Digital Information: IP address, browser data, and usage activity through our website, secure patient portal, and the website chat widget and contact forms described in Section 3A below
All information is collected directly from you, your authorized representative, or your insurance provider.
3A. Website Chat, Contact Forms, and Third-Party Service Providers
Our website’s live chat widget, the admissions inquiry form, and the newsletter signup form are hosted and operated on our behalf by HighLevel, Inc. and its affiliate LeadConnector LLC (“HighLevel/LeadConnector”), a third-party customer communications platform. When you use the chat widget or submit a form on our website, the following occurs:
What is collected: Your name, email address, and phone number, along with the content of any message you type into the chat widget or enter into a form field.
Where it goes: This information is transmitted to and processed on servers operated by HighLevel/LeadConnector, not directly by Found Recovery. HighLevel/LeadConnector may use automated systems, including third-party AI language models, to help generate responses to chat inquiries.
Why: We use this vendor to manage inbound inquiries, respond to prospective client questions, and route messages to our admissions and clinical staff.
Confidentiality: We require, or are working to put in place, a written agreement with HighLevel/LeadConnector governing its handling of any information that identifies a person as having sought or received services related to substance use disorder treatment, consistent with 42 CFR Part 2. Until such an agreement is fully in place, we recommend that you avoid sharing detailed clinical, diagnostic, or treatment-history information through the chat widget or contact forms, and instead contact us directly by phone at (805) 624-3373 for any communication you wish to keep strictly confidential.
You may ask the chat assistant, or contact our Privacy Officer, for more information about how a specific message was handled.
- How We Use Your Information
We use your information solely for legitimate business, clinical, and legal purposes, including:
Delivering clinical and therapeutic services
Coordinating care and communicating with other authorized providers
Responding to inquiries submitted through our website, chat widget, and contact forms (see Section 3A)
Billing and insurance processing
Meeting regulatory, licensing, and quality assurance requirements
Conducting internal audits and improving program effectiveness
We will never sell, rent, or trade your personal or health information. This does not include our use of service providers, such as HighLevel/LeadConnector, who process information on our behalf as described in Section 3A.
- Confidentiality and Disclosure
Your treatment information will not be disclosed without your written consent, except as permitted or required by law. Permitted disclosures include:
Medical emergencies
Authorized government audits or inspections
Court orders or legal requirements under 42 CFR Part 2
Communication with entities or individuals you have specifically authorized
Communication with service providers, such as HighLevel/LeadConnector, who host our website chat and contact forms and process information strictly on our behalf, as described in Section 3A
All disclosures are documented in compliance with federal and state law.
- Your Rights
You have the legal right to:
Access and obtain copies of your medical and billing records
Request corrections to inaccurate or incomplete information
Restrict disclosures of your information where legally permissible
Revoke consent for sharing information at any time (subject to prior actions taken)
File a complaint if you believe your privacy rights have been violated
Requests may be submitted in writing to our Privacy Officer at the contact information below.
- Data Security
We employ industry-standard safeguards to protect all PHI, including:
HIPAA-compliant encrypted systems
Secure data transmission protocols (SSL/TLS)
Role-based access controls
Continuous monitoring and system updates
Secure storage of physical records in locked facilities
Our use of third-party service providers, including HighLevel/LeadConnector for website chat and forms, as described in Section 3A
In the event of a data breach, affected individuals will be notified promptly in accordance with applicable laws.
- Communication
We may contact you via phone, email, mail, or text message to coordinate care, appointments, or program updates. You may opt out of digital communications at any time by notifying our staff.
- Telehealth and Online Services
If you receive telehealth or online services, all communications occur through secure, HIPAA-compliant platforms. Our website chat widget and contact forms are operated by the third-party service provider described in Section 3A; you are responsible for using a private and secure internet connection to protect your confidentiality when using these tools.
- Updates to This Policy
We may revise this Privacy Policy periodically to reflect regulatory or operational updates. The most current version will always be available on our website, with the effective date clearly noted.
- Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or your rights under HIPAA and 42 CFR Part 2, please contact:
Found Recovery, Inc. 27489 Agoura Rd. Suite 205 Agoura Hills, CA 91301 Phone: (805) 624-3373 Email: cainan@foundrecovery.org
