Privacy Policy

Notice of Privacy Practices

Effective Date: November 12, 2025

This notice describes how information about you and your treatment may be used and disclosed, and how you can get access to this information. Please review it carefully.

Our Legal Duty

Bold Steps Behavioral Health (“Bold Steps”) is required by law to maintain the privacy and confidentiality of your health information and to provide you with this notice of our legal duties and privacy practices with respect to your health information. We also ask that you respect the privacy of others you encounter in treatment.

Bold Steps collects health information about you and stores it in an electronic health record. This record is the property of Bold Steps, but the information it contains belongs to you.

The Health Insurance Portability and Accountability Act (HIPAA) requires Bold Steps to maintain the privacy of your medical record and limit the use or disclosure of that information to the minimum necessary for permitted purposes. HIPAA also provides you with certain rights regarding the information in your record, which are described below.

Information related to your treatment at Bold Steps may also be protected under 42 CFR Part 2, federal regulations governing the confidentiality of substance use disorder patient records. These laws prohibit us from disclosing information identifying you as receiving substance use disorder treatment unless you provide written consent, or unless the disclosure falls under specific exceptions described in those regulations.

How We May Use and Disclose Information

For Treatment

We may use your health information to provide, coordinate, or manage your treatment and related services. This may include sharing information with doctors, nurses, therapists, or other professionals involved in your care.

For Payment

We may use and disclose your health information to obtain payment for services provided to you, such as billing insurance companies or verifying benefits.

For Health Care Operations

We may use and disclose information to assess the quality of care, train staff, improve programs, or carry out other administrative functions necessary to operate our facility effectively.

For Appointments and Services

We may contact you with appointment reminders, information about treatment alternatives, or other health-related services that may be of interest to you.

For Others Involved in Your Care

With your permission, we may share relevant information with family members, friends, or other individuals you identify as involved in your care or payment for services.

As Required by Law

We may disclose information when required by federal, state, or local law.

For Public Health and Oversight Activities

We may disclose information to health authorities or oversight agencies for purposes such as preventing or controlling disease, audits, inspections, or compliance monitoring.

Emergencies and Crimes

We may disclose information without consent in life-threatening emergencies or to report crimes committed on facility premises or against facility personnel.

Other Uses and Disclosures

Any other uses or disclosures of your health information will occur only with your written authorization. You may revoke your authorization in writing at any time, except to the extent that we have already relied on it.

SMS/Text Message Consent

By providing your mobile phone number, you authorize Bold Steps Behavioral Health to contact you by SMS/text message for purposes such as:

  • Appointment reminders

  • Scheduling updates

  • Treatment-related information

  • Important administrative notices

You understand that:

  • Your consent to receive text messages is voluntary.

  • Message and data rates may apply depending on your carrier.

  • Your phone number will not be shared with third parties for marketing purposes.

  • You may opt out at any time by replying “STOP” or notifying Bold Steps in writing.

Your Rights Regarding Your Health Information

You have the right to:

  • Request a copy of this Notice of Privacy Practices.

  • Access and obtain a copy of your treatment record (reasonable copying fees may apply).

  • Request an amendment to health information you believe is incorrect or incomplete.

  • Request restrictions on certain uses or disclosures (though Bold Steps is not required to agree).

  • Request confidential communications through alternative means or at alternative locations.

  • Receive an accounting of certain disclosures made during a specified period (up to six years), except those related to treatment, payment, or operations.

  • Revoke your consent in writing at any time, except to the extent we have already acted on it.

State-Specific Addendum (Pennsylvania & New Hampshire)

Bold Steps Behavioral Health operates treatment programs in both Massachusetts and New Hampshire. Each location complies with all applicable state privacy laws and regulations in addition to HIPAA and 42 CFR Part 2.

Certain state laws may provide additional protections for your information, including mental health, HIV/AIDS, or genetic testing information. Where state law is more protective than federal law, Bold Steps will follow the more stringent standard.

Changes to This Notice

Bold Steps Behavioral Health reserves the right to amend this Notice of Privacy Practices at any time and to make the new provisions effective for all information it maintains, including information created or received before the amendment.

We will post the most current version of this Notice on our website and make copies available upon request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

Bold Steps Behavioral Health
Attention: Privacy Officer
Bold Steps Behavioral Health
Suite 402, Harrisburg, PA 17112
Phone: (603) 915-4223
Email: info@boldstepsbh.com

You may also file a complaint directly with:
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, SW
Room 509F, HHH Building
Washington, DC 20201

You will not be penalized or retaliated against for filing a complaint.

Effective Date

November 12, 2025