PRIVACY POLICY

Privacy Policy, Notice of Privacy Practices & SMS Terms of Service

Built to Recover

A 501(c)(3) Nonprofit Organization

**Effective Date:** April 10, 2026

**Last Updated:** April 10, 2026

---

Table of Contents

1. [Privacy Policy](#privacy-policy)

2. [HIPAA Notice of Privacy Practices](#hipaa-notice-of-privacy-practices)

3. [SMS Terms of Service](#sms-terms-of-service)

---

Privacy Policy

Introduction

Built to Recover ("Organization," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.builttorecover.com), interact with us via phone or SMS, or engage with our services and programs.

By using our website or services, you consent to the practices described in this policy. For information specifically related to your health information, please also review our HIPAA Notice of Privacy Practices below.

Information We Collect

**Personal Information You Provide**

We may collect the following information when you interact with us through intake forms, service enrollment, or phone/SMS communications:

- Name

- Email address

- Phone number

- Mailing address

- Date of birth

- Emergency contact information

**Health and Treatment Information**

In connection with the services we provide, we may collect health and treatment-related information, including:

- Medical and mental health history

- Substance use history

- Treatment records and progress notes

- Assessment results

The collection, use, and disclosure of this information is governed by the Health Insurance Portability and Accountability Act (HIPAA) and, where applicable, 42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records). Please see our HIPAA Notice of Privacy Practices below for detailed information about how we handle your protected health information.

**Information Related to Legal and Judicial Matters**

For clients receiving re-entry, judicial support, or youth and family services, we may collect:

- Court or case information

- Probation or parole details

- Legal status information

**Children's and Minor's Information**

For youth participating in our Youth & Family Services programs, we may collect the following information with verifiable parental or guardian consent:

- Child's name

- Date of birth

- Emergency contact information

- Health and treatment history

- School information

- Court or case information

We are committed to complying with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental or guardian consent. We collect only the information reasonably necessary to facilitate participation in our programs and ensure participant safety and appropriate care.

Parents or guardians have the right to:

- Review the personal information we have collected about their child

- Request correction of inaccurate information

- Request deletion of their child's information (subject to legal record retention requirements)

- Refuse further collection or use of their child's information

To exercise any of these rights, please contact us at info@builttorecover.com or call (720) 677-9992.

How We Use Your Information

We use the information we collect to:

- Provide coaching, counseling, therapy, and recovery support services

- Administer medication-assisted treatment (MAT) programs

- Coordinate care with authorized providers and support persons

- Communicate with you regarding appointments, treatment, and follow-up care

- Send appointment reminders, follow-ups, and supportive messages via SMS

- Comply with legal and regulatory obligations

- Improve our programs and services

How We Share Your Information

We do not sell your personal information. We do not share your personal information with third parties for marketing purposes.

**SMS consent is not shared with third parties or affiliates for marketing purposes.**

We may share your information in the following circumstances:

- **For Treatment, Payment, and Healthcare Operations:** As permitted under HIPAA, we may share your protected health information for purposes of treatment, payment, and healthcare operations. See our HIPAA Notice of Privacy Practices for details.

- **With Your Consent:** We may share information with individuals or entities you have authorized, such as family members, other treatment providers, or support persons.

- **As Required by Law:** We may disclose information when required by court order, subpoena, or governmental regulation.

- **For Safety:** We may disclose information if we believe it is necessary to prevent serious harm to you or others.

**Special Protections for Substance Use Disorder Records**

Records related to substance use disorder treatment are protected under federal law (42 CFR Part 2) and cannot be disclosed without your written consent, except in limited circumstances such as medical emergencies or as otherwise permitted by law. These protections apply in addition to HIPAA requirements.

Data Retention

We retain your personal and health information for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal record retention requirements. You may request information about our retention practices by contacting us at info@builttorecover.com.

Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal and health information. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Built to Recover

124 Delaware Dr

Colorado Springs, CO 80909

Email: info@builttorecover.com

Phone: (720) 677-9992

---

HIPAA Notice of Privacy Practices

### This Notice Describes How Medical Information About You May Be Used and Disclosed and How You Can Get Access to This Information. Please Review It Carefully.

**Effective Date:** April 10, 2026

Our Commitment to Your Privacy

Built to Recover is committed to protecting the privacy of your health information. This Notice of Privacy Practices describes how we may use and disclose your protected health information (PHI) and explains your rights regarding that information.

We are required by law to:

- Maintain the privacy of your PHI

- Provide you with this Notice of our legal duties and privacy practices

- Follow the terms of the Notice currently in effect

- Notify you if a breach occurs that may have compromised your PHI

How We May Use and Disclose Your Protected Health Information

**Uses and Disclosures That Do Not Require Your Authorization**

We may use or disclose your PHI without your written authorization in the following circumstances:

- **Treatment:** We may use and disclose your PHI to provide, coordinate, or manage your care. For example, we may share information with other providers involved in your treatment.

- **Payment:** We may use and disclose your PHI to obtain payment for services, such as billing insurance or other payers.

- **Healthcare Operations:** We may use and disclose your PHI for our healthcare operations, such as quality improvement, training, or accreditation activities.

- **As Required by Law:** We may disclose your PHI when required by federal, state, or local law.

- **Public Health Activities:** We may disclose your PHI to public health authorities for purposes such as preventing or controlling disease.

- **To Avert a Serious Threat to Health or Safety:** We may disclose your PHI if we believe it is necessary to prevent a serious threat to your health or safety or that of others.

- **Judicial and Administrative Proceedings:** We may disclose your PHI in response to a court order, subpoena, or other lawful process.

- **Law Enforcement:** We may disclose your PHI to law enforcement officials in limited circumstances, such as to report certain types of wounds or to comply with a court order.

- **Coroners, Medical Examiners, and Funeral Directors:** We may disclose PHI to coroners, medical examiners, or funeral directors as necessary for them to carry out their duties.

- **Organ and Tissue Donation:** We may disclose PHI to organizations involved in organ, eye, or tissue procurement or transplantation.

- **Workers' Compensation:** We may disclose your PHI as authorized by workers' compensation laws.

- **Health Oversight Activities:** We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, or inspections.

Uses and Disclosures That Require Your Written Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes other than those described above, including:

- Marketing purposes

- Sale of your PHI

- Most uses of psychotherapy notes (if maintained separately)

- Other uses and disclosures not described in this Notice

You may revoke your authorization at any time in writing, except to the extent we have already acted in reliance on it.

Special Protections for Substance Use Disorder Treatment Records

If you receive treatment for a substance use disorder, your records are protected under federal regulation 42 CFR Part 2. These records cannot be disclosed without your written consent except:

- To medical personnel in a medical emergency

- To qualified personnel for research, audit, or program evaluation (without identifying you)

- As authorized by a court order that meets specific legal requirements

- To report suspected child abuse or neglect as required by state law

- As otherwise permitted by 42 CFR Part 2

Violations of 42 CFR Part 2 are subject to criminal penalties. If you have questions about these protections, please ask a staff member.

**Re-disclosure Prohibition:** Information disclosed with your consent is accompanied by a written statement that the information is protected by federal law and that the recipient cannot re-disclose it without your additional written consent (unless otherwise permitted by law).

Your Rights Regarding Your Health Information

You have the following rights regarding your PHI:

- **Right to Access:** You have the right to inspect and obtain a copy of your PHI maintained in your records. We may charge a reasonable fee for copies. Requests must be submitted in writing.

- **Right to Amend:** You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. Requests must be submitted in writing and include a reason for the request. We may deny your request in certain circumstances.

- **Right to an Accounting of Disclosures:** You have the right to request a list of certain disclosures we have made of your PHI. The first request in a 12-month period is free; we may charge a reasonable fee for additional requests.

- **Right to Request Restrictions:** You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to your request, except that we must agree to restrict disclosures to a health plan for services you paid for in full out of pocket.

- **Right to Request Confidential Communications:** You have the right to request that we communicate with you in a specific way or at a specific location. For example, you may request that we contact you only at a certain phone number.

- **Right to a Paper Copy of This Notice:** You have the right to receive a paper copy of this Notice at any time upon request.

How to Exercise Your Rights

To exercise any of these rights, please submit a written request to:

Built to Recover

Attn: Privacy Officer

124 Delaware Dr

Colorado Springs, CO 80909

Email: info@builttorecover.com

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

To file a complaint with us, contact:

Built to Recover

Attn: Privacy Officer

124 Delaware Dr

Colorado Springs, CO 80909

Email: info@builttorecover.com

Phone: (720) 677-9992

To file a complaint with the Office for Civil Rights, visit www.hhs.gov/ocr or call 1-800-368-1019.

Changes to This Notice

We reserve the right to change this Notice at any time. Changes will apply to information we already have as well as new information. The revised Notice will be posted on our website and available at our location.

---

SMS Terms of Service

Agreement to Receive SMS Messages

By providing your phone number and opting in via intake form or verbal confirmation, you agree to receive SMS (text) messages from Built to Recover. These messages may include:

- Appointment reminders

- Follow-up messages regarding your care or participation

- Positive affirmations and supportive messages

- General program information and updates

Message Frequency and Rates

- **Message frequency varies** based on your care plan and communication preferences.

- **Message and data rates may apply.** Please contact your wireless carrier for details about your messaging plan.

Opt-Out Instructions

You may opt out of receiving SMS messages at any time by replying **STOP** to any message. After opting out, you will receive a confirmation message and will no longer receive SMS messages from us unless you opt in again.

Opting out of SMS messages will not affect your ability to receive services from Built to Recover. We will use alternative methods to communicate with you as needed.

Help and Support

For assistance with SMS messages, reply **HELP** to any message, call us at (720) 677-9992, or visit our website at www.builttorecover.com.

Phone Numbers

Messages may be sent from the following phone number:

- (720) 677-9992

Privacy

Your SMS consent and phone number will not be shared with third parties or affiliates for marketing purposes. For complete details on how we handle your information, see our Privacy Policy above or visit www.builttorecover.com/privacy.

Confidentiality of Communications

We take precautions to protect the confidentiality of SMS communications. However, please be aware that SMS messages may not be encrypted and could potentially be accessed by others with access to your phone. If you have concerns about the confidentiality of SMS communications, please let us know and we will discuss alternative communication methods.

We will never include detailed health information, treatment details, or sensitive personal information in SMS messages.

Terms and Conditions

By opting into SMS communications, you confirm that you are the owner or authorized user of the mobile device and phone number provided, and that you are at least 18 years of age or have parental consent to receive these messages.

We reserve the right to modify or discontinue SMS services at any time without notice.

Contact Us

Built to Recover

124 Delaware Dr

Colorado Springs, CO 80909

Email: info@builttorecover.com

Phone: (720) 677-9992

Website: www.builttorecover.com

---

*Privacy Policy URL: www.builttorecover.com/privacy*

*Terms of Service URL: www.builttorecover.com/privacy (or www.builttorecover.com/terms if hosted separately)*