Effective Date: August 4, 2026

THIS NOTICE DESCRIBES HOW MEDICAL AND DRUG AND ALCOHOL RELATED INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Pledge Regarding Your Health Information

Discovery Point Retreat (“DPR”) understands that health information about you and your health care is personal. We are committed to protecting health information about you. We create a record of the care and services you receive from us. We need this record to provide you with quality care and to comply with certain legal requirements.

This Notice applies to all of the records of your care generated by this facility. This Notice will tell you about the ways in which we may use and disclose health information about you. We also describe your rights to the health information we keep about you, and describe certain obligations we have regarding the use and disclosure of your health information.

Our Responsibilities

We are required by law to:

• Maintain the privacy and security of your protected health information.
• Provide you with this Notice of our legal duties and privacy practices with respect to your health information.
• Notify you if a breach occurs that may have compromised the privacy or security of your unsecured health information.
• Abide by the terms of this Notice currently in effect.

Special Protections for Substance Use Disorder Records

Because we provide substance use disorder (SUD) treatment, your records are subject to heightened confidentiality protections under federal law, specifically 42 CFR Part 2 (Part 2) [1]. Part 2 imposes stricter limits on the use and disclosure of your SUD treatment records than HIPAA imposes on other health information generally.

Generally, we may not say to a person outside DPR that you attend the program, nor disclose any information identifying you as having a substance use disorder, or use or disclose any other protected information except as permitted by federal law.

Part 2 SUD records cannot be used in civil, criminal, administrative, or legislative proceedings without your written consent or a specific court order [2].

Redisclosure

Once you have consented to a disclosure of your SUD treatment records, the recipient may redisclose that information only as permitted by federal law. Information disclosed under a HIPAA authorization, rather than a Part 2 consent, may be redisclosed by the recipient and, once redisclosed, is no longer protected by 42 CFR Part 2 unless the recipient is also bound by these regulations.

How We May Use and Disclose Health Information About You

The following categories describe different ways that we use and disclose health information.

Uses and Disclosures Requiring Your Written Consent

Under 42 CFR Part 2, we generally must obtain your written consent before we can disclose your SUD treatment records for purposes of Treatment, Payment, and Health Care Operations.

• Treatment: With your consent, we may disclose your health information to other doctors, nurses, technicians, or other health care professionals who are involved in taking care of you.
• Payment: With your consent, we may use and disclose your health information so that the treatment and services you receive may be billed to and payment may be collected from you, an insurance company, or a third party.
• Health Care Operations: With your consent, we may use and disclose your health information for our health care operations. These uses and disclosures are necessary to run the facility and make sure that all of our patients receive quality care.

Uses Requiring Your Written Authorization

Other than as described in this Notice, we will not use or disclose your health information without your written authorization. This includes most uses and disclosures of psychotherapy notes, uses of your health information for marketing purposes, and any disclosure that would constitute a sale of your health information. You may revoke a written authorization at any time, except to the extent we have already relied on it.

Uses and Disclosures Permitted Without Your Consent

Federal law permits us to disclose information without your written consent in certain limited circumstances, including:

• Medical Emergencies: To medical personnel to the extent necessary to meet a bona fide medical emergency.
• Child Abuse or Neglect: To report suspected child abuse or neglect to appropriate state or local authorities.
• Crime on Premises or Against Personnel: To law enforcement regarding a crime committed on our premises or against our personnel.
• Court Order: As authorized by a court order that meets the specific requirements of 42 CFR Part 2.
• Audit and Evaluation: To qualified personnel for research, audit, or program evaluation purposes, subject to strict confidentiality rules.

Your Rights Regarding Your Health Information

You have the following rights regarding health information we maintain about you:

• Right to Inspect and Copy: You have the right to inspect and copy health information that may be used to make decisions about your care.
• Right to Amend: If you feel that health information we have about you is incorrect or incomplete, you may ask us to amend the information.
• Right to an Accounting of Disclosures: You have the right to request an “accounting of disclosures.” This is a list of the disclosures we made of your health information, subject to certain exceptions.
• Right to Request Restrictions: You have the right to request a restriction or limitation on the health information we use or disclose about you for treatment, payment, or health care operations. We are not required to agree to your request, except under specific circumstances related to out-of-pocket payments.
• Right to Request Confidential Communications: You have the right to request that we communicate with you about medical matters in a certain way or at a certain location.
• Right to a Paper Copy of This Notice: You have the right to a paper copy of this Notice at any time.

Fundraising Opt-Out

If we intend to use your Part 2 SUD records for fundraising purposes, we will provide you with a clear opportunity to opt out of receiving such communications [2].

Changes to This Notice

We reserve the right to change this Notice. We reserve the right to make the revised or changed Notice effective for health information we already have about you as well as any information we receive in the future. We will post a copy of the current Notice at our facility and on our website.

Complaints

If you have any concerns about how your health information has been handled, please contact our Privacy Officer directly first — most concerns can be resolved quickly this way, and you will not be penalized in any way for raising one. Separately, federal law gives you the right to file a complaint with the Secretary of the U.S. Department of Health and Human Services.

Violation of the federal law and regulations by a program is a crime. Suspected violations may be reported to appropriate authorities in accordance with federal regulations.

Contact Information

For further information regarding this Notice, please contact:

Privacy Officer
Discovery Point Retreat
Carrollton, Texas
Phone: 855-245-7133
Website: discoverypointretreat.com

If you or a loved one is struggling with substance use disorder, call Discovery Point Retreat today at 855-245-7133 or visit discoverypointretreat.com to learn how our evidence-based treatment programs can help.

References

[1] 42 CFR Part 2 — Confidentiality of Substance Use Disorder Patient Records
[2] Reminder: HIPAA Covered Entities and Substance Use Disorder Treatment Providers Must Update Notices of Privacy Practices by February 16, 2026