NOTICE OF PRIVACY PRACTICES

Effective Date: 09/15/2025

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU—INCLUDING MENTAL AND BEHAVIORAL HEALTH INFORMATION—MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who We Are

This Notice applies to Paragon Behavioral Health Connections (“Paragon,” “we,” “us,” “our”), including our programs, workforce members, facilities, and locations that provide services on our behalf.

Our Obligations

We are required by the Health Insurance Portability and Accountability Act (HIPAA) and applicable state laws to:

  • Maintain the privacy and security of your Protected Health Information (PHI);

  • Provide you with this Notice of our legal duties and privacy practices; and

  • Follow the terms of this Notice currently in effect.

When a stricter law applies (for example, 42 C.F.R. Part 2 for certain substance use disorder records or more protective state laws), we will follow the stricter law.

How We May Use and Disclose Your Information Without Your Authorization

HIPAA permits (and sometimes requires) us to use and disclose PHI without your written authorization for the purposes below. For each category we include examples; not every use or disclosure is listed.

1) Treatment

To provide, coordinate, or manage your care with providers and programs involved in your treatment.
Example: Sharing information with your primary care or specialty provider to coordinate services.

2) Payment

To obtain payment for services, determine coverage/eligibility, and conduct billing and claims management.
Example: Sending necessary information to your health plan so we can be paid.

3) Health Care Operations

For activities that support quality improvement, accreditation, licensing, training, auditing, and general administration.
Example: Reviewing records to evaluate and improve the quality and effectiveness of our services.

4) Health Care Operations of Other Covered Entities

We may disclose PHI to another HIPAA-covered provider/plan that has (or had) a relationship with you for their health care operations.
Example: Sharing limited information with a hospital to improve care coordination.

5) Personal Representatives

We may share PHI with a person legally authorized to make health care decisions for you (e.g., a guardian or health care agent). Parental/guardian rights for minors may vary by law.

6) Family, Friends, and Caregivers Involved in Your Care

With your agreement, opportunity to object, or when we reasonably infer you do not object, we may share relevant information with family/friends/caregivers involved in your care or payment.
Example: Speaking with an individual you invite to your session.

7) Appointment Confirmations, Follow-Up, and Treatment Options

We may contact you about appointments, follow-up, care coordination, and services that may be of interest to you.
Example: Calling or texting to confirm an upcoming appointment.

8) Business Associates & Qualified Service Organizations (QSOs)

Vendors who perform services for us (e.g., IT, billing, legal, cloud hosting) may receive PHI only as needed to perform their functions and must safeguard it under a Business Associate Agreement (BAA) or QSOA (for 42 C.F.R. Part 2 programs).

Other Uses/Disclosures Permitted or Required by Law (No Authorization Needed)

  • Required by Law: We will disclose PHI when laws require it, including to the U.S. Department of Health and Human Services to verify HIPAA compliance.

  • Public Health & Safety: To help prevent or control disease/injury/disability; to report abuse, neglect, or domestic violence; to avert a serious threat to health or safety.

  • Health Oversight: To oversight agencies for audits, licensure, inspections, investigations, and accreditation.

  • Lawsuits & Legal Actions: In response to a court/administrative order, subpoena, discovery request, or other lawful process.

  • Organ, Eye & Tissue Donation: To organizations involved in donation and transplantation.

  • Coroners, Medical Examiners & Funeral Directors: For identification, determining cause of death, or carrying out their duties; to law enforcement if criminal conduct is suspected in a death.

  • Workers’ Compensation: As authorized to comply with workers’ compensation or similar programs.

  • Law Enforcement & Special Government Functions: For limited law enforcement purposes (e.g., locating a suspect, reporting a crime on our premises), correctional institutions, military, national security, and protective services, as permitted by law.

  • Research: For approved research under applicable laws and oversight; when possible we will use de-identified data.

  • Disaster Relief: To disaster relief organizations to coordinate care or notify family/friends of your location/condition when appropriate.

  • Fundraising: We may contact you about Paragon events and fundraising; you can opt out at any time by contacting us.

  • Health Information Exchanges (HIEs): We may participate in HIEs to securely share limited information with other providers/organizations for treatment and quality improvement, consistent with law and available opt-out rights where applicable.

Uses and Disclosures Requiring Your Written Authorization

We will obtain your written authorization for any use/disclosure not described in this Notice or as otherwise required by law, including (subject to exceptions):

  • Marketing communications that are not permitted without authorization;

  • Sale of PHI;

  • Most uses/disclosures of psychotherapy notes (as narrowly defined by HIPAA); and

  • Substance use disorder (SUD) records protected by 42 C.F.R. Part 2, unless an exception applies.

You may revoke an authorization at any time by writing to Paragon’s Privacy Officer, except to the extent we have already acted in reliance on it.

Special Notice: Confidentiality of Substance Use Disorder (SUD) Records (42 C.F.R. Part 2)

If you receive SUD diagnosis, treatment, or referral for treatment from a Paragon program subject to 42 C.F.R. Part 2, your SUD records are afforded additional protections. In general, we may not disclose information that identifies you as having (or having had) a SUD, or as having received SUD services from Paragon, unless:

  • You provide specific written consent;

  • The disclosure is to a Qualified Service Organization (QSO) under a QSOA;

  • A court issues an order that meets Part 2 requirements;

  • The disclosure is to medical personnel in a bona fide medical emergency; or

  • The disclosure is for research, audit, or program evaluation as permitted by Part 2.

Required re-disclosure warning (must accompany most SUD disclosures):

“This information has been disclosed to you from records protected by Federal confidentiality rules (42 CFR part 2). The Federal rules prohibit you from making any further disclosure of this information unless further disclosure is expressly permitted by the written consent of the person to whom it pertains or as otherwise permitted by 42 CFR part 2. A general authorization for the release of medical or other information is NOT sufficient for this purpose.”

Part 2 does not protect:

  • Information about a crime committed or threatened at a Paragon site or against Paragon personnel;

  • Reports of suspected child abuse or neglect, which must be made as required by law.

Suspected violations of Part 2 may be reported to appropriate federal authorities.

Your Rights Regarding Your Health Information

You (or your legal personal representative) have the rights below. To exercise them, please contact:
Medical Records / Health Information Management: [medrecords@paragonbhc.org] • 303-691-6095 (or Privacy Officer at the contact below).

1) Access (Inspect and Copy)

You may inspect and obtain a copy of PHI we maintain about you in a designated record set, with limited exceptions (e.g., psychotherapy notes, information prepared for legal proceedings). We will respond within the timeframes required by law and may charge a reasonable, cost-based fee for copies.

2) Request an Amendment

If you believe your record is incorrect or incomplete, you may request an amendment. If we deny your request, we will tell you why in writing within 60 days and explain your options.

3) Request Confidential Communications

You may request that we contact you in a specific way (e.g., only by mail, at a different address/number). We will accommodate reasonable requests.

4) Request Restrictions

You may ask us to restrict the use/disclosure of your PHI for treatment, payment, or operations. We are not required to agree, except we must agree if you paid in full out-of-pocket and request that we not disclose that item/service to your health plan (unless disclosure is required by law or for emergency treatment).

5) Accounting of Disclosures

You may request a list (an “accounting”) of certain disclosures we made of your PHI for the six years prior to your request, excluding disclosures for treatment, payment, and operations and other exclusions allowed by law. The first list in a 12-month period is free; reasonable fees may apply for additional requests.

6) Paper Copy of This Notice

You can obtain a paper copy of this Notice at any time, even if you agreed to receive it electronically.

7) Notice of Breach

We will notify you in writing if a breach of unsecured PHI occurs that compromises the privacy or security of your information, as required by law.

8) File a Complaint

If you believe your privacy rights have been violated, you can file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). We will not retaliate for filing a complaint.

  • Paragon Privacy Officer:
    Paragon Behavioral Health Connections – yourvoice@paragonbhc.org
    11290 W Alameda Ave, Ste 160 Lakewood CO 80226 • 303-691-6095

  • U.S. Department of Health & Human Services, OCR:
    File online: https://ocrportal.hhs.gov/ocr/smartscreen/main.jsf
    Mail: Centralized Case Management Services, U.S. Dept. of Health & Human Services,
    200 Independence Ave SW, Room 509F HHH Bldg, Washington, DC 20201
    /Email: OCRComplaint@hhs.gov

Your Choices About Electronic Communications (Texts/Emails)

Texts and emails can be convenient but may carry privacy risks (e.g., someone with access to your device/phone account could see messages). You can opt in to SMS for appointment reminders and care coordination; you may opt out at any time by texting STOP. We limit message content to the minimum necessary (e.g., date/time). For SUD-related information protected by 42 C.F.R. Part 2, we will not text such details without your written consent unless an exception applies.

SMS TERMS & CONDITIONS
​
1. Program Description
By opting into our SMS program, you agree to receive text messages from Paragon Behavioral Health Connections regarding appointment reminders, service updates, and important notifications. Message frequency may vary.
2. Consent & Opt-In
By providing your mobile number and opting in to receive text messages, you consent to receive SMS messages from Paragon Behavioral Health Connections at the phone number provided. Consent is not required as a condition of receiving services.
3. Opt-Out & Unsubscribe
You may opt out at any time by texting STOP to unsubscribe. After opting out, you may receive a final confirmation message and will no longer receive further SMS messages. To receive assistance, text HELP or contact us at 303-691-6095.
4. Message & Data Rates
Message and data rates may apply depending on your mobile carrier and plan. Paragon Behavioral Health Connections is not responsible for any fees incurred by your wireless provider.
5. Supported Carriers
Our SMS service is supported by major U.S. mobile carriers. However, delivery is not guaranteed and may be subject to carrier limitations or network issues.
6. Privacy & Data Security
We value your privacy. Your mobile opt-in data will not be shared, sold, or used for marketing purposes by third parties or affiliates. For more details, please review our Privacy Policy.
7. Liability & Disclaimer
Paragon Behavioral Health Connections is not responsible for delayed or undelivered messages due to carrier issues. We are not liable for any damages resulting from the use of our SMS service.
8. Changes to Terms
We may update these SMS Terms & Conditions at any time. Continued use of our SMS service constitutes your agreement to any modifications.

Nondiscrimination & Accessibility

Paragon complies with applicable federal and state civil rights laws and does not discriminate on the basis of race, color, national origin, religion, age, sex, disability, language, veteran status, pregnancy, sexual orientation, gender identity or expression, genetic information, or family structure. We provide free aids/services for individuals with disabilities and language assistance for those whose primary language is not English (e.g., qualified interpreters, alternative formats).
To request assistance or file a civil rights grievance, contact the yourvoice@paragonbhc.org or file with HHS OCR using the information provided in Your Rights.

Changes to This Notice

We may change this Notice and make the new terms effective for all PHI we maintain, including information created or received before the change. The current Notice will be posted on our website (www.paragonbhc.org) and available at our service locations. The Effective Date at the top indicates when the Notice last changed.

Contact Us

Questions about this Notice or how to exercise your rights?
Paragon Behavioral Health Connections – 11290 W Alameda Ave, Ste 160 Lakewood CO 80226 • yourvoice@paragonbhc.org • 303-691-6095 • Fax: 720-783-2769