NET Recovery Corp.
860 NW 42nd Ave, Suite 306, Miami, FL 33126
Email: connect@netrecovery.net
Website: https://relief.netrecovery.net
Last Updated: February 20, 2026
Effective Date: January 22, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Table of Contents
- Our Commitment to Your Privacy
- Types of Information We Collect
- How We Collect Your Information
- How We Use Your Protected Health Information
- When We May Disclose Your Information
- Uses and Disclosures Requiring Your Authorization
- Marketing and Fundraising
- Third-Party Services and Business Associates
- Website Technologies and Analytics
- Your Rights Regarding Your Health Information
- State-Specific Rights (Florida)
- Changes to This Privacy Policy
1. Introduction
Net Recovery Corp. (“we,” “us,” “our”) is committed to protecting the privacy and security of your health information. As a healthcare provider, we are subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
This Privacy Policy describes:
- How we collect, use, and disclose your Protected Health Information (PHI)
- Your rights regarding your health information
- Our legal obligations to protect your information
- Special protections for your medical records
2. Our Commitment to Your Privacy
We are required by law to:
- Maintain the privacy and security of your Protected Health Information
- Provide you with this Privacy Policy explaining our legal duties and privacy practices
- Follow the terms of the Privacy Policy currently in effect
- Notify you if we are unable to accommodate a requested restriction
- Notify affected individuals following a breach of unsecured Protected Health Information
We reserve the right to change the terms of this Privacy Policy and to make new provisions effective for all Protected Health Information we maintain. If we make material changes, we will provide you with a revised Privacy Policy and post the updated version on our website at netrecovery.net.
3. Scope and Applicability
This Privacy Policy applies to:
- All Protected Health Information (PHI) created, received, maintained, or transmitted by Net Recovery Corp.
- Information collected through our website at netrecovery.net
- Information collected through forms, phone calls, and in-person interactions
- Information related to your healthcare diagnosis, treatment, and referral
This Privacy Policy does NOT apply to:
- Employment records maintained by Net Recovery Corp. in its role as an employer
- Education records covered by the Family Educational Rights and Privacy Act (FERPA)
- De-identified health information that cannot reasonably be used to identify you
4. Types of Information We Collect
Protected Health Information (PHI)
We collect and maintain the following types of PHI:
Demographic and Contact Information:
- Name, date of birth, age, gender
- Home address, email address
- Emergency contact information
- Social Security Number (when required)
Medical and Treatment Information:
- Medical history and diagnoses
- Treatment assessments and treatment plans
- Prescription information and medication history
- Progress notes and treatment outcomes
Financial Information:
- Payment and billing records
- Financial assistance applications
Location Information:
- General geographic location (city, state, ZIP code)
- IP address when you visit our website (may indicate general location)
Information Collected Automatically Through Our Website
When you visit netrecovery.net, we automatically collect:
- Device type and operating system
- Pages visited and time spent on pages
- General geographic location (city/state level)
This information does not include your medical records or treatment information unless you specifically submit it through our website forms.
5. How We Collect Your Information
We collect information through the following methods:
Direct Collection
- Website Forms: Contact forms, appointment request forms, intake forms
- Phone Calls: Information you provide during phone conversations with our staff
- In-Person Interactions: Information collected during treatment sessions and consultations
- Written Documents: Intake forms, consent forms, and other paperwork you complete
Automatic Collection
- Website Technologies: Cookies, web beacons, and analytics tools when you visit netrecovery.net
- Third-Party Integrations: Information collected through integrated services (see Section 10)
From Third Parties
- Healthcare Providers: Medical records from referring physicians or other treatment providers (with your authorization)
- Insurance Companies: Eligibility and coverage information
- Family Members: Information provided by family members with your authorization
6. How We Use Your Protected Health Information
We use your Protected Health Information for the following purposes:
Treatment
We use your PHI to provide, coordinate, and manage your healthcare treatment and related services. This includes:
- Diagnosing your condition
- Developing and implementing treatment plans
- Coordinating care with other healthcare providers (with appropriate authorization)
- Monitoring your progress and adjusting treatment as needed
Example: Our clinical staff uses your medical history and assessment results to develop an individualized treatment plan for your recovery.
Payment
We use your PHI to obtain payment for the treatment and services we provide. This includes:
- Billing you or your insurance company
- Verifying insurance coverage and benefits
- Processing claims and payments
- Collection activities (as permitted by law)
Example: We submit a claim to your insurance company with information about the services provided so we can receive payment.
Healthcare Operations
We use your PHI for our healthcare operations, which include:
- Quality assessment and improvement activities
- Staff training and competency evaluation
- Compliance audits and program evaluation
- Business planning and management
- Customer service activities
- Resolution of internal grievances
Example: We review treatment outcomes to assess the effectiveness of our programs and identify areas for improvement.
Required by Law
We may use or disclose your PHI when required by federal, state, or local law.
7. When We May Disclose Your Information
Disclosures to You
You have the right to access and receive copies of your Protected Health Information. We will provide you with access to your records as described in Section 12 (Your Rights).
Disclosures to Individuals Involved in Your Care
With your agreement or opportunity to object, we may disclose relevant PHI to:
- Family members, relatives, or close personal friends involved in your care
- Persons responsible for your care or payment for your care
Disclosures for Treatment, Payment, and Healthcare Operations
We may disclose your PHI to:
- Other healthcare providers for their treatment activities
- Other covered entities for payment purposes
- Other covered entities for certain healthcare operations
Public Health Activities
We may disclose PHI for public health activities, such as:
- Reporting disease, injury, or vital events to public health authorities
- Reporting adverse events or product defects to the FDA
- Notifying individuals of product recalls
- Conducting public health surveillance, investigations, or interventions
Victims of Abuse, Neglect, or Domestic Violence
We may disclose PHI to appropriate government authorities if we reasonably believe you are a victim of abuse, neglect, or domestic violence, but only when:
- You agree to the disclosure
- The disclosure is necessary to prevent serious harm and authorized by law
Health Oversight Activities
We may disclose PHI to health oversight agencies for activities such as:
- Audits, investigations, inspections, and licensure actions
- Government programs monitoring compliance
Judicial and Administrative Proceedings
We may disclose PHI in response to:
- A subpoena, discovery request, or other lawful process (with appropriate safeguards)
Law Enforcement Purposes
We may disclose PHI to law enforcement officials for specific purposes, such as:
- Responding to a court order, warrant, or subpoena
- Identifying or locating a suspect, fugitive, material witness, or missing person
- Providing information about victims of crimes under certain circumstances
- Reporting deaths that may have resulted from criminal conduct
To Avert a Serious Threat to Health or Safety
We may disclose PHI if we believe in good faith that disclosure is necessary to:
- Prevent or lessen a serious and imminent threat to your health or safety or that of others
- Assist law enforcement in identifying or apprehending individuals in specific circumstances
Coroners, Medical Examiners, and Funeral Directors
We may disclose PHI to coroners, medical examiners, and funeral directors to enable them to carry out their duties.
Workers’ Compensation
We may disclose PHI as authorized by and to comply with workers’ compensation laws.
8. Uses and Disclosures Requiring Your Authorization
Authorization Required
We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Privacy Policy, including:
Marketing:
We will obtain your authorization before using your PHI for marketing purposes (see Section 9).
Sale of PHI:
We will obtain your authorization before selling your PHI.
Psychotherapy Notes:
Most uses and disclosures of psychotherapy notes require your authorization.
Other Purposes:
Any other uses or disclosures not described in this Privacy Policy or permitted by law.
Your Right to Revoke Authorization
You may revoke your authorization at any time by submitting a written request to our Privacy Officer. The revocation will not affect:
- Actions we took in reliance on your authorization before we received your revocation
- Uses and disclosures for which we have already received payment
- Information disclosed based on your authorization before revocation
9. Marketing and Fundraising
Marketing Communications
Definition of Marketing: Marketing means making a communication about a product or service that encourages you to purchase or use the product or service.
Our Policy: We will not use or disclose your PHI for marketing purposes without your written authorization, except for:
- Face-to-face communications
- Promotional gifts of nominal value
If we receive financial remuneration from a third party for marketing communications, we will clearly disclose this in our authorization request.
Treatment and Healthcare Operations Communications
We may communicate with you about:
- Treatment options and alternatives
- Health-related products or services we provide
- Case management or care coordination
These communications are not considered marketing and do not require your authorization.
Fundraising
We do not currently conduct fundraising activities. If we decide to conduct fundraising in the future, we will:
- Provide you with clear notice in an updated Privacy Policy
- Obtain any required consent before using your information for fundraising
- Provide you with an opportunity to opt out of receiving fundraising communications
10. Third-Party Services and Business Associates
Business Associates
We contract with third-party service providers (“Business Associates”) to perform certain functions on our behalf. These Business Associates may receive, create, maintain, or transmit your Protected Health Information in order to provide services to us.
Examples of Business Associates:
- Medical billing companies
- IT service providers and cloud hosting services
- Electronic health record (EHR) vendors
- Practice management software providers
- Legal, accounting, and consulting services
- Quality assurance and compliance auditors
Business Associate Agreements: We require all Business Associates to:
- Sign written agreements (Business Associate Agreements) committing them to protect your PHI
- Use appropriate safeguards to protect your information
- Report any breaches of unsecured PHI to us
- Ensure any subcontractors also protect your PHI
- Comply with applicable HIPAA requirements
Third-Party Integrations and Services
Our website and services may utilize the following third-party services:
Analytics Services
We use Google Analytics to understand how visitors use our website. Google Analytics collects information such as:
- How often users visit our site
- What other sites they used prior to coming to our site
- General geographic location (city/state level)
Important: We have configured Google Analytics to:
- Not collect personally identifiable information
- Not link website activity to your PHI or treatment records
- Comply with HIPAA requirements through a Business Associate Agreement
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Advertising Services
We use Google Ads and Meta Ads (Facebook/Instagram) for advertising purposes. These services may collect:
- General website usage information
- Information about your interaction with our ads
- Device and browser information
- General geographic location
Important Protections:
- We do not share PHI or treatment information with advertising platforms
- We do not use remarketing to target individuals who have visited treatment-related pages
- Advertising data is kept separate from your medical records
- We do not use custom audiences based on patient lists
Your Advertising Choices:
- You can opt out of interest-based advertising by visiting:
Data Shared with Third Parties
We do NOT share your PHI or treatment records with third-party advertisers, data brokers, or social media platforms.
The only information shared with third parties (beyond Business Associates) includes:
- Aggregate, de-identified usage statistics
- General demographic information at a population level (never individually identifiable)
- Technical information necessary for website functionality (IP address, browser type)
11. Website Technologies and Analytics
Cookies and Tracking Technologies
Our website (netrecovery.net) uses cookies and similar tracking technologies to:
- Enable website functionality
- Remember your preferences
- Analyze website traffic and usage patterns
Types of Cookies We Use:
Essential Cookies:
- Required for website functionality
- Cannot be disabled without affecting site performance
- Do not collect personal information
Analytics Cookies:
- Help us understand how visitors use our website
- Collect aggregate, anonymous information
- Used through Google Analytics (see Section 10)
By using our website, you consent to our use of essential and analytics cookies. You can control cookie settings through your browser:
- Most browsers allow you to refuse cookies or delete existing cookies
- Instructions vary by browser (Chrome, Firefox, Safari, Edge)
- Note that disabling cookies may affect website functionality
Do Not Track Signals
Our website does not currently respond to “Do Not Track” (DNT) browser signals. However, you can control tracking through:
- Google Analytics opt-out add-on
- Advertising opt-out tools (listed in Section 10)
Web Beacons and Pixel Tags
We may use web beacons (small transparent images) and pixel tags on our website and in emails to:
- Understand which pages are visited
- Measure the effectiveness of communications
These technologies do not collect PHI and are used only for general website analytics.
IP Addresses
We automatically collect IP addresses when you visit our website. Your IP address:
- Helps us diagnose technical problems
- Provides general geographic information (city/state level)
- Is not linked to your PHI or treatment records
- Is anonymized in our analytics tools
Mobile Device Information
If you access our website from a mobile device, we may collect:
- General location information (if you grant permission)
This information is used solely for technical purposes and website optimization.
12. Your Rights Regarding Your Health Information
You have the following rights regarding your Protected Health Information:
Right to Inspect and Copy
You have the right to inspect and obtain a copy of your PHI contained in your medical and billing records and other records used to make decisions about your care.
How to Exercise This Right:
- Submit a written request to our Privacy Officer (contact information in Section 19)
- Specify what records you want to access
- Indicate your preferred format (paper or electronic)
Our Response:
- We will respond to your request within 15 days (or 30 days if records are stored off-site)
- We may extend our response time by an additional 15 days if needed
- We will provide access to your records or provide a written denial explaining why access was denied
Fees:
- We may charge a reasonable, cost-based fee for copying and mailing your records:
- Supplies (paper, electronic media)
- Postage (if you request mailing)
- Electronic copies of electronic health records may be provided free of charge or at minimal cost
- We will inform you of any fees before processing your request
Denial of Access: We may deny your request for access in certain limited circumstances, such as:
- Information compiled in anticipation of litigation
- Psychotherapy notes (separate from medical record)
- Information that could endanger you or others
If we deny your request, we will provide you with a written explanation and inform you of your right to request a review of the denial (if applicable).
Right to Amend
You have the right to request that we amend (correct) your PHI in your medical or billing records if you believe it is incorrect or incomplete.
How to Exercise This Right:
- Submit a written request to our Privacy Officer
- Explain what information you believe is incorrect or incomplete
- Provide a reason supporting your request
Our Response:
- We will respond to your request within 60 days
- We may extend our response time by an additional 30 days if needed
- Accept your request and make the amendment, OR
- Provide a written denial explaining why we cannot make the amendment
Denial of Amendment: We may deny your request if:
- We did not create the record (you may request that we forward your request to the creator)
- The information is not part of records we maintain
- The information is accurate and complete
- You would not be permitted to inspect or copy the record
If we deny your request, you have the right to:
- Submit a written statement of disagreement
- Request that your request and our denial be included with future disclosures of your information
Right to an Accounting of Disclosures
You have the right to receive an accounting (list) of certain disclosures we have made of your PHI during the six years prior to your request.
What’s Included: The accounting will include disclosures made:
- For purposes other than treatment, payment, or healthcare operations
- Without your authorization
- That are not otherwise excepted from accounting requirements
What’s NOT Included: The accounting will NOT include:
- Disclosures made for treatment, payment, or healthcare operations
- Disclosures made with your authorization
- Disclosures for national security or intelligence purposes
- Disclosures to correctional institutions or law enforcement (in certain circumstances)
- Disclosures that are part of a limited data set
How to Exercise This Right:
- Submit a written request to our Privacy Officer
- Specify the time period for which you want an accounting (up to 6 years)
Our Response:
- We will respond within 60 days
- We may extend our response time by an additional 30 days if needed
- The first accounting in a 12-month period is free
- We may charge a reasonable fee for additional accountings within the same 12-month period
Right to Request Restrictions
You have the right to request restrictions on:
- How we use or disclose your PHI for treatment, payment, or healthcare operations
- Disclosures to family members, relatives, friends, or others involved in your care
How to Exercise This Right:
- Submit a written request to our Privacy Officer
- Specify what information you want to restrict
- Specify to whom you want the restrictions to apply
Our Response:
- We are not required to agree to most requested restrictions
- We will notify you whether we accept or deny your request
- If we agree to a restriction, we will comply with it unless the information is needed for emergency treatment
Exception – We MUST Agree: We are required to agree to your request to restrict disclosure to a health plan if:
- The disclosure is for payment or healthcare operations purposes (not for treatment)
- The information pertains solely to a healthcare item or service for which you (or someone on your behalf) have paid us in full out-of-pocket
Right to Request Confidential Communications
You have the right to request that we communicate with you about your health matters in a certain way or at a certain location.
Examples:
- Request that we call you at work instead of home
- Request that we mail information to a P.O. Box instead of your home address
- Request communications via email instead of phone
How to Exercise This Right:
- Submit a written request to our Privacy Officer
- Specify how or where you wish to be contacted
- Provide alternative contact information
Our Response:
- We will accommodate reasonable requests
- We will not ask you to explain the reason for your request
- We may require information about how payment will be handled and an alternative address or contact method
Right to a Paper Copy of This Privacy Policy
You have the right to receive a paper copy of this Privacy Policy at any time, even if you have agreed to receive it electronically.
How to Exercise This Right:
- Request a copy from our Privacy Officer
- Download a copy from our website at netrecovery.net
- Request a copy during your visit to our facility
Right to Be Notified of a Breach
You have the right to be notified if your unsecured PHI is breached.
What We Will Do:
- We will notify you without unreasonable delay, but no later than 60 days after discovering a breach
- A description of the breach
- The types of information involved
- Steps you should take to protect yourself
- What we are doing to investigate and prevent future breaches
- Contact information for questions
13. Our Responsibilities
As a covered healthcare provider, we are required by law to:
Maintain Privacy
- Maintain the privacy and security of your Protected Health Information
- Implement appropriate administrative, technical, and physical safeguards
- Train our workforce on privacy and security requirements
- Have policies and procedures in place to protect your information
Provide Notice
- Provide you with this Privacy Policy
- Post this Privacy Policy at our facility and on our website
- Make the Privacy Policy available to anyone who requests it
Follow This Privacy Policy
- Abide by the terms of the Privacy Policy currently in effect
- Not use or disclose your information in ways not described in this Privacy Policy without your written authorization
Report Breaches
- Notify you and appropriate authorities if your unsecured PHI is breached
- Take corrective action to prevent future breaches
Not Retaliate
- Not intimidate, threaten, coerce, discriminate against, or take retaliatory action against you for:
- Exercising your rights under this Privacy Policy
- Participating in an investigation or proceeding
Update Practices
- Update our privacy practices as needed to comply with law changes
- Provide you with updated notice of material changes
14. Data Security
We implement appropriate administrative, technical, and physical safeguards to protect your Protected Health Information from unauthorized access, use, or disclosure.
Administrative Safeguards
- Privacy Officer: We have designated a Privacy Officer responsible for implementing and overseeing our privacy practices
- Workforce Training: All workforce members receive training on privacy and security requirements
- Policies and Procedures: We maintain comprehensive policies and procedures for protecting PHI
- Access Controls: We limit access to PHI to workforce members who need it to perform their job duties
- Business Associate Oversight: We ensure our Business Associates implement appropriate safeguards
Technical Safeguards
- Access Controls: Unique user IDs and passwords for electronic systems
- Encryption: Encryption of PHI during transmission and when stored electronically
- Audit Controls: Logging and monitoring of system activity
- Automatic Logoff: Systems automatically log off after periods of inactivity
- Secure Communications: Secure methods for transmitting PHI electronically
Physical Safeguards
- Facility Security: Controlled access to our facilities where PHI is stored
- Workstation Security: Policies for proper use and positioning of workstations
- Device Security: Controls for portable devices containing PHI
- Paper Record Security: Locked storage for paper records containing PHI
- Disposal Procedures: Secure destruction of PHI when no longer needed
Ongoing Risk Management
We conduct regular risk assessments to:
- Identify potential threats to PHI security
- Assess current safeguards
- Implement improvements as needed
- Respond to identified vulnerabilities
Incident Response
We have policies and procedures for:
- Detecting and responding to security incidents
- Reporting breaches of unsecured PHI
- Mitigating harmful effects of breaches
- Documenting incidents and response actions
While we implement comprehensive security measures, no system is 100% secure. We cannot guarantee the absolute security of your information but we continuously work to maintain the highest level of protection.
15. Data Retention
We retain your Protected Health Information in accordance with applicable laws and regulations.
Medical Records
Retention Period: We retain medical records for a minimum of:
- Florida Law: 5 years from the last date of treatment for adults
- Our Policy: We maintain records for at least 7 years from the last date of service
Special Circumstances:
- Records for minors may be retained longer as required by state law
- Records involved in litigation are retained until the matter is resolved
- Financial/billing records are retained for tax and accounting purposes (typically 7 years)
Website and Analytics Data
- Web Analytics Data: Retained for 26 months in Google Analytics
- Website Logs: Retained for 90 days for security and troubleshooting purposes
- Cookie Data: Subject to expiration periods set by each cookie (typically 30 days to 2 years)
Secure Disposal
When retention periods expire, we securely dispose of PHI by:
- Paper Records: Shredding or destruction to render information unreadable
- Electronic Records: Permanent deletion using secure methods
- Devices: Physical destruction or secure wiping of devices containing PHI
16. State-Specific Rights (Florida)
Florida Privacy Laws
As a healthcare provider serving patients in Florida, we comply with applicable Florida state laws regarding patient privacy and health information, including:
Florida Statute § 456.057 – Patient Records:
- Patients have the right to access and copy their medical records
- We must provide records within a reasonable time (Florida law specifies timeframes)
- Fees for copying records are regulated by Florida law
Florida Statute § 395.3025 – Patient Rights:
- Patients have the right to privacy and confidentiality
- Patients have the right to have their medical records treated confidentially
- Patients have the right to approve or refuse the release of medical records (except as required by law)
Florida Mental Health Act (Baker Act):
- Specific privacy protections apply to mental health treatment records
- Additional consent requirements may apply for disclosure of mental health records
When Florida Law is More Protective
When Florida law provides greater privacy protections than HIPAA, we follow the more protective Florida law.
17. Changes to This Privacy Policy
We reserve the right to change this Privacy Policy at any time. When we make changes, we will:
Material Changes
For material changes to our privacy practices:
- Update the “Last Updated” date at the top of this Privacy Policy
- Post the revised Privacy Policy on our website at netrecovery.net
- Make the revised Privacy Policy available at our facility
- Provide direct notice to individuals currently receiving treatment (if required by law)
Effective Date of Changes:
- Changes to this Privacy Policy will be effective on the date posted
- We may apply changes to PHI we already have, as well as PHI we receive in the future, to the extent permitted by law
How to Get the Current Privacy Policy
You can always obtain the current version of our Privacy Policy by:
- Visiting our website at netrecovery.net
- Requesting a copy from our Privacy Officer
- Requesting a copy during your visit to our facility
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
18. How to File a Complaint
If you believe your privacy rights have been violated or you are concerned about our privacy practices, you have the right to file a complaint.
File a Complaint With Us
Contact Our Privacy Officer:
Net Recovery Corp.
Privacy Officer
860 NW 42nd Ave, Suite 306, Miami, FL 33126
Email: connect@netrecovery.net
What to Include:
- Your name and contact information
- Description of the concern or complaint
- When the incident occurred
- Any other relevant information
Our Response:
- We will investigate your complaint
- We will respond to you within a reasonable time
- We will take corrective action if appropriate
File a Complaint With the Government
You also have the right to file a complaint with:
U.S. Department of Health and Human Services
Office for Civil Rights
Online: https://ocrportal.hhs.gov/ocr/portal/lobby.jsf
Mail:
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Room 509F, HHH Building
Washington, D.C. 20201
Phone: 1-800-368-1019
TDD: 1-800-537-7697
No Retaliation
You will not be penalized, retaliated against, or discriminated against for filing a complaint. Your care and services will not be affected by filing a complaint.
19. Contact Information
General Inquiries
Net Recovery Corp.
860 NW 42nd Ave, Suite 306, Miami, FL 33126
Email: connect@netrecovery.net
Website: netrecovery.net
Privacy-Related Questions
Privacy Officer
Email: connect@netrecovery.net
For questions about:
- How we use and disclose your information
- How to exercise your rights
- Filing a privacy complaint
Request Forms
To exercise your rights (access, amendment, accounting, restrictions, confidential communications), please:
- Email your written request to connect@netrecovery.net
- Mail your written request to the address above, Attn: Privacy Officer
- Visit our facility and submit your request in person
Acknowledgment
By using our services or visiting our website, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy was last updated on February 20, 2026 and is effective as of February 20, 2026.