Website Privacy Policy

1.1 Who we are and what this policy covers

AriseVida Care LLC, doing business as AriseVida Care ("AriseVida," "we," "us," or "our"), provides behavioral health and addiction treatment and related support services in Arizona. This Website Privacy Policy explains our practices for information collected through our public website, online inquiries, admissions and insurance-verification requests, referral communications, and related website communications. It applies to the pages on https://arisevida.com/ that link to this policy, including any AriseVida-controlled preview domain through which those services are offered.

Our website and related service information describe medication-assisted treatment, including methadone, buprenorphine/Suboxone and naltrexone; intensive outpatient programming; psychiatric services; therapy and counseling; Deep TMS; supportive housing; case management; peer support; and justice reentry support. Listing a service does not mean it is available to every person, at every location, or at every time. Information you provide about interest in these services may be sensitive even if you do not become a patient.

Supportive housing is operated by UnityBridge Recovery LLC, a separate company under common ownership with AriseVida Care LLC. This policy covers information submitted to AriseVida through its website, including housing inquiries. It does not combine the two companies into one legal entity or grant unrestricted access to clinical records. Any transfer to the housing operator must have the permission and safeguards applicable to that information. Separate housing agreements and notices govern the housing operator's own activities.

This policy addresses website information. Our HIPAA and Substance Use Disorder Confidentiality Notice explains how we use and disclose protected health information and records protected by 42 CFR Part 2, and explain your rights regarding those records. If information collected through the website is protected by those laws, those protections apply from the point the information qualifies for protection. An admission or completed treatment episode is not a prerequisite for every confidentiality protection. This website policy does not reduce those protections.

Our Cookie Preferences notice explains device storage and optional technologies. Separate clinical consents, financial agreements, telehealth consents, housing agreements and employment notices may also apply to their respective activities. Visiting this site or acknowledging this policy does not authorize treatment, disclosure of clinical records, advertising use of health information, or recording of a call.

1.2 Information you choose to provide

The information we receive depends on the form or communication you use. Please provide only the information requested for your purpose. Admissions, insurance-verification, contact and careers submissions are delivered to our staff mailboxes by email and are not kept on the website's servers; partner-referral records and newsletter subscriptions are stored as described below.

• Contact and identification information: your name, telephone number, email address, date of birth when requested for admissions or insurance matching, and information about an authorized representative or referring professional.
• Admissions information: the person seeking help, services of interest, treatment needs or other answers requested by the admissions workflow, preferred contact method and timing, and information voluntarily included in a message.
• Insurance information: insurer or plan name, member or policy identifiers, subscriber details, date of birth and other eligibility-matching information, and, if you choose to attach them through the insurance-verification form, photos of the front and back of your insurance card. Card photos are attached to the email sent to our admissions team and are not stored on the website's servers.
• Referral information: contact information for the referring organization and information about the person being referred that the sender is legally permitted to share, including up to four supporting documents (PDF, JPG, PNG, DOC or DOCX) the referrer chooses to upload. The referral record and any uploaded documents are stored in the file storage of our hosting provider (Netlify), including a queued copy of the notification that is held until the email is delivered, and are attached to the notification email sent to our admissions team or made available to authorized admissions staff through a password-protected review page; a receipt containing no health information is emailed to the referrer's work email address. Files uploaded to the referral form but never submitted with a completed referral are removed by an automatic cleanup that runs every 10 minutes once the upload is more than 24 hours old; documents submitted with a referral stay with the referral record and follow our records schedule. A referral request does not itself authorize us to send information back to the referrer.
• Housing inquiries: a housing inquiry made through the website uses the same admissions request form and collects the admissions information described above, including the service of interest (for example, IOP with Supportive Housing), preferred start timeframe and contact details. Providing these answers does not reserve a bed or authorize unrestricted sharing of clinical records with UnityBridge Recovery LLC.
• Questions, feedback, grievances and accessibility requests: the issue you describe, relevant dates and locations, requested assistance, supporting material you choose to provide, and your safe method for receiving a response.
• Communications and choices: messages exchanged with our team; relevant records of requested follow-up, permissions, withdrawals and policy acknowledgments. A call recording is governed by separate notice and any legally required permission; this policy is not a recording disclosure or consent.
• Employment inquiries: your name, email address, telephone number, the role you are applying for, licensure status, experience and a résumé (PDF or Word document) submitted through the careers application form, or application material you send to an identified recruiting channel. Applications and résumés are emailed to our hiring contact and are not stored on the website's servers. Do not send medical records, Social Security numbers or financial-account credentials through a general careers inquiry.

If you provide information about another person, provide only information you have authority to disclose. Authority to request a call, make a referral or help complete a form does not necessarily establish authority to receive the person's health information, make treatment decisions, or sign a HIPAA authorization or Part 2 consent.

1.3 Technical information and outside content

When you access our site, the systems that deliver and protect it may process an IP address, browser and operating-system information, requested pages or files, date and time, referring page, error information and security-related events. The site's own code sets no cookies. It uses three small items of browser storage that contain no identifiers: when you open a policy or notice from the site footer, your browser's session storage temporarily remembers the page and scroll position you came from (a value named avc-policy-return) so that "Back" returns you there, and it is cleared when your browser session ends; if you close the privacy notice without choosing, session storage keeps a flag named avc-privacy-notice-dismissed (value 1) so the notice does not reappear on every page for the rest of that browser session; it records no choice and grants no permission; and if you make a choice in the privacy notice or preferences panel, your browser's local storage keeps that choice (a value named avc-privacy-preferences holding a version number, the on/off choice for optional content, the date of the choice and an expiry date 180 days later) so it can be applied on later pages and visits until it expires; if your browser does not allow storage, a choice applies to the current page view only. None of these values is sent to a server. Depending on context, technical data can be personal information or protected health information; we do not assume that all technical data is anonymous.

The website's fonts and page scripts are served from the site's own address; opening a page does not request them from an outside provider. The website does not include Google Analytics, Google advertising or remarketing tags, CallRail call-attribution technology, or session-recording or chat tools. The only optional external content is the Google Map on the Contact and Location & Hours pages: it is not embedded when a page opens, and it loads only after you allow maps in the on-site privacy notice or preferences panel or press "Load map once" beside the address; when it loads, Google receives technical information such as your IP address and browser details. Following an external map, social-media, insurer or other link takes you to that provider's service, where its own notices also apply. The Cookie Preferences notice explains the notice, the preferences panel (reachable from the "Privacy preferences" entry in every page footer), the choices available and their limits.

We do not sell personal information or use patient information to target advertisements. Patient identifiers, dates of birth, insurance details, message contents, treatment selections and complaint contents must not be sent to advertising audiences or used for behavioral profiling or session recordings. These restrictions apply to browser and server transfers, including hashed identifiers that remain linkable to a person. Advertising and analytics integrations require review and configuration consistent with these restrictions. A vendor's collection of page information is not automatically anonymous or permissible merely because it occurs on a public website.

1.4 Why we use information

We use information as appropriate to respond to the request you make, arrange a requested follow-up, evaluate a possible admission, help verify insurance, coordinate an authorized referral, provide accessible communication, investigate a concern, protect our systems, and meet applicable obligations. Verification may involve communicating with your health plan or an authorized eligibility service. It does not guarantee coverage, authorization, reimbursement, acceptance into treatment, or a particular financial responsibility.

We also use information to maintain accurate contact and consent records, resolve technical problems, detect misuse, assess the effectiveness of our own service processes, and preserve records needed for legal, regulatory or contractual responsibilities. Where an activity involves protected health information, we rely on an applicable health-privacy permission or obtain the authorization or consent the law requires. Merely listing a purpose here does not create that permission.

If you separately subscribe to our newsletter or request general announcements or educational updates, we use the contact information and choices you provide for that purpose. A newsletter subscription stores your email address, the page you subscribed from, a subscription identifier and the date and time of the request with our hosting provider (Netlify); we send you a welcome email and a notice to our team. Every newsletter email includes an unsubscribe link. Unsubscribing marks your subscription record as unsubscribed, recording the date and the method you used, so that you are not mailed again; we keep that record to honor your choice and prevent accidental re-adding. We do not treat an admissions request, insurance-verification request, clinical consent or cookie choice as enrollment in unrelated promotional communications. Health-related marketing that requires a HIPAA authorization or Part 2 consent is subject to those separate requirements.

1.5 When information may be shared

We limit access and disclosure to the purpose and legal authority involved. Potential recipients include authorized workforce members handling your request; providers involved in permitted care coordination; health plans and authorized eligibility or billing services; and contracted services performing necessary hosting, communication, secure storage, document processing, security or related administrative functions for us. Currently these are Netlify, which hosts the website, runs its form-handling functions and stores referral and newsletter records, and Google Workspace, which delivers and stores the email messages our forms generate; form emails are sent over an encrypted (TLS) connection.

When a vendor is our business associate, the required business associate agreement and applicable safeguards must be in place. A vendor's standard privacy policy or a statement that it offers encryption does not replace those obligations. Part 2 records require the additional agreements, consent, notices or other conditions applicable to the disclosure. We do not authorize our vendors to use identifiable patient information for their independent advertising purposes.

We may disclose information to an individual or organization you validly authorize, subject to the scope and duration of that permission. When a disclosure is legally required or permitted for reporting, oversight, public health, safety, legal process or a similar purpose, we evaluate the specific authority and any more protective law. A subpoena, police request, family relationship or general claim of urgency does not automatically entitle someone to protected records. The HIPAA/Part 2 notice explains these distinctions in more detail.

If ownership or operations change, information may be transferred only as permitted by applicable law, existing confidentiality obligations and any required authorizations or patient notices. This paragraph is not permission to sell health records or use a business transaction to bypass Part 2 program-closure or transfer requirements.

1.6 Sale, advertising and sensitive information

We do not sell personal information or use identifiable patient information for targeted advertising. Our website does not currently include advertising measurement technology or other advertising-related scripts; the Cookie Preferences notice describes the third-party resources the site does load. We do not build advertising audiences from a person's use of an admissions, insurance, treatment, grievance or patient-related feature. We do not treat a general website acceptance button as consent to those activities.

Where information is de-identified under an applicable legal standard, we may use it for legitimate reporting or improvement purposes. Removing a name, hashing an email address or grouping a small number of records does not, by itself, establish that information is legally de-identified. Our safeguards against impermissible identification and disclosure continue to apply.

1.7 Email, text messages and safe contact preferences

For general inquiries and initial private submissions, contact info@arisevida.com; for admissions, contact admissions@arisevida.com. For privacy matters, contact Arthur Allayev at arthur@arisevida.com. Contact an appropriate staff member to arrange transmission of detailed records; an email address alone does not establish that a message or attachment will be encrypted.

If you ask us to call, text or email you, we use the contact method you request within the scope of that request and applicable law. Tell us if a device, voicemail box, email account or mailing address is shared or unsafe. You may ask for a confidential communication method or alternate location using the contact details below. We explain available alternatives if the method you request is not suitable for the information involved.

Ordinary email and text messaging can be stored or displayed by your device, your carrier or your email provider. Notifications can be visible on a lock screen. Avoid including detailed health information in ordinary messages when a safer channel is available. Ask us to arrange an appropriate method before sending detailed records or insurance-card images by email or text. A warning about communication risks does not waive our obligation to protect information we receive.

You may ask us to stop optional communications. Use an unsubscribe method included in a promotional email or contact us directly. For a text program that supports keyword opt-out, follow the opt-out instructions included with that program; you may also contact the clinic. We will honor applicable revocation requirements. A communication preference change does not automatically cancel an appointment, withdraw a records-release authorization or revoke a Part 2 consent; tell us separately if that is your intent. We may still need to send communications required by law or appropriately related to your ongoing care through a lawful channel.

1.8 Security and retention

We are responsible for appropriate administrative, physical and technical safeguards for the information we handle. Safeguards must be matched to the sensitivity and use of the information, including access restrictions and lawful handling by service providers. No transmission method or storage system can guarantee absolute security. If you believe you sent information to the wrong recipient or encountered a security issue, contact us promptly without adding unnecessary sensitive details to the initial report.

We retain information for the periods needed to provide services and meet applicable recordkeeping, payment, audit and legal requirements. Not every type of information has the same retention period. Referral information used for assessment or treatment may become part of a medical record, even if the person does not enroll. Temporary transfer copies and newsletter records may follow different schedules from medical records. Unsubscribing stops newsletter marketing; it does not require deletion of records we must retain or of the minimal information needed to honor your opt-out. A legal hold can suspend routine disposal. We securely dispose of information when its retention period ends and no applicable hold or other retention requirement remains, including appropriate handling of vendor copies and backups.

If a security incident requires notice to you or a regulator, we provide the notices required by the law that applies. We do not promise that every technical incident is a reportable breach or that one notification timetable governs every record and circumstance.

1.9 Your choices and requests

You may contact us to ask about information collected through the website, correct inaccurate contact information, change optional communication preferences, request an available copy, or ask us to delete information that we are not legally required or otherwise lawfully permitted to retain. We explain applicable rights, verification requirements and the reason for any limitation. Requests may be made through an authorized representative where permitted, subject to appropriate verification.

Rights vary with the information, the law that applies and any legal exceptions. We do not promise that every website visitor has an unconditional right to erase a medical record. HIPAA access, amendment, accounting, restriction and confidential-communication requests should be directed to our Privacy Officer under the HIPAA/Part 2 notice. A correction to your contact record does not alter clinical documentation without the applicable amendment process.

If a state privacy law applies to your information and our activities, we provide its applicable rights and any required appeal procedure within the required period. Tell us your state of residence so we can route the request correctly; do not send a copy of government identification unless we request it through an appropriate channel. We do not require you to create a patient account simply to ask a privacy question.

1.10 Children and visitors outside Arizona

Our treatment programs described on this website serve adults age 18 and older. The site can also receive an inquiry from someone seeking information or resources for a younger person. Our public website is not designed as an online service directed to children under 13. A parent, guardian or other authorized person should contact us for help with appropriate referral resources and any applicable consent questions. A minor's clinical privacy rights are governed by applicable law, including laws permitting minors to consent to certain services; this policy does not grant parents unrestricted access to all such records.

Our organization operates in Arizona. Website access from another location does not establish that we provide treatment there or that a clinician may practice there. If applicable privacy law provides additional rights to a visitor, those rights are not waived by this policy. Contact us if you have a question about where information is handled or about a legally available privacy request.

1.11 Changes and contact

We post the effective date of this policy and update it when relevant practices or requirements change. If a change requires additional notice or a new consent or authorization, we provide or obtain it as required. Changes do not retroactively create permission for a disclosure that was unauthorized when made.

For website privacy questions or health-record privacy requests, contact AriseVida Care LLC, Attention: Privacy Officer, 4040 E. McDowell Road, Suite 107, Phoenix, AZ 85008; call (602) 899-1229 and ask for Arthur Allayev, Privacy Officer. Privacy email: arthur@arisevida.com. Ask us to arrange a secure method before sending sensitive supporting material. General admissions email is not a substitute for the designated secure method of sending clinical records. You may also complain directly to the HHS Office for Civil Rights as described in our HIPAA/Part 2 notice, without first complaining to us and without retaliation.

Clinic telephone hours are Monday–Friday, 6:00 a.m.–4:00 p.m., and Saturday, 6:00–9:00 a.m.; the clinic is closed Sunday. All hours are Phoenix, Arizona time. Outside clinic hours, patients may use our 24/7 text line at (602) 851-6964 for nonemergency contact. This is not a promise of an immediate clinical response. Call 911 for a medical emergency or immediate danger; call or text 988 for suicide or mental-health crisis support.