Santana Mental Health Services Privacy Policy

Last Updated: May 16, 2025

At Santana Mental Health Services, your privacy is our priority. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information, including Protected Health Information (PHI), in accordance with the Health Insurance Portability and Accountability Act (HIPAA), relevant state laws in Florida and North Carolina, and the LegitScript Addiction Treatment Certification Standards.


We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy. We may also provide you with additional notice (such as by adding a statement to the Services or sending you a notification), such as in connection with making material changes to this Privacy Policy. We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

1. Your Health Information and Privacy Rights

You have the right to:

  • Access and receive a copy of your medical records.

  • Request corrections to your health information.

  • Request restrictions on the way your information is used or disclosed.

  • Receive confidential communications by alternate means.

  • Obtain an accounting of disclosures we’ve made.

  • File a complaint without fear of retaliation.

Some records, including those related to substance use disorder treatment, may be protected by additional federal law under 42 CFR Part 2. These records will not be disclosed without your written consent, unless permitted by law.

2. How We May Use and Disclose Your Information

We may use or share your PHI for:

  • Treatment — Coordinating your care across providers.

  • Payment — Billing your insurance or other payers.

  • Operations — Staff training, quality assurance, audits, and compliance.

  • Public Health and Safety — Reporting communicable diseases or abuse.

  • Legal and Regulatory Requirements — As required by law or court order.

  • Emergencies — To prevent serious harm to you or others.

We do not use your information for marketing purposes without written authorization.

3. Substance Use Disorder Records (42 CFR Part 2)

Records related to diagnosis, treatment, or referral for substance use disorders are protected under 42 CFR Part 2 and applicable state law. These records may only be disclosed:

  • With your specific written consent;

  • By court order;

  • To medical personnel in a medical emergency; or

  • As otherwise permitted by law.

4. Additional State Privacy Protections

Florida (F.S. 456.057, 394):

  • Your mental health records are protected by state law and may not be disclosed without written consent unless otherwise permitted.

  • For patients receiving telehealth services, we will inform you of the limitations, risks, and your rights, and we will document your consent to treatment.

North Carolina (G.S. § 122C-53 to 56; §75-60 et seq.):

  • Your mental health or substance use information is subject to heightened privacy rules. We will not release this information without your written consent unless required or permitted by law.

  • In accordance with the NC Identity Theft Protection Act, if your information is compromised in a data breach, we will notify you promptly.

5. Website-Specific Practices

We take additional precautions for all online interactions:

  • All communications are encrypted via Secure Socket Layer (SSL).

  • No lead generators or unapproved referrals are used.

  • Our privacy policy is posted prominently and clearly.

  • Domain ownership is public and accurate.

  • All web-based data transactions comply with HIPAA and LegitScript guidelines.

6. Breach Notification

In the event your PHI is accessed, disclosed, or used in an unauthorized way that could compromise its privacy or security, we will notify you in accordance with the HIPAA Breach Notification Rule and applicable state laws.

7. Cookies and Analytics

We may use cookies or analytics tools to improve the functionality and performance of our website. These do not collect PHI unless you provide it through secure forms.

8. Telehealth Privacy

If you receive services via telehealth, we will:

  • Ensure all sessions are HIPAA-secure.

  • Disclose risks and limitations of telehealth.

  • Obtain your documented consent to receive treatment remotely.

9. Contact Us

If you have questions, would like to exercise your rights, or wish to file a complaint, contact:

Santana Mental Health Services
Email: admin@santanamhs.com
Phone: (785) 228 - 6892
Address: 5901 SW 74th ST STE 211, South Miami, FL 33143

You may also file a complaint with the U.S. Department of Health & Human Services Office for Civil Rights (OCR). We will not retaliate against you.

10. Updates to This Policy

We may update this policy periodically. The most recent version will always be posted on our website. Significant changes will be communicated directly when required.

11. Language Access

This notice is available in Spanish. If you need help understanding it, let us know.
Este aviso está disponible en español. Por favor, háganos saber si necesita ayuda para entenderlo.