Comprehensive Privacy Notice
Effective Date: October 1st 2025
Garden Estates (“we,” “us,” “our”) is committed to protecting your privacy. This Comprehensive Privacy Notice applies to all information collected through our website, garden-estates.com, as well as all Protected Health Information (PHI) related to your care at our sober living facilities.
PART I: HEALTH INFORMATION PRIVACY (HIPAA & 42 CFR Part 2)
1. Our Legal Duties Regarding Your Health Information
We are required by law to maintain the privacy and confidentiality of your Protected Health Information (PHI) in accordance with federal and state law, including HIPAA and the stringent confidentiality regulations of 42 CFR Part 2 for substance use disorder records.
2. Special Protections for Substance Use Disorder Records
We cannot disclose that you are in our program or any information that would identify you as having a substance use disorder without your written consent, except in very limited circumstances permitted by law (e.g., a bona fide medical emergency, under a specific court order).
3. How We May Use and Disclose Your Health Information
- With Your Written Consent: For purposes of Treatment, Payment, and Healthcare Operations, we will obtain your written consent as required by 42 CFR Part 2.
- Without Your Consent (As Permitted by Law): This includes internal communications, qualified audits, reporting crimes on our premises, and responding to medical emergencies.
4. Strict Resident Confidentiality Agreement
To uphold a trusted community, all residents are required to sign a Resident Confidentiality Agreement. This legally binds them to:
- Never disclose the identity or any personal/health information of another resident.
- Understand that violating this agreement is a serious offense and grounds for immediate discharge.
5. Your Rights Regarding Your Health Information
You have the right to:
- Request restrictions on certain uses and disclosures of your PHI.
- Inspect and copy your own PHI.
- Request an amendment to your PHI.
- Receive an accounting of certain disclosures.
- Obtain a paper copy of this notice.
- File a complaint if you believe your privacy rights have been violated.
To file a complaint, contact our Privacy Officer at: [Phone Number] | [Email Address] | [Mailing Address]
PART II: WEBSITE DATA PRIVACY
This section explains our practices regarding data collected through our website.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Our website uses cookies to enhance your experience:
- Comment Cookies: If you leave a comment, you may opt-in to saving your name, email, and website in cookies for your convenience. These last for one year.
- Login Cookies: If you log in, we set cookies to save your login information and screen display choices. Login cookies last two days, and screen options cookies last a year. Selecting “Remember Me” will persist your login for two weeks.
- Temporary Session Cookies: We set a temporary cookie when you visit our login page to check if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
- Editorial Cookies: If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and indicates the post ID of the article you just edited. It expires after 1 day.
Embedded Content
Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves exactly as if you visited the other website. These third-party sites may collect data about you, use cookies, embed additional tracking, and monitor your interaction with that embedded content.
Who We Share Your Website Data With
- If you request a password reset, your IP address will be included in the reset email.
- Visitor comments may be checked through an automated spam detection service.
How Long We Retain Your Website Data
- If you leave a comment, the comment and its metadata are retained indefinitely to recognize and approve any follow-up comments automatically.
- For users that register on our website, we store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Your Rights Over Your Website Data
If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Changes to This Notice
We reserve the right to update this Comprehensive Privacy Notice. The updated version will be posted on our website with a revised effective date.
