Privacy Policy

Last Updated: August 6, 2025

Healing Heroes Recovery Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website, www.center4heroes.com (the "Site"). By using our Site, you consent to the practices described in this policy.

1. Information We Collect

We do not require membership or an opt-in for marketing. However, we may collect the following information when you voluntarily submit it through our contact form:

Personal Information: Name, email address, phone number, and any details you provide in your message.
Automatically Collected Information: We may collect non-personally identifiable information, such as browser type, IP address, and device information, to improve our website's functionality and security.
Opt-In Communication: Users may choose to opt in to receive text messages and emails about our services, updates, and relevant information.

2. How We Use Your Information

We use the information you provide to:

Respond to your inquiries and requests regarding our treatment services.
Improve our website’s functionality and user experience.
Maintain security and prevent fraud or misuse of our services.
Send opted-in users text messages and emails with updates and information about our services.

3. SMS and Email Communications

If you choose to opt in for SMS or email communications, we will use your contact information to send you relevant updates and information. We value your privacy, and your consent information will not be shared with third parties for marketing purposes. You may opt out at any time by following the instructions provided in the messages you receive.

Standard Messaging Disclosures:

Messaging frequency may vary.
Message and data rates may apply.
You can opt out at any time by texting STOP.
For assistance, visit our Privacy Policy and Terms & Conditions.

You may opt out at any time by following the instructions provided in the messages you receive.

4. How We Protect Your Information

We take appropriate security measures to protect your personal information from unauthorized access, disclosure, or misuse. However, no data transmission over the internet can be guaranteed as completely secure.

5. Sharing of Information

We do not sell, trade, or rent your personal information. We may share your information only in the following cases:

Legal Compliance: If required by law or to protect the rights, property, or safety of Healing Heroes Recovery Inc. or others.
Service Providers: With trusted third-party service providers who assist in operating our website and services, under confidentiality agreements.

6. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their policies before providing any personal information.

7. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to enhance website functionality and user experience. You can disable cookies in your browser settings, though this may affect site performance.

8. Your Rights and Choices

You have the right to:

Request access to or deletion of your personal information.
Opt-out of any future contact initiated by us.
Opt out of receiving text messages and emails at any time by following the unsubscribe instructions provided in our communications or by contacting us directly.

To exercise these rights, please contact us at info@center4heroes.com.

9. WEBSITE PRIVACY POLICY AND JOINT NOTICE OF PRIVACY PRACTICES

Effective August 5, 2026
THIS NOTICE DESCRIBES HOW MEDICAL AND SUBSTANCE USE DISORDER INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, YOUR RIGHTS, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Who We Are and What This Notice Covers
Healing Heroes Recovery Center ("Healing Heroes," "we," "our," or "us") provides outpatient substance use disorder and co-occurring mental health services. This document serves two purposes: (1) it explains how information collected through our website is handled; and (2) it is our combined HIPAA Notice of Privacy Practices and 42 C.F.R. Part 2 Patient Notice. It applies to Healing Heroes locations, workforce members, and health care professionals who are permitted to use this joint notice.
Our current locations include 285 Passaic Avenue, Second Floor, Fairfield, New Jersey 07004. A paper or electronic copy of this notice is available upon request and on our website.

Our Legal Duties

We are required by law to maintain the privacy and security of protected health information (PHI) and substance use disorder patient records protected by 42 C.F.R. Part 2 (Part 2 records).
We must provide you with this notice explaining our legal duties, privacy practices, and your rights, and we must follow the notice currently in effect.
We must notify you promptly if a breach occurs that may have compromised the privacy or security of your unsecured PHI or Part 2 records.
We apply the more protective requirement when HIPAA, Part 2, New Jersey law, or another applicable law provides different levels of confidentiality, unless a law expressly requires otherwise.
We will not retaliate against you for exercising a privacy right or filing a complaint.
Website Information We Collect
You may browse portions of our website without providing your name. Information collected through the website may include:
Information you choose to submit, such as your name, telephone number, email address, message, requested services, referral information, insurance information, appointment information, or other details.
Technical information that a web server or approved service may collect, such as browser type, device type, approximate location derived from an IP address, pages visited, date/time, and security logs.
Cookies or similar technologies used for essential site functions, security, accessibility, preferences, or carefully configured analytics.
Health or treatment information you voluntarily provide through an intake, appointment, contact, or other secure form. Once information identifies you and relates to care, payment, or health status, it may be PHI and/or a Part 2 record.
Please do not use a website form, email, or social-media message for an emergency. Call 911 or go to the nearest emergency department when there is an immediate danger or medical emergency. The 988 Suicide & Crisis Lifeline is available by calling or texting 988.
How We Use Website Information
To respond to your inquiry and help determine whether our services may be appropriate.
To schedule or coordinate services, verify benefits when authorized, communicate with you, and carry out treatment, payment, or health care operations as permitted by law.
To operate, secure, maintain, troubleshoot, and improve our website and services.
To comply with legal, accreditation, certification, licensing, quality, and safety requirements.
To prevent fraud, malicious activity, or misuse of our website and systems.
We do not sell or rent PHI, Part 2 records, or information indicating that an identified person is seeking addiction or mental health treatment. We do not use PHI for targeted advertising without the written authorization/consent required by law.
Website Security, SSL/TLS, and Online Tracking
We use administrative, physical, and technical safeguards designed to protect information, including Secure Socket Layer/Transport Layer Security (SSL/TLS) for sensitive information transmitted through approved website forms and systems.
No Internet transmission or storage system can be guaranteed to be completely secure. You should use a private device and secure network when submitting sensitive information.
We limit the use of tracking technologies on pages that collect or display patient information. We do not permit a tracking, analytics, advertising, chat, or session-replay vendor to receive PHI unless the use is lawful, appropriately configured, and supported by any required written agreement.
Our website may contain links to third-party websites. Their privacy practices are governed by their own notices, not this one.

Privacy Commitments

Healing Heroes maintains this privacy notice so it is easy for website users to find and review. We use and disclose information only as permitted by applicable law, process sensitive patient and transaction information through SSL/TLS or equivalent secure technology, and do not provide HIPAA- or Part 2-protected patient information to third-parties as part of certification. These practices address third-party Addiction Treatment Certification Standard 10 and the privacy/secure-processing provisions identified in third-party Terms and Conditions Section V(e).
Special Protection for Substance Use Disorder Records
Federal law gives Part 2 records additional protection. In general, we need your written consent before we disclose information that identifies you as having applied for, received, or undergone SUD diagnosis, treatment, or referral. Limited exceptions may apply, such as internal program communications, a bona fide medical emergency, certain audits/evaluations, approved research, de-identified public health reporting, reports of suspected child abuse or neglect, crimes on program premises or against program personnel, or a Part 2-compliant court order.
Where allowed, you may sign one consent covering future uses and disclosures for treatment, payment, and health care operations. You may revoke the consent in writing, except to the extent action has already been taken in reliance on it.
SUD counseling notes maintained separately from the rest of the record require a separate consent for most uses and disclosures.
Your Part 2 records cannot be used or disclosed to initiate or substantiate a criminal, civil, administrative, or legislative investigation or proceeding against you without your separate written consent or a Part 2-compliant court order.
A consent for use or disclosure in a legal proceeding against you cannot be combined with consent for another purpose.
When a Part 2 disclosure is made with your consent, the recipient will receive a copy of the consent or a clear explanation of its scope as required by law.
We will not confirm your attendance or disclose records to an employer, fire or police department, municipality, union, licensing body, employee-assistance program, family member, referral source, or other outside person merely because that person or entity is connected to your work or referral. A valid authorization/consent or specific legal authority is required.
How We May Use and Share Your Health Information
The examples below describe common categories. Part 2 records will be used or disclosed only when a valid Part 2 consent or an applicable Part 2 exception permits it.
Treatment: We may use information to provide, coordinate, or manage your care and, when legally permitted, share information with another provider involved in your treatment.
Payment: We may use or share information to bill, obtain payment, determine eligibility or benefits, obtain authorization, conduct utilization review, or coordinate benefits, subject to Part 2 requirements.
Health Care Operations: We may use information for quality assessment, staff review and training, credentialing, licensing, accreditation, legal/compliance services, audits, business planning, and other lawful operations.
Business Associates and Qualified Service Organizations: We may share information with vendors performing services for us only under an appropriate written agreement and only for permitted purposes.
Medical Emergency: We may disclose information needed to treat a bona fide medical emergency as permitted by HIPAA and Part 2.
Public Health and Safety: We may make reports or disclosures that law permits or requires, such as certain disease reporting, de-identified public health information, abuse or neglect reports, product safety reporting, or averting a serious and imminent threat, while applying Part 2 limits.
Health Oversight, Licensing, and Audits: We may disclose information for lawful audits, evaluations, inspections, investigations, or oversight by authorized agencies, subject to HIPAA and Part 2 safeguards.
Legal Proceedings and Law Enforcement: We respond only when the request and disclosure comply with all applicable HIPAA, Part 2, and New Jersey requirements. A subpoena alone may not be sufficient for

Part 2 records.

Workers’ Compensation and Other Required Uses: We may disclose information when a specific law requires or permits it, but we will apply any stricter mental health or SUD confidentiality rule.
De-Identified Information: We may use or disclose information that has been de-identified in accordance with applicable law so that it no longer identifies you.
Uses and Disclosures Requiring Your Written Permission
Uses and disclosures not described in this notice will be made only with your written authorization/consent unless law permits or requires otherwise.
Most uses and disclosures of psychotherapy notes and SUD counseling notes require separate written permission.
Marketing communications for which we receive payment, sale of PHI, testimonials, photographs, recordings, media use, and targeted advertising based on PHI require the authorization/consent applicable to the information and purpose.
You may revoke an authorization/consent in writing at any time, except to the extent we have already acted in reliance on it or another limited legal exception applies.
You may opt out of fundraising communications. Healing Heroes does not condition treatment on agreeing to fundraising.
Your Privacy Rights
Get an electronic or paper copy of your medical record. You may inspect or obtain a copy of information in the designated record set, subject to limited legal exceptions. We generally respond within 30 days. Any fee will be limited by applicable HIPAA and New Jersey law, and inability to pay will not automatically prevent access.
Ask us to correct or amend your record. We may deny a request in limited circumstances, but we will explain the denial in writing and describe any further rights.
Request confidential communications. You may ask us to contact you in a specific way or at a specific place. We will accommodate reasonable requests.
Ask us to limit what we use or share. We are not required to agree to every request, but we will honor any restriction required by law and any restriction we accept. We will honor a qualifying request not to disclose information to a health plan for payment/operations when you paid the provider in full out of pocket.
Get a list of certain disclosures. You may request an accounting of disclosures to the extent required by applicable law and implementation dates.
Get a copy of this notice. You may ask for a paper or electronic copy at any time, even if you agreed to receive it electronically.
Choose someone to act for you. A legal guardian, health care representative, or other authorized personal representative may exercise rights for you after we verify legal authority.
Revoke consent or authorization. You may revoke in writing as described above.
File a complaint. You may complain to us or to the U.S. Department of Health and Human Services Office for Civil Rights. You may also contact the New Jersey Department of Health regarding facility licensure. We will not retaliate.
Your Choices
Where the law gives you a choice, we will follow your instructions. Examples include sharing information with family or friends involved in your care, communications about services, fundraising, marketing, testimonials, and certain communications with an employer or referral source. Part 2 may require written consent even when HIPAA would otherwise allow an informal agreement.
Electronic Communications and Telehealth
Secure portal or encrypted communication is preferred for sensitive information. Ordinary email and text messages may have privacy risks. When you request or agree to an unsecure method, we will explain material risks when required and apply reasonable safeguards.
We verify contact information, limit message content, and do not leave detailed treatment information in voicemail or with another person unless you authorize it or law permits it.
Telehealth is provided through organization-approved technology and privacy procedures. We will verify identity, discuss who is present, and seek a private setting. Sessions may not be recorded without specific permission and organizational approval.
Record Security, Retention, and Facility Closure
We protect physical and electronic records against loss, tampering, alteration, destruction, and unauthorized use. We use role-based access, unique credentials, audit controls, secure storage, workforce training, vendor agreements, incident response, and secure disposal. Records are retained for the period required by applicable law. If Healing Heroes ceases operations, records will remain confidential and will be stored and made available according to New Jersey requirements.
Breach Notification
We investigate suspected privacy and security incidents and take steps to contain, mitigate, and correct them. When a breach notification is required, we will notify affected individuals and government agencies without unreasonable delay and within the deadlines required by HIPAA, Part 2, and other applicable law.
Children and Minors
Our public website is not directed to children under 13. Healing Heroes currently describes its clinical services as serving adults. When information involving a minor is received or services involving a minor are considered, we follow applicable consent, personal-representative, confidentiality, and mandatory-reporting laws.
Changes to This Notice
We may change this notice and make the revised notice effective for information we already have and information we receive in the future. The current notice will be available at our offices, upon request, and prominently posted on our website. The effective date appears at the top of the notice.
Questions, Requests, or Complaints
Contact the Healing Heroes HIPAA Privacy Officer to ask a question, obtain a copy, exercise a right, report a concern, or file a complaint:

Organization

Healing Heroes Recovery Center

551-525-HERO (4376)

285 Passaic Avenue, Second Floor, Fairfield, New Jersey 07004

info@center4heroes.com

You may also file a HIPAA or Part 2 complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. Complaints generally must be filed within 180 days of when you knew of the act or omission, subject to extensions for good cause. Filing a complaint will not affect your treatment or benefits.

Regulatory and Certification References

• 45 C.F.R. Parts 160 and 164 (HIPAA Privacy, Security, Enforcement, and Breach Notification Rules).

• 42 C.F.R. Part 2 (Confidentiality of Substance Use Disorder Patient Records), including requirements applicable beginning February 16, 2026.

• N.J.A.C. 8:43K-4.6, 4.7, 5.7, 5.9, and 6.8.

• Third Party Addiction Treatment Certification Standard 10 - Privacy, and Third Party Terms and Conditions Section V(e) privacy/secure-processing provisions.

• U.S. Department of Health and Human Services Model HIPAA Notice of Privacy Practices and Model Part 2 Patient Notice, revised February 2026.

10. WEBSITE PRIVACY POLICY AND JOINT NOTICE OF PRIVACY PRACTICES

Effective August 5, 2026

THIS NOTICE DESCRIBES HOW MEDICAL AND SUBSTANCE USE DISORDER INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, YOUR RIGHTS, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who We Are and What This Notice Covers

Healing Heroes Recovery Center ("Healing Heroes," "we," "our," or "us") provides outpatient substance use disorder and co-occurring mental health services. This document serves two purposes: (1) it explains how information collected through our website is handled; and (2) it is our combined HIPAA Notice of Privacy Practices and 42 C.F.R. Part 2 Patient Notice. It applies to Healing Heroes locations, workforce members, and health care professionals who are permitted to use this joint notice.

Our current locations include 285 Passaic Avenue, Second Floor, Fairfield, New Jersey 07004

2. A paper or electronic copy of this notice is available upon request and on our website.

Our Legal Duties

We are required by law to maintain the privacy and security of protected health information (PHI) and substance use disorder patient records protected by 42 C.F.R. Part 2 (Part 2 records).
We must provide you with this notice explaining our legal duties, privacy practices, and your rights, and we must follow the notice currently in effect.
We must notify you promptly if a breach occurs that may have compromised the privacy or security of your unsecured PHI or Part 2 records.
We apply the more protective requirement when HIPAA, Part 2, New Jersey law, or another applicable law provides different levels of confidentiality, unless a law expressly requires otherwise.
We will not retaliate against you for exercising a privacy right or filing a complaint.
Website Information We Collect
You may browse portions of our website without providing your name. Information collected through the website may include:
Information you choose to submit, such as your name, telephone number, email address, message, requested services, referral information, insurance information, appointment information, or other details.
Technical information that a web server or approved service may collect, such as browser type, device type, approximate location derived from an IP address, pages visited, date/time, and security logs.
Cookies or similar technologies used for essential site functions, security, accessibility, preferences, or carefully configured analytics.
Health or treatment information you voluntarily provide through an intake, appointment, contact, or other secure form. Once information identifies you and relates to care, payment, or health status, it may be PHI and/or a Part 2 record.
Please do not use a website form, email, or social-media message for an emergency. Call 911 or go to the nearest emergency department when there is an immediate danger or medical emergency. The 988 Suicide & Crisis Lifeline is available by calling or texting 988.
How We Use Website Information
To respond to your inquiry and help determine whether our services may be appropriate.
To schedule or coordinate services, verify benefits when authorized, communicate with you, and carry out treatment, payment, or health care operations as permitted by law.
To operate, secure, maintain, troubleshoot, and improve our website and services.
To comply with legal, accreditation, certification, licensing, quality, and safety requirements.
To prevent fraud, malicious activity, or misuse of our website and systems.
We do not sell or rent PHI, Part 2 records, or information indicating that an identified person is seeking addiction or mental health treatment. We do not use PHI for targeted advertising without the written authorization/consent required by law.
Website Security, SSL/TLS, and Online Tracking
We use administrative, physical, and technical safeguards designed to protect information, including Secure Socket Layer/Transport Layer Security (SSL/TLS) for sensitive information transmitted through approved website forms and systems.
No Internet transmission or storage system can be guaranteed to be completely secure. You should use a private device and secure network when submitting sensitive information.
We limit the use of tracking technologies on pages that collect or display patient information. We do not permit a tracking, analytics, advertising, chat, or session-replay vendor to receive PHI unless the use is lawful, appropriately configured, and supported by any required written agreement.
Our website may contain links to third-party websites. Their privacy practices are governed by their own notices, not this one.

Privacy Commitments

Healing Heroes maintains this privacy notice so it is easy for website users to find and review. We use and disclose information only as permitted by applicable law, process sensitive patient and transaction information through SSL/TLS or equivalent secure technology, and do not provide HIPAA- or Part 2-protected patient information to third-parties as part of certification. These practices address third-party Addiction Treatment Certification Standard 10 and the privacy/secure-processing provisions identified in third-party Terms and Conditions Section V(e).
Special Protection for Substance Use Disorder Records
Federal law gives Part 2 records additional protection. In general, we need your written consent before we disclose information that identifies you as having applied for, received, or undergone SUD diagnosis, treatment, or referral. Limited exceptions may apply, such as internal program communications, a bona fide medical emergency, certain audits/evaluations, approved research, de-identified public health reporting, reports of suspected child abuse or neglect, crimes on program premises or against program personnel, or a Part 2-compliant court order.
Where allowed, you may sign one consent covering future uses and disclosures for treatment, payment, and health care operations. You may revoke the consent in writing, except to the extent action has already been taken in reliance on it.
SUD counseling notes maintained separately from the rest of the record require a separate consent for most uses and disclosures.
Your Part 2 records cannot be used or disclosed to initiate or substantiate a criminal, civil, administrative, or legislative investigation or proceeding against you without your separate written consent or a Part 2-compliant court order.
A consent for use or disclosure in a legal proceeding against you cannot be combined with consent for another purpose.
When a Part 2 disclosure is made with your consent, the recipient will receive a copy of the consent or a clear explanation of its scope as required by law.
We will not confirm your attendance or disclose records to an employer, fire or police department, municipality, union, licensing body, employee-assistance program, family member, referral source, or other outside person merely because that person or entity is connected to your work or referral. A valid authorization/consent or specific legal authority is required.
How We May Use and Share Your Health Information
The examples below describe common categories. Part 2 records will be used or disclosed only when a valid Part 2 consent or an applicable Part 2 exception permits it.

Treatment: We may use information to provide, coordinate, or manage your care and, when legally permitted, share information with another provider involved in your treatment.

Payment: We may use or share information to bill, obtain payment, determine eligibility or benefits, obtain authorization, conduct utilization review, or coordinate benefits, subject to Part 2 requirements.

Health Care Operations: We may use information for quality assessment, staff review and training, credentialing, licensing, accreditation, legal/compliance services, audits, business planning, and other lawful operations.

Business Associates and Qualified Service Organizations: We may share information with vendors performing services for us only under an appropriate written agreement and only for permitted purposes.

Medical Emergency: We may disclose information needed to treat a bona fide medical emergency as permitted by HIPAA and Part 2.

Public Health and Safety: We may make reports or disclosures that law permits or requires, such as certain disease reporting, de-identified public health information, abuse or neglect reports, product safety reporting, or averting a serious and imminent threat, while applying Part 2 limits.

Health Oversight, Licensing, and Audits: We may disclose information for lawful audits, evaluations, inspections, investigations, or oversight by authorized agencies, subject to HIPAA and Part 2 safeguards.

Legal Proceedings and Law Enforcement: We respond only when the request and disclosure comply with all applicable HIPAA, Part 2, and New Jersey requirements. A subpoena alone may not be sufficient for

Part 2 records.

Workers’ Compensation and Other Required Uses: We may disclose information when a specific law requires or permits it, but we will apply any stricter mental health or SUD confidentiality rule.

De-Identified Information: We may use or disclose information that has been de-identified in accordance with applicable law so that it no longer identifies you.

Uses and Disclosures Requiring Your Written Permission

Uses and disclosures not described in this notice will be made only with your written authorization/consent unless law permits or requires otherwise.
Most uses and disclosures of psychotherapy notes and SUD counseling notes require separate written permission.
Marketing communications for which we receive payment, sale of PHI, testimonials, photographs, recordings, media use, and targeted advertising based on PHI require the authorization/consent applicable to the information and purpose.
You may revoke an authorization/consent in writing at any time, except to the extent we have already acted in reliance on it or another limited legal exception applies.
You may opt out of fundraising communications. Healing Heroes does not condition treatment on agreeing to fundraising.
Your Privacy Rights
Get an electronic or paper copy of your medical record. You may inspect or obtain a copy of information in the designated record set, subject to limited legal exceptions. We generally respond within 30 days. Any fee will be limited by applicable HIPAA and New Jersey law, and inability to pay will not automatically prevent access.
Ask us to correct or amend your record. We may deny a request in limited circumstances, but we will explain the denial in writing and describe any further rights.
Request confidential communications. You may ask us to contact you in a specific way or at a specific place. We will accommodate reasonable requests.
Ask us to limit what we use or share. We are not required to agree to every request, but we will honor any restriction required by law and any restriction we accept. We will honor a qualifying request not to disclose information to a health plan for payment/operations when you paid the provider in full out of pocket.
Get a list of certain disclosures. You may request an accounting of disclosures to the extent required by applicable law and implementation dates.
Get a copy of this notice. You may ask for a paper or electronic copy at any time, even if you agreed to receive it electronically.
Choose someone to act for you. A legal guardian, health care representative, or other authorized personal representative may exercise rights for you after we verify legal authority.
Revoke consent or authorization. You may revoke in writing as described above.
File a complaint. You may complain to us or to the U.S. Department of Health and Human Services Office for Civil Rights. You may also contact the New Jersey Department of Health regarding facility licensure. We will not retaliate.

Your Choices

Where the law gives you a choice, we will follow your instructions. Examples include sharing information with family or friends involved in your care, communications about services, fundraising, marketing, testimonials, and certain communications with an employer or referral source. Part 2 may require written consent even when HIPAA would otherwise allow an informal agreement.

Electronic Communications and Telehealth
Secure portal or encrypted communication is preferred for sensitive information. Ordinary email and text messages may have privacy risks. When you request or agree to an unsecure method, we will explain material risks when required and apply reasonable safeguards.
We verify contact information, limit message content, and do not leave detailed treatment information in voicemail or with another person unless you authorize it or law permits it.
Telehealth is provided through organization-approved technology and privacy procedures. We will verify identity, discuss who is present, and seek a private setting. Sessions may not be recorded without specific permission and organizational approval.
Record Security, Retention, and Facility Closure
We protect physical and electronic records against loss, tampering, alteration, destruction, and unauthorized use. We use role-based access, unique credentials, audit controls, secure storage, workforce training, vendor agreements, incident response, and secure disposal. Records are retained for the period required by applicable law. If Healing Heroes ceases operations, records will remain confidential and will be stored and made available according to New Jersey requirements

Breach Notification

We investigate suspected privacy and security incidents and take steps to contain, mitigate, and correct them. When a breach notification is required, we will notify affected individuals and government agencies without unreasonable delay and within the deadlines required by HIPAA, Part 2, and other applicable law.
Children and Minors
Our public website is not directed to children under 13. Healing Heroes currently describes its clinical services as serving adults. When information involving a minor is received or services involving a minor are considered, we follow applicable consent, personal-representative, confidentiality, and mandatory-reporting laws.

Changes to This Notice

We may change this notice and make the revised notice effective for information we already have and information we receive in the future. The current notice will be available at our offices, upon request, and prominently posted on our website. The effective date appears at the top of the notice.

Questions, Requests, or Complaints

Contact the Healing Heroes HIPAA Privacy Officer to ask a question, obtain a copy, exercise a right, report a concern, or file a complaint:

Organization

Healing Heroes Recovery Center
551-525-HERO (4376)
285 Passaic Avenue, Second Floor, Fairfield, New Jersey 07004
info@center4heroes.com

You may also file a HIPAA or Part 2 complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. Complaints generally must be filed within 180 days of when you knew of the act or omission, subject to extensions for good cause. Filing a complaint will not affect your treatment or benefits.

Regulatory and Certification References

45 C.F.R. Parts 160 and 164 (HIPAA Privacy, Security, Enforcement, and Breach Notification Rules).
42 C.F.R. Part 2 (Confidentiality of Substance Use Disorder Patient Records), including requirements applicable beginning February 16, 2026.
N.J.A.C. 8:43K-4.6, 4.7, 5.7, 5.9, and 6.8.
Third Part Addiction Treatment Certification Standard 10 - Privacy, and Third Party terms and Conditions Section V(e) privacy/secure-processing provisions.
U.S. Department of Health and Human Services Model HIPAA Notice of Privacy Practices and Model Part 2 Patient Notice, revised February 2026.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the Site after changes are made constitutes acceptance of the revised policy.

12. Contact Information

If you have any questions about this Privacy Policy, please contact us at:

Healing Heroes Recovery Inc.

info@center4heroes.com

551-525-HERO (4376)

285 Passiac Ave, 2nd FL

Fairfield, NJ 07004