Privacy Policy

01Introduction

At The Crossing Recovery, we understand that privacy, confidentiality, and trust are especially important when individuals and families seek information about recovery and treatment services.

This Privacy Policy explains how The Crossing Recovery ("The Crossing," "we," "us," or "our") collects, uses, maintains, and protects information obtained through our website, online forms, electronic communications, and related digital services.

We are committed to handling personal information responsibly, maintaining appropriate safeguards, and respecting the privacy rights of those who interact with our organization.

By accessing our website or using our online services, you acknowledge the information described in this Privacy Policy. Where consent is legally required for a particular activity, we will seek that consent separately.

Our website is located at: https://thecrossingrecoveryoc.com

02Information We Collect

We collect certain information to communicate with visitors, respond to inquiries, operate our website, and support individuals interested in our services.

Information You Provide

Depending on how you interact with us, we may collect:

• First and last name
• Email address
• Telephone number
• Information submitted through contact or inquiry forms
• Communication preferences
• Insurance information voluntarily submitted for verification
• Information you choose to provide regarding treatment needs or service inquiries
• Messages or correspondence sent to our organization

We encourage visitors to share only the information necessary to initiate communication. Sensitive medical or treatment information should be submitted only through communication methods designated for that purpose.

Information Collected Automatically

When you visit our website, certain technical information may be collected, including:

• Internet Protocol (IP) address
• Browser and operating system details
• Device type and identifiers
• Pages visited and time spent on the website
• Referring websites or search sources
• General geographic information derived from technical data
• Website performance and diagnostic information

This information helps us maintain website functionality, identify technical issues, improve usability, and understand overall visitor activity.

03How We Use Information

The Crossing Recovery may use collected information for legitimate organizational and operational purposes, including:

Responding to Inquiries

To answer questions, provide requested information, and connect individuals with appropriate representatives.

Providing Services

To support administrative processes, coordinate requested services, and facilitate appropriate communications related to treatment or admissions.

Website Operations

To maintain website performance, improve navigation, identify technical problems, and support the security of our online systems.

Communication

To contact individuals regarding their requests, appointments, service-related matters, or other communications they have authorized.

Administrative Operations

To maintain appropriate business records, manage inquiries, coordinate internal processes, and fulfill applicable organizational obligations.

Website Improvement

To review general website performance and evaluate the effectiveness of our information and communication resources.

Legal and Regulatory Compliance

To meet obligations under applicable federal and state laws, including healthcare privacy and confidentiality requirements.

We do not consider general use of our website to constitute consent to receive promotional communications or authorization to disclose protected health information.

04Cookies and Website Technologies

Our website may use cookies and similar technologies to support website performance, remember user preferences, and evaluate site functionality.

Cookies are small data files that websites place on devices to remember certain information.

The types of cookies or related technologies used may include:

Essential Cookies

Support basic functionality, security, and essential website operations.

Preference Cookies

Allow a website to remember certain visitor selections or preferences when those features are available.

Analytics Technologies

Help measure website activity, page performance, and general visitor engagement.

Advertising Technologies

Where implemented and legally permitted, certain technologies may help measure advertising effectiveness or understand how visitors discover our website.

Visitors can generally manage cookies through their browser settings. Restricting certain cookies may affect some website functions.

We evaluate tracking technologies in light of applicable privacy requirements, particularly when information could identify an individual seeking healthcare or treatment services.

We do not authorize the use of protected patient information for advertising or tracking activities in violation of applicable law.

05Confidentiality of Healthcare Information

Because The Crossing Recovery provides substance use disorder treatment services, certain information may receive additional legal protections.

When applicable, these protections include:

• The Health Insurance Portability and Accountability Act of 1996 (HIPAA)
• The HIPAA Privacy, Security, and Breach Notification Rules
• Federal confidentiality requirements under 42 CFR Part 2
• Applicable California medical privacy and confidentiality laws

Protected health information and qualifying substance use disorder treatment records are managed according to applicable legal requirements.

Information maintained as part of a patient's treatment record may be subject to additional restrictions regarding use, disclosure, access, and authorization.

This general website Privacy Policy does not replace our separate Notice of Privacy Practices or any patient privacy notice required by law.

Individuals seeking information about their rights concerning medical or treatment records may contact The Crossing Recovery directly.

06Sharing and Disclosure of Information

The Crossing Recovery may disclose personal information only as appropriate for legitimate business purposes, authorized activities, or applicable legal obligations.

Information may be shared with the following categories of recipients when appropriate:

Authorized Service Providers

Companies or professionals that support website hosting, communication systems, information technology, secure record management, customer relationship management, or other necessary operational functions.

Healthcare and Administrative Partners

Authorized providers, insurers, or administrative organizations when information sharing is permitted and necessary for an appropriate purpose.

Legal or Regulatory Authorities

Government agencies, courts, or other authorized parties when disclosure is required or permitted by applicable law.

Organizational Transactions

Appropriate parties involved in a lawful merger, restructuring, or transfer of organizational assets, subject to applicable confidentiality requirements.

Other Authorized Recipients

Parties to whom an individual has expressly authorized disclosure or where another lawful basis permits disclosure.

Service providers handling protected information must satisfy applicable confidentiality, security, and contractual requirements.

We do not sell patient treatment records. We do not disclose protected health information to unrelated advertisers for their independent marketing purposes without the authorization or other legal basis required by law.

07Text Messaging and SMS Communications

The Crossing Recovery may use text messaging to communicate with individuals who request information or consent to receive communications.

SMS communications may include:

• Responses to submitted inquiries
• Requested information about services
• Appointment-related communications
• Administrative or follow-up messages
• Other messages expressly authorized by the recipient

SMS Consent

Where legally required, individuals must provide appropriate consent before receiving automated or promotional text messages.

Consent may be collected through a clearly identified website checkbox, an appropriate written authorization, or another legally recognized method.

Submitting a contact form or initiating a conversation does not automatically enroll an individual in unrelated promotional messaging.

Message frequency may vary. Message and data rates may apply. Consent to promotional text messaging is not a condition of receiving treatment or purchasing services.

Opting Out

Recipients may reply STOP to an eligible SMS message to request cancellation of further messages covered by that consent.

Recipients may reply HELP for assistance or contact The Crossing Recovery directly.

We honor valid requests to withdraw messaging consent in accordance with applicable law. Certain service-related communications may still occur where independently authorized or legally permitted.

SMS Privacy

Telephone numbers and SMS consent records will not be sold or shared with unrelated third parties for their independent marketing purposes.

Information may be provided to authorized messaging providers only as necessary to deliver communications and support related services.

Because ordinary SMS communications may not provide the same security protections as designated healthcare communication systems, sensitive medical information should be communicated through approved channels.

08Information Retention

The Crossing Recovery retains personal information for periods reasonably necessary to fulfill the purposes for which it was collected, maintain appropriate business records, and meet applicable legal obligations.

Retention periods may vary based on:

• The nature and sensitivity of the information
• The purpose for which it was collected
• Applicable recordkeeping requirements
• Legitimate administrative or operational needs
• Legal disputes or regulatory obligations
• Requirements relating to healthcare or treatment documentation

Information that is no longer reasonably required will be deleted, de-identified, or otherwise handled in accordance with applicable retention and disposal requirements.

Clinical records may be subject to retention rules separate from those governing general website information.

09Information Security

Protecting personal information is an important responsibility.

The Crossing Recovery employs or requires appropriate administrative, technical, and organizational safeguards designed to reduce the risk of unauthorized access, disclosure, alteration, or loss.

These safeguards may include access controls, approved service-provider arrangements, secure communication procedures, and other protections appropriate to the information involved.

Despite reasonable security precautions, no internet-based system or electronic transmission method can be guaranteed to be completely secure.

Individuals should avoid transmitting highly sensitive information through unsecured channels and should contact our team when assistance with secure communication is needed.

10Your Privacy Rights

Depending on the nature of the information and applicable law, individuals may have rights concerning their personal information.

These rights may include:

• Requesting access to certain personal information
• Requesting correction of inaccurate information
• Requesting deletion of eligible information
• Requesting information about certain data practices
• Withdrawing consent when processing depends on consent
• Opting out of certain communications
• Exercising additional rights provided by applicable privacy laws

Some requests may be subject to exceptions or limitations, including legal recordkeeping obligations and healthcare confidentiality requirements.

We may take reasonable steps to verify an individual's identity before fulfilling a privacy-related request.

Requests concerning protected medical records may be handled through our separate healthcare privacy procedures.

11California Privacy Rights

California residents may have additional protections under applicable state privacy laws, including the California Consumer Privacy Act, as amended, where those laws apply.

Depending on eligibility and the information involved, these protections may include rights to request access, correction, or deletion of personal information and to opt out of certain sales or sharing of personal information.

Certain healthcare information is governed by specialized privacy laws and may be exempt from particular provisions of general consumer privacy statutes.

The Crossing Recovery will provide applicable privacy notices, request procedures, and opt-out mechanisms when required by law.

We will not unlawfully discriminate against individuals for exercising applicable privacy rights.

12Third-Party Websites and Services

Our website may include links to external websites, social media platforms, educational resources, or third-party services.

These websites operate independently and may maintain their own privacy policies, security practices, and information collection procedures.

The Crossing Recovery does not control the privacy practices of independently operated third-party websites.

We encourage visitors to review the privacy policies of external services before sharing personal information.

13Children's Privacy

Our general website is not specifically directed toward children under the age of 13.

We do not knowingly solicit personal information from children under 13 through our general website without appropriate legal authorization.

If we discover that information has been collected from a child in violation of applicable requirements, we will take appropriate steps to address the situation.

Information concerning minors in a healthcare or treatment setting is handled under the laws and confidentiality requirements applicable to those services.

Parents or legal guardians with concerns may contact our organization directly.

14Information Processing and Transfers

Information obtained through our website or digital services may be processed by The Crossing Recovery and authorized service providers operating in different geographic locations.

Where information is transferred or processed outside the location in which it was originally collected, we will apply safeguards and legal requirements appropriate to the information involved.

Transfers involving protected medical or treatment information remain subject to applicable healthcare privacy requirements.

15Changes to This Privacy Policy

The Crossing Recovery may revise this Privacy Policy periodically to reflect changes in our website, services, information practices, technology, or legal obligations.

When revisions occur, the updated policy will be published on this website with a revised "Last Updated" date.

Additional notice will be provided when required by applicable law.

Visitors are encouraged to review this policy periodically to remain informed about our privacy practices.

16Contact The Crossing Recovery

For questions about this Privacy Policy, requests involving personal information, or concerns regarding our website's privacy practices, please contact:

The Crossing Recovery
1545 Newport Boulevard
Costa Mesa, California 92627
Phone: (949) 659-6777
Website: https://thecrossingrecoveryoc.com

Individuals with questions regarding medical record confidentiality, patient privacy rights, or protected treatment information may also request information about our separate Notice of Privacy Practices.

© 2026 The Crossing Recovery. All Rights Reserved.