Privacy Policy
Effective Date: 4.19.26
Last Updated: 7.16.26
Grand Rising Behavioral Health (“Grand Rising,” “we,” “our,” or “us”) iscommitted to protecting the privacy, confidentiality, and security of allindividuals who access our services or visit our website.
This Privacy Policy explains how we collect, use, and safeguardinformation in accordance with:
- The Health Insurance Portability and Accountability Act (HIPAA)
- The Health Information Technology for Economic and Clinical Health Act (HITECH)
- Massachusetts Data Security Regulations (201 CMR 17.00)
- Massachusetts Department of Public Health (DPH) requirements
- Standards of The Joint Commission
- The federal Confidentiality of Substance Use Disorder Patient Records rule (42 C.F.R. Part 2)
- Massachusetts mental health and substance use confidentiality laws (M.G.L. c. 112, § 129A; M.G.L. c. 123, § 36; M.G.L. c. 111E, § 18; M.G.L. c. 233, § 20B)
- The Massachusetts right-of-privacy statute (M.G.L. c. 214, § 1B) and Massachusetts data breach notification law (M.G.L. c. 93H)
- Massachusetts telehealth requirements (Chapter 260 of the Acts of 2020)
This policy applies to information collected through our website, digital communications, and intake processes. It does not replace our Notice of Privacy Practices (NPP), which governs clinical information.
1. No Provider–Patient Relationship
Use of this website, including submitting forms or communicating electronically, does not establish a provider–patient relationship.
A clinical relationship is only established after:
- Completion of intake and assessment
- Acceptance into services
- Execution of required consent and treatment documentation
2. Information We Collect
Information You Provide
- Name, phone number, email
- Insurance and demographic information
- Service-related information
Automatically Collected Information
- IP address
- Device and browser data
- Website usage patterns
- Cookies, pixels, and similar technologies (see Section 11)
3. How We Use Information
We use information to:
- Respond to inquiries and coordinate admissions
- Provide treatment, payment, and healthcare operations (TPO)
- Communicate about services and scheduling
- Improve website functionality
- Comply with legal and regulatory obligations
4. Electronic Communication Risk
Electronic communications may not be fully secure.
- Do not submit urgent or highly sensitive information through website forms
- Response times are not guaranteed
- Unsecured communication carries inherent risk
5. Emergency Disclaimer
This website is not monitored for emergencies.
If you are experiencing a medical or psychiatric emergency:
- Call 911, or
- Call/text 988, or
- Go to the nearest emergency room
6. Data Protection
We maintain administrative, technical, and physical safeguards,including:
- Encryption where appropriate
- Access controls
- Workforce training
- Monitoring systems
7. Third-Party Services
We may use third-party vendors:
- Vendors handling PHI sign Business Associate Agreements (BAAs)
- Vendors must comply with HIPAA and applicable laws
- Website analytics tools do not access PHI
8. Your Rights
You have the right to:
- Access your records
- Request corrections
- Request restrictions
- Request confidential communications
- File a complaint
To exercise any of these rights or to file a privacy complaint, contact us at info@grandrisingbehavioralhealth.com or (781) 604-1956. You may also file a complaint directly with the U.S. Department of Health & Human Services, Office for Civil Rights at hhs.gov/ocr/complaints or 1-800-368-1019, or with the Massachusetts Attorney General's Office at mass.gov/how-to/file-a-consumer-complaint. We will never retaliate against you for filing a complaint.
9. Confidentiality of Mental Health & Substance Use Disorder Records
As an outpatient mental health and substance use disorder (SUD) treatment provider, we apply heightened protections to treatment records:
- Records that identify you as receiving substance use disorder treatment are protected under the federal Confidentiality of Substance Use Disorder Patient Records rule (42 C.F.R. Part 2) and will not be disclosed without your written consent, except as permitted by law (for example, in a medical emergency, under a specific court order, or to report a crime on our premises or against our personnel)
- Records disclosed with your consent carry a notice prohibiting re-disclosure except as permitted by 42 C.F.R. Part 2
- Mental health records receive additional confidentiality protections under Massachusetts law, including M.G.L. c. 112, § 129A, M.G.L. c. 123, § 36, M.G.L. c. 111E, § 18, and the psychotherapist–patient privilege (M.G.L. c. 233, § 20B)
- If a breach of unsecured information occurs, we provide notification as required by HIPAA/HITECH and M.G.L. c. 93H
10. Telehealth & Telemedicine Services
When clinically appropriate, we offer secure telehealth and telemedicine services to patients located in Massachusetts:
- Telehealth visits are conducted through an encrypted, HIPAA-compliant platform, and vendors supporting the platform sign Business Associate Agreements (BAAs)
- Telehealth sessions are not recorded without your written consent
- Information shared during telehealth sessions receives the same privacy and confidentiality protections as in-person care, including the mental health and substance use disorder protections described above
- Our clinicians are licensed to provide telehealth services in Massachusetts only, and we verify your identity and location at the start of each session
- We do not dispense, sell, or ship medications online or on-site — prescriptions issued during telehealth or in-person visits are transmitted electronically to an external, licensed pharmacy of your choice, where they are filled and dispensed
11. Cookies & Advertising Technology
We use cookies and similar technologies (pixels, tags, and local storage) on this website. You can accept or decline non-essential cookies using the cookie banner shown on your first visit — declining does not limit your ability to browse this site or contact us. The technologies we use fall into four categories:
- Essential & security — required for site functionality, form protection, and click-fraud prevention; these are always active
- Analytics — Google Analytics measures visits, pages viewed, and how visitors reach us, using IP address, device, and browser information
- Advertising — Google Ads and Meta (Facebook) technologies measure whether our advertising leads to calls or form submissions and may use ad-click identifiers
- Call attribution — our call-tracking technology may display a different phone number depending on how you reached our site, so we can attribute your call to its marketing source
These tools receive technical and usage information only — we do not share your treatment records or the clinical information you submit through our forms with advertising platforms. In addition to the cookie banner, you may opt out directly through Google Ads Settings, Meta Ad Preferences, the Google Analytics opt-out browser add-on, and the industry opt-out portal at optout.aboutads.info.
12. Call Recording & Call Tracking
Calls to our admissions line are recorded for quality, training, and accurate care coordination. An automated message notifies you that the call is being recorded before you are connected to our team, consistent with the Massachusetts wiretap statute (M.G.L. c. 272, § 99). If you prefer not to be recorded, you may contact us instead through our website forms or by email at info@grandrisingbehavioralhealth.com.
We also use call-tracking technology that logs call details such as the number dialed, caller ID, call duration, and the marketing source of the call. Call recordings and call details are safeguarded in accordance with this policy and, where they contain health information, are protected as protected health information under HIPAA and the confidentiality rules described in Section 9.
13. Children's Privacy
Our services are available only to adults 18 years of age and older. This website is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us personal information, contact us at info@grandrisingbehavioralhealth.com and we will delete it.
14. Changes to This Policy
We may update this policy periodically. Updates will be posted with arevised effective date.
15. Contact Information
Grand Rising Behavioral Health
1 Edgewater Dr., Suite 202
Norwood, MA 02062
Phone: (781) 604-1956
Email: info@grandrisingbehavioralhealth.com
