New Legacy Reentry Corporation
Effective Date: 8/12/2024
New Legacy Reentry Corporation ("New Legacy," "we," "our," or "us") is committed to protecting the privacy, confidentiality, and security of information obtained through our public website. This Website Privacy Policy is intended for website visitors, referral sources, and members of the general public and explains how information submitted or collected through the website is handled.
This policy:
- Applies only to information collected through New Legacy’s website
- Reflects Kentucky-specific consumer privacy expectations for behavioral health organizations
- Aligns with CARF accreditation standards related to public-facing communications
- Does not replace or supersede New Legacy’s Notice of Privacy Practices (NPP), which governs protected clinical and treatment records
1. Information Collected Through the Website
a. Non-Personal / Technical Information
When you visit our website, we may automatically collect limited, non-identifying information such as:
- Internet Protocol (IP) address
- Browser type and version
- Operating system
- Date and time of access
- Pages viewed and time spent on the site
This information is used solely for website administration, security monitoring, analytics, and service improvement and does not identify you as a client or patient.
b. Voluntarily Submitted Consumer Information
You may voluntarily submit limited personal information when you:
- Complete a contact or inquiry form
- Submit a general referral or information request
- Request information about programs or services
- Communicate with us via website forms or general email
This information may include your name, phone number, email address, and general inquiry details.
Website visitors are strongly discouraged from submitting sensitive personal information, medical details, mental health information, or substance use disorder information through the website.
2. Kentucky Consumer Privacy Context (Website Use)
Under Kentucky Revised Statutes (KRS) and Kentucky Administrative Regulations (KAR), behavioral health organizations are required to protect consumer confidentiality and clearly communicate how information is handled.
Consistent with Kentucky consumer privacy expectations:
- Information submitted through this website is treated as general consumer communication, not a clinical record
- Website submissions do not establish a provider–client relationship
- Website information is handled in a manner that respects consumer dignity, privacy, and transparency
Where federal and state laws overlap, New Legacy applies the most protective privacy standard appropriate to website-based communications.
3. HIPAA Applicability (Website-Specific)
New Legacy is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) when providing healthcare and behavioral health services. However:
- The public website is not a HIPAA-secure communication platform
- Information submitted through website forms is not intended for the transmission of Protected Health Information (PHI)
- Website communications are administrative and informational in nature only
HIPAA protections apply once an individual formally engages in services and receives a copy of New Legacy’s Notice of Privacy Practices.
4. 42 CFR Part 2 (Substance Use Disorder Confidentiality)
Federal law (42 CFR Part 2) provides enhanced confidentiality protections for substance use disorder diagnosis, treatment, or referral records.
- New Legacy does not collect or maintain 42 CFR Part 2–protected records through its website
- Website visitors should not submit substance use–related information online
- All SUD treatment records are protected only after formal admission to services and are governed by separate confidentiality policies
5. How Website Information Is Used
Information collected through the website may be used to:
- Respond to general inquiries or requests for information
- Provide non-clinical information about programs and services
- Improve website content, functionality, and security
- Monitor misuse or unauthorized access
Website information is not used for treatment decisions, diagnosis, or clinical care.
6. Disclosure of Website Information
Website information may be disclosed only:
- To authorized New Legacy staff or contractors for administrative purposes
- As required by law, regulation, or court order
- To protect the rights, safety, or security of New Legacy, website users, or the public
New Legacy does not sell, rent, or trade website information.
7. Cookies and Tracking Technologies
The website may use cookies or similar technologies to enhance user experience and collect aggregate usage data. Cookies do not collect health, treatment, or clinical information.
Users may disable cookies through browser settings; some features may be limited.
8. Data Security (Website Scope)
New Legacy uses reasonable administrative, technical, and physical safeguards to protect website information. Despite these safeguards, electronic communications over the internet cannot be guaranteed to be fully secure.
9. External Websites
The New Legacy website may contain links to third-party websites. New Legacy is not responsible for the privacy practices, policies, or content of external sites.
10. Children’s Privacy
The website is not intended for children under the age of 13. New Legacy does not knowingly collect personal information from children through the website.
11. Consumer Rights & Transparency (Website Context)
Website visitors may:
- Request general information about New Legacy’s privacy practices
- Ask questions about how website-submitted information is handled
Requests related to treatment records or client information must follow formal authorization processes governed by HIPAA, 42 CFR Part 2, and Kentucky law.
12. Changes to This Website Privacy Policy
New Legacy reserves the right to update this Website Privacy Policy at any time. Updates will be posted on this page with a revised effective date.
13. Contact Information
Questions regarding this Website Privacy Policy may be directed to:
New Legacy Reentry Corporation
1115 Garvin Place
Louisville, KY 40203
Phone: 502-276-0660
Email: [email protected]
14. CARF Standards Alignment (Public Website)
This Website Privacy Policy aligns with CARF behavioral health standards applicable to public-facing information by:
- Clearly defining the scope and limitations of website communications
- Protecting consumer privacy and dignity
- Distinguishing public inquiries from protected clinical records
- Ensuring transparency, ethical information use, and consumer awareness
This Website Privacy Policy is a consumer-facing privacy notice intended to comply with applicable federal law, Kentucky consumer privacy expectations, and CARF accreditation standards as they apply to public, non-clinical website communications.