New Leaf Recovery NJ
Website: https://newleafrecoverynj.com/
Last Updated: December 29, 2025
New Leaf Recovery NJ (“New Leaf Recovery,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the confidentiality, integrity, and security of information about you, particularly information related to mental health and substance use disorder treatment.
This Privacy Policy describes how we collect, use, disclose, and protect information when you visit or use https://newleafrecoverynj.com/ (the “Website”), interact with our digital content, or communicate with us electronically.
IMPORTANT NOTE (HIPAA & Part 2):
If you are a patient of New Leaf Recovery, our HIPAA Notice of Privacy Practices (the “NPP”) describes how we use and disclose Protected Health Information (PHI) in connection with your care. This Privacy Policy supplements but does not replace the NPP.
For substance use disorder (SUD) services, your records may also be protected by 42 C.F.R. Part 2, which imposes special confidentiality protections on SUD treatment records. (HHS)
If there is any conflict between this Privacy Policy and HIPAA or 42 C.F.R. Part 2, those laws and our NPP will control.
This Privacy Policy applies to:
Visitors and users of https://newleafrecoverynj.com/ and any related pages we control that link to this Privacy Policy;
Online forms, chat tools, and contact methods provided through this Website;
Email, SMS/text, and other electronic communications initiated through the Website.
This Privacy Policy does not govern:
Offline collection and use of PHI in the course of treatment at our facilities (covered by HIPAA and our NPP);
Third-party websites, services, or applications that are not under our control, even if linked from this Website.
Because we provide behavioral health, mental health, and substance use disorder services in New Jersey, our privacy practices are influenced by the following laws and regulations, among others:
HIPAA and the HITECH Act (federal health privacy and security laws governing PHI); (HHS)
42 C.F.R. Part 2 (federal regulations governing confidentiality of SUD treatment records); (eCFR)
New Jersey mental health and substance use confidentiality laws, including but not limited to:
N.J.S.A. 30:4-24.3 (confidentiality of records for individuals receiving mental health services); (Justia Law)
N.J.A.C. 10:37-6.79 (confidentiality of records for persons receiving mental health services); (Legal Information Institute)
N.J.A.C. 10:41 (records confidentiality and access to client, division, and provider records); (NJ.gov)
N.J.A.C. 10:161A and N.J.A.C. 8:111-27.1 (standards and confidentiality for residential substance use disorder treatment facilities, requiring compliance with HIPAA and 42 C.F.R. Part 2). (Legal Information Institute)
New Jersey Rules of Evidence 534 (mental health provider-patient privilege). (Sarno da Costa D’Aniello Maceri Webb LLC)
Applicable federal and New Jersey consumer privacy, security, and data breach notification laws.
We also strive to align with relevant Google policies and guidelines for health and privacy-related content, including clear disclosure of data collection and use, and appropriate notices when we use Google tools and services. (Google Policies)
For purposes of this Privacy Policy:
Personal Information means information that identifies, relates to, describes, or could reasonably be linked with a particular individual (e.g., name, email address, phone number, IP address).
Protected Health Information (PHI) has the meaning given in HIPAA, and generally includes individually identifiable health information related to your past, present, or future physical or mental health or condition, the provision of health care to you, or payment for such care, when maintained by a HIPAA-covered entity or its business associate. (HHS)
Part 2 Records means records relating to substance use disorder diagnosis, treatment, or referral for treatment that are maintained by a Part 2 program and protected under 42 C.F.R. Part 2.
De-identified Information means information that does not identify you and cannot reasonably be used to identify you.
The information we collect depends on how you interact with our Website and services. Categories may include:
When you use our Website, you may choose to provide us with:
Contact information – name, email address, phone number, city/state, and similar information;
Inquiry/assessment information – details you provide through contact forms, assessment forms, pre-screening questionnaires, or “request a callback” forms, which may include information about:
Mental health concerns;
Substance use concerns;
Prior treatment history;
Insurance coverage or payment questions;
Communication content – information included in emails, SMS/text messages, or other communications you send us;
Employment/volunteer information – if you apply for employment via the Website, we may collect your resume, employment history, education, and other applicant data.
Important:
Do not include extremely sensitive details (e.g., Social Security numbers, financial account numbers) in free-text fields unless we specifically request them through a secure, designated form.
When you visit the Website, we and our service providers may automatically collect certain information about your device and usage, such as:
IP address and approximate location;
Browser type and version, operating system, device type;
Date and time of visits;
Pages viewed, links clicked, time spent on pages;
Referring/exit pages;
Interaction with forms or embedded content.
This information may be collected through:
Cookies and similar technologies;
Pixel tags / web beacons;
Log files;
Analytics or advertising tools (e.g., Google Analytics, Google Ads) where implemented. (Google Policies)
We treat this information as Personal Information if it can reasonably be linked to you.
We may receive information about you from:
Referral sources (e.g., other providers, EAPs, or organizations) in accordance with HIPAA/Part 2 and applicable consent requirements;
Insurance payors, if you contact us about benefits or coverage;
Third-party analytics, advertising, or social media platforms, subject to their own privacy policies.
We may use your information for the following purposes, consistent with HIPAA, 42 C.F.R. Part 2, and New Jersey law, where applicable:
Responding to Your Requests
To respond to inquiries submitted through our Website, by email, or by phone (e.g., treatment inquiries, appointment requests, insurance questions).
Evaluating Eligibility and Coordinating Care
To conduct preliminary assessments, determine appropriate services, and coordinate care, consistent with HIPAA/Part 2 and other applicable confidentiality rules.
Providing and Improving Services
To administer, operate, maintain, and improve our Website and services;
To personalize your online experience and tailor content to your interests.
Communications
To send you information related to your inquiries, care coordination (when permitted), or important notices about our services or this Privacy Policy;
Where permitted by law, to send limited marketing or informational communications (you may opt out where required by law).
Analytics and Website Performance
To understand how visitors use our Website;
To monitor and protect the security of the Website;
To evaluate and improve our digital content and outreach strategies (including compliance with Google and other platform guidelines). (Google Policies)
Legal, Regulatory, and Safety Purposes
To comply with applicable federal and state laws, regulations, court orders, and legal obligations;
To protect the rights, property, and safety of New Leaf Recovery, our patients, staff, and others;
To detect and prevent fraud, misuse, or security incidents.
When the information constitutes PHI or Part 2 Records, we will only use or disclose it as permitted or required by HIPAA, 42 C.F.R. Part 2, and New Jersey confidentiality laws, and as described in our Notice of Privacy Practices.
We do not sell your Personal Information.
We may share your information as follows, subject to HIPAA, 42 C.F.R. Part 2, and New Jersey law:
We may share information with trusted vendors who perform services for us, such as:
Website hosting and maintenance;
Secure forms and intake platforms;
Email and SMS/text communication services;
Analytics and advertising platforms (e.g., Google Analytics/Ads) where used; (Google Policies)
Where such vendors handle PHI, we will enter into Business Associate Agreements (BAAs) as required by HIPAA.
When permissible under HIPAA and, if applicable, 42 C.F.R. Part 2 and New Jersey law, we may share PHI and Part 2 Records with:
Other health care providers involved in your treatment;
Insurance companies, health plans, or third-party administrators;
Laboratories, pharmacies, or other ancillary service providers.
Such disclosures will only occur as permitted or required by law or pursuant to your authorization/consent where required.
If you receive SUD treatment through a program subject to 42 C.F.R. Part 2, your SUD treatment records are given extra protections:
No identifying information about your SUD diagnosis, treatment, or referral for treatment will be disclosed outside the Part 2 program unless:
You provide specific written consent/authorization that meets Part 2 requirements;
The disclosure is permitted by Part 2 without consent (e.g., bona fide medical emergency, certain research/audit activities, or pursuant to a court order that meets Part 2 requirements); or
Another Part 2 exception applies. (eCFR)
Any redisclosure of Part 2-protected information is prohibited unless explicitly allowed by Part 2 or with your authorization.
We may disclose Personal Information (including PHI) as allowed or required by law, for example:
To comply with a valid subpoena, court order, or other legal process that meets HIPAA/Part 2 and New Jersey requirements;
To report suspected child abuse, elder abuse, or abuse of vulnerable adults as required by law;
To prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law and professional standards;
To law enforcement when permitted or required by law.
New Jersey mental health and SUD confidentiality laws, including N.J.S.A. 30:4-24.3, N.J.A.C. 10:37-6.79, N.J.A.C. 10:41, N.J.A.C. 10:161A, and N.J.A.C. 8:111-27.1, may impose additional restrictions or requirements on such disclosures, which we follow. (Legal Information Institute)
We may use or share de-identified or aggregated information that does not identify you, for:
Analytics and research;
Reporting and internal planning;
Improving our programs and Website.
We and our service providers may use cookies and similar technologies to:
Recognize your browser or device;
Remember your preferences;
Understand how visitors use our Website;
Improve site functionality and performance;
Support security, fraud prevention, and advertising where applicable.
Strictly necessary cookies – required for the Website to function (e.g., security, session management).
Performance/analytics cookies – help us understand Website usage and improve user experience (e.g., Google Analytics).
Functional cookies – remember your preferences (e.g., language, form choices).
Advertising/remarketing cookies – if used, may help deliver ads that are more relevant to your interests, in accordance with platform policies and applicable law. (Google Policies)
If we use Google Analytics, Google Ads, or similar tools:
Google may collect information about your device and usage to provide these services; (Google Policies)
Google’s use of this information is governed by its own privacy policy;
We use these tools to understand aggregate Website usage and, where applicable, to improve the effectiveness of our outreach (not to make individual medical decisions about you).
You can learn more about Google’s privacy practices at Google’s Privacy Policy and related pages. (Google Policies)
Depending on your browser and device, you may:
Adjust cookie settings to block or delete cookies;
Use browser add-ons or opt-out mechanisms (e.g., Google Analytics opt-out where available).
Please note that disabling certain cookies may affect the functionality of our Website.
If you provide your phone number:
You may receive calls or text messages (SMS) regarding appointment reminders, intake coordination, or responses to your inquiries, consistent with HIPAA/Part 2 and applicable telecommunication laws.
Message and data rates may apply, depending on your carrier.
If we record calls (for quality, training, or legal purposes):
We will do so in accordance with applicable laws (including any required notice or consent rules);
Any recording containing PHI will be handled consistent with HIPAA and, if applicable, Part 2.
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information from unauthorized access, disclosure, alteration, and destruction, consistent with:
HIPAA’s Security Rule (when PHI is involved);
New Jersey security and breach notification requirements;
Industry-standard practices for healthcare organizations. (HHS)
However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
We retain Personal Information for as long as reasonably necessary to:
Fulfill the purposes described in this Privacy Policy;
Provide services and maintain business records;
Comply with legal, regulatory, accreditation, and record-keeping requirements (including those specific to mental health and SUD treatment in New Jersey);
Resolve disputes and enforce our agreements.
SUD and mental health records may be subject to specific retention periods under New Jersey law and professional standards.
Your rights may vary depending on whether the information is PHI, Part 2 Records, or other Personal Information and on your jurisdiction. Subject to applicable law, your rights may include:
If you are a patient and the information is PHI, you may have the right to:
Request access to your medical and billing records;
Request amendments to your records;
Request restrictions on certain uses and disclosures;
Request confidential communications;
Obtain an accounting of certain disclosures.
These rights are described in more detail in our Notice of Privacy Practices, which you can obtain from us at any time.
If Part 2 applies, you generally have the right to:
Expect that your SUD treatment records will not be disclosed without your written consent, except as specifically allowed by Part 2;
Revoke your consent in writing (with limitations for actions already taken in reliance on your prior consent);
Seek redress for violations consistent with law. (eCFR)
New Jersey mental health and SUD laws may provide additional confidentiality protections, including:
Restrictions on disclosure of records identifying individuals receiving mental health or SUD treatment; (Legal Information Institute)
Protections for privileged communications with mental health professionals (N.J.R.E. 534). (Sarno da Costa D’Aniello Maceri Webb LLC)
To exercise your rights related to PHI, Part 2 Records, or other Personal Information, please contact us using the “Contact Us” information below. We may need to verify your identity before fulfilling your request and may deny certain requests when permitted or required by law.
Our Website is not intended for children under 13 years of age, and we do not knowingly collect Personal Information online from children under 13 without appropriate consent.
However, we do provide clinical services to adolescents and young adults, subject to federal and New Jersey laws regarding minor consent and confidentiality, including special considerations for SUD treatment and mental health services. (National Center for Youth Law)
If you believe a child under 13 has provided us with Personal Information through the Website without appropriate consent, please contact us so we can take appropriate steps.
Our Website may contain links to third-party websites, applications, or services (including social media platforms). We are not responsible for the privacy practices or content of those third parties.
If you choose to interact with our content on social media or other platforms, any information you provide to those platforms will be subject to their privacy policies and terms of use, not ours.
Our services are intended primarily for individuals located in the United States, and particularly in New Jersey and surrounding areas. If you access the Website from outside the United States, you do so at your own risk, and your information may be processed and stored in the United States, where privacy laws may differ from those in your jurisdiction.
The information on this Website is for informational and educational purposes only and does not constitute medical, psychiatric, psychological, or legal advice.
Use of this Website does not create a doctor-patient, therapist-patient, or similar clinical relationship.
If you are experiencing a medical or psychiatric emergency, call 911 or go to the nearest emergency room immediately.
For mental health crises, you may also call or text 988 (the Suicide & Crisis Lifeline) in the United States.
We may update or revise this Privacy Policy from time to time to reflect:
Changes in our practices;
Changes in law or regulatory guidance;
Technological developments or Website updates.
When we make material changes, we will update the “Last Updated” date at the top of this page and, where required by law, provide additional notice.
Your continued use of the Website after we post changes indicates your acceptance of those changes.
If you have any questions about this Privacy Policy, our privacy practices, or your rights, or if you would like a copy of our Notice of Privacy Practices, please contact us at:
New Leaf Recovery NJ
[Insert Physical Address]
Phone: [Insert Main Phone Number]
Email: [Insert Privacy or Compliance Email]
Website: https://newleafrecoverynj.com/
You may also have the right to lodge complaints with:
The U.S. Department of Health and Human Services, Office for Civil Rights (OCR), regarding HIPAA; (HHS)
The appropriate New Jersey state agencies regulating mental health and substance use disorder treatment, as applicable.
We will not retaliate against you for filing a complaint.
This is a comprehensive template, but not a substitute for legal advice. Before publishing:
Fill in all placeholders (address, phone, email, etc.).
Align it with your actual practices (e.g., what analytics/ads tools you truly use, whether you record calls, which forms you have).
Have a New Jersey healthcare / behavioral health attorney review it, along with your Notice of Privacy Practices and any consent/authorization forms, to ensure everything lines up with HIPAA, 42 C.F.R. Part 2, and NJ-specific rules.
If you want, I can next:
Draft a matching HIPAA/Part 2-aware “Notice of Privacy Practices”; or
Shorten this into a patient-facing “Privacy Summary” for your footer while keeping this full policy on a dedicated page.
