Privacy Policy

Last modified: March 1, 2026

This document has two parts. Part 1 is our Website and General Privacy Policy. Part 2 is our HIPAA Notice of Privacy Practices, which describes how we use and disclose protected health information. If the two parts conflict regarding protected health information, Part 2 controls.

Part 1: Website and General Privacy Policy

1. Introduction and Scope

Four Pillars Recovery, LLC (“Four Pillars”) and our affiliated and subsidiary companies (collectively, “we”, “our”, or “us”) respect your privacy and are committed to protecting it through our compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide when you access www.fourpillarsrecovery.com (the “Website”) or use our other services, products, and technology solutions (collectively with the Website, the “Services”), and our practices for collecting, using, maintaining, protecting, and disclosing that information. Our Services are intended for U.S. residents only.

This policy applies to information we collect related to:

Our Services;
Form submissions, emails, text messages, and other electronic messages between you and our Services;
Your interaction with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy;
Former, current, and prospective customers; and
Other individuals who use our Services, whose personal information we receive related to the Services, or who otherwise interact or communicate with us related to our Services or our business.

Our collection, use, disclosure, and processing of personal information will vary depending on the circumstances. This policy is intended to describe our overall privacy and data protection practices.

This policy does not apply to information collected by:

Us offline or through any other means, including on any other website operated by us or any third party (except where Part 2 applies to protected health information); or
Any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Website.

Please read this policy carefully. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using our Services, you agree to this policy. We may change this policy from time to time (see Section 11). Your continued use of our Services after we make changes is deemed acceptance of those changes, so please check the policy periodically for updates.

2. Children Under the Age of 13

Our Services are not intended for children under the age of 13. No one under age 13 may provide any personal information to or on the Website. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website or through any of its features, register on the Website, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username.

If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at webmaster@fourpillarsrecovery.com.

3. Information We Collect and How We Collect It

We collect several types of information from and about users relating to accessing and using our Services, including information:

By which you may be personally identified, such as name, postal address, email address, telephone number, username, information you provide in messages to us, or any other identifier by which you may be contacted online or offline (“personal information”);
About your online behavior, searches, and preferences as they relate to our business, and how you use and interact with the Website; and
About your internet connection, the equipment you used to access our Services, and usage details.

How we collect this information

Directly from you when you provide it to us;
Automatically as you navigate through the Website, including usage details, device type, screen resolution, operating system, browser type and version, IP addresses, and information collected through cookies, web beacons, and other tracking technologies; and
From third parties, for example, our business partners, public databases, and social media platforms.

Information you provide to us

Information you provide when you complete a form on the Website, including when registering for an account or requesting further Services;
Information you provide when you enter a contest or promotion we sponsor, or when you report a problem with our Services;
Records and copies of your correspondence (including email addresses) if you contact us;
Your responses to surveys we may ask you to complete for research purposes; and
Your search queries on the Website.

Information we collect through automatic data collection technologies

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect information about your equipment, browsing actions, and patterns, including details of your use of our Services (traffic data, logs, and other communication data, and the resources you access and use); information about your computer and internet connection (IP address, device type, operating system, and browser type and version); and information about your online activities over time and across third-party websites or other online services (behavioral tracking).

For information on how you can opt out of behavioral tracking and how we respond to browser signals and other mechanisms that enable consumers to exercise choice about behavioral tracking, please visit www.google.com/analytics (Google Analytics) and www.facebook.com/about/privacy (Facebook).

The information we collect automatically may include personal information, or we may associate it with personal information we collect in other ways or receive from third parties. It helps us improve our Services and deliver a better and more personalized service, including by enabling us to:

Estimate our audience size and usage patterns;
Store information about your preferences, allowing us to customize our Services to your interests;
Speed up your searches; and
Recognize you when you return to our Services.

The technologies we use for automatic data collection may include:

Cookies (browser cookies). Small text files a website stores on your device. We may use cookies to make it easier for you to navigate our Services and, if we provide a log-in portal, to store passwords so you do not have to enter them more than once. You may refuse browser cookies by activating the appropriate setting on your browser, but you may then be unable to access certain parts of our Services. Unless you have adjusted your browser settings to refuse cookies, our system will issue cookies when you direct your browser to our Services.
Web beacons. Pages of our Website and our emails may contain small electronic files known as web beacons (also called clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email, and for other related website statistics (for example, recording the popularity of certain content and verifying system and server integrity).
Flash cookies. Certain features of our Services may use locally stored objects (Flash cookies) to collect and store information about your preferences and navigation to, from, and on our Website. Flash cookies are not managed by the same browser settings as browser cookies. See Section 7 for how to manage them.

Third-party use of cookies and other tracking technologies

Some content or applications, including advertisements, on our Services are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or with web beacons or other tracking technologies to collect information about you when you use our Services and may associate it with your personal information or collect information about your online activities over time and across different websites and online services. They may use this information to provide interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they are used. If you have questions about an advertisement or other targeted content, contact the responsible provider directly. For information on opting out of targeted advertising, see Section 7.

Information we collect from third parties

We may collect or receive personal information about you and your property from third-party sources, such as public databases, social media platforms (including from people with whom you are friends or otherwise connected), and other third parties. For example, if you link, create, or log in to your Services account with a social media service (e.g., Facebook), or engage with a separate app or website that communicates with the Services (e.g., Google), we may receive personal information about you or your connections from that service. In many cases you can control what personal information you share with us through privacy settings on those services.

4. How We Use Your Information

We use information we collect about you or that you provide to us, including personal information:

To present our Services and the Website (and its contents) to you;
To provide you with information, products, or services that you request from us;
To fulfill any other purpose for which you provide it;
To provide you with notices about your account;
To carry out our obligations and enforce our rights arising from any contracts between you and us, including for billing and collection;
To notify you about changes to our Website or any products or services we offer or provide through it;
To allow you to participate in interactive features on our Website;
In any other way we may describe when you provide the information; and
For any other purpose with your consent.

Data will not be shared with third parties for marketing or promotional purposes. We may use your information to contact you about our own and third parties’ goods and services that may be of interest to you. If you do not want us to use your information in this way, adjust your user preferences in your account profile or contact us (see Section 7).

We may use information we have collected to display advertisements to our advertisers’ target audiences. We do not disclose your personal information for these purposes without your consent, but if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.

5. Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may disclose personal information that we collect, or that you provide, as described in this policy:

To our subsidiaries and affiliates;
To contractors, service providers, and other third parties we use to support our business, such as hosting providers, auditors, advisors, consultants, and customer service providers;
To our associated agents in connection with the agent’s provision of services to you related to the sale, purchase, or lease of real estate and the advertising and marketing of real estate;
To third parties in order to provide our Services, respond to or carry out your requests, and/or with your consent, including third parties who provide a service you requested through a partnership or promotional offering, third parties with whom you choose to let us share information (such as apps or websites that integrate with the Services), and third parties we work with to provide you with more personalized content and ads and to track the effectiveness of campaigns;
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Services users is among the assets transferred;
To fulfill the purpose for which you provide it, or for any other purpose disclosed by us when you provide the information;
To comply with any court order, law, or legal process, including to respond to any government or regulatory request;
To enforce or apply our Terms of Use and other agreements, including for billing and collection; and
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our customers, or others, including exchanging information with other companies and organizations for fraud protection and credit risk reduction.

We do not sell your personal information. Information that is protected health information is disclosed only as described in Part 2.

6. Communications Consent (Calls, Text Messages, and Email)

By completing any form on the Website and selecting “Submit,” or by providing your phone number and/or email address through any of our contact forms, you are providing your electronic signature (“eSignature”) and expressly consenting to be contacted by Four Pillars. This consent authorizes Four Pillars to reach you by phone calls, text messages, emails, and other forms of communication for purposes including, but not limited to, transactional updates, informational notices, and marketing communications.

All communications will originate exclusively from Four Pillars, and your information will never be sold or shared with unauthorized third parties for marketing purposes. We will contact you only to provide helpful information regarding the products and services we offer. Your consent is not required to obtain any of our products or services; you may obtain them by contacting us directly. Messaging frequency may vary. Message and data rates may apply; contact your carrier for details.

You have the right to withdraw your consent to communications or data collection at any time. See Section 7 for how to opt out.

7. Your Choices and Rights

Opting out

Email: Click the “Unsubscribe” link in the footer of any promotional or informational email and follow the instructions.
Text messages: Reply “STOP” to any text message from Four Pillars.
Phone calls: Contact us directly and ask to be removed from our call list.
Promotional offers: If you do not wish to have your contact information used to promote our own or third parties’ products or services, contact us to state your request.
Cookies and similar technologies: You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent, and you can manage, disable, or delete cookies and other tracking technologies through your browser settings or device controls. To manage Flash cookies, visit the Flash player settings page on Adobe’s website. If you disable or refuse cookies, some parts of our Website or Services may be inaccessible or may not function properly.
Interest-based advertising: We do not control third parties’ collection or use of your information to serve interest-based advertising. These third parties may provide ways for you to opt out. You can opt out of targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website.

Accessing, correcting, and deleting your information

If you have submitted information to us through the Website or any other service that bears this policy, you may email webmaster@fourpillarsrecovery.com to request access to, correction of, or deletion of personal information you provided. We may decline a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. Rights regarding protected health information are described in Part 2.

State privacy rights

Residents of certain states, including California, Nevada, Colorado, Connecticut, Virginia, and Utah, may have additional rights regarding our use of their personal information. California residents should see the Privacy Notice for California Residents.

Colorado, Connecticut, Virginia, and Utah each provide their residents with rights to:

Confirm whether we process their personal information;
Access and delete certain personal information;
Data portability; and
Opt out of personal data processing for targeted advertising and sales.

Colorado, Connecticut, and Virginia also provide their residents with rights to:

Correct inaccuracies in their personal information, considering the nature of the information and the purpose of the processing; and
Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise any of these rights, or to appeal a decision regarding a consumer rights request, contact us using the information in Section 12.

Nevada provides its residents a limited right to opt out of certain sales of personal information. Residents who wish to exercise this right may email webmaster@fourpillarsrecovery.com with the subject line “Nevada Do Not Sell Request.” We do not currently sell data in a way that triggers the opt-out requirements of that statute.

8. Third-Party Websites

The Services may contain links to unaffiliated third-party services. We do not own, operate, or control the websites of such third parties, and this policy does not apply to them. When you click those links, you will go to a third-party website subject to that service’s own privacy policy and terms of use, which we encourage you to read. We are not responsible for the privacy practices of other services and expressly disclaim any liability for their actions, including the use and disclosure of personal information by those third parties.

9. Data Security

We have implemented reasonable measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depend on you. Where we have given you (or you have chosen) a password for access to certain parts of our Services, you are responsible for keeping it confidential. Please do not share your password with anyone.

Unfortunately, transmission of information via the internet is not completely secure, and no security measure is perfect or impenetrable. Although we do our best to protect your personal information, we cannot guarantee the security of information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.

10. Online Tracking and Health Information

Please do not submit sensitive health information through general website forms, contact forms, or text messages unless we have told you the channel is secure and intended for that purpose. Where a page or tool on the Website is used by patients to schedule care, access records, or pay for services, information collected there may be protected health information and is handled under Part 2. We do not use tracking technologies on those pages to disclose protected health information to advertising or analytics vendors unless permitted by HIPAA and your authorization where required.

11. Changes to Our Privacy Policy

We may amend this policy at any time. If we make material changes to how we treat personal information, we will notify you through a notice on the Website. The date this policy was last revised is shown at the top of the page. Where required by law, we may seek your prior consent to material changes. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting the Website and this policy to check for changes. Changes to Part 2 will be made in accordance with Section 2.9 of Part 2.

12. Contact Information

To ask questions or make comments about this policy and our privacy practices, contact us at:

Four Pillars Recovery, Attn: General Counsel, PO Box 141, Pinetop, AZ 85935

Email: webmaster@fourpillarsrecovery.com

Part 2: HIPAA Notice of Privacy Practices

Effective date: March 1, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

2.1 Who This Notice Applies To

This notice describes the privacy practices of Four Pillars Recovery, LLC and its workforce members, and applies to our use and disclosure of your protected health information (“PHI”). PHI is individually identifiable health information, including demographic information, that relates to your past, present, or future physical or mental health or condition, the provision of health care to you, or payment for that care, and that we create or receive. We are required by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations, 45 C.F.R. Parts 160 and 164, to maintain the privacy of PHI, to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

2.2 How We May Use and Disclose Your PHI Without Your Written Authorization

A. Treatment, payment, and health care operations

We may use and disclose PHI to provide, coordinate, or manage your care and related services. For example, we may share PHI with a physician, counselor, pharmacist, or other provider involved in your care, or with a provider to whom we refer you.
We may use and disclose PHI to bill for and collect payment for services, and to obtain authorization or coverage determinations. For example, we may send information about your services to your health plan, including an AHCCCS-contracted health plan, so it can pay us or confirm coverage.
Health care operations. We may use and disclose PHI for activities necessary to run our organization, such as quality assessment and improvement, reviewing the competence and performance of staff, training, licensing, credentialing, accreditation, auditing, legal services, compliance programs, business planning, and management and administrative activities.

B. Other uses and disclosures permitted or required without authorization

Business associates. We may disclose PHI to vendors that perform services for us (such as billing, IT, hosting, and legal services) if they sign an agreement to protect the information.
Individuals involved in your care or payment. Unless you object, we may share relevant PHI with a family member, friend, or other person you identify who is involved in your care or payment for your care, and may notify them of your location or general condition. If you are unable to agree or object, we may do so when we believe it is in your best interest. We may also disclose PHI to disaster relief organizations to help locate and notify family.
Appointment reminders and treatment alternatives. We may contact you to remind you of appointments and to tell you about treatment alternatives or health-related benefits and services that may interest you.
Required by law. We will disclose PHI when federal, state, or local law requires it.
Public health activities. We may disclose PHI to public health authorities to prevent or control disease, injury, or disability; to report births, deaths, and adverse events or product problems; and to notify a person who may have been exposed to a communicable disease.
Abuse, neglect, or domestic violence. We may disclose PHI to a government authority authorized by law to receive reports of abuse, neglect, or domestic violence, when required by law or when you agree, or when permitted by law and necessary to prevent serious harm.
Health oversight activities. We may disclose PHI to a health oversight agency for audits, investigations, inspections, licensure, and other activities necessary for oversight of the health care system and government programs.
Judicial and administrative proceedings. We may disclose PHI in response to a court or administrative order, and in response to a subpoena, discovery request, or other lawful process if we receive satisfactory assurances that you have been notified or that an effort has been made to obtain a protective order.
Law enforcement. We may disclose PHI to law enforcement as required by law or in response to a court order, warrant, or similar process; to identify or locate a suspect, fugitive, witness, or missing person; about victims of a crime in limited circumstances; about a death we believe may result from criminal conduct; about criminal conduct on our premises; and in emergencies to report a crime.
Coroners, medical examiners, and funeral directors. We may disclose PHI to identify a deceased person, determine a cause of death, or allow funeral directors to carry out their duties.
Organ and tissue donation. We may disclose PHI to organizations that handle organ, eye, or tissue procurement, banking, or transplantation.
We may use or disclose PHI for research when an institutional review board or privacy board has approved a waiver of authorization, or as otherwise permitted by law.
Serious threat to health or safety. We may use or disclose PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, to someone reasonably able to prevent or lessen the threat.
Specialized government functions. We may disclose PHI of military personnel and veterans to military command authorities when required; for national security and intelligence activities; for protective services for the President and others; and to correctional institutions or law enforcement officials having lawful custody of an individual.
Workers’ compensation. We may disclose PHI as authorized by and to the extent necessary to comply with workers’ compensation laws.
[Include only if applicable:] We may contact you for fundraising purposes. You have the right to opt out of receiving fundraising communications, and each such communication will tell you how.
Incidental disclosures. Disclosures that occur incidentally to an otherwise permitted use or disclosure, despite reasonable safeguards, are allowed.
De-identified information and limited data sets. We may use or disclose information that has been de-identified under HIPAA, and limited data sets under a data use agreement, as permitted by law.

Our uses and disclosures are limited to the minimum necessary, except where the minimum-necessary standard does not apply (for example, disclosures to a provider for treatment, disclosures to you, and disclosures required by law).

2.3 Uses and Disclosures That Require Your Written Authorization

We will obtain your written authorization before the following uses and disclosures:

Psychotherapy notes. Most uses and disclosures of psychotherapy notes require your authorization, except as permitted by law (for example, use by the originator for treatment, our own training programs, to defend ourselves in a legal action, and as required by law, oversight of the originator, or to prevent a serious threat).
Uses and disclosures of PHI for marketing purposes require your authorization, except for face-to-face communications with you and promotional gifts of nominal value. If marketing involves financial remuneration to us from a third party, the authorization will say so.
Sale of PHI. We will not sell your PHI or receive remuneration in exchange for it without your authorization.
Other uses. Any use or disclosure not described in this notice or otherwise permitted by law will be made only with your written authorization.

You may revoke an authorization at any time, in writing, except to the extent we have already acted in reliance on it. Send revocations to the Privacy Officer identified in Section 2.10.

2.4 Substance Use Disorder Records and Other Specially Protected Information

Some of our records may be protected by additional federal or state laws that are more stringent than HIPAA, including the federal confidentiality rules for substance use disorder treatment records, 42 C.F.R. Part 2, and Arizona laws governing medical, behavioral health, and communicable disease information. Where those laws apply, we will use and disclose your information only as they permit, which may require your written consent for disclosures that HIPAA alone would allow, including for treatment, payment, and health care operations. Records protected by 42 C.F.R. Part 2, and testimony relaying their contents, may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you without your written consent or a court order that meets the requirements of that rule. You will receive a separate notice or consent form where Part 2 applies. [Counsel to confirm applicability and conform this section to the Part 2 final rule.]

2.5 Your Rights Regarding Your PHI

Right to inspect and copy. You may inspect and obtain a copy of PHI in your designated record set, including an electronic copy in the form and format you request if readily producible, and you may direct us to send it to another person you designate in writing. We will respond within 30 days (with one 30-day extension if we notify you). We may charge a reasonable, cost-based fee. We may deny access in limited circumstances and, in some cases, you may request review of the denial. Psychotherapy notes and information compiled for legal proceedings are not subject to access.
Right to request an amendment. If you believe PHI we maintain is incorrect or incomplete, you may ask us in writing, with a reason, to amend it. We may deny the request in certain cases; if we do, you may submit a statement of disagreement, which we will include with future disclosures of that information. We will act within 60 days (with one 30-day extension if we notify you).
Right to an accounting of disclosures. You may request a list of certain disclosures of your PHI that we made in the six years before your request, except disclosures for treatment, payment, and health care operations, disclosures to you or made under your authorization, and certain other exceptions. The first accounting in any 12-month period is free; we may charge a reasonable, cost-based fee for additional requests.
Right to request restrictions. You may ask us to restrict how we use or disclose PHI for treatment, payment, or health care operations, or to people involved in your care. We are not required to agree, except that we must agree to a request to restrict disclosure to a health plan for payment or health care operations when the disclosure is not required by law and the PHI relates solely to an item or service you or someone other than the health plan paid for in full out of pocket. If we agree to a restriction, we will comply unless the information is needed for emergency treatment.
Right to request confidential communications. You may ask that we communicate with you about PHI by alternative means or at alternative locations (for example, only by mail or at a specific phone number). We will accommodate reasonable requests and will not ask you why.
Right to a paper copy of this notice. You may request a paper copy at any time, even if you agreed to receive it electronically. This notice is also available on our Website.
Right to be notified of a breach. We will notify you without unreasonable delay, and no later than 60 days after discovery, if there is a breach of your unsecured PHI.
Right to file a complaint. See Section 2.8.

To exercise any of these rights, submit a written request to the Privacy Officer identified in Section 2.10.

2.6 Our Responsibilities

We are required by law to maintain the privacy and security of your PHI.
We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
We must follow the duties and privacy practices described in this notice and give you a copy of it.
We will not use or share your information other than as described here unless you tell us we can in writing. You may change your mind at any time by telling us in writing.
We reserve the right to change the terms of this notice and to make the new terms effective for all PHI we maintain, including information received before the change (see Section 2.9).

2.7 Electronic Communications and Our Website

Email, text messages, and website forms may not be secure. By asking us to communicate with you by unencrypted email or text, you acknowledge this risk. We will limit PHI in these messages to the minimum necessary, and you may ask us at any time to use another method. Marketing and promotional messages sent under Part 1, Section 6 do not use PHI without your authorization, and consent to receive them is not a condition of treatment.

2.8 Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the federal government. We will not retaliate against you for filing a complaint or for exercising any right described in this notice.

With us: Privacy Officer, Four Pillars Recovery, PO Box 141, Pinetop, AZ 85935; webmaster@fourpillarsrecovery.com.
With the U.S. Department of Health and Human Services, Office for Civil Rights: 200 Independence Avenue, S.W., Washington, D.C. 20201; 1-877-696-6775; www.hhs.gov/ocr/privacy/hipaa/complaints/. Complaints to HHS generally must be filed within 180 days of when you knew or should have known of the violation.

2.9 Changes to This Notice

We may change this notice and our privacy practices, and the new notice will apply to all PHI we maintain. The effective date appears at the top of this Part. We will post the revised notice on our Website and in our facility and make copies available on request.

2.10 Privacy Officer and Contact Information

For questions about this notice, or to exercise your rights, contact:

Privacy Officer, Four Pillars Recovery, LLC

PO Box 141, Pinetop, AZ 85935