Privacy Policy

Notice of Privacy Practices

Valley Behavioral Health
PO Box 572070
Salt Lake City, UT 84124
(888) 949-4864

Effective date of this notice: 2/17/2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. 

We reserve the right to change our privacy practices and the terms of this Notice at any time, provided such changes are permitted by applicable law. If we make a significant change in our privacy practices, we will revise this Notice appropriately and make the new Notice available to you. You may request a copy of our Notice at any time. 

Kinds Of Information That This Notice Applies To

This notice applies to any information in our possession that would allow someone to identify you and learn something about your protected health information. It does not apply to de-identified information. De-identified information is information that does not contain any unique identifying demographics that would allow you to be identified.

Who Must Abide by This Notice

• Valley Behavioral Health employees, staff, students, volunteers and other personnel whose work is under the direct control of Valley Behavioral Health.

Our Legal Duties

• We are required by Federal and State law to maintain the privacy of your health information which we have created or received about your past, present, or future health condition, health care we provide to you, or payment for your health care. 

• We are required to provide you with this notice. 

• We must abide by the terms of this Notice while it remains in effect. 

How We May Use or Disclose Your Health Information

A. Treatment, Payment, and Operations.
Your health information may be used and disclosed for purposes of treatment, payment, and health care operations. Except for uses or disclosures for treatment purposes, we will limit uses and disclosures of your health information to the minimum necessary to achieve the permitted purpose of the use or disclosure. The following are examples of different ways we may use and disclose your health information. Some of the disclosures described below require us to obtain a written consent from you unless the disclosure is authorized by Law. 

• Treatment: We may use and disclose your health information to provide, coordinate, or manage your medical treatment or any related services. Example: Your PHI may be used and disclosed for coordination or management of your health care with other physicians who may be treating you or who you have been referred to for treatment. 

• Payment: We may use and disclose your health information to obtain payment for the services we provide to you. Example: Your health information may be used to prepare and send a bill to your insurance company or other funding agency. 

• Health Care Operations: We may use or disclose your health information to operate the business activities of our organization. These activities include but are not limited to training new staff and conducting quality improvement activities, licensing, and marketing and fundraising activities. 

  • Appointment Reminders: To provide appointment reminders by telephone, voice mail, mail, email, or text messages. 

  • Fundraising: To contact you to raise money for Valley Behavioral Health. If you do not want to be contacted about fundraising, please contact the Privacy Officer to opt out.

B. Other Uses and Disclosures Made with your Consent 

• Others Involved in your Health Care: For certain health information, you have both the right and choice to tell us to: 

  • Share information with your family, close friends, or others involved in your care. 

  • In the event of a disaster, provide information about you to a disaster relief organization so they can notify your family of your condition and location. 

  • If you are unable to agree or object to such disclosures, we may disclose your information if we determine that it is in your best interest based on our professional judgement. 

• Emergencies: We may use or disclose your health information for emergency treatment. For example, your medication list may be provided to emergency services and providers. 

C. Uses and Disclosures Authorized by Law
Under certain circumstances we are authorized by Law to use or disclose your health information without obtaining a consent or authorization from you. These may include when the use or disclosure is: 

• Required by Law: For example, when such disclosure is required by federal, state, or local laws.  
• Public Health Activities: For example, when reporting certain diseases, deaths, and reactions to medications.
• Related to victims of abuse and neglect: For example, when reporting suspected victims of abuse or neglect. 
• For Judicial and administrative proceedings: For example, when responding to a request for PHI contained in a court order. However, if the health information concerns the diagnosis, treatment, or referral or a substance-use disorder, a 42 CFR Part 2, Subpart E court order is required to compel disclosure without your consent, and a traditional subpoena alone is insufficient. 
• For law enforcement purposes: For example, to help locate a suspect or missing person, to avert a serious threat to health or safety, or when disclosing PHI that will help prevent a serious threat to the health or safety of you or another person. 
• To Report Abuse: For example, when reporting suspected victims of abuse or neglect. 
• Related to specialized government functions: For example, if it relates to military and veterans’ activities or national security. 
• To a Coroner or Medical Examiner: To allow them to carry out their duties. 
• Research: We may disclose your PHI in connection with research projects. We follow federal rules governing any disclosure of your PHI for research purposes without your authorization. 

D. Data Retention
Under certain circumstances, we are authorized by Law to use or disclose your health information without obtaining consent or authorization from you. These may include when the use or disclosure is: 

We are required by Utah law to retain patient medical data accordingly: 

• For Adults: Data must be retained for at least seven years following the last date of patient care. 
• For Minors: Data must be retained for at least four years after the patient reaches legal age. 
• Disposition: We may—but are not required to—destroy patient medical data in accordance with Utah law once the minimum retention period has passed. 

Encryption: We use secure and encrypted communication systems consistent with federal privacy and security requirements to store and transfer protected health information.

• Your Rights

  A. Inspect and Receive a Copy of Health Information:
  You have the right to inspect your health information that has originated from our agency and to receive a copy (hard copy or electronic). This includes your request for us to send your health information to an entity or person designated by you such as a Personal Health Record. This right is limited to information about you that is kept in records that are used to make decisions about you. For instance, this includes behavioral health and billing records. If you want to review or receive a copy of these records, you must make the request in writing. You can request to inspect or receive a copy your records by emailing This email address is being protected from spambots. You need JavaScript enabled to view it.. We will have 30 days to complete your request. We may charge a fee for the cost of copying and mailing the records. If we deny your request to inspect or receive a copy of your health information, we will provide you with a written explanation of the denial. 

  B. Authorization to Use or Disclose Health Information:
  You may provide a single consent for all future uses or disclosures for treatment, payment, and health care operation purposes. Other uses and disclosures of your PHI not covered by this Notice or required by law will be made only with your written authorization. If you authorize us to use or disclose your information, you have the right to revoke the consent at any time, except to the extent Valley Behavioral Health has acted in reliance upon it. You may revoke a consent by submitting a request in writing to our Privacy Officer. If you were mandated to treatment through the criminal legal system and you sign a consent authorizing disclosures to elements of the criminal legal system, such as the court, probation officers, parole officers, prosecutors, or other law enforcement, your right to revoke consent may be more limited and should be clearly explained on the consent you sign. If the authorization permits disclosure of your information to an insurance company as a condition of obtaining coverage, the law may allow the insurer to continue to use your information to contest claims or your coverage even after you have revoked the authorization. 
  
  C. Alternative/Confidential Communication: 
  You have the right to ask us to communicate with you at a special address or by a special means. Your request must be in writing and must specify the alternative means and/or location. For example, you may ask us to send mail to a different address rather than to your home or you may ask us to speak to you personally on the telephone rather than sending your health information by mail. We will try to accommodate reasonable requests. Please send your written request to our Privacy Officer. 
  
  D. Amend Health Information: 
  You have the right to ask us to amend your health information which you believe is not correct or not complete. You must make this request in writing and explain in detail your reason(s) for the amendment and when appropriate provide supporting documentation. We will respond to your request in writing within 30 days. We may deny your request if we did not create the information, if it is not part of the records, if the information is something you would not be permitted to inspect or copy, or if it is complete and accurate. 
  
  E. Accounting of Disclosures: 
  You have the right to an accounting of disclosures by Valley Behavioral Health to others for the preceding 3 years. This would include information about who received your health information, the date of the disclosure, and a brief description of the information that was disclosed. Your request must be in writing and submitted to our Privacy Officer. Disclosures for the following reasons will not be included on the list: disclosures for treatment, payment, or health care operations; disclosures for national security purposes; disclosures to correctional or law enforcement personnel; disclosures that you have authorized; and disclosures we may have made to you, family members or friends involved in your care or for notification purposes. We will provide the first list of disclosures you request at no charge. We may charge you for any additional lists you request during the following 12 months. You must tell us the time period that you want the list to cover. 

  F. Request Restriction: 
  You have the right to request that we restrict the use or disclosure of your health information. We are not required to agree to your request for a restriction. We will notify you of our decision. If we do agree, we will comply with our agreement unless the information is needed to provide you with emergency treatment. We cannot agree to restrict disclosures that are required by law or for treatment purposes. Your request must be in writing and must be specific as to what information you want to limit and to whom you want the limits to apply. 

  G. Breach Notification: 
  You have the right to be notified if we discover a breach of your health information. 
  

  H. Fundraising: 
  You have the right to elect not to receive communications from Valley Behavioral Health to fundraise on its own behalf. 

  I. Copy of this Notice: 
  You have a right to receive a paper copy of this notice. Copies of this notice are available at the front desk of any Valley Behavioral Health treatment facility. This Notice is also available on our website http://www.valleycares.com and can be sent to you in electronic form via email. 

Questions or Complaints

If you think your privacy has been violated, please contact our Privacy Officer. You may also file a complaint directly with the Secretary of the U. S. Department of Health and Human Services, at the Office for Civil Rights, U.S. Department of Health and Human Services, 200 Independence Avenue, S.W., Room 509F HHH Bldg., Washington, D.C. 20201. If you received treatment for a substance use disorder, you may file a complaint with the U.S. Attorney for the state of Utah at 111 South Main Street, Suite 1800, S.L.C., UT 84111. All complaints must be in writing. We will not take any retaliation against you if you file a complaint. 

Whom to Contact

Contact the person listed below:

• For more information about this notice, or
• For more information about our privacy policies, or
• If you want to exercise any of your rights, as listed on this notice, or
• If you want to request a copy of our current notice of privacy practices.

Valley Behavioral Health Privacy Officer 

801-273-6401 

This email address is being protected from spambots. You need JavaScript enabled to view it. 

Need to report an ethics or compliance violation? Submit a report here