Last Updated: 12/15/2025
At CTSHealth, we are committed to maintaining compliance with the Commission on Accreditation of Rehabilitation Facilities (CARF) standards while safeguarding your privacy and protecting your personal information. CTSHealth collects information from you and use it to provide you with quality care, and to comply with certain legal requirements. CTSHealth is required by law to maintain the privacy of your health information, and to give you this notice of our legal duties, our privacy practices, as well as your rights. This Privacy Notice outlines how we collect, use, share, and protect your data in accordance with CARF requirements.
Information regarding your care, including payment for services rendered, is protected by the following federal laws: the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), 42 U.S.C. 1320d et seq., 45 C.F.R. Parts 160 & 164 (Subparts A & C, “Security Rule”); the Health Information Technology for Economic and Clinical Health Act (“HITECH”), 42 U.S.C. 300jj; and the Confidentiality Law, 42 U.S.C. 290dd-2, 42 C.F.R. Part 2. Under these laws, except as where permitted by local, state, and federal guidelines, and with the appropriate authorizations, CTSHealth may not disclose any protected information about you as a previous or current recipient of CTSHealth services.
We collect various types of personal information to provide rehabilitation services and ensure the quality of care, including:
We use the information we collect for the following purposes, in accordance with CARF standards:
CTSHealth must comply with North Carolina SL 2015-41, as amended by SL 2017-57, which requires healthcare providers who receive funds for the purposes of rendering healthcare services to submit clinical and demographic client/consumer data to NC HealthConnex, a component of the North Carolina Health Information Exchange Authority. CTSHealth participates in NC HealthConnex to facilitate secure exchange of health information between healthcare providers or other healthcare entities for treatment and care planning, and other healthcare operations purposes. CTSHealth must obtain your written consent before it may disclose any information about you, or for payment of those services. We may share your personal information with the following entities, consistent with CARF standards and applicable laws:
You have certain rights regarding your personal information, including the right to:
These rights are posted in CTSHealth facilities and online at ctshealth.org. A copy of our current notices will be available in the registration areas or upon request.
CTSHealth may use and disclose as necessary, information to improve operations of our facilities and ensure clients/consumers receive quality care. This information may be used to evaluate the quality of services received, or the performance of staff providing care. Health information may be used to improve operations and find better ways to provide services. Your information may be used to determine what additional services we may offer and evaluate treatment efficacy. CTSHealth will take the appropriate steps to de-identify you as an individual when sharing this information, so that any research conducted which may be used to understand plans of care and delivery of services will be done without allowing people to learn who you are.
You have the right to request limits on how we use and disclose your health information. CTSHealth is legally required to accept requests for restrictions on disclosures of your health information for payment or healthcare operations if you have paid in full, for services rendered, out of pocket.
Please Note: CTSHealth is not legally required to accept any other request for a restriction of disclosure but will consider your request, which must be made in writing.
Please Note: CTSHealth will make every effort to honor your request so long as it does not affect the quality of the care which we deliver you.
We employ industry-standard measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction, consistent with CARF requirements and best practices.
CTSHealth is required by law to maintain the privacy of protected health information and provide you with notice of its legal duties and privacy practices with respect to protected health information and to notify you following a breach of unsecured protected health information.
We may update this Privacy Notice to reflect changes in our practices, CARF standards, or legal requirements. We will notify you of any material changes by posting the updated notice on our website or through other means.
If you have any questions, concerns, or requests regarding this Privacy Notice, our compliance with CARF standards, or our privacy practices, please contact our designated privacy officer at 704-864-1477, or by sending communication to:
CTSHealth
ATTN: Privacy Officer
1538 Union Road, Suite B
Gastonia, NC 28054
Thank you for entrusting us with your rehabilitation journey and personal information.