Privacy Policy

1. Introduction

Odyssey Behavioral Healthcare (“Odyssey,” “we,” “our,” or “us”) is committed to protecting your privacy while delivering communication services that align with applicable US privacy laws, healthcare best practices, and the Telephone Consumer Protection Act (TCPA) messaging requirements.

Important Notice: Text messaging (SMS/MMS) is not a secure method of communication. Odyssey limits SMS to non-sensitive, operational communications unless explicitly authorized and protected.

2. Information We Collect

Information You Provide

• Name, email address, mailing address, phone number
• Information submitted via forms, surveys, or registrations
• Communications sent via email, phone, or website

Automatically Collected Information

• Limited technical data (e.g., browser type, IP address)
• Cookies: The use of cookies is limited to essential internal marketing and analytics details, and users have opt-out choices.

3. Use of Information

We use collected information to:

• Improve and enhance website content and services
• Communicate with you regarding services and operational updates
• Respond to inquiries and provide support
• Deliver SMS/MMS communications strictly within defined risk boundaries (see Section 4)

We do not sell or share personal information for commercial purposes.

4. SMS/Text Messaging / HIPAA-Adjacent Risk Boundary Controls

This section is specifically structured to withstand both carrier audits (TCPA) and healthcare regulatory scrutiny.

4.1 Permitted SMS Content (Low-Risk Communications Only)

Odyssey limits SMS communications to the following categories:

• Appointment reminders (no diagnosis or treatment details)
• Scheduling notifications or changes
• General service updates
• Administrative or operational communications

Client Safety Alerting via ObservSmart | A primary use of Odyssey’s SMS infrastructure is delivering automated staff alerts through ObservSmart, a patient safety monitoring solution by Invisalert that enables real-time observation and rounding compliance for clinical staff. Twilio delivers these messages via its cloud communications platform, which provides enterprise-grade SMS delivery. All messages transmitted through this channel are operational and internal, directed to staff — not clients — and contain no protected health information (PHI).

4.2 Prohibited SMS Content (High-Risk / PHI Restricted)

Odyssey does not send the following via SMS:

• Diagnoses or clinical details
• Treatment plans or medical records
• Substance use or behavioral health disclosures
• Any information that could reasonably identify an individual’s condition or care status

4.3 Communication Channel Segmentation

Where sensitive or protected health information (PHI) is required, Odyssey uses:

• Secure patient portals
• Encrypted email (when appropriate)
• Direct clinical communication channels

4.4 Consent to Receive Messages

By providing your phone number, you expressly consent to receive SMS/MMS messages from Odyssey Behavioral Healthcare for non-sensitive operational purposes only. Consent is not a condition of receiving services.

4.5 Message Frequency

Message frequency varies depending on your interactions with Odyssey.

4.6 Opt-Out Instructions

• Reply STOP to opt out at any time
• Contact us directly via phone or email

4.7 Carrier Disclaimer

Message and data rates may apply.

4.8 Data Use Limitation

• SMS consent is not shared with third parties or affiliates for marketing purposes
• Messaging is limited strictly to the purposes disclosed at opt-in
• Third-party vendors supporting messaging operate under contractual confidentiality and data protection obligations

4.9 Residual Risk Disclosure

Despite safeguards, SMS messaging carries inherent risks, including:

• Interception during transmission
• Access by unauthorized parties with access to a user’s device

By opting in, users acknowledge and accept these risks.

5. Email, Postal, + Telephone Communications

• Users may opt out of email communications at any time
• Users providing mailing addresses may receive periodic communications
• Users providing phone numbers may receive service-related calls
• All opt-out requests are honored promptly

6. Data Sharing + Third Parties

• We do not sell or rent personal information
• We do not use third-party advertising networks
• Service providers are limited to operational support roles and bound by confidentiality agreements

7. Future Use of Information

If our practices change:

• Updates will be posted on this page
• Users will be given the opportunity to opt out of new uses

8. Access + Correction

Users may request access to their contact information and request corrections by contacting us.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information.

10. Contact

If you believe this policy is not being followed, please contact us using the information listed on our website.