Privacy Policy

This Privacy Policy applies to the public Northstar Recovery Living website at northstar.sentientconnect.io and to information submitted through Northstar online applications, referrals, contact flows, and related digital services.

This policy does not replace any separate notice, authorization, consent, treatment agreement, resident agreement, or privacy notice that may apply to clinical services, health records, insurance billing, or services provided by another organization.

We may collect identifiers and contact information; application and referral information; housing and residency information; employment, transportation, financial, insurance, or scholarship-related information; recovery, substance-use, wellness, health, treatment, medication, or care-related information voluntarily submitted to us; legal or supervision information; communications with Northstar; and technical information such as device, browser, IP address, session, security, and site-usage data.

Referral information may be provided by a family member, friend, professional, facility, employer, legal-system contact, or other referrer. Referrers should provide only information they reasonably believe is accurate, relevant, and appropriate to share.

Some information submitted to Northstar may be considered sensitive personal data under applicable law, including information concerning physical or mental health, recovery, substance use, treatment, or other highly personal circumstances.

We process sensitive information only for legitimate program, intake, safety, support, operational, legal, or care-coordination purposes and obtain consent when required by applicable law. We do not use sensitive recovery or health information for targeted advertising.

We use information to operate the website; receive and review applications and referrals; communicate with applicants, residents, referrers, staff, and authorized contacts; determine next steps for human staff review; provide housing-related services and program support; coordinate services when authorized; maintain safety and security; prevent fraud or misuse; document communications; improve operations; comply with law; and protect the rights, safety, and property of Northstar, residents, staff, and others.

Northstar may use AURA Genesis® and other Sentient technology to help organize information, support reflection, provide reminders, assist with goal tracking, and surface information for staff or resident review. Automated tools do not make the final Northstar housing admission, rejection, or eligibility decision.

A referral is not an admission decision and does not, by itself, authorize Northstar to contact the referred person. Northstar uses the awareness and contact-permission information supplied in the referral to determine whether staff should contact the referrer first or may contact the referred person directly.

If a referrer states that direct contact permission is not confirmed, Northstar may contact the referrer first and should not treat the referral alone as authorization to contact the referred person.

We may disclose personal information to authorized Northstar staff and contractors; technology, hosting, communications, security, payment, billing, operational, and professional service providers acting on our behalf; treatment, care, recovery, case-management, or other service providers when authorized or otherwise permitted by law; insurers or payors when appropriate and authorized; government, regulatory, legal, emergency, or law-enforcement authorities when required or permitted by law; and parties involved in a merger, financing, restructuring, sale, or transfer of business assets subject to appropriate confidentiality protections.

We do not sell personal data for money. We do not knowingly sell sensitive recovery or health information, and we do not use such information for targeted advertising.

The site may use cookies, local storage, session storage, security technologies, and similar tools that are necessary for site operation, navigation, authentication where applicable, fraud prevention, preferences, performance, and reliability.

If Northstar later introduces technologies that trigger additional notice, consent, or opt-out obligations, we will update this policy and provide the controls required by applicable law.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to operate Northstar programs and services, to maintain appropriate business and safety records, to resolve disputes, to enforce agreements, and to satisfy legal, regulatory, insurance, audit, or recordkeeping obligations.

Retention periods may vary based on the type of information, the relationship involved, legal requirements, and whether the information is part of a record governed by a separate privacy or retention rule.

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, loss, or disclosure. Access is limited according to role and business need where reasonably practicable.

No website, transmission method, database, or security control can guarantee absolute security. Users should not send information through the site that is unnecessary for the requested purpose.

Depending on where you live and which law applies, you may have rights to request access to personal data, correction of inaccurate data, deletion, a portable copy of certain data, and information about how data is used or disclosed. Colorado consumers may also have rights to opt out of the sale of personal data, targeted advertising, and certain profiling that produces legal or similarly significant effects.

Northstar does not currently use sensitive recovery or health information for targeted advertising and does not make final housing admission decisions through automated profiling. Where a legally recognized universal opt-out mechanism applies to a processing activity, Northstar will honor it as required by law.

To exercise an applicable privacy right, email info@sentientconnect.io with the subject line “Northstar Privacy Request.” We may request information reasonably necessary to verify identity and authority. If applicable law provides a right to appeal a denied request, the response will explain how to appeal.

HIPAA applies only when the legal requirements for covered-entity or business-associate status are met. This website Privacy Policy is not a HIPAA Notice of Privacy Practices and does not create HIPAA coverage where the law does not otherwise apply.

Information maintained by a health-care provider, health plan, covered entity, business associate, or other regulated provider may be governed by additional federal or state privacy requirements. Records subject to HIPAA, 42 C.F.R. Part 2, or another specialized privacy law will be handled according to those rules to the extent they apply, and any stricter applicable requirement controls.

Northstar Recovery Living is designed for adults. We do not knowingly solicit online applications from children under 13. If we learn that information was collected from a child in a manner not permitted by law, we will take appropriate steps to delete or otherwise address it.

The Northstar site may link to separate services within the Sentient ecosystem or to other organizations. A separate service may have its own privacy terms. Northstar is not responsible for the privacy practices of an unaffiliated website or service that is not operated on Northstar’s behalf.

We may preserve, use, or disclose information when we reasonably believe it is necessary to comply with applicable law, lawful process, court orders, subpoenas, regulatory requirements, contractual obligations, insurance requirements, safety obligations, or to investigate or defend against suspected fraud, abuse, security incidents, threats, claims, or legal disputes.

Nothing in this policy limits any lawful right, defense, privilege, immunity, confidentiality protection, mandatory reporting obligation, or other protection available to Northstar or its personnel.

We may update this Privacy Policy as our services, technology, operations, or legal obligations change. The effective date below identifies the current version. Material changes will be communicated in a manner appropriate to the nature of the change and applicable law.