DATA COLLECTION POLICY

Mindful Sober Living is committed to protecting the privacy and confidentiality of personal

data collected from residents, staff, and other stakeholders. This Data Collection Policy out-
lines the type of data collected, how it is used, stored, and protected, as well as the rights of

individuals regarding their personal information.

1. Purpose of Data Collection
   We collect data to:

• Ensure the safety and well-being of residents.
• Monitor progress and outcomes of recovery programs.
• Comply with legal and regulatory requirements.
• Improve the quality of services and operations.
• Facilitate communication between residents, staff, and partners.

1. Types of Data Collected
   The following categories of data may be collected:

• Personal Identification Information: Name, address, phone number, email, and date of birth.
• Health Information: Medical history, medications, allergies, mental health status, and other
  relevant health data.
• Financial Information: Payment details, billing history, and resident fee agreements.
• Program-Related Information: Participation in activities, recovery goals, progress reports,
  and assessments.
• Emergency Contact Information: Contact details of individuals to be notified in case of
  emergencies.

1. Methods of Data Collection

• Direct Collection: Information provided directly by residents or guardians during intake,
  assessments, or meetings.
• Automated Collection: Data automatically collected through software systems used for

Resident Initials_______ 17

billing, attendance tracking, and program management.

• Third-Party Collection: Data shared by healthcare providers, referral partners, or legal
  entities with appropriate consent.

1. Use of Data

• Resident Care: To tailor services to individual needs and monitor progress.
• Financial Management: To manage fees, process payments, and issue invoices.
• Communication: To provide updates, schedule meetings, and share important information.
• Compliance: To meet reporting requirements for regulatory bodies and funding partners.
• Program Improvement: To analyze data for service improvement and outcomes tracking.

1. Data Storage and Security

• Storage: All personal data is securely stored in our database and protected with encryption.
  Hard copies are kept in locked cabinets with restricted access.
• Access Control: Only authorized staff have access to personal data, and access is granted
  based on role and need.
• Retention Period: Data is retained only as long as necessary for program and legal purposes.
  After this period, data will be securely deleted or anonymized.

1. Sharing of Data

• Internal Use: Data is shared among staff members only as necessary to provide services.
• External Partners: Data may be shared with healthcare providers, legal entities, or partners
  with the resident’s consent, or as required by law.
• No Sale of Data: Under no circumstances will personal data be sold or shared with third
  `parties for marketing purposes.

1. Resident Rights
   Residents have the following rights concerning their personal data:

• Right to Access: Request access to the data collected about them.
• Right to Correction: Request corrections to inaccurate or incomplete data.

18

Mindfulsoberliving.com

• Right to Deletion: Request deletion of personal data when it is no longer necessary, unless
  retention is required by law.
• Right to Restrict Processing: Request restrictions on how their data is used.
• Right to Withdraw Consent: Withdraw consent for data collection and sharing, except where
  required by law or policy.

1. Consent for Data Collection
   Residents (or their guardians) must provide written consent during the intake process,
   acknowledging their understanding of this policy and the purpose of data collection.
2. Reporting Data Breaches
   In the event of a data breach, affected individuals will be notified within 72 hours, and
   appropriate measures will be taken to mitigate harm and prevent future occurrences.
3. Policy Updates and Review
   This policy will be reviewed annually and updated as necessary to reflect changes in laws,
   regulations, or best practices. Any significant updates will be communicated to residents and
   staff.

Acknowledgment and Agreement
By participating in our program, residents agree to the terms of this Data Collection Policy.
They acknowledge that their data will be handled responsibly, with a commitment to
confidentiality and security.