PRIVACY POLICY
YAEL SHERNE PSYCHOTHERAPY, MARRIAGE & FAMILY COUNSELING, A PROFESSIONAL CORPORATION
(DBA MOTHER NURTURE THERAPY GROUP)
NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW HEALTH INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
I. OUR PLEDGE REGARDING HEALTH INFORMATION
We understand that health information about our clients and their health care is personal. We are committed to protecting our clients’ health information. We create a record of the care and services that our clients receive from us. We need this record to provide clients with quality care and to comply with certain legal requirements. This notice applies to all records of our clients’ care generated by this mental health care practice.
This notice informs you about the ways we may use and disclose health information about you, describes your rights to the health information we maintain about you, and outlines certain obligations we have regarding the use and disclosure of your health information. We are required by law to:
Keep protected health information (“PHI”) that identifies you private.
Provide you with this notice of our legal duties and privacy practices with respect to health information.
Follow the terms of the notice currently in effect.
We may change the terms of this Notice at any time. Changes will apply to all information we have about you. The updated Notice will be available upon request, in our office, and on our website.
II. HOW WE MAY USE AND DISCLOSE HEALTH INFORMATION ABOUT YOU
The following categories describe the ways we use and disclose health information. Not every use or disclosure within a category will be listed. All permitted uses and disclosures fall within one of the categories below.
For Treatment, Payment, or Health Care Operations: Federal privacy rules allow health care providers with a direct treatment relationship with a client to use or disclose that client’s PHI without written authorization in order to carry out treatment, payment, or health care operations. For example, if a clinician consults with another licensed health care provider about a client’s condition, we are permitted to use and disclose PHI to assist in diagnosis and treatment. The word “treatment” includes the coordination and management of care with third parties, consultations between providers, and referrals. It also includes supervision: because our practice employs associate-level clinicians working toward licensure under a licensed supervisor, PHI may be shared within the practice for supervisory and consultation purposes as part of treatment.
Disclosures for treatment purposes are not limited to a minimum necessary standard, as providers require full access to records in order to provide quality care.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
Lawsuits and Disputes: If you are involved in a lawsuit or dispute, we may disclose health information in response to a court or administrative order, subpoena, discovery request, or other lawful process, but only after efforts have been made to notify you or obtain a protective order.
III. CERTAIN USES AND DISCLOSURES REQUIRE YOUR AUTHORIZATION
Psychotherapy Notes: We keep “psychotherapy notes” as defined in 45 CFR § 164.501. Any use or disclosure of such notes requires your written authorization unless the use or disclosure is:
For our use in treating you.
For training or supervising mental health practitioners, including associate clinicians working under supervision at the practice.
For defending ourselves in legal proceedings initiated by you.
For use by the Secretary of Health and Human Services to investigate our compliance with HIPAA.
Required by law, and limited to those requirements.
Required for certain health oversight activities or by a coroner performing duties authorized by law.
Required to help avert a serious threat to the health or safety of others.
Superbills and Insurance Reimbursement: Some clients request a superbill, an itemized receipt that includes your diagnosis, billing codes, and dates of service, for the purpose of seeking out-of-network reimbursement from their insurance carrier. A superbill contains PHI. When you request a superbill and submit it to your insurer, you are directing that disclosure yourself. Once submitted, the practice has no control over how your information is used, retained, or shared by your insurance company. Insurance carriers maintain their own records and privacy practices, which may differ from ours. If you are considering requesting a superbill, we encourage you to review your insurer’s privacy practices and to consider any implications of having a mental health diagnosis on record with your insurance carrier before doing so. Your clinician is available to discuss any questions you have.
Marketing: We will not use or disclose your PHI for marketing purposes.
Sale of PHI: We will not sell your PHI.
IV. CERTAIN USES AND DISCLOSURES DO NOT REQUIRE YOUR AUTHORIZATION
Subject to certain limitations in the law, we may use and disclose your PHI without your authorization for the following reasons:
When disclosure is required by state or federal law.
For public health activities, including reporting suspected child, elder, or dependent adult abuse, or preventing a serious threat to health or safety.
For health oversight activities, including audits and investigations.
For judicial and administrative proceedings, including responding to a court or administrative order.
For law enforcement purposes, including reporting crimes occurring on our premises.
To coroners or medical examiners performing duties authorized by law.
For research purposes, in accordance with applicable legal requirements.
For specialized government functions, including military missions, intelligence operations, or safety within correctional institutions.
For workers’ compensation purposes, as required by law.
For appointment reminders and information about health-related benefits or services we offer.
V. CERTAIN USES AND DISCLOSURES REQUIRE YOU TO HAVE THE OPPORTUNITY TO OBJECT
Disclosures to Family, Friends, or Others: We may provide your PHI to a family member, friend, or other person you indicate is involved in your care or payment for your health care, unless you object in whole or in part. In emergency situations, the opportunity to consent may be obtained retroactively.
VI. YOUR RIGHTS WITH RESPECT TO YOUR PHI
The Right to Request Limits on Uses and Disclosures: You may ask us not to use or disclose certain PHI for treatment, payment, or health care operations purposes. We are not required to agree, and may decline if we believe it would affect your care.
The Right to Request Restrictions for Out-of-Pocket Expenses: You have the right to request restrictions on disclosures to health plans for payment or operations purposes if the PHI pertains solely to a health care item or service you have paid for in full out of pocket.
The Right to Choose How We Contact You: You may ask us to contact you in a specific way (for example, a particular phone number or mailing address), and we will agree to all reasonable requests.
The Right to See and Obtain Copies of Your PHI: Other than psychotherapy notes, you have the right to obtain an electronic or paper copy of your medical record and other information we hold about you. We will provide a copy or summary within 30 days of receiving your written request and may charge a reasonable, cost-based fee.
The Right to an Accounting of Disclosures: You have the right to request a list of instances in which we have disclosed your PHI for purposes other than treatment, payment, or operations. We will respond within 60 days. The list will cover disclosures made in the last six years. The first request in any given year is free; additional requests may be subject to a reasonable fee.
The Right to Correct or Update Your PHI: If you believe information in your record is incorrect or incomplete, you may request a correction or addition. We may decline but will inform you in writing within 60 days.
The Right to a Paper or Electronic Copy of This Notice: You have the right to request a paper copy of this Notice at any time, even if you have previously agreed to receive it electronically.
VII. TELEHEALTH SERVICES
Mother Nurture Therapy Group offers telehealth services in addition to in-person sessions. Telehealth allows you to receive therapy remotely via video, which may be conducted from your home or another private location of your choosing.
All telehealth sessions are conducted through Google Meet, accessed through the practice’s HIPAA-compliant Google Work business platform. We have a signed Business Associate Agreement (BAA) with Google, which governs the security and confidentiality of PHI transmitted through these services. Google Meet is used exclusively through practice-managed accounts and is not used for external communications with individuals outside the practice in a clinical context.
While telehealth offers meaningful benefits in terms of access and convenience, it also carries certain limitations and risks, including potential technology interruptions, privacy concerns in your physical environment, and the inherent limitations of remote assessment. By engaging in telehealth services, you acknowledge that you have been informed of and accept these conditions.
You have the right to withdraw consent for telehealth at any time and to request in-person services instead, where available.
VIII. THIRD-PARTY PLATFORMS AND TECHNOLOGY
We use a number of third-party platforms to operate our practice. Below is an overview of the tools we use and how they relate to your privacy.
HIPAA-Compliant Clinical Tools
Sessions Health (Electronic Health Record): We use Sessions Health to manage scheduling, billing, and clinical records. Sessions Health is our HIPAA-compliant EHR platform and operates under a Business Associate Agreement with our practice.
Google Work (Email, Calendar, Drive, and Telehealth): We use Google Work for internal communication, documentation, scheduling, and telehealth sessions via Google Meet. Google Work is HIPAA-compliant when used for communication between practice accounts and operates under a Business Associate Agreement with our practice. Please note that Google Work is not HIPAA-compliant when used to communicate with external email addresses outside the practice.
Non-Clinical Contact and Marketing Tools
Email and phone communication: Communication via standard email or phone is generally not considered HIPAA-compliant. We use email and phone to respond to inquiries and for scheduling purposes, and by reaching out to us through these channels you are providing consent for us to communicate with you in kind. We do not transmit sensitive clinical information through external email or unsecured phone lines.
Website Contact Form: If you submit an inquiry through the contact form on our website, your contact information may be added to our general newsletter mailing list, managed through Flodesk. You may also be added to our mailing list by submitting your email address through an opt-in form on our website. Flodesk is an email marketing platform and is not a HIPAA-compliant tool. It is used solely for general wellness communications and practice updates. No clinical or protected health information is stored or transmitted through it. You may unsubscribe from our mailing list at any time using the unsubscribe link included in every email.
No mobile information or text messaging consent data will be shared with third parties or affiliates for marketing or promotional purposes.
IX. CALIFORNIA CONFIDENTIALITY OF MEDICAL INFORMATION ACT (CMIA)
In addition to federal HIPAA protections, California residents are protected by the California Confidentiality of Medical Information Act (CMIA), which in some respects provides stronger protections than federal law.
Under the CMIA, we are prohibited from disclosing your medical information without your written authorization except as required or permitted by law. Key provisions include:
We may not share your medical information with employers, except in limited circumstances required by law.
We may not sell your medical information.
You have the right to inspect and obtain copies of your medical records within 30 days of a written request (or 5 business days for mental health records in certain circumstances).
You have the right to request that inaccurate or incomplete information in your records be corrected.
In the event of a breach involving your medical information, we are required to notify you as soon as reasonably possible.
Where the CMIA provides greater protections than HIPAA, we will apply the more protective standard. If you have questions about your rights under California law, please contact us directly.
X. CALIFORNIA CONSUMER PRIVACY ACT (CCPA)
The California Consumer Privacy Act (CCPA) grants California residents certain rights regarding personal information collected by businesses. It is important to note that health information collected and maintained as part of your clinical care, including records governed by HIPAA and the CMIA, is generally exempt from CCPA requirements. However, the CCPA may apply to other personal information we collect, such as contact information submitted through our website or newsletter.
With respect to non-clinical personal information we collect, California residents have the following rights:
The Right to Know
You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it is used, and whether it has been disclosed to third parties.
The Right to Delete
You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (for example, where retention is required by law or necessary to complete a transaction).
The Right to Opt Out of Sale
We do not sell your personal information.
The Right to Non-Discrimination
We will not discriminate against you for exercising your rights under the CCPA. You will not receive a different level of service or be penalized in any way for making a request.
How to Submit a Request
To exercise your rights under the CCPA, you may contact us at hello@mothernurturegroup.com or by calling (310) 818-3458. We will respond to verified requests within 45 days. If we need additional time, we will notify you of the extension and the reason for it.
XI. HOW WE MAY CONTACT YOU
We may email you if you email us, complete the contact form on our website, or provide verbal consent to email communication.
We may call you if you call us, provide your phone number through our website, or give verbal consent to phone contact. We may leave a voicemail if we do not reach you.
We may text you if you text us, provide your phone number through our website, or provide verbal or written consent to text communication.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
EFFECTIVE DATE
This Notice went into effect on March 13, 2026. We reserve the right to update this Notice at any time. The most current version will always be available on our website.