Notice of Privacy Practices

Effective: January 1, 2026

Our Commitment to Your Privacy

Yoffe Therapy is required by law to protect the privacy of your protected health information (PHI), including the mental-health records and information we create or receive about you. This notice explains how we may use that information, when we may share it, and the rights you have. We are required to follow the terms of the notice currently in effect.

How We May Use and Disclose Your Health Information

In most cases, we may use and disclose your PHI for the following purposes without your written authorization:

For Treatment

We use your health information to provide and coordinate your care. For example, your therapist may document your sessions and treatment plan, and, with your knowledge, consult with a clinical supervisor or another provider involved in your care to make sure you receive appropriate treatment.

For Payment

Because we are a self-pay practice, we use your information to bill you directly and to document services. For example, we may generate an invoice or a superbill (a detailed receipt with diagnosis and service codes) that you can choose to submit to your own insurance for possible out-of-network reimbursement.

For Health Care Operations

We may use your information to run our practice and maintain quality of care. For example, we may use records to review the quality of services provided, train associate therapists under supervision, or schedule appointments and manage administrative needs.

Uses and Disclosures That Require Your Written Authorization

Some uses and disclosures of your information will be made only with your written authorization, which you may revoke at any time in writing. These include:

• Psychotherapy notes: the private notes a therapist keeps about a session, separate from the rest of your record, are given special protection and generally require your specific authorization to disclose.
• Marketing: we will not use your information for marketing purposes without your authorization.
• Sale of information: we will never sell your PHI.
• Most other uses and disclosures not described in this notice.

Disclosures We May Make Without Your Authorization (As Permitted by Law)

In certain limited situations, the law permits or requires us to disclose your information without your authorization. These include:

• When required by law: such as in response to a valid court order, subpoena, or other legal requirement.
• To prevent a serious threat to health or safety: under California's duty to warn and protect (the Tarasoff rule), if you communicate a serious threat of physical violence against a reasonably identifiable victim, we are required to take steps that may include notifying the potential victim and law enforcement.
• Abuse or neglect reporting: California law requires us to report known or reasonably suspected abuse or neglect of a child, elder, or dependent adult to the appropriate authorities.
• To prevent harm to yourself: if there is a serious and imminent risk that you may harm yourself, we may disclose information as necessary to protect your safety.
• Health oversight, public health, and similar activities: as specifically authorized by law.

Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI:

• Right to inspect and copy: you may request to inspect and receive a copy of your health record, with limited exceptions.
• Right to request an amendment: if you believe information in your record is incorrect or incomplete, you may request that we amend it.
• Right to an accounting of disclosures: you may request a list of certain disclosures we have made of your information.
• Right to request restrictions: you may ask us to limit how we use or disclose your information, though we are not required to agree to all requests.
• Right to request confidential communications: you may ask us to contact you in a specific way or at a specific location (for example, only by a certain phone number or email).
• Right to a paper copy of this notice: you may request a paper copy at any time, even if you agreed to receive it electronically.
• Right to file a complaint: you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights, if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint.

Our Duties

• We are required by law to maintain the privacy of your protected health information.
• We are required to provide you with this notice of our legal duties and privacy practices.
• We are required to notify you in the event of a breach of your unsecured health information.
• We reserve the right to change the terms of this notice and to make the new terms apply to all information we maintain. If we make a material change, we will post the updated notice and make it available upon request.

Contact Us

This Notice of Privacy Practices is provided in accordance with the HIPAA Privacy Rule (45 CFR §164.520). Effective: January 1, 2026.