Privacy Policy & Notice of Privacy Practices
1. Website Privacy Policy
This policy explains how Not Like Our Mothers LLC ("we," "us," "the Practice") collects, uses, and protects information when you visit notlikeourmothers.com or use our telehealth services. Medical information you share with us as a patient is protected health information (PHI) and is also governed by our HIPAA Notice of Privacy Practices in Section 3.
Information we collect
- Information you give us: name, contact details, date of birth, and messages you send us by email or through our booking and patient portal.
- Health information: medical history, intake forms, lab results, visit notes, and prescriptions. This is collected and stored only within our secure electronic health record (EHR) and patient portal, not on our public website.
- Technical information: basic, non-identifying data such as browser type and pages visited, collected by our website host for security and performance.
How we use information
- To schedule visits, provide care, send prescriptions to pharmacies, and order labs.
- To communicate with you about your care, appointments, and account.
- To process payment for clinical services.
- To meet legal, licensing, and regulatory obligations.
What we do not do
- We do not sell or rent your personal or health information.
- We do not use your health information for marketing without your written authorization.
- We do not place third-party advertising or tracking technologies (such as advertising pixels) on pages where health information is entered, and we do not disclose PHI to tracking technology vendors.
Cookies
Our website uses only cookies necessary for it to function and for basic security. You can disable cookies in your browser settings. Our patient portal is operated by our EHR vendor and may use cookies required for secure login.
Children
Our services are intended for adults 18 and older. We do not knowingly collect information from children.
Data security and retention
We use administrative, physical, and technical safeguards to protect your information, including encryption in transit, access controls, and multi-factor authentication. Medical records are retained for the period required by Kansas and Missouri law and professional standards.
2. How We Comply with Privacy and Health Information Laws
We provide telehealth services to patients located in Kansas and Missouri. Our privacy practices are designed to comply with:
- HIPAA (Health Insurance Portability and Accountability Act), including the Privacy Rule, Security Rule, and Breach Notification Rule (45 C.F.R. Parts 160 and 164).
- The HITECH Act, including breach notification and business associate requirements.
- Kansas law, including the Kansas data breach notification statute (K.S.A. 50-7a01 et seq.) and Kansas State Board of Nursing requirements for confidentiality of patient records.
- Missouri law, including the Missouri data breach notification statute (Mo. Rev. Stat. § 407.1500) and Missouri State Board of Nursing requirements for confidentiality of patient records.
- Federal telehealth and prescribing laws applicable to the transmission of prescription information.
Our compliance measures
- Privacy and Security Officer: Ally Lenz, MSN, APRN, FNP-C, is responsible for our privacy and security program.
- Business Associate Agreements: We use only HIPAA-compliant vendors that handle PHI under a signed Business Associate Agreement (BAA), including our EHR and patient portal, our business email system, and our payment and laboratory partners where applicable.
- Secure telehealth: Video visits are conducted on a HIPAA-compliant platform integrated with our EHR.
- Risk assessment: We conduct and document a HIPAA security risk assessment and review our safeguards at least annually and whenever our systems change.
- Minimum necessary: We use and disclose only the minimum PHI needed for a given purpose.
- Breach response: If a breach of unsecured PHI occurs, we will notify affected individuals, the U.S. Department of Health and Human Services, and state authorities as required by HIPAA and Kansas and Missouri law.
3. HIPAA Notice of Privacy Practices
Our responsibilities
- We are required by law to maintain the privacy and security of your PHI.
- We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
- We must follow the duties and privacy practices described in this notice and give you a copy of it.
- We will not use or share your information other than as described here unless you tell us we can in writing. You may change your mind at any time by letting us know in writing.
How we typically use and share your health information
- Treatment: We use your information to provide care and share it with others involved in your care, such as pharmacies filling your prescriptions and laboratories processing your tests.
- Payment: We use your information to bill and receive payment for our clinical services, and, at your request, to support claims you submit to your own insurance (for example, for lab work).
- Health care operations: We use your information to run our practice, improve care, and contact you when necessary.
Other uses and disclosures permitted or required by law
We may share your information without your authorization when permitted or required by law, including: for public health and safety issues (such as reporting adverse drug reactions); for health oversight activities by government agencies; in response to lawsuits, court orders, or legal process; for law enforcement purposes as permitted by law; to prevent a serious threat to health or safety; for workers' compensation claims; to comply with the law, including when HHS investigates our compliance; and to coroners, medical examiners, or funeral directors when an individual dies.
Uses that require your written authorization
We will never share your information for marketing purposes or sell your information unless you give us written permission. Psychotherapy notes, if any, are not shared without your authorization except as permitted by law. Other uses and disclosures not described in this notice will be made only with your written authorization.
Your rights
- Get a copy of your medical record: You can ask to see or get an electronic or paper copy of your records. We will provide a copy or summary, usually within 30 days, and may charge a reasonable, cost-based fee.
- Ask us to correct your record: You can ask us to correct information you think is incorrect or incomplete. We may say no, but we will tell you why in writing within 60 days.
- Request confidential communications: You can ask us to contact you in a specific way (for example, a different phone or email). We will say yes to all reasonable requests.
- Ask us to limit what we use or share: You can ask us not to use or share certain information. We are not required to agree if it would affect your care. If you pay for a service in full out of pocket, you can ask us not to share that information with your health insurer, and we will say yes unless a law requires us to share it.
- Get a list of those with whom we've shared information: You can ask for a list (accounting) of the times we've shared your information for six years prior to the date you ask, who we shared it with, and why. This excludes disclosures for treatment, payment, operations, and certain others.
- Get a copy of this notice: You can ask for a paper copy at any time, even if you agreed to receive it electronically.
- Choose someone to act for you: If you have given someone medical power of attorney or someone is your legal guardian, that person can exercise your rights. We will verify their authority before acting.
- File a complaint if you feel your rights are violated: See Section 4. We will not retaliate against you for filing a complaint.
Changes to this notice
We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on our website and upon request.
4. Contact & Complaints
Privacy Officer: Ally Lenz, MSN, APRN, FNP-C
Not Like Our Mothers LLC
12641 Antioch Road, Suite #1038
Overland Park, KS 66213
Email: hello@notlikeourmothers.com
You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.