Privacy Policy and Notice of Privacy Practices
Cedarview Health, LLC
5 Walter E Foran Blvd, Suite 4006, Flemington, NJ 08822
Effective date: January 2, 2025 · Last updated: September 21, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This website is not for emergencies. If you are in crisis or having a mental health emergency, call 911, or call or text 988 (Suicide and Crisis Lifeline, 24 hours). You can also reach NJ MentalHealthCares at 1-866-202-4357. Do not use this website, our contact form, email, or the patient portal to report an emergency. Cedarview does not provide crisis or after-hours coverage.
Who we are
Cedarview Health, LLC is a small, privately owned outpatient mental health practice in Flemington, New Jersey. We provide psychiatric evaluation, medication management, and psychotherapy to patients ages 8 and older, in person at our Flemington office and by telehealth to patients located in New Jersey.
We are a private practice, not a licensed healthcare facility. Care is provided by clinicians who are individually licensed by the State of New Jersey — psychiatric mental health nurse practitioners licensed as Advanced Practice Nurses by the New Jersey Board of Nursing, and therapists licensed or certified by the New Jersey Division of Consumer Affairs. Each clinician is personally accountable for your care and for protecting your information.
Cedarview is a HIPAA-covered entity. We are required by law to protect the privacy of your health information, to give you this notice of our legal duties and privacy practices, to follow the terms of the notice currently in effect, and to notify you if a breach occurs that compromises your information.
About this document
This document has two parts, because different rules apply.
Part 1 covers information collected through our website, from anyone who visits — including people who are not patients.
Part 2 is our Notice of Privacy Practices. It covers protected health information about our patients and is governed by HIPAA, the HITECH Act, and New Jersey law. You will also be given a copy at the start of care, and you can request a paper or electronic copy at any time, free of charge.
Part 1 — This website
1. What we collect from visitors
What you give us. If you use a contact form, referral form, appointment request, or newsletter signup, we collect what you enter — usually your name, email address, phone number, and any message you write.
Please do not put detailed health information in a website form. Website forms are not a secure channel for clinical information. Tell us how to reach you and we will follow up through a secure channel.
What is collected automatically. IP address, browser and device type, pages viewed, time on the site, and the site you came from.
2. Cookies and analytics
This website uses cookies for basic functionality and analytics tools that help us understand how visitors use the site. You can disable cookies in your browser settings; parts of the site may not work if you do.
We do not run advertising or social media tracking technologies on this website, and we do not share website visitor information with advertisers.
3. How we use website information
To answer your question, schedule or follow up on an appointment request, process referrals from other providers, send updates if you signed up for them, keep the site secure, and improve it.
4. What we do not do
We do not sell personal information.
We do not share it with advertisers or data brokers.
We do not use health information for advertising or marketing.
We do not use anything collected here to decide whether you can become a patient.
5. Links to other sites
This site links to other websites, including our patient portal. We do not control those sites and are not responsible for their privacy practices.
6. Children and this website
This website is intended for adults. We do not knowingly collect information from children through it. We treat patients ages 8 and older, but information about a minor patient is collected through our intake process from a parent or legal guardian — not through this website.
Part 2 — Notice of Privacy Practices
7. What we keep about you
Your name, date of birth, address, phone number, email, and emergency contact; insurance and payment information; your medical and mental health history, diagnoses, medications, allergies, treatment plans, assessments, and progress notes; results of laboratory tests or drug screening your prescriber ordered; records other providers send us with your authorization; and confirmation of your physical location during telehealth visits, which we are required by law to document.
8. How we may use and share your information without your permission
For treatment. To provide and coordinate your care — including sharing information among your Cedarview clinicians and with clinical supervisors, sending prescriptions to your pharmacy, ordering laboratory tests, and coordinating with your other treating providers.
For payment. To check your coverage, obtain prior authorization, bill your insurance, and collect payment.
For our operations. Quality review, clinical supervision, staff training and credentialing, compliance activities, and running the practice.
To contact you about appointments and follow-up care, using the methods you have authorized.
When the law requires or permits it. Including:
Reporting suspected child abuse or neglect to the New Jersey Division of Child Protection and Permanency
Reporting suspected abuse, neglect, or exploitation of a vulnerable adult
Responding to a court order, subpoena, warrant, or other lawful legal process
Reporting to health oversight agencies and licensing boards
Public health reporting
Reporting controlled substance prescriptions to the New Jersey Prescription Monitoring Program, which our prescribers are required by law to use
Disclosures to law enforcement where the law requires it
Workers' compensation claims, where applicable
To prevent serious harm. If we believe in good faith that it is necessary to prevent or reduce a serious and imminent threat to your safety or someone else's, we may share information with someone able to help prevent that harm. New Jersey law imposes specific duties on mental health clinicians in these situations.
9. What always requires your written permission
We will not do any of the following without your written authorization:
Release your psychotherapy notes, except in the narrow circumstances the law allows
Use or share your information for marketing
Sell your information — which we do not do
Anything else not described in this notice
You can revoke an authorization in writing at any time. Revoking it does not undo disclosures we already made while relying on it.
We do not fundraise and will not contact you for that purpose.
10. Information with extra protection
Psychotherapy notes are kept separately from the rest of your record and are not released when someone requests your records generally — including your insurer, except in limited circumstances.
Mental health records receive additional protection under New Jersey law, which in some situations is more restrictive than HIPAA. Where state and federal law differ, we follow whichever protects you more.
Substance use disorder treatment information, where it applies, receives additional federal protection under 42 C.F.R. Part 2.
HIV/AIDS information and genetic information receive specific protection under New Jersey law.
11. Minor patients and parents
We treat patients ages 8 and older. For a patient under 18, a parent or legal guardian generally has the right to see the minor's health information and to exercise the rights in Section 12 on the minor's behalf. We verify the identity and legal authority of the consenting adult and may ask for custody documentation.
There are limits, and we want you to understand them before treatment starts.
New Jersey law gives minors independent rights in certain situations, and in those situations we follow the law rather than the general rule. Separately, treating adolescents effectively requires that the clinician spend time alone with the patient, and your child's clinician will use professional judgment about what to share with you.
Your child's clinician will always tell you if there is a safety concern.
If you have questions about what will and will not be shared, raise them with the clinician at the first appointment.
12. Your rights
See and get a copy of your record. Including an electronic copy. We may charge a reasonable, cost-based fee for copies. We can deny access in limited circumstances, and you may be entitled to have a denial reviewed.
Ask us to correct your record if you believe something is wrong or incomplete. We may deny the request; if we do, you can submit a written statement of disagreement that we will keep with your record.
Get a list of certain disclosures we have made — other than for treatment, payment, operations, and some other exceptions.
Ask us to limit what we use or share. We are not required to agree, with one exception: if you pay in full out of pocket for a service, you can require us not to tell your health plan about it, and we must honor that.
Ask us to contact you a specific way — a particular phone number, a particular address, or not by voicemail. We will accommodate reasonable requests and will not ask why.
Get a copy of this notice on paper or electronically at any time, free of charge.
Be told if your information is breached.
Choose someone to act for you. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise these rights. We will verify their authority first.
File a complaint — see Section 18. We will not retaliate against you for doing so.
To exercise any of these rights, contact our Privacy Officer using the information in Section 19. Most requests need to be in writing, and we will help you put one together if that is a barrier.
13. How we protect your information
Your records are kept in Charm Health, a HIPAA-compliant electronic health record, under a written Business Associate Agreement. Telehealth visits use an encrypted, HIPAA-compliant platform. Information is encrypted in transit and at rest.
Because we are a small practice, access control is straightforward and strict: each person can reach only what their role requires, access is logged, and it is shut off immediately when someone leaves. Portal messages are read only by your own treating clinician. Everyone who works here completes HIPAA training when hired and every year after, and signs a confidentiality agreement.
We also train staff on something specific to behavioral health: confirming that someone is our patient is itself a disclosure. Staff do not discuss anything patient-identifying where it could be overheard, and voicemails contain only what you have authorized us to say.
14. Vendors who handle your information
We use outside vendors for our electronic health record and patient portal, the telehealth platform, clinical documentation, laboratory services, and billing. Every vendor that handles your health information does so under a written Business Associate Agreement requiring them to protect it and use it only for the purposes we specify.
15. AI-assisted clinical documentation
We may use AI-assisted documentation technology to help clinicians write clinical notes. This is optional and requires your separate written consent. You may decline, and declining does not affect your care in any way. If you consent, the vendor operates under a Business Associate Agreement. You will get the details before you are asked to decide.
16. Email, text, and the patient portal
The patient portal is our secure channel for non-urgent matters. Portal messages are read by your own treating clinician, and a reply can take up to seven days. Nobody else monitors them.
Email and text are not fully secure. We use them only if you have consented, and you can withdraw that consent in writing at any time. If you email or text us, you accept the risk that the message could be intercepted.
If something is urgent, call or text the office at (973) 755-2887 during business hours. In an emergency, call 911 or call or text 988.
17. How long we keep your records
We keep clinical records for as long as New Jersey law and federal law require, and longer where a payer contract, an open matter, or another legal obligation requires it. Records for patients treated as minors are kept for a longer period, as the law requires.
When a retention period ends and nothing else requires us to keep a record, we destroy it securely. Website inquiries that never become part of a patient record are kept only as long as needed to respond.
18. Complaints
If you think your privacy rights have been violated, tell us. Contact our Privacy Officer using the information below. We take complaints seriously and will respond.
You can also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights:
200 Independence Avenue SW, Washington, DC 20201
1-877-696-6775
hhs.gov/ocr/privacy/hipaa/complaints/
We will not retaliate against you in any way for filing a complaint. Filing one will not affect your care.
19. Contact us
Privacy Officer
Cedarview Health, LLC
5 Walter E Foran Blvd, Suite 4006
Flemington, NJ 08822
Phone / Text: (973) 755-2887
Fax: (908) 842-0632
Email: privacy@cedarview.health
20. Nondiscrimination and access
Cedarview Health complies with applicable federal and state civil rights laws and does not discriminate on the basis of race, color, national origin, age, disability, sex, sexual orientation, or gender identity. Language assistance services and auxiliary aids are available at no cost to you. Contact the office to request them.
21. Changes to this notice
We can change this notice, and changes apply to all information we hold about you. The current version is always posted at www.cedarview.health/privacy-policy with its effective date at the top. You can request a copy at any time.