Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Your information. Your rights. Our responsibilities.

This Notice of Privacy Practices applies to health information created or received by Talks with Sabrina PLLC, including services provided under the trade name Sabrina Merz, LPC and, where applicable, Musician Therapy Studio.

Federal law requires us to protect the privacy of your protected health information (PHI), provide you with this notice describing our legal duties and privacy practices, and follow the terms of the notice currently in effect.

Your rights

You have the right to:

• Get a copy of your medical record, in paper or electronic form, subject to applicable law.
• Ask us to correct information you believe is incorrect or incomplete.
• Request confidential communications, such as asking us to contact you in a particular way or at a particular location.
• Ask us to limit how we use or disclose your information. We are not required to agree to every request.
• Request an accounting of certain disclosures of your health information.
• Get a copy of this notice.
• Choose someone to act for you when legally authorized to do so.
• Revoke an authorization you previously gave us, in writing, except to the extent we have already relied on it.
• Receive notice if a breach occurs that compromises the privacy or security of your information, as required by law.
• File a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint.

How we may use and disclose your information

We may use or disclose your PHI without your written authorization when permitted or required by law, including for the following purposes:

• Treatment: To provide, coordinate, or manage your mental health care, including consultation or referrals when appropriate.
• Payment: To obtain payment for services, including submitting claims to your health insurance plan when applicable.
• Health care operations: For activities necessary to operate the practice, such as quality assessment, compliance, auditing, and administrative activities.
• Required by law: When federal, state, or local law requires disclosure.
• Public health and safety: In circumstances permitted by law, including certain reports concerning public health, abuse or neglect, or serious threats to health or safety.
• Health oversight: For activities authorized by law concerning the health care system or government programs.
• Legal proceedings and law enforcement: When permitted or required by applicable law or legal process.
• Other permitted purposes: In certain circumstances involving workers’ compensation, coroners or medical examiners, organ donation, research, disaster relief, or other purposes specifically permitted by law.

Uses and disclosures requiring your authorization

Most uses and disclosures of psychotherapy notes maintained separately from the rest of your medical record require your written authorization, except where HIPAA permits otherwise.

We will obtain your written authorization for other uses or disclosures when HIPAA requires authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

We do not sell your health information. We do not use your health information for marketing purposes when HIPAA requires your authorization unless you have provided that authorization.

Substance use disorder records

If we create or maintain records that are protected by the federal confidentiality requirements for substance use disorder patient records under 42 CFR Part 2, we will comply with the applicable Part 2 requirements in addition to HIPAA requirements.

Colorado confidentiality

Information provided during therapy is legally confidential except where disclosure is permitted or required by law. Colorado law contains specific exceptions to confidentiality, including certain circumstances involving threats, abuse or neglect, court orders, and other situations established by law.

Colorado law also requires mental health professionals to inform clients that client records may not be maintained after seven years.

Our responsibilities

We are required by law to maintain the privacy and security of your PHI, provide you with this notice, and follow the privacy practices described here while this notice is in effect. We reserve the right to change our privacy practices and this notice. If we make a material change, the revised notice will be available on this website and upon request.

Contact us

If you have questions about this notice, want to exercise a privacy right, or want to file a complaint with us, contact:

Sabrina Merz, LPC
Talks with Sabrina PLLC
303-390-1636
hello@sabrinamerz.com

Complaints to the U.S. Department of Health and Human Services

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. You can find information about how to file a complaint at hhs.gov/ocr/complaints.

Effective date: September 18, 2026