appointments@themindfullemon.com
(855) 435-3801
Who We Are
The Mindful Lemon Behavioral Health Group (“The Mindful Lemon,” “TML,” “we,” “us,” or “our”) is a behavioral health organization offering mental health treatment services including Residential Treatment (RTC), Partial Hospitalization (PHP), Intensive Outpatient (IOP), Virtual IOP (VIOP), Medication Management, and Talk Therapy. Our services are delivered in-person in Los Angeles, California, and virtually nationwide where clinically and legally permissible.
This Privacy Policy applies to information collected through our website at www.themindfullemon.com, our intake and contact forms, email and SMS communications, and related digital touchpoints (“the Site”). It does not apply to information you provide directly to clinical providers in the course of receiving care.
Intellectual Property
All content on this Site — including but not limited to text, graphics, logos, icons, images, audio clips, program names (including “The Lemon Reset™”), page layout, and software — is the exclusive property of The Mindful Lemon, LLC or its content licensors and is protected by applicable copyright, trademark, and intellectual property laws.
The Mindful Lemon™, The Lemon Reset™, and associated logos are trademarks of The Mindful Lemon, LLC. Unauthorized use of these marks is strictly prohibited.
You may view, download, and print a single copy of Site content for personal, non-commercial use only, provided you do not modify the content and retain all copyright and trademark notices. Any other use — including reproduction, distribution, republication, or commercial use — requires prior written permission from The Mindful Lemon, LLC.
Privacy Officer Contact
If you have questions about this Privacy Policy, please contact our Privacy Officer:
Information We Collect
Information You Provide Directly
- Name, email address, phone number, and ZIP code (from contact and intake forms)
- Insurance information submitted for verification purposes
- Information shared in free-text fields, messages, or inquiries
- Newsletter subscription preferences
- Information submitted through our Care Quiz or Get Started forms
Information Collected Automatically
- Browser type, operating system, and device identifiers
- IP address and approximate geographic location
- Pages visited, time on site, and navigation patterns
- Referring URLs and search terms
- Cookie identifiers and session data (see Section 5)
Information From Third Parties
- Referral information provided by treatment professionals or partner organizations
- Insurance eligibility and benefits data from payers (for admissions processing only)
- Analytics and advertising partner data (see Section 5)
How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries and scheduling consultations | Your request / Legitimate interest |
| Processing insurance verification requests | Your request / Pre-contractual steps |
| Sending appointment reminders and follow-up communications | Legitimate interest / Consent |
| Sending SMS appointment reminders, scheduling updates, and service notifications | Consent (opt-in via phone number submission) |
| Sending newsletters and educational content (opt-in only) | Consent |
| Improving website functionality and user experience | Legitimate interest |
| Complying with legal obligations and regulatory requirements | Legal obligation |
| Detecting and preventing fraud or security threats | Legitimate interest |
| Analytics to understand how people find and use our site | Legitimate interest / Consent |
We will not use your information for automated decision-making that produces legal or significant effects without your explicit consent.
How We Share Your Information
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information only in the following circumstances:
Service Providers
We share data with vendors who operate under data processing agreements and are contractually required to protect your information, including: email and CRM platforms, analytics providers, web hosting companies, insurance verification services, electronic health record (EHR) systems, and secure healthcare technology platforms that support our clinical operations.
SMS Service Providers
We may share your mobile number and messaging consent status with secure SMS communication platforms that deliver text messages on our behalf. These providers are contractually required to protect your information and use it solely to support our messaging services. No mobile information, including SMS opt-in data and consent, will be shared with third parties for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third party except as described in this paragraph.
Insurance Providers
We may share necessary information with your insurance provider for billing, eligibility verification, and claims processing purposes.
Clinical Referrals
With your explicit consent, we may share your contact information with referring clinicians or step-down treatment providers to facilitate continuity of care.
Legal Requirements
We may disclose information when required by law, court order, subpoena, or to protect the safety of any person — consistent with applicable state and federal law.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections described in this Policy.
Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to operate, improve, and understand how our site is used. Categories of cookies we use include:
- Strictly Necessary Cookies: Required for site functionality (login state, form submission). Cannot be disabled.
- Analytics Cookies: Help us understand page traffic and user behavior (e.g., Google Analytics). These may be disabled via our cookie banner.
- Marketing/Advertising Cookies: Used to deliver relevant ads and track campaign performance. These require your consent and may be managed in your browser or through our cookie settings.
You may manage or withdraw consent for non-essential cookies at any time using the cookie settings link in our site footer. Note that disabling certain cookies may affect site functionality.
We comply with applicable state laws regarding tracking technologies, including California’s CCPA and any applicable opt-out requirements for sensitive data contexts.
SMS Communications
If you provide your mobile phone number through our website, intake forms, or other communication channels, you may receive SMS (text) messages from The Mindful Lemon Behavioral Health Group.
Types of Messages We Send
- Appointment reminders and scheduling coordination
- Program updates and service-related notifications
- Follow-up communications related to your care or inquiry
- Responses to questions or requests you have submitted
Consent
By providing your mobile phone number through our website or forms, you indicate your consent to receive SMS communications of the types described above. You are not required to consent to SMS messages as a condition of receiving our services.
How to Opt Out
You may opt out of SMS messages at any time:
- Reply STOP to any message you receive from us to unsubscribe immediately
- Reply HELP to any message for assistance, or contact us directly at compliance@themindfullemon.com or (855) 435-3801
After you opt out, you will receive one final confirmation message and no further SMS communications, except as required for urgent safety or care-related notifications where permitted by law.
Mobile Information Sharing
SMS Opt-In Data Is Never Shared for Marketing
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third party, except with secure service providers that assist us in delivering messaging services (such as SMS communication platforms). These providers are contractually required to protect your information and use it only to support our services.
All other categories of personal information described in this Privacy Policy exclude text messaging originator opt-in data and consent. SMS opt-in data and consent are treated as a distinct and protected category of information subject to the specific limitations described in this section.
This policy applies regardless of whether you are a current client, prospective client, or website visitor who has provided a mobile number through any channel.
Data Retention
We retain personal information collected through this website for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law:
- Contact and inquiry data: up to 3 years unless you request earlier deletion
- Newsletter subscription records: until you unsubscribe
- Analytics data: as configured by the analytics provider (typically 26 months)
- Insurance verification records: as required by applicable state licensing and insurance regulations
- SMS consent records: retained for the duration of the messaging relationship and as required by applicable law
Clinical records are retained in accordance with our HIPAA Notice of Privacy Practices and applicable California and federal law governing medical record retention.
Your Privacy Rights
Depending on your state of residence, you may have the following rights regarding your personal information:
- Right to Know: Request a copy of the personal information we hold about you
- Right to Correct: Request correction of inaccurate personal information
- Right to Delete: Request deletion of your personal information (subject to legal exceptions)
- Right to Opt Out: Opt out of any sale or sharing of personal information (we do not sell data)
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise any of these rights, please contact us at compliance@themindfullemon.com or call (855) 435-3801. We will respond within 45 days, or as required by applicable law.
California Residents (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to Know (Categories & Specific Pieces): You may request disclosure of the categories and specific pieces of personal information collected, the sources from which it was collected, and the business purpose for collection or disclosure.
- Right to Correct: Request that we correct inaccurate personal information we maintain about you.
- Right to Delete: Request that we delete personal information we collected from you, subject to certain exceptions.
- Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information to purposes authorized by the CPRA.
- Do Not Sell or Share: We do not sell or share personal information as defined under CCPA. You may confirm this via our cookie settings.
To submit a California privacy request, contact compliance@themindfullemon.com and include “California Privacy Request” in the subject line. You may also designate an authorized agent to submit requests on your behalf.
We will not discriminate against you for exercising your CCPA/CPRA rights.
Minors
For clients or prospective clients between the ages of 13 and 17, parental or guardian consent is required for clinical services. Any personal information collected in connection with minors seeking behavioral health services is handled through our clinical intake process, governed by our HIPAA Notice, and applicable state law regarding minor consent to mental health and substance use treatment.
If you believe we have inadvertently collected information from a child under 13, please contact us immediately at compliance@themindfullemon.com and we will promptly investigate and delete such information.
Data Security
We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. These include:
- TLS/SSL encryption for data transmission on our website
- Access controls and authentication for internal systems
- Regular security assessments and vulnerability monitoring
- Staff training on privacy and data handling procedures
- Business Associate Agreements with all third-party vendors handling PHI
While we take reasonable precautions, no transmission or storage system is completely secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at compliance@themindfullemon.com.
In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable federal and state law.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. We will post the updated Policy on this page with a revised “Last Reviewed” date. For material changes, we will provide notice via email or a prominent website notice where feasible.
Your continued use of our website following any update constitutes your acknowledgment of the revised Policy.
