HIPAA Notice of Privacy Practices

 

Effective Date: August 1, 2026

OUR COMMITMENT TO YOUR PRIVACY

At Everviva Longevity MedSpa (“Everviva,” “we,” “our,” or “us”), protecting the privacy and security of your health information is one of our highest priorities. We understand the importance of maintaining the confidentiality of your medical information and are committed to handling your Protected Health Information (“PHI”) with care, integrity, and in accordance with applicable federal and state laws.

This Notice of Privacy Practices explains:

• How we may use and disclose your Protected Health Information (PHI).
• Your rights regarding your medical information.
• Our legal responsibilities to protect your privacy.
• How you can access your records or file a privacy complaint.

This Notice applies to all healthcare services provided by Everviva Longevity MedSpa, including in-person visits, telehealth services, wellness programs, laboratory coordination, prescription management, memberships, and other healthcare-related services.

OUR LEGAL DUTIES

Everviva Longevity MedSpa is required by applicable federal and state laws, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), to:

• Maintain the privacy and confidentiality of your Protected Health Information (PHI).
• Provide you with this Notice of Privacy Practices.
• Comply with the terms of this Notice currently in effect.
• Notify you if a breach of your unsecured Protected Health Information occurs when notification is required by law.
• Implement reasonable administrative, technical, and physical safeguards to protect your health information.

We reserve the right to revise this Notice at any time. Any revisions will apply to all Protected Health Information maintained by Everviva unless otherwise required by law. The most current version of this Notice will always be available on our website.

WHAT IS PROTECTED HEALTH INFORMATION (PHI)?

Protected Health Information (“PHI”) is any information that identifies you and relates to your past, present, or future physical or mental health, healthcare services, or payment for healthcare services.

Examples of PHI include:

• Name
• Address
• Telephone number
• Email address
• Date of birth
• Medical history
• Diagnoses
• Treatment plans
• Prescription information
• Laboratory and diagnostic test results
• Medical images
• Insurance information (when applicable)
• Billing records
• Payment history
• Communications with your healthcare provider

Protected Health Information may exist in electronic, paper, photographic, audio, or verbal form.

HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

Federal law permits Everviva to use and disclose your Protected Health Information for certain purposes without obtaining your written authorization.

Treatment

We may use and disclose your health information to provide, coordinate, and manage your healthcare.

Examples include:

• Evaluating your medical history.
• Conducting telehealth consultations.
• Developing personalized treatment plans.
• Ordering laboratory testing.
• Reviewing laboratory results.
• Prescribing medications when medically appropriate.
• Coordinating care with other healthcare providers.
• Referring you to specialists when necessary.
• Managing follow-up care and ongoing treatment.

Only the minimum necessary information will be shared when appropriate, except where the law permits or requires broader disclosure for treatment purposes.

Payment

We may use and disclose your information to obtain payment for healthcare services.

Examples include:

• Processing payments.
• Billing you for services.
• Verifying insurance benefits when applicable.
• Collecting outstanding balances.
• Coordinating payment with third-party payment processors.
• Managing healthcare billing operations.

Healthcare Operations

We may use your information to support our healthcare operations and improve the quality of care we provide.

Examples include:

• Quality improvement activities.
• Staff education and training.
• Clinical performance reviews.
• Compliance monitoring.
• Medical record management.
• Credentialing and licensing.
• Internal auditing.
• Risk management.
• Business planning and administration.

These activities help us improve patient care while maintaining appropriate privacy protections.

Appointment Reminders

We may contact you regarding:

• Upcoming appointments.
• Follow-up visits.
• Laboratory reminders.
• Prescription refill reminders.
• Wellness check-ins.
• Treatment recommendations.

These communications may be made by telephone, voicemail, email, SMS/text message (where you have consented), mail, or through a secure patient portal.

Health-Related Services

We may contact you regarding healthcare services that may benefit your treatment, including:

• Recommended follow-up care.
• Preventive health screenings.
• Wellness programs.
• Medication management.
• New healthcare services related to your existing care.
• Patient education materials.

Where required by law, we will obtain your authorization before sending marketing communications.

Individuals Involved in Your Care

Unless you object, we may share relevant information with family members, caregivers, or other individuals involved in your care when appropriate and permitted by law.

If you are unable to make healthcare decisions due to an emergency or incapacity, we may use our professional judgment to determine whether disclosure is in your best interest.

Public Health Activities

We may disclose Protected Health Information when required or authorized by law for public health purposes, including:

• Reporting communicable diseases.
• Reporting adverse reactions to medications.
• Preventing or controlling disease.
• Reporting abuse, neglect, or domestic violence when required.
• Reporting to public health authorities.

Health Oversight Activities

We may disclose information to government agencies responsible for:

• Healthcare licensing.
• Professional regulation.
• Compliance investigations.
• Healthcare audits.
• Inspections.
• Accreditation activities.

Law Enforcement and Legal Proceedings

We may disclose your information when required by law, including:

• Court orders.
• Subpoenas.
• Warrants.
• Certain law enforcement requests.
• Judicial proceedings.
• Government investigations.

We will disclose only the information required or permitted by applicable law.

Serious Threat to Health or Safety

We may disclose Protected Health Information when we believe disclosure is necessary to prevent or lessen a serious and imminent threat to your health, the health of another individual, or public safety, consistent with applicable law and professional standards.

Workers’ Compensation

We may disclose health information as authorized by workers’ compensation laws or similar programs established by law.

 

BUSINESS ASSOCIATES

Everviva Longevity MedSpa works with trusted third-party companies (“Business Associates”) that assist us in providing healthcare services and operating our practice.

These Business Associates may create, receive, maintain, or transmit Protected Health Information (PHI) on our behalf.

Examples include:

• Electronic Medical Record (EMR) providers
• Telehealth platform providers
• Patient portal providers
• Clinical laboratories
• Licensed pharmacies
• Secure cloud hosting providers
• Medical billing companies
• Payment processing providers
• Information technology vendors
• Secure communication providers
• Appointment scheduling systems

When required by law, Everviva enters into Business Associate Agreements (BAAs) with these organizations requiring them to safeguard your Protected Health Information in accordance with HIPAA and other applicable privacy laws.

USES REQUIRING YOUR WRITTEN AUTHORIZATION

Certain uses and disclosures of your Protected Health Information require your written authorization.

Unless otherwise permitted or required by law, we will obtain your authorization before:

• Using your information for certain marketing activities.
• Selling your Protected Health Information.
• Disclosing psychotherapy notes (when applicable).
• Making disclosures not otherwise described in this Notice.

You may revoke your authorization at any time by submitting a written request.

Revoking your authorization will not affect actions already taken in reliance upon your previous authorization.

YOUR PRIVACY RIGHTS

As a patient, you have important rights regarding your Protected Health Information.

Right to Access

You may request to inspect or obtain copies of your medical records and certain healthcare information maintained by Everviva, subject to applicable law.

Reasonable fees permitted by law may apply.

Right to Request Corrections

If you believe information in your medical record is incorrect or incomplete, you may request that we amend your record.

We may deny certain requests as permitted by law, but we will explain the reason for any denial.

Right to Request Restrictions

You may request restrictions on certain uses or disclosures of your Protected Health Information.

Although we will carefully consider every request, we are not always legally required to agree.

Right to Confidential Communications

You may request that we communicate with you using alternative methods or at alternative locations.

Examples include:

• Different mailing address
• Different telephone number
• Email communications
• Secure patient portal communications

We will accommodate reasonable requests whenever practical and permitted by law.

Right to Receive an Accounting of Disclosures

You may request a list of certain disclosures of your Protected Health Information that were made outside of treatment, payment, and healthcare operations, as permitted under HIPAA.

Right to Receive a Copy of this Notice

You have the right to receive a paper or electronic copy of this Notice at any time, even if you previously agreed to receive it electronically.

PATIENT RESPONSIBILITIES

To help protect your medical information, you agree to:

• Provide accurate and complete health information.
• Notify us promptly of changes to your contact information.
• Protect your patient portal username and password.
• Notify Everviva immediately if you believe your account has been accessed without authorization.
• Review communications sent through the patient portal.
• Keep your devices reasonably secure when accessing your health information electronically.

OUR RESPONSIBILITIES

Everviva is committed to protecting your privacy and maintaining the confidentiality of your medical information.

We will:

• Maintain the privacy of your Protected Health Information.
• Follow the privacy practices described in this Notice.
• Use reasonable administrative, technical, and physical safeguards.
• Train workforce members regarding privacy obligations.
• Limit access to Protected Health Information to authorized personnel.
• Notify you if a reportable breach of unsecured Protected Health Information occurs, as required by law.
• Comply with all applicable federal and state privacy requirements.

SECURITY MEASURES

Everviva uses reasonable administrative, technical, and physical safeguards designed to protect your health information.

Examples include:

• Secure encrypted communications
• Password-protected systems
• Access controls
• Secure patient portal technology
• Workforce privacy training
• Security monitoring
• Routine software updates
• Vendor security evaluations where appropriate

While we strive to protect your information using industry-recognized safeguards, no electronic transmission, computer system, or internet-based service can be guaranteed to be completely secure.

Accordingly, Everviva cannot guarantee absolute security, although we continually work to reduce risk and protect patient information.

ELECTRONIC COMMUNICATIONS

With your consent and as permitted by law, Everviva may communicate with you through:

• Email
• Telephone
• SMS/Text Message
• Secure Patient Portal
• Electronic Notifications

These communications may include:

• Appointment reminders
• Treatment recommendations
• Laboratory notifications
• Prescription updates
• Billing information
• Practice announcements

Although reasonable safeguards are used, electronic communications involve certain inherent security risks.

By providing your contact information, you acknowledge and accept these risks and authorize Everviva to communicate with you using the information you provide, consistent with applicable law.

STATE PRIVACY LAWS

Certain state privacy laws may provide additional protections beyond those required under HIPAA.

When applicable state law provides greater privacy protection than federal law, Everviva will comply with the more protective legal requirement.

RECORD RETENTION

Everviva retains medical records in accordance with applicable federal and Florida state laws, professional licensing requirements, and healthcare record retention standards.

When records are no longer required to be maintained, they will be securely destroyed in accordance with applicable legal requirements and industry best practices.

WEBSITE INFORMATION

This Notice applies to Protected Health Information created or maintained during the provision of healthcare services.

General information available on our website is intended solely for educational purposes and should not be interpreted as medical advice, diagnosis, or treatment.

Website content does not establish a provider-patient relationship.

BREACH NOTIFICATION

If Everviva discovers a breach of unsecured Protected Health Information that requires notification under applicable law, affected individuals will be notified without unreasonable delay in accordance with HIPAA and applicable state laws.

Notification may include information regarding:

• The nature of the breach.
• The information involved.
• Steps you may take to protect yourself.
• Actions Everviva is taking to investigate and mitigate the incident.
• Contact information for additional assistance.

NO RETALIATION

Everviva will never retaliate against you for:

• Exercising your privacy rights.
• Requesting access to your medical information.
• Filing a privacy complaint.
• Reporting suspected privacy violations.
• Requesting confidential communications.

Your healthcare services will not be affected because you choose to exercise your legal privacy rights.

CHANGES TO THIS NOTICE

Everviva reserves the right to revise this Notice of Privacy Practices at any time.

Any revised Notice will apply to all Protected Health Information maintained by Everviva unless otherwise required by law.

The most current version of this Notice will always be available on our website and may also be obtained by contacting our office.

QUESTIONS OR COMPLAINTS

If you have questions regarding this Notice or believe your privacy rights have been violated, please contact us.

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR).

Everviva will not retaliate against you for filing a complaint or exercising your privacy rights.

CONTACT US

Everviva Longevity MedSpa
2240 Palm Beach Lakes Blvd., Suite 250
West Palm Beach, FL 33409

Phone: (561) 566-9954

Email: hello@everviva.com

ACKNOWLEDGMENT

Everviva Longevity MedSpa is committed to protecting the privacy and confidentiality of your Protected Health Information.

By receiving healthcare services from Everviva, you acknowledge that this HIPAA Notice of Privacy Practices has been made available to you. Your receipt of this Notice does not require you to waive any rights under HIPAA or other applicable federal or state laws.

This completes a comprehensive HIPAA Notice suitable for a telehealth-focused medical practice. Before publishing, it’s a good idea to have it reviewed by legal counsel familiar with Florida healthcare law and HIPAA to ensure it aligns with your specific workflows, vendors, and services.