Privacy Policy

HIPAA Privacy Policy


Notice of Privacy Practices (NPP)

Premier LIfe Wellness LLC


Effective Date: 4/16/26


THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.


Our Commitment to Your Privacy


[Clinic Name] Hormone & Peptide Optimization Clinic (“Clinic,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable federal and state laws.


This Privacy Policy applies to all services provided through:

  • In-person visits (if applicable)

  • Telehealth services

  • Online patient portals

  • Electronic communications

  • Laboratory services

  • Hormone therapy and peptide optimization programs

  • Weight loss and wellness services


What Is Protected Health Information (PHI)?


Protected Health Information (PHI) includes:

  • Personal identifying information

  • Medical history

  • Laboratory results

  • Diagnoses

  • Treatment plans

  • Medication records

  • Billing information

  • Communication records related to your care


PHI may be stored in:

  • Electronic Health Records (EHR)

  • Telehealth systems

  • Secure patient portals

  • Billing and administrative systems


How We May Use and Disclose Your PHI


We may use and disclose your PHI for the following purposes:


1. Treatment


We may use your PHI to provide, coordinate, or manage your healthcare services.


Examples include:

  • Reviewing laboratory results

  • Prescribing hormone therapy or peptides

  • Coordinating care with pharmacies or laboratories

  • Communicating with other healthcare providers involved in your care

  • Developing personalized treatment plans


2. Payment


We may use and disclose PHI to obtain payment for services rendered.


Examples include:

  • Processing payments

  • Billing insurance (if applicable)

  • Providing receipts or billing documentation

  • Verifying eligibility for services


3. Healthcare Operations


We may use PHI to support business operations.


Examples include:

  • Quality improvement

  • Provider training

  • Licensing and credentialing

  • Compliance reviews

  • Internal audits


Uses and Disclosures Without Your Authorization


We may disclose PHI without your authorization when required or permitted by law, including:


Public Health Activities


Examples:

  • Reporting communicable diseases

  • Reporting adverse medication events

  • Public health investigations


Required by Law


We may disclose PHI when required by:

  • Federal laws

  • State laws

  • Court orders

  • Subpoenas


Law Enforcement


We may disclose PHI to law enforcement officials when legally required.


Health Oversight Activities


Examples:

  • Licensing boards

  • Accreditation organizations

  • Government health agencies


To Prevent Serious Threats


We may disclose PHI if necessary to prevent serious harm to you or others.


Uses That Require Your Authorization


We will obtain your written authorization before:

  • Sharing PHI for marketing purposes

  • Selling PHI

  • Sharing psychotherapy notes (if applicable)

  • Using PHI beyond standard treatment, payment, or operations


You may revoke authorization at any time in writing.


Telehealth and Electronic Communication Privacy


Because our clinic provides online and telehealth services, PHI may be transmitted electronically.


We use:

  • HIPAA-compliant telehealth platforms

  • Secure messaging systems

  • Encrypted patient portals

  • Secure data storage systems


However, no electronic system is completely risk-free. By using telehealth services, you acknowledge potential risks associated with electronic communication.


Your Rights Regarding Your PHI


You have the following rights under HIPAA:


Right to Access Your Records


You have the right to:

  • Review your medical records

  • Obtain copies of your records


Requests must be submitted in writing.


Fees may apply for copying or administrative services.


Right to Request Amendments


You may request corrections to your medical record if you believe information is incorrect or incomplete.


We may deny requests if:

  • The record is accurate

  • The record was not created by our clinic


Right to Request Restrictions


You may request restrictions on how your PHI is used or disclosed.


We are not required to agree to all restrictions but will honor reasonable requests when possible.


Right to Confidential Communications


You may request:

  • Alternative contact methods

  • Communication to alternative addresses


Example:

  • Contact only by email

  • Mail to a different address


Right to an Accounting of Disclosures


You may request a list of disclosures made outside treatment, payment, or operations.


Right to File a Complaint


If you believe your privacy rights have been violated, you may file a complaint with:

Alison Kendrick

Premier Life Wellness

Email: Alison@premierlifewellness.com


You may also file a complaint with:


U.S. Department of Health and Human Services (HHS)

Office for Civil Rights

Website: https://www.hhs.gov/ocr/privacy/hipaa/complaints/


You will not be penalized for filing a complaint.


How We Protect Your Information


We maintain safeguards to protect your PHI, including:


Administrative Safeguards

  • Employee HIPAA training

  • Access controls

  • Privacy policies

  • Security monitoring


Physical Safeguards

  • Secure office locations

  • Controlled facility access

  • Secure record storage


Technical Safeguards

  • Data encryption

  • Secure login credentials

  • Multi-factor authentication (where applicable)

  • HIPAA-compliant telehealth platforms

  • Firewall protection


Third-Party Service Providers


We may share PHI with Business Associates who assist in operations.


Examples:

  • Electronic Health Record (EHR) providers

  • Billing companies

  • Telehealth software providers

  • Laboratories

  • Pharmacies

  • Payment processors


All Business Associates are required to sign Business Associate Agreements (BAAs) to protect your PHI.


Data Retention Policy


We retain medical records in accordance with:

  • Federal HIPAA regulations

  • State-specific retention laws


Records may be stored electronically and archived securely.


Breach Notification Policy


In the event of a breach involving unsecured PHI, we will:

  • Notify affected individuals

  • Investigate the breach

  • Take corrective actions

  • Comply with federal notification requirements


Notifications will occur within the timeframe required by law.


Minor Patient Privacy


For patients under the age of 18:

  • Parents or legal guardians may have access to records as permitted by law.

  • Certain services may allow confidential treatment depending on state law.


Changes to This Privacy Policy


We reserve the right to modify this Privacy Policy at any time.


Changes will be:

  • Posted on our website

  • Available in the patient portal

  • Provided upon request


The updated policy will apply to all PHI maintained by the clinic.