HIPAA Notice of Privacy Practices

Last modified: September 23, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who this Notice covers

This Notice covers HealthyVue, LLC (“HealthyVue”) and the licensed healthcare professionals and independent medical practices subcontracted to provide patient care through HealthyVue, whether contracted directly or through a participating medical practice. “Providers” means those treating professionals. “Practice” means the medical practice responsible for your care, including a Provider practicing independently where applicable. The Notice applies to care delivered through HealthyVue's telehealth platform and the associated electronic patient-service systems, and to the administrative services supporting that care. It does not cover a Provider's unrelated practice outside HealthyVue or an independent pharmacy, laboratory, or other provider's own information practices.

HealthyVue operates the platform and provides administrative services. The Providers and Practices deliver clinical care and retain their own professional and legal responsibilities. In this Notice, “we,” “us,” and “our” refer to HealthyVue or the Provider/Practice handling your information in the role described. Clinical uses, decisions about clinical records, and the treating covered entity's legal duties belong to the responsible Provider/Practice. HealthyVue assists with privacy requests through the common contact below. When HealthyVue handles protected health information (“PHI”) as a Practice's business associate, it may use or disclose that information only as permitted by applicable law and its business associate agreement. The clinical permissions described in this Notice do not give HealthyVue independent permission to use PHI for its own marketing or unrelated purposes.

Each responsible HIPAA-covered Provider or Practice is required by law to maintain the privacy of PHI, provide notice of its legal duties and privacy practices, follow the Notice currently in effect, and notify affected individuals following a breach of unsecured PHI as required by law. HealthyVue must safeguard PHI and fulfill the privacy and breach-response duties applicable to its role. HealthyVue and the participating Providers/Practices follow the commitments in this Notice within their respective roles. This Notice describes permitted uses and disclosures and your rights. It is not an authorization. Acknowledging receipt does not waive those rights or consent to uses requiring a separate authorization.

Privacy Contact

HealthyVue, LLC
ATTN: Privacy Office
369 N Main Street
Crestview, FL 32536
Email: support@thehealthyvue.com
Phone: (850) 318-2858

Use this contact to ask questions, exercise rights, request a copy of this Notice, or file a privacy complaint. Requests about clinical records will be directed to the responsible Practice.

I. USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION

A. Routine Uses and Disclosures of Protected Health Information

Limits that apply throughout this Notice: Every use or disclosure must satisfy the applicable legal conditions. When federal or state law gives information greater protection, we follow the stricter applicable rule, including any additional consent or limits for mental-health, HIV-related, genetic, or other specially protected records. A general category below does not override those protections.

Substance-use-disorder records: If we receive or maintain records protected by 42 CFR part 2, we apply that law's additional protections. We will not use or disclose those records, or testimony describing their contents, in civil, criminal, administrative, or legislative investigations or proceedings against you without your written consent meeting Part 2 requirements or a qualifying court order issued after notice and an opportunity to be heard for you or the record holder, accompanied by a subpoena or other legal mandate compelling disclosure. Any required consent for such proceedings must be separate from consent for other uses. These limits apply to all categories below, including court, law-enforcement, oversight, and required-by-law disclosures. This paragraph does not mean that all health records are Part 2 records or that the Practice operates a substance-use-disorder treatment program.

The Practice is permitted under federal law to use and disclose PHI for certain purposes, including treatment, payment, and health care operations. Generally, we do not need your permission for these uses or disclosures under applicable laws. The following are examples of the types of routine uses and disclosures of PHI that we are permitted to make without your permission. Although this list is not exhaustive, it should give you an idea of the routine uses and disclosures we are permitted to make without your permission.

For Treatment: We keep a record of your PHI, which may include lab results, diagnoses, medications, your response to medications or other therapies, and information we learn about your health by providing the Services. We may use and disclose this information and other PHI to provide, coordinate, and/or manage your treatment and inform you of treatment alternatives and other health related benefits, products and services that may be of interest to you. We may use and disclose this information and other PHI to health care professionals (including without limitation Providers) and/or other third parties to provide, coordinate, and manage the delivery of your health care. For example, we may disclose your PHI to a pharmacy for prescription fulfillment, a laboratory for testing, or another specialist for consultation.

For Payment: We may use or disclose PHI as permitted by law to bill for care, process your payments, administer your account, and address payment questions. HealthyVue's Programs are self-pay and do not bill insurance or Medicare/Medicaid. For example, HealthyVue may process a Program payment on the Practice's behalf. Where permitted by law, we may also disclose information needed for another provider's payment activities. A legally permitted disclosure is not a promise to submit or obtain insurance reimbursement, and your right to request restrictions on health-plan disclosures is described below.

For Health Care Operations: We may use or disclose your PHI in order to support the business activities of the Practices. These activities may include, but are not limited to, reviewing our treatment and services, improving the services we provide, training and evaluating the performance of our staff in providing services, and providing customer service. We may also use your PHI to evaluate and improve services provided by our business associates, including those that provide data assessment and management and other services for or on our behalf, such as HealthyVue, LLC.

B. Uses and Disclosures That May Be Made Without Your Authorization or Opportunity to Object

The Practice may use or disclose your PHI in the following situations without your authorization and without providing you an opportunity to object.

Required by the Secretary of Health and Human Services: We may be required to disclose your PHI to the Secretary of Health and Human Services for investigating or determining our compliance with the HIPAA Privacy Rule.

Required By Law: We may use or disclose your PHI to the extent that the use or disclosure is required by federal, state, or local law.

Public Health: We may disclose your PHI for public health activities, such as tracking diseases and/or medical devices, which may include making disclosures to a public health authority or other government agency that is permitted by law to collect or receive the information (e.g., the Food and Drug Administration). These activities generally include the following: (a) to prevent or control disease, injury or disability; (b) to report births and deaths; (c) to report child abuse or neglect; (d) to report reactions to medications or problems with products; (e) to notify people of recalls of products they may be using; or (f) to notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition. Genetic testing information remains subject to any additional consent and disclosure limits imposed by applicable law.

Health Oversight: We may disclose PHI to a health oversight agency for oversight activities authorized by law, such as audits; civil, administrative or criminal investigations; inspections; licensure or disciplinary actions; civil, administrative or criminal proceedings or actions; or other activities necessary for the oversight of the health care system, government benefit programs or entities subject to government regulations or civil rights laws. Oversight agencies include government agencies that oversee the health care system, government benefit programs, other government regulatory programs and civil rights laws.

Abuse or Neglect: If you have been a victim of abuse, neglect, or domestic violence, we may disclose your PHI to a government agency authorized to receive such information. In addition, we may disclose your PHI to a public health authority that is authorized by law to receive reports of child abuse or neglect.

Judicial and Administrative Proceedings: We may disclose your PHI in response to an order of a court or administrative tribunal, and, in certain conditions, in response to a subpoena, discovery request or other lawful process.

Law Enforcement: We may disclose your PHI, so long as applicable legal requirements are met, for law enforcement purposes, such as providing information to the police about the victim of a crime.

Coroners and Funeral Directors: We may disclose your PHI to a coroner, medical examiner, or funeral director if it is needed to perform their legally authorized duties — for example to identify a deceased person, determine a cause of death, or as authorized by law.

Organ Donation: If you are an organ donor, we may disclose your PHI to organ, eye or tissue donation or procurement organizations as necessary to facilitate organ, eye or tissue donation, procurement or transplantation.

Research: We may use or disclose PHI for research when the applicable legal conditions are met, such as a valid authorization or an approved waiver by a qualified review board. Research-related disclosures remain subject to the additional protections described at the beginning of this section.

Serious Threat to Health or Safety: We may disclose your PHI if we believe it is necessary to prevent or lessen a serious and imminent threat to health or safety of a person or the public and it is to someone we reasonably believe is able to prevent or lessen the threat.

Specialized Government Functions: When the appropriate conditions apply, we may disclose PHI for purposes related to military or national security concerns, such as for the purpose of a determination by the Department of Veterans Affairs of your eligibility for benefits. If you are a member of the armed forces, we may release PHI about you as required by military command authorities. We may also release PHI about foreign military personnel to the appropriate foreign military authority.

National Security and Intelligence Activities: We may disclose your PHI to authorized federal officials for intelligence, counterintelligence, protection of the President, other authorized persons or foreign heads of state, for the purpose of determining your own security clearance and other national security activities authorized by law.

Workers' Compensation: We may disclose PHI for workers' compensation or similar programs as authorized by and necessary to comply with applicable law. Paying privately does not prevent a disclosure that the law requires.

For Appointment Reminders and Health-Related Benefits and Services: We may use your demographic PHI to contact you as a reminder that you have an appointment or to recommend possible treatment options or alternatives that may be of interest to you.

Health-Related Communications: We may use PHI for communications that HIPAA permits without marketing authorization, such as treatment recommendations, care coordination, and information about a health-related service provided by the Practice, when the applicable conditions are satisfied. These exceptions generally do not apply if we receive financial remuneration from the third party whose product or service is promoted in exchange for making the communication. The exception for refill reminders or communications about a drug or biologic currently prescribed to you permits such remuneration only when reasonably related to the cost of making the communication. A contractor, including HealthyVue when acting for the Practice, may help send an otherwise permitted communication under appropriate agreements; hiring a contractor does not create a new exception. Marketing that requires authorization is addressed in Section I.D.

Fundraising: If we contact you for fundraising using PHI as permitted by law, each communication will explain an easy way to opt out, and we will honor your choice. Treatment or payment will not depend on accepting fundraising communications. Before using Part 2 records for fundraising, we will give clear and conspicuous notice and an opportunity to choose not to receive those communications.

Inmates: We may use or disclose your PHI to a correctional facility if you are an inmate of such correctional facility and we created or received your PHI in the course of providing care to you, which PHI may include information necessary for the correctional facility to provide you with health care or protect your health and safety, the health and safety of others, or the safety and security of the institution.

Business Associates: We may disclose PHI to HealthyVue or another service provider for authorized functions on our behalf, such as administration, billing, records systems, and support. Required business associate agreements limit use and disclosure, require appropriate safeguards, and apply required protections to subcontractors. A vendor contract does not authorize an independent use of PHI that the law would prohibit. HealthyVue does not share patient contact information with other companies for those companies' own marketing.

De-identified Information: We may de-identify your PHI for any of the purposes described above. PHI that is de-identified in accordance with the HIPAA standards is no longer protected under HIPAA and may be used and disclosed for any lawful purpose, including certain research related purposes.

C. Uses and Disclosures That May Be Made either With Your Agreement or the Opportunity to Object

Unless you specifically object in whole or in part (which you may do at any time), the Practice may disclose to a member of your family, a relative, a friend, or any other person you identify (orally or in writing) as being involved in your care or the payment for your health care, such PHI that directly relates to that person's involvement in your health care. If you are unable to agree or object to such disclosure, we may disclose the information that we deem necessary and in your best interest, based on our professional judgment. In addition, we may use or disclose your PHI to notify or assist in notifying a family member, personal representative, or other person responsible for your care, of your location or general condition.

D. Uses and Disclosures of Protected Health Information Based upon Your Written Authorization

Psychotherapy Notes: We must obtain your written authorization for most uses and disclosures of psychotherapy notes.

Marketing: We obtain your written authorization before using or disclosing PHI for marketing when HIPAA requires it. In addition to communications excluded from HIPAA's definition of marketing as explained above, HIPAA permits certain face-to-face communications by the Practice and nominal-value promotional gifts without that authorization. An authorization for marketing involving financial remuneration to the Practice from a third party must disclose that remuneration. Calling a message “HealthyVue marketing” or having a contractor send it does not by itself remove an authorization requirement. Website contact information outside PHI is addressed in HealthyVue's Privacy Policy; that policy does not authorize marketing uses of clinical records.

Sale of PHI: We must obtain your written authorization for any disclosure of your PHI which constitutes a sale of PHI.

Other Uses: Uses and disclosures not described in this Notice require your written authorization unless otherwise permitted or required by law. You may revoke an authorization in writing through the Privacy Office. We will stop the authorized uses and disclosures except to the extent we have already acted in reliance on it or another legal exception applies. Revocation does not undo a disclosure already made under a valid authorization.

Where HIPAA's minimum-necessary standard applies, we limit the information used, disclosed, or requested to what is reasonably necessary for the permitted purpose. The standard has legal exceptions, including certain treatment disclosures and disclosures to you. Those exceptions do not eliminate other applicable privacy protections.

E. We Use an Electronic Health Record to Create, Store and Maintain your Medical Record

The Practice uses an electronic health record to create, store, and maintain clinical records. Authorized Providers and administrative service providers may access or exchange information through these systems only as permitted by applicable law and agreements. Using a shared system does not give every user unrestricted access to your records. You may use the available patient portal or contact the Privacy Office to request records.

II. YOUR RIGHTS REGARDING YOUR PROTECTED HEALTH INFORMATION

You have certain rights regarding your PHI as explained below. You may exercise these rights by submitting a request to support@thehealthyvue.com.

A. You have the right to access, inspect, and copy your PHI. You may request access to your medical and billing records and other information in the designated record set, including an electronic copy when readily producible or another agreed readable format. Submit your request in writing to the Privacy Office; contact us for help. We respond within 30 days, or sooner if applicable law requires. If an extension is legally permitted and needed, we may take one additional period of up to 30 days, after giving you written reasons and a completion date within the original deadline. We may charge only a lawful, reasonable, cost-based copying fee, including permitted copying labor, supplies, postage, or a summary you agree to in advance. We do not charge for searching for or retrieving your records. If access is denied on a legally permitted ground, we give a written explanation and explain any right to review and how to complain. Any stronger access rights under applicable law remain available.

B. You have the right to request that we restrict how we use or disclose your PHI. You have the right to request a restriction or limitation on the PHI we use or disclose about you for purposes of treatment, payment or health care operations. You also have the right to request a limit on the PHI we disclose about you to someone who is involved in your care or the payment of your care, like a family member or friend. Your request must state the specific restriction requested and to whom you want the restriction to apply. We are not required to agree to a requested restriction except that we must agree to not disclose your PHI to your health plan if the disclosure (a) is for payment or health care operations (and not treatment purposes) and is not otherwise required by law and (b) relates to a health care item or service for which we have been paid in full out-of-pocket. If we agree to (or are required to honor) your request, we will document the agreed restrictions in writing and adhere to them, except in emergency situations. You may not restrict any use or disclosure of your PHI if we are legally required to release such PHI.

C. You have the right to request confidential communications. You may ask us to communicate by a particular method or at an alternative location, such as calling a designated number or sending mail to a different address. We accommodate reasonable requests. We may ask you to make the request in writing, provide an alternative address or contact method, and explain how payment, if any, will be handled. We will not require an explanation of why you need confidential communications. Contact the Privacy Office for help.

D. You have the right to request a correction or update of your PHI. If you believe there is a mistake in your PHI or that a piece of important information is missing, you have the right to request that we correct the existing or add the missing information. We can do this for as long as we maintain the PHI. You must provide the request and your reason for the request in writing. We will respond to your request within 60 days (or less if directed by state law) of receiving your request (with one extension of up to 30 days if needed, after written notice of the reasons and completion date within the initial deadline). If we approve your request, we will make the change to your PHI, tell you that we have done it, and tell others who need to know about such change or amendment. If we determine that your PHI is accurate and complete, we may deny your request. If we deny your request, we will send you a written explanation stating our reasons and explain your right to file a written statement of disagreement. If you do not file a written statement of disagreement, you have the right to request that your request and our denial be attached to all future uses or releases of your PHI.

If you are a California resident, you have the right to submit a 250 word addendum about anything in your record you disagree with. If you tell us to, we will put this addendum in your medical record. We may add a written rebuttal to the addendum and we will supply you with a copy of this rebuttal.

E. You have the right to receive a list of when and to whom we have disclosed your PHI (an “accounting of certain disclosures”). This accounting will not include disclosures made for treatment, payment, and health care operations purposes or any disclosures we may have made directly to you. If you request an accounting, you must specify the time period, which may not be longer than 6 years. You have the right to one free request within any 12-month period and we may charge you for any additional requests in the same 12-month period. We will notify you of any such charges and you are free to withdraw or modify your request in writing before any charges are incurred. We will respond to your request within 60 days (with one extension of up to 30 days if needed, after written notice of the reasons and completion date within the initial deadline). Other exclusions and limits permitted by law may apply to the accounting, and any broader accounting rights under applicable law remain available.

F. You have the right to a paper copy of this Notice. Ask the Privacy Office at any time, even if you agreed to receive the Notice electronically. We will provide a paper copy promptly.

G. You may act through a personal representative. A person legally authorized to act for you may exercise your privacy rights to the extent of that authority, subject to applicable legal exceptions. We verify that authority before acting on the person's instructions.

NO WAIVER

The Practice will not require you to waive your rights under the HIPAA Privacy Rule or the HIPAA Breach Notification Rule as a condition for receiving services or treatment.

CHANGES TO THIS NOTICE

We may revise this Notice and make the revised terms apply to information we already hold and information we receive later, to the extent permitted by law. We will follow the Notice in effect and will not implement a material change before its effective date unless required by law. The current Notice will be available at thehealthyvue.com/privacy-practices, on request through the Privacy Office, and at any applicable service location. A change to the website Terms of Use or general Privacy Policy does not itself change the Practice's PHI permissions or waive your rights.

COMPLAINTS

If you believe your privacy rights were violated or disagree with a records decision, you may complain through the Privacy Office using the contact information below. Please describe your concern and how we can contact you; contact us for assistance submitting a complaint.

HealthyVue, LLC
ATTN: Privacy Office
369 N Main Street
Crestview, FL 32536
Email: support@thehealthyvue.com
Phone: (850) 318-2858

You may also complain directly to the Secretary of the U.S. Department of Health and Human Services through the Office for Civil Rights. Instructions and filing options are available at HHS: Filing a HIPAA complaint, or call 1-877-696-6775. You do not have to complain to us first.

NO RETALIATION

We will not retaliate against you in any way for filing a complaint with us, the Secretary or any state agency.