HIPAA Notice of Privacy Practices

Our commitment

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully. NorevX ("NorevX," "we," "us") is a telehealth membership practice operating in California. We are required by law to maintain the privacy of your protected health information ("PHI"), to provide this notice, and to abide by its terms.

How we may use and disclose your PHI

Treatment: sharing information with your physician, coaches, laboratories, and pharmacies involved in your care.

Payment: processing membership billing and, where applicable, generating documentation you may submit to insurers or HSA/FSA administrators.

Healthcare operations: quality improvement, care coordination, and compliance activities.

Other permitted uses: as required by law, for public health activities, to avert a serious threat to health or safety, and other purposes permitted by 45 CFR Part 164.

Uses requiring your authorization

We will not use your PHI for marketing, sell your PHI, or share psychotherapy notes without your written authorization. You may revoke an authorization at any time in writing.

Your rights

You have the right to: inspect and obtain a copy of your health records; request corrections; request restrictions on certain uses and disclosures; request confidential communications; receive an accounting of disclosures; and receive a paper copy of this notice. Requests may be sent to privacy@norevx.com.

Breach notification

We will notify you in writing if a breach occurs that may have compromised the privacy or security of your PHI, as required by the HIPAA Breach Notification Rule and California law.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us at privacy@norevx.com or with the U.S. Department of Health and Human Services Office for Civil Rights. You will not be penalized or retaliated against for filing a complaint.