Purpose and Scope
At Drip IV Therapy, we are committed to maintaining the confidentiality, integrity, and security of our patients’ Protected Health Information (PHI). This policy outlines our standards for collecting, using, and safeguarding medical data obtained during scheduling, consultations, and mobile IV therapy treatments in compliance with the Health Insurance Portability and Accountability Act (HIPAA).
Notice of Privacy Practices (NPP)
Every patient has the right to know exactly how their health information is used and protected.
https://dripivtherapy.com/privacy-policy/
How Your Health Data is Protected at Drip IV Therapy
As detailed in our official NPP, we employ strict physical, administrative, and technical safeguards to protect your data before, during, and after your mobile IV treatments:
- Secure Mobile Booking & Intake: All medical histories, allergies, and treatment requests submitted through our online booking portal are encrypted using industry-standard SSL/TLS technology.
- Encrypted Electronic Health Records (EHR): Your treatment logs, vital signs, and vitamin/peptide protocols are stored in a HIPAA-compliant, cloud-based EHR system. Access is strictly role-based; only your designated nurses and required medical directors can view your charts.
- On-Site Mobile Privacy: Our mobile IV nurses are trained to conduct consultations and treatments discreetly. Paper records are never left unattended in vehicles and are securely digitized and shredded on the same business day.
- Third-Party Vetting: Any third-party vendors we use (e.g., scheduling apps, billing processors) are required to sign a Business Associate Agreement (BAA), legally binding them to the same strict HIPAA standards we follow.
Permitted Uses and Disclosures of PHI
We only use or share your health information for the following specific purposes:
- Treatment: To provide, coordinate, or manage your IV therapy and related healthcare services. (e.g., a nurse consulting with our Medical Director regarding your specific peptide dosage).
- Payment: To process credit card payments, HSA/FSA claims, or bill for services rendered.
- Healthcare Operations: To conduct quality assessment and improvement activities, such as reviewing the clinical performance of our mobile nurses.
- As Required by Law: We will disclose PHI when required by federal, state, or local law (e.g., public health reporting or a court order).
Any other use or disclosure of your PHI—including the use of patient photos or testimonials for marketing—requires your explicit, written authorization, which you may revoke at any time.
Patient Rights Regarding Health Information
Under HIPAA, you have the following rights concerning your medical data:
- Right to Access: You may request a copy of your electronic health records and IV treatment history at any time.
- Right to Amend: If you believe your health information is incorrect or incomplete (e.g., an outdated allergy), you may request a correction.
- Right to an Accounting of Disclosures: You may request a list of certain instances where we have disclosed your PHI for reasons other than treatment, payment, or operations.
- Right to Request Restrictions: You may ask us not to use or share certain health information for treatment, payment, or healthcare operations. We will accommodate all reasonable requests.
- Right to Confidential Communications: You can request that we contact you in a specific way (e.g., only via a secure patient portal or a specific phone number).
Breach Notification Protocol
In the unlikely event that your unencrypted PHI is compromised, Drip IV Therapy follows a strict breach notification protocol. We will notify you via first-class mail (or email, if you have agreed to electronic notice) within 60 days following the discovery of the breach. The notice will include:
- A description of what happened.
- The types of PHI involved.
- Steps you should take to protect yourself.
- What our team is doing to investigate the breach and prevent future incidents.
Complaints and Inquiries
If you believe your privacy rights have been violated, you have the right to file a complaint without fear of retaliation.
To file a complaint with Drip IV Therapy, please contact our Privacy Officer at [email protected] or 323-204-8809. You may also file a formal complaint with the Secretary of the Department of Health and Human Services (HHS).
Acknowledgment of Receipt: By checking the acknowledgment box during the Drip IV Therapy online intake process, or by signing our digital consent form, you acknowledge that you have been provided access to this Privacy Policy and our Notice of Privacy Practices.