· HIPAA Notice

Notice of privacy practices.

Required by HIPAA for any practice that handles protected health information. This is the public-facing summary. Patients receive the full notice at intake, which they sign acknowledging receipt.

Effective · May 13, 2026

Important. This notice describes how protected health information (PHI) about you may be used and disclosed, and how you can get access to this information. Please review carefully. The full notice with all required disclosures is provided in your patient portal at enrollment and re-issued whenever it materially changes.

Who this notice applies to

This Notice applies to Viva Wellness Co. and the licensed providers practicing under it. It describes how we may use and disclose protected health information (PHI) about our patients and how a patient can access this information.

Most patient interaction with PHI happens inside our HIPAA-compliant patient portal (Charm Health). This website (vivawellnessco.com) is a marketing site and does not collect or store PHI. See our Privacy Policy for what this website does collect.

How we may use and disclose PHI

We use and disclose PHI for the following purposes:

Treatment. To provide, coordinate, or manage your health care. For example, your provider will review your labs and history to determine an appropriate protocol.
Payment. To bill for services and obtain payment. We may share PHI with our payment processor (GlossGenius) or your insurance carrier when applicable.
Health-care operations. Internal quality review, training, and management of the practice. We do not use PHI for marketing without your written authorization.
Required by law. When federal, state, or local law requires disclosure (subpoena, public-health reporting, etc.).
To protect health and safety. When disclosure is necessary to prevent or lessen a serious threat.
Business associates. Vendors who handle PHI on our behalf under signed Business Associate Agreements (e.g. the patient-portal platform, the compounding pharmacies that fill prescriptions, the lab company that runs your blood draw).

Any use or disclosure of PHI not listed above will be made only with your written authorization. You may revoke that authorization in writing at any time, except where we have already acted in reliance on it.

What we will NOT do without your authorization

Sell your PHI
Use your PHI for marketing communications (other than appointment reminders or treatment-related messages)
Use your PHI for fundraising
Share psychotherapy notes

Your rights regarding your PHI

Right to inspect and copy. Request access to your patient record. We provide it within thirty days. A reasonable cost-based fee may apply for paper copies.
Right to amend. Ask us to correct PHI you believe is incomplete or inaccurate. We have sixty days to respond and may deny in specific circumstances (you can appeal).
Right to an accounting of disclosures. Receive a list of certain disclosures of your PHI made by us in the last six years.
Right to request restrictions. Ask us to limit how we use or disclose your PHI. We will try to honor reasonable requests; we are required to honor a request to restrict disclosure to a health plan if the service is paid in full out-of-pocket.
Right to confidential communications. Request that we contact you in a specific way (e.g. only by text, only at a specific phone number) or at a specific location.
Right to a paper copy of this notice upon request, even if you originally received it electronically.
Right to be notified of a breach of unsecured PHI.

Our duties

We are required by law to maintain the privacy of PHI, provide you with this Notice, abide by its terms while it is in effect, and notify you within sixty days of discovery if a breach of your unsecured PHI occurs, as required by the HIPAA Breach Notification Rule (45 CFR § 164.404).

We may change the terms of this Notice. Material changes will be posted in your patient portal and on this page with a new effective date. Updated terms apply to PHI we maintain, including PHI collected before the update.

How to exercise your rights or file a complaint

To exercise any of these rights, email info@vivawellnessco.com or send a written request to the address below. We may ask you to verify your identity before fulfilling requests.

If you believe your privacy rights have been violated, you may file a complaint with:

Viva Wellness Co. Email info@vivawellnessco.com or write to the address below.
U.S. Department of Health and Human Services, Office for Civil Rights. hhs.gov/ocr · (800) 368-1019 · TDD: (800) 537-7697 · Email OCRComplaint@hhs.gov.

You will not be retaliated against in any way for filing a complaint.

Contact

Email info@vivawellnessco.com or call (737) 210-7283.

Viva Wellness Co. · 5900 Balcones Dr #19640, Austin, TX 78731 · Effective May 13, 2026