Skip to content
EVE’S SISTERSThe Evolution of a Woman’s Body

Policies

HIPAA Policy

Effective September 28, 2026

This notice describes how medical information about you may be used and disclosed and how you can get access to it. Please review it carefully.

Our commitment

We, and our clinical partner Elite Care Health and pharmacy partner Rx Ave Health, are committed to protecting your protected health information (PHI) as required by the Health Insurance Portability and Accountability Act (HIPAA) and applicable state law. Vendors that handle PHI on our behalf must sign a business associate agreement and protect it to the same standard.

How PHI may be used and disclosed

  • Treatment: to allow licensed providers to evaluate you and deliver care, and to send prescriptions to the pharmacy.
  • Payment: to bill and collect payment for services and medication.
  • Health care operations: to run our services, including quality review, customer support and compliance.
  • As required by law: for example, to public health authorities, in response to a court order, or to prevent a serious threat to health or safety.

We will not sell your PHI or use it for marketing without your written authorization. Any other use requires your written authorization, which you may revoke at any time.

Your rights

  • Access: to see and receive a copy of your health records.
  • Amendment: to ask us to correct information you believe is wrong or incomplete.
  • Accounting of disclosures: to receive a list of certain disclosures of your PHI.
  • Restrictions: to ask us to limit how your PHI is used or shared.
  • Confidential communications: to ask us to contact you in a particular way or at a particular address.
  • Notice: to receive a paper or electronic copy of this policy.
  • Breach notification: to be notified if your unsecured PHI is affected by a breach.

Safeguards

We protect PHI with administrative, physical and technical safeguards, including access limited to people who need it, encryption in transit, secure storage and staff training.

Retention and destruction

Medical records are retained for 7 years following your last clinical encounter, or longer where state law requires. After that period, PHI is securely destroyed.

Complaints

If you believe your privacy rights have been violated, you may contact us using the details below, or file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr. We will not retaliate against you for filing a complaint.

Contact us