Privacy Policy
Infinity Health and Spa PLLC
Notice of Privacy Practices & Website Privacy Policy
Effective Date: 08/01/2025
Infinity Health and Spa PLLC (“Infinity Health,” “we,” “our,” or “us”) is committed to protecting the privacy and security of your health information. This Notice describes how we may use and disclose your Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), your rights under HIPAA, and how you may exercise those rights. It also explains how we handle information collected through our website and Patient Portal.
1. Our Duties
We are required by law to maintain the privacy of your PHI.We must provide you with this Notice of our legal duties and privacy practices.We will notify you in the event of a breach of unsecured PHI.We reserve the right to update this Notice, and any revised version will be available on our website and through the Patient Portal.
2. How We May Use and Disclose Your Health Information
We may use and disclose your PHI for the following purposes:Treatment: To provide, coordinate, or manage your healthcare. This includes sharing information with labs, pharmacies, and other providers involved in your care.Healthcare Operations: For internal operations such as quality assessment, staff training, and business management.Payment: While Infinity Health and Spa operates on a direct-pay membership model and does not bill insurance, we may use your PHI to process payments for services and memberships through our payment processor.As Required by Law: We may disclose PHI when required by federal, state, or local law.Public Health and Safety: To prevent or reduce serious threats to health and safety, and for public health reporting when required.Business Associates: We may share PHI with business associates (such as CharmHealth, laboratories, pharmacies, or billing vendors) that perform services on our behalf, provided they agree to safeguard your information.
3. Your Rights
You have the right to:Access: Receive a copy of your medical records, usually within 30 days of your request.Amend: Request corrections to your health record if you believe it is inaccurate.Restrict Disclosures: Ask us not to share certain health information. We will consider all requests but may deny them if legally required.Confidential Communications: Request that we contact you by a specific method (phone, email, mail).Accounting of Disclosures: Receive a list of disclosures of your PHI made outside of treatment, payment, and healthcare operations.Receive a Copy of This Notice: At any time.To exercise these rights, please contact our Privacy Officer (see Section 7).
4. Electronic Communications
By providing your email address or mobile phone number, you consent to receive communications from Infinity Health, including appointment reminders, follow-up instructions, and membership-related notifications.Electronic communications carry inherent risks (e.g., interception, unauthorized access). We take reasonable steps to safeguard them but cannot guarantee absolute security.
5. Website and Patient Portal Privacy
All patient information is collected and stored exclusively through the CharmHealth Patient Portal.We do not collect PHI directly through our public-facing website.Non-patient visitors to our website may access general information about our practice.We do not use cookies or analytics to track PHI. Any browsing data collected is de-identified and not linked to patient records.
6. Spa Services (Future)
Infinity Health may add spa services at a later date. Please note: Services not considered medical care may not be subject to HIPAA. Any non-HIPAA services will be clearly identified, and separate privacy practices may apply.
7. Questions or Complaints
If you have any questions about this Notice, believe your privacy rights have been violated, or wish to exercise your rights, please contact our Privacy Officer:
Matthew Shutt, Practice Administrator
Email: practiceadmin@infinityhealth.clinic
Phone: (903) 806-1259
You also have the right to file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.
8. Acknowledgment
By receiving services from Infinity Health and Spa PLLC, you acknowledge receipt of this Notice of Privacy Practices.