NOTICE OF PRIVACY PRACTICES
Effective Date: July, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Arōe Health ("we," "our," or "us") is committed to protecting the privacy and security of your health information. This Notice of Privacy Practices describes how we may use and disclose your Protected Health Information ("PHI"), your rights regarding your PHI, and our legal obligations under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and applicable state laws.
Who We Are
Arōe Health provides precision wellness and longevity services, including IV therapy, injections, hormone support, and related care, delivered through licensed healthcare professionals at our locations and, where offered, through telehealth. We create, receive, maintain, and transmit health information in connection with the services we provide.
Our Legal Duties
We are required by law to maintain the privacy and security of your PHI, provide you with this Notice describing our legal duties and privacy practices, notify you if a breach occurs that may have compromised the privacy or security of your information, and follow the terms of this Notice currently in effect.
How We May Use and Disclose Your Information
Treatment. We may use and disclose your PHI to provide, coordinate, or manage your care. Examples include conducting consultations and visits, reviewing your medical history and treatment plans, and sharing information with pharmacies, laboratories, specialists, and other healthcare providers involved in your care.
Payment
We may use and disclose your PHI to obtain payment for services. Examples include billing, verifying coverage where applicable, and collecting payments for services rendered.
Healthcare Operations
We may use and disclose your PHI for operational purposes, including quality assessment and improvement activities, credentialing and licensing activities, training and education, audits and compliance reviews, and business planning and administration.
Provider Network
Clinical services may be provided through Beluga Health, our clinician network. Beluga Health operates as a business associate and is required to protect your information and comply with HIPAA requirements. You can learn more at belugahealth.com or contact them at info@belugahealth.com.
We may share PHI with third-party vendors that perform services on our behalf, such as electronic health record providers, telehealth or scheduling platform providers, cloud hosting providers, billing companies, and IT and cybersecurity vendors. These entities are required to protect your information and comply with HIPAA requirements.
Appointment Reminders and Healthcare Communications
We may contact you regarding upcoming appointments, treatment recommendations, prescription refills, and health-related benefits and services.
As Required by Law
We may disclose your PHI when required by federal, state, or local law.
Public Health and Safety Activities
We may disclose information when necessary to report communicable diseases, prevent serious threats to health or safety, and report abuse, neglect, or domestic violence when legally required.
Health Oversight Activities
We may disclose information to government agencies for audits, investigations, inspections, licensure, and regulatory activities.
Law Enforcement and Legal Proceedings. We may disclose information when required by court order, subpoena, warrant, or other lawful process.
Research
We may use or disclose information for approved research purposes when permitted by law.
Uses Requiring Your Written Authorization
We will obtain your written authorization before using or disclosing PHI for most marketing purposes, selling your PHI, using or disclosing psychotherapy notes when required by law, and any other use not otherwise described in this Notice. You may revoke your authorization at any time in writing, except to the extent we have already relied upon it.
Your Rights Regarding Your Health Information
Right to Access. You have the right to inspect and obtain a copy of your health records, subject to certain legal exceptions.
Right to Request Amendments. You may request corrections or amendments to your health records if you believe information is inaccurate or incomplete.
Right to an Accounting of Disclosures
You may request a list of certain disclosures of your PHI made by us.
Right to Request Restrictions
You may request restrictions on certain uses or disclosures of your PHI. While we are not required to agree to all requests, we will comply when legally required.
Right to Confidential Communications
You may request that we communicate with you using alternative methods or at alternative locations.
Right to Receive a Paper or Electronic Copy. You may request a paper or electronic copy of this Notice at any time.
Right to File a Complaint. If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.
Telehealth-Specific Privacy Information
Where we provide telehealth services, those services involve the electronic transmission of health information. We implement administrative, technical, and physical safeguards designed to protect your PHI, including encrypted communications where appropriate, secure patient portals, access controls and authentication measures, audit logging and monitoring, and workforce privacy and security training. Patients are encouraged to participate in telehealth visits from a private location and use secure internet connections whenever possible.
Website and Online Services
Our website may collect limited technical information such as IP addresses, browser type, device information, and website usage data. Such information is used to improve our services and maintain security. We do not use or disclose protected health information collected through patient portals or telehealth services except as permitted by law and described in this Notice.
Changes to This Notice
We reserve the right to modify this Notice at any time. Updated versions will be posted on our website and made available upon request. The revised Notice will apply to all PHI we maintain.
Contact Information
If you have questions regarding this Notice or wish to exercise your privacy rights, contact:
Arōe Health
172 Prince Street
917-265-8222
Contact@aroehealth.com
Filing a Complaint with HHS
You may file a complaint with the Office for Civil Rights, U.S. Department of Health and Human Services. Information is available at HHS GOV. No retaliation will occur for filing a complaint.