HIPAA Privacy Policy
At Body Blu we are committed to protecting the privacy and security of your personal health information. We understand that your medical information is private, and we take that responsibility seriously. This Privacy Policy explains how your Protected Health Information (“PHI”) may be used, disclosed, and safeguarded in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), applicable California privacy laws, and other relevant federal regulations.
What is Protected Health Information (PHI)?
Protected Health Information (PHI) includes any information that identifies you and relates to your past, present, or future, physical or mental health, the healthcare services you receive, or payment for those services. Examples include, but are not limited to:
- Name, address, phone number, and email address
- Date of birth
- Medical history and treatment records
- Laboratory results
- Insurance information
- Billing and payment records
- Prescription information
- Social Security number (when required for healthcare purposes)
Body Blu maintains appropriate administrative, physical, and technical safeguards to protect your PHI from unauthorized access, use, or disclosure.
How We May Use and Disclose Your Information
Federal privacy laws allow us to use and disclose your PHI without your written authorization for certain purposes, including:
Treatment
We may use and share your medical information to provide, coordinate, or manage your healthcare. This may include communication among physicians, nurse practitioners, naturopathic doctors, laboratories, pharmacies, imaging centers, specialists, and other healthcare professionals involved in your care.
Payment
We may use your information to bill and collect payment for healthcare services. This may include sharing necessary information with insurance companies, health plans, billing services, payment processors, or other third-party payers when applicable.
Healthcare Operations
We may use your information to improve the quality of care we provide. Examples include quality assurance activities, staff training, licensing requirements, accreditation, auditing, business management, and compliance with healthcare regulations.
Appointment Reminders and Healthcare Communications
We may contact you regarding appointments, follow up care, treatment recommendations, laboratory results, prescription refills, wellness reminders, or other health-related services that may benefit your care. Communication may occur by telephone, voicemail, email, or through our secure patient portal unless you request otherwise.
Family Members and Caregivers
With your permission, or when permitted by law, we may share relevant health information with family members, caregivers, or other individuals involved in your care or payment for your healthcare.
Public Health and Safety
We may disclose PHI when required or permitted by law, including for:
- Reporting communicable diseases
- Public health investigations
- FDA reporting requirements
- Preventing or reducing a serious threat to your health or the safety of others
- Reporting abuse, neglect, or domestic violence when legally required
Law Enforcement and Legal Requirements
We may disclose PHI when required by federal or state law, including:
- Court orders or subpoenas
- Law enforcement investigations
- Reporting gunshot wounds or certain injuries as required by law
- Compliance with government audits, inspections, or licensing agencies
Business Associates
Body Blu works with trusted third-party service providers who assist us in operating our practice, such as electronic health record providers, billing companies, laboratories, and technology vendors. These organizations are contractually required to maintain the confidentiality and security of your PHI in accordance with HIPAA.
Uses Requiring Your Written Authorization
Any use or disclosure of your PHI not described above generally requires your written authorization. Examples may include:
- Sharing records with an attorney
- Sending records to another individual not involved in your care
- Certain marketing communications
- Other disclosures not otherwise permitted by law
You may revoke your authorization at any time in writing, except to the extent action has already been taken based on your prior authorization.
Your Privacy Rights
As our patient, you have important rights regarding your health information. These include the right to:
- Request access to your medical records.
- Request a copy of your records in paper or electronic form.
- Request correct corrections to an inaccurate or incomplete information.
- Request restrictions on certain uses or disclosures of your information.
- Request confidential communications by alternative methods or at alternative locations.
- Receive an accounting of certain disclosures made outside of treatment, payment, and healthcare operations.
- Receive a copy of our notice of privacy practices.
Some requests may be subject to limitations permitted under federal or California law.
Protection of Your Information
Body Blu employees reasonable administrative, physical, and technical safeguards to help protect your health information, including:
- Secure electronic medical records
- Password-protected systems
- Encryption and secure communications where appropriate
- Restricted employee access based on job responsibilities
- Ongoing staff privacy and HIPAA training
- Secure disposal of confidential records
While we strive to maintain the highest level of security, no electronic transmission or storage system can be guaranteed to be completely secure.
Minors
Health information relating to minors may be disclosed to a parent or legal guardian as permitted or required by applicable state and federal law. Certain services provided to minors may be protected under California law, and access may be limited in accordance with those legal requirements.
Website Privacy
If you visit our website, we may collect limited technical information such as browser type, pages visited, and general website usage analytics to improve the user experience. This information is not used to identify you personally unless you voluntarily submit information through forms on our website.
Please note the email communications and website contact forms should not be used to transmit urgent medical concerns or highly sensitive medical information unless specifically directed by our office.
Changes to This Privacy Policy
Body Blu reserves the right to update this Privacy Policy at any time to comply with changes in applicable laws or our privacy practices. Updated versions will be posted on this page with the revised effective date.
Questions or Privacy Concerns
If you have questions about this Privacy Policy, your privacy rights, or believe your privacy rights have been violated, please contact Body Blu directly. We will make every reasonable effort to address your concerns promptly and in accordance with applicable privacy laws.
By receiving services from Body Blu, you acknowledge that you have been provided access to our Notice of Privacy Practices and understand how your Protected Health Information may be used and disclosed as permitted by law.
Effective date: June 26, 2026