Privacy Policy

Effective date: August 27, 2026

IVX Health, including its affiliated offices, pharmacies, and infusion centers, makes and keeps records of your medical and billing information. While you are a patient at IVX Health, we will use and disclose your medical information:

  • To provide treatment to you and to keep a record describing your care,
  • To receive payment for the care we provide,
  • To administer and conduct business relating to the services and facilities of the Practice, and
  • To comply with federal and state

This Notice summarizes the ways IVX Health (the “Practice”) and those noted below may use and disclose medical information about you. It also describes your rights and our duties regarding the use and disclosure of your medical information. This Notice applies to all records of your care held within the Practice.

When we use the word “we” or “Practice” we mean all the persons/entities covered by this Notice and listed below, its locations, medical professionals and other persons/companies who assist us with your treatment, payment or our business as a health care provider.

For questions about this Notice or your privacy rights, contact our Privacy Officer at [email protected].

We are required by law:

  • To keep your medical information confidential
  • To make available to you this Notice of our legal duties and privacy practices with respect to your medical information; and
  • To follow the terms of the Notice that is currently in effect

PERSONS/ENTITIES COVERED BY THIS NOTICE

  • All physicians, nurse practitioners, employees, staff, and other Practice personnel;
  • All Practice locations (available on our website at ivxhealth.com)
    • Persons or entities performing services for the Practice under agreements containing privacy and security protections or to which disclosure of medical information is permitted by law;
    • Persons or entities with whom the Practice participates in managed care arrangements; and
    • Research organizations

USES AND DISCLOSURES OF YOUR MEDICAL INFORMATION

We use and disclose medical information in the ways described below:

Treatment. We may use your medical information to provide medical treatment or services to you. We may disclose medical information about you to doctors, nurses, technicians, or other personnel taking care of you inside and outside of our Practice. We may use and disclose your medical information to coordinate or manage your care. The Practice may share your medical information with other health care providers to schedule procedures you need, such as prescriptions. We also may disclose your medical information to health care facilities if you need to be admitted to or receive treatment at a facility, hospital, hospital out-patient department, etc. We also may disclose your medical information to health care providers with which we have an affiliation for purposes of providing treatment to you. We also may disclose your medical information to people outside the Practice who are involved in your care while you are here or after you leave the Practice, such as other health care providers, family members, hospitals or pharmacists.

Payment. We may use and disclose your medical information so that the treatment and services you receive can be billed and collected from you, an insurance company or another company or person. As examples, we may give your insurance company (e.g., Medicare, Medicaid, CHAMPUS/TRICARE, or a private insurance company) information about treatment you received so your insurance company will pay us for our services. We also may tell your insurance company about a treatment you are going to receive in order to determine whether you are eligible for coverage or to obtain prior approval from the company to cover payment for the treatment. We could disclose your information to a collection agency to obtain overdue payment. We may also disclose information to third parties that arrange for or provide financial assistance to you related to treatments or medications.

Health Care Operations. We may use and disclose your medical information for any operational function necessary to operate the Practice, including uses/disclosures of your information such as in the following examples: (1) Conducting quality or patient safety activities, population-based activities relating to improving health or reducing health care costs, case management and care coordination, and contacting of health care providers and you with information about treatment alternatives; (2) Reviewing health care professionals’ backgrounds and grading their performance, conducting training programs for staff, students, trainees, or practitioners and non-health care professionals; performing accreditation, licensing, or credentialing activities; (3) Engaging in activities related to health insurance benefits, (4) Conducting or arranging for medical review, legal services, and auditing functions; (5) Business planning, development, and management activities, including things like customer service, resolving complaints; sale, transfer or combine of all or part of the Practice entity and the background research related to such activities; and (6) Creating and using de-identified health information or a limited data set or having a business associate perform combine data or do other tasks for various operational and research purposes.

We may combine medical information about many patients to decide what services the Practice should offer, and whether new services are cost-effective and how we compare from a quality perspective with other Practices. Sometimes, we may remove your identifying information from your medical information so others may use it to study health care services, products and delivery without learning who you are.

Patient Electronic Correspondence. Upon request, IVX Health can send you an encrypted email containing requested information. Please note that, if you email us medical or billing information from a private email address (such as Yahoo, Gmail, etc.) your information will not be encrypted unless you use a secure messaging portal to us. If you request us to post your information in drop boxes, on flash drives/CDs, etc., your information may not be encrypted and may not be secure. We are not responsible if this confidential information once released is redisclosed by an authorized recipient. We are not responsible for subsequent damage, alteration or misuse of the data. We may provide you with appointment reminders by secure email or text.

Health Services, Products, Treatment Alternatives and Health-Related Benefits. We may use and disclose your medical information in providing face-to-face communications; promotional gifts; refill reminders or communications about a drug or biologic; case management or care coordination, or to direct or recommend alternative treatments, therapies, providers, or settings of care; or to describe a health-related product/service (or payment for such product/service) that is provided through a benefit plan; or to offer other health–related products, benefits or services that may be of interest to you. We may use and disclose your medical information to contact and remind you of an appointment for treatment or medical care.

Individuals Involved in Your Care or Payment for Your Care. We may release your medical information if you become incapacitated to the person you named in your Durable Power of Attorney for Health Care (if you have one), or otherwise to a friend or family member who is your personal representative (i.e., empowered under state or other law to make health–related decisions for you). If someone has authority to act as your personal representative, such as if someone has your medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority and can act for you before we take any action. We may give information to someone who helps pay for your care. HIPAA also allows us at certain times to speak with those who are/were involved in your care/payment activities while being treated as patient and/or even after your death, if we reasonably infer based on our professional judgment that you would not object. If you do not wish for us to speak with a particular person about your care, you should notify the Privacy Officer.

Required By Law. We will disclose your medical information when federal, state or local law requires it, including with the Department of Health and Human Services if it wants to see that we are complying with federal privacy law.

Emergency. If you need emergency treatment and we are required by law but are unable to get your consent to disclose information, we will attempt to obtain consent as soon as practical after treatment.

Serious Threat to Health or Safety. We may use and disclose your medical information when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.

Military and Veterans. If you are a member of the U.S. or foreign armed forces, we may release your medical information as required by military command authorities.

Minors. If you are a minor (under 18 years old), the Practice will comply with the applicable State law regarding minors. We may release certain types of your medical information to your parent or guardian, if such release is required or permitted by law

Health Oversight Activities. We may disclose your medical information to a federal or state agency for health oversight activities such as audits, investigations, inspections, and licensure of the Practice and of the providers who treated you at the Hospital. These activities are necessary for the government to monitor the health care system, government programs, and compliance with laws.

Lawsuits and Disputes. We may disclose your medical information to respond to a court or governmental agency request, order or a search warrant. We also may disclose your medical information in response to a subpoena, discovery request, or other lawful process by someone else involved in a dispute.

Law Enforcement. Subject to certain conditions, we may disclose your medical information for a law enforcement purpose upon the request of a law enforcement official or to report suspicion of death resulting from criminal conduct or crime on our premises or for emergency or other purposes.

Incidental Disclosures. Although we train our staff in privacy, due to the way treatment and billing occurs, your medical or billing information may be overheard or seen by people not involved directly in your care. For example, your visitors or visitors visiting other patients on your treatment floor could overhear a conversation about you or see you getting treatment.

Business Associates. Your medical or billing information could be disclosed to people or companies outside our Practice who provide services to us. We make these companies sign special confidentiality agreements with us before giving them access to your information. They are also subject to fines by the federal government if they use/disclosure your information in a way that is not allowed by law.

State Law Protections. Where applicable state law imposes stricter privacy protections than HIPAA — such as laws governing mental health records, HIV/AIDS information, substance use disorder treatment, or genetic information — we will comply with the more protective state law requirements in addition to HIPAA.

YOUR PRIVACY RIGHTS

Right to Review and Right to Request a Copy. You have the right to review and get a copy of your medical and billing information that is held by us in a designated record set (including the right to obtain an electronic copy if readily producible by us in the form and format requested). The Practice is allowed by law to charge a reasonable cost-based fee for labor, supplies, postage and the time to prepare any summary. The Practice will tell you if it cannot fulfill your request. If you are denied the right to see or copy your information, you may ask us to reconsider our decision. Depending on the reason for the decision, we may ask a licensed health care professional to review your request and its denial. We will comply with this person’s decision. We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.

Right to Amend. If you feel your medical information in our records is incorrect or incomplete, you may ask us in writing to amend the information. You must provide a reason to support your requested amendment. We will tell you if we cannot fulfill your request. We may say “no” to your request, but we will tell you why in writing within 60 days.

Right to Request Confidential Communications. You can ask us to contact you in a specific way (for example, home, office, or cell phone) or to send mail to a different address. We will say “yes” to all reasonable requests.

Right to an Accounting of Disclosures. You have the right to make a written request for a list of certain disclosures the Practice has made of your medical information within a certain period of time. This list is not required to include all disclosures we make. For example, disclosure for treatment, payment, or Practice administrative or operation purposes, disclosures made before April 14, 2003, disclosures made to you or which you authorized, and other disclosures are not required to be listed.

Right to Request Restrictions on Disclosures. You have the right to make a written request to restrict or put a limitation on the medical information we use or disclose about you for treatment, payment or health care operations. You also have the right to request a limit on your medical information that we disclose to someone involved in your care or the payment for your care, like a family member or friend.

We are generally not required to agree to your request, except as follows:

Payor Exception: If otherwise allowed by law, we are required to agree to a requested restriction, if (1) the disclosure is to your health insurance plan for purposes of carrying out payment or health care operations and (2) the medical information to be restricted relates solely to a health care item or service for which all parties have been paid in full out of pocket.

Right to Object or Opt-out. You have the right to object to or opt-out of the following:

  • Directory: You may object to our inclusion of your name in a Practice Directory that is made available for persons who inquire about you by name.
  • Family and friends: You may object to or request that we do not share your information with family, friends or a specific person involved in your care or present with you during treatment.
  • Email or text: You may object to and request that we do not communicate with you by email or text.

Right to a Paper Copy of this Notice. You have the right to receive a paper copy of this Notice at any time even if you have agreed to receive this Notice electronically. You may obtain a paper copy of this Notice from your provider.

Right to Receive a Notice of a Breach of Unsecured Medical / Billing Information. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.

OUR RESPONSIBILITIES

We are required by law to maintain the privacy and security of your protected health information. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information. We must follow the duties and privacy practices described in this notice and give you a copy of it. We will not use or share your information other than as described in this notice unless you tell us we can in writing. If you tell us we can, you may change your mind at any time by letting us know in writing.

CHANGES TO THIS NOTICE

We reserve the right to change this Notice. We reserve the right to make the revised or changed Notice effective for medical information we already have about you, as well as for any information we receive in the future. We will post the current Notice on our website at www.ivxhealth.com.

COMPLAINTS

If you feel we have violated your rights, you can complain by contacting the Practice through the Privacy Officer at [email protected] or (901) 562-0146.

 You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting https://www.hhs.gov/hipaa/filing-a-complaint/index.html.

We will not retaliate against you for filing a complaint.

OTHER USES AND DISCLOSURES OF MEDICAL OR BILLING INFORMATION REQUIRE YOUR AUTHORIZATION

Disclosures that are not referenced in this Notice of Privacy Practices or are not otherwise allowed or required by federal and/or state law or our policies and procedures, will require your authorization. Uses and disclosures of your medical information not generally covered by this Notice or the laws and regulations that apply to the Practice will be made only with your written permission or authorization. We will never use or disclose your information for marketing purposes or sell your information without your prior written authorization.

If you give us permission to use or disclose medical information about you, you may revoke that permission, in writing, at any time. If you revoke your permission, we will no longer use or disclose your medical information for the reasons covered by your written authorization, but the revocation will not affect actions we have taken in reliance on your permission. You understand that we are unable to take back any disclosures we have already made with your permission, we still must continue to comply with laws that require certain disclosures, and we are required to retain our records of the care that we provided to you.

If you have any questions about this Notice, please contact the Privacy Office at [email protected]

Effective Date: August 27th, 2026