HIPAA-Compliant Privacy Policy

Last Updated: [10/20/2025]

At DyVine Medical & Wellness, we are committed to protecting the privacy and security of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable federal and state laws.

By using our website, scheduling services, or receiving care from us, you agree to the practices outlined in this policy.

​

​

1. Protected Health Information (PHI) We Collect

We collect and maintain information necessary to provide professional laboratory, phlebotomy, and testing services. This may include:

• Personal Identifiers: Your name, address, phone number, email, and date of birth.

• Health Information: Lab orders, test results, specimen data, and related medical information.

• Payment Information: Billing details and transaction history processed through secure third-party systems.

• Technical Data: Website usage information such as IP address or device type (non-identifiable).

We collect PHI only when necessary to deliver or support your requested services.

​

​

2. How We Use and Disclose Your Information

We use and disclose your information only as permitted under HIPAA and other applicable laws. This may include:

• Treatment: Sharing information with physicians, laboratories, or authorized healthcare providers to process and deliver results.

• Payment: Using data to bill and receive payment for services rendered.

• Healthcare Operations: Performing quality reviews, staff training, and business management activities to improve care delivery.

• Legal Requirements: Complying with court orders, subpoenas, or reporting obligations required by law (e.g., public health).

• Authorized Disclosure: Sharing information with third parties only when you have provided written authorization.

We do not use or disclose your PHI for marketing or sales purposes.

​

​

3. Your HIPAA Privacy Rights

Under HIPAA, you have the right to:

• Access: Request a copy of your health records.

• Amend: Request corrections to incomplete or inaccurate information.

• Accounting: Receive a list of certain disclosures we have made.

• Restrictions: Request limits on how your PHI is used or disclosed.

• Confidential Communication: Request alternative contact methods or addresses.

• Complaints: File a complaint if you believe your privacy rights have been violated.

To exercise these rights, please contact our Privacy Officer at dyvinephlebotomy@gmail.com.

​

​

4. Safeguards to Protect Your Information

We implement administrative, physical, and technical safeguards to protect your data from unauthorized access, use, or disclosure, including:

• Encryption of electronic health records and communications.

• Secure, password-protected systems for data storage and transmission.

• Limited access to PHI only to authorized personnel.

• Regular training for all staff on HIPAA compliance and privacy practices.

If a data breach occurs that affects your PHI, we will notify you promptly as required by HIPAA’s Breach Notification Rule.

​

​

5. Third-Party Business Associates

We may work with certified Business Associates (e.g., laboratories, billing companies, medical directors) who assist in providing services.
All Business Associates are bound by HIPAA-compliant Business Associate Agreements (BAAs) requiring them to safeguard PHI in accordance with federal law.

​

​

6. Website and Electronic Communications

When you visit our website or use online forms:

• We may use cookies or analytics tools to improve functionality and user experience.

• Do not transmit sensitive PHI through unencrypted email or contact forms.

• Our site uses secure (HTTPS) connections when collecting personal information.

​

7. Data Retention

We retain health and service records for the period required by law or as necessary for business and regulatory purposes. When no longer needed, records are securely destroyed or permanently de-identified.

​

​

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect regulatory changes or new practices. The revised version will be posted with an updated effective date. Continued use of our services constitutes acceptance of the updated policy.

​

​

9. Contact Information

For questions, privacy requests, or complaints regarding this policy, please contact:

Privacy Officer
DyVine Medical & Wellness
📧 info@dyvinephlebotomy.com
📍 2086 Jodeco Rd., McDonough, Ga
📞 (800) 349-1332

​

​

You may also file a complaint directly with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) at https://www.hhs.gov/ocr/privacy.
We will not retaliate against you for filing a complaint.