Notice of Privacy Practices

You have certain rights regarding your health information.

Get an Electronic or Paper Copy of Your Medical Record

You may ask to see or receive an electronic or paper copy of your medical record and other health information we maintain about you.

We will generally provide a copy or summary within the time required by applicable law.

We may charge a reasonable, cost-based fee when permitted by law.

Ask Us to Correct Your Medical Record

You may ask us to correct health information about you that you believe is incorrect or incomplete.

We may deny your request in certain circumstances permitted by law. If we deny the request, we will explain the reason in writing.

Request Confidential Communications

You may ask us to contact you in a particular way or at a particular location.

For example, you may ask us to communicate with you through:

• Secure patient portal messaging
• A particular telephone number
• A particular email address
• A different mailing address

We will accommodate reasonable requests as required by law.

Ask Us to Limit What We Use or Share

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

We are not always required to agree to your request.

If you pay in full out of pocket for a healthcare service, you may ask us not to disclose information about that service to your health plan for payment or healthcare operations purposes. We will honor such a request when required by law unless disclosure is otherwise required.

Get a List of Certain Disclosures

You may ask for an accounting of certain disclosures of your health information made during the six years before your request.

The accounting generally does not include disclosures made for treatment, payment, healthcare operations, or certain other disclosures excluded by law.

Get a Copy of This Notice

You may request a paper or electronic copy of this Notice at any time.

A current copy is also available on the Drip Vitals website.

Choose Someone to Act for You

If another person has legal authority to act on your behalf, such as through a healthcare power of attorney or guardianship, that person may exercise your privacy rights.

We may ask for documentation confirming that person’s authority.

File a Complaint

You may file a complaint if you believe your privacy rights have been violated.

Contact:

Privacy Officer
Drip Vitals LLC
33 SW 2nd Ave, Suite 401
Miami, FL 33130
Phone: (888) 868-9906
Email: support@dripvitals.com

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

Drip Vitals will not retaliate against you for filing a complaint or exercising your privacy rights.

For certain health information, you may tell us your preferences regarding how information is shared.

Family, Friends, and Others Involved in Your Care

You may tell us whether you want us to share relevant health information with family members, friends, caregivers, or others involved in your care or payment for your care.

If you are unable to communicate your preference, we may share information when permitted by law if we reasonably believe doing so is in your best interest.

Disaster Relief

We may share limited information with disaster-relief organizations where permitted by law.

Marketing

We will obtain your written authorization before using or disclosing PHI for marketing when HIPAA requires such authorization.

Certain treatment-related, care-coordination, refill, or healthcare communications may be permitted without a marketing authorization.

Sale of PHI

Drip Vitals does not sell protected health information.

If an arrangement would constitute a sale of PHI under HIPAA, we will obtain written authorization when required.

Psychotherapy Notes

Most uses or disclosures of psychotherapy notes require written authorization when such records exist and HIPAA applies.

Fundraising

Drip Vitals does not currently use patient PHI for fundraising purposes.

If that practice changes, we will provide any notices and opt-out rights required by law.

Treatment

We may use and disclose your health information to provide, coordinate, and manage your healthcare.

This may include sharing information with:

• Dr. Emmanuel Noel Cruz Tancinco
• Other healthcare professionals involved in your care
• Laboratories
• Specialists
• Independent dispensing pharmacies
• Other healthcare entities involved in your treatment

For example, when Dr. Emmanuel Noel Cruz Tancinco determines that medication is medically appropriate, we may transmit your prescription and relevant information to a partner pharmacy so your prescription can be reviewed, prepared, dispensed, and shipped.

Payment

We may use and disclose health information as necessary to obtain or process payment for healthcare services.

This may include sharing limited information with payment processors and other entities involved in billing or payment administration.

Healthcare Operations

We may use and disclose health information to operate our medical practice, improve patient care, and conduct lawful healthcare operations.

Examples include:

• Quality improvement
• Clinical review
• Compliance activities
• Credentialing
• Staff training
• Patient support
• Business administration
• Fraud prevention
• Technology administration
• Legal and regulatory compliance

Partner Pharmacies

Drip Vitals does not own or operate a pharmacy and does not itself compound or dispense prescription medications.

When Dr. Emmanuel Noel Cruz Tancinco determines that prescription treatment is medically appropriate, Drip Vitals may transmit the prescription and information reasonably necessary for fulfillment to an appropriately licensed independent pharmacy.

Drip Vitals currently works with the following partner pharmacies:

Hallandale Pharmacy
2666 SW 36th St
Fort Lauderdale, FL 33312
Phone: (954) 455-3822
Website: hallandalerx.com

RX Compound Store
8950 SW 74th Ct, Suite 101
Miami, FL 33156
Phone: (786) 803-8947
Website: rxcompoundstore.com

Green Stone Rx
861 SW 8th Street, Suite 101
Miami, FL 33130
Phone: (855) 625-7588
Website: greenstonerx.com

Information shared with a dispensing pharmacy may include information reasonably necessary for treatment and lawful prescription fulfillment, such as:

• Patient name
• Date of birth
• Contact information
• Shipping address
• Prescription information
• Medication information
• Relevant medical information
• Allergy information
• Other information reasonably necessary for safe dispensing

Partner pharmacies may use this information to:

• Verify and process prescriptions
• Dispense medications
• Compound medications when legally permitted
• Prepare prescription labels
• Provide pharmacist counseling
• Communicate with patients about prescriptions
• Coordinate refills
• Ship medications
• Maintain required pharmacy records
• Comply with pharmacy laws and regulations

Each pharmacy is an independent healthcare entity responsible for its own pharmacy operations, professional dispensing decisions, privacy practices, licensure, compounding practices where applicable, and regulatory compliance.

Drip Vitals may add, remove, or change pharmacy partners based on patient location, licensing, medication availability, regulatory requirements, or other appropriate considerations.

Business Associates and Service Providers

Drip Vitals may use third-party companies to perform services on our behalf.

These may include:

• Electronic health record providers
• Patient portal providers
• Information technology providers
• Secure communications providers
• Cloud hosting companies
• Cybersecurity providers
• Billing and payment providers
• Administrative service providers
• Pharmacy technology providers

When required by HIPAA, we enter into appropriate Business Associate Agreements with service providers that create, receive, maintain, or transmit PHI on our behalf.

Public Health and Safety

We may disclose health information for public health and safety activities when permitted or required by law.

Examples include:

• Preventing or controlling disease
• Reporting adverse reactions to medication
• Assisting with product or medication recalls
• Reporting suspected abuse, neglect, or domestic violence when required or permitted
• Preventing or reducing a serious threat to health or safety
• Reporting information to public health authorities

Research

We may use or disclose health information for research when permitted by HIPAA and applicable law.

Where authorization, institutional review, waiver, or another legal requirement applies, we will comply with those requirements.

We may also use properly de-identified information for lawful research, analytics, quality improvement, and operational purposes.

Complying With the Law

We will disclose health information when federal or state law requires us to do so.

This may include disclosure to the U.S. Department of Health and Human Services when necessary to determine compliance with federal privacy requirements.

Health Oversight Activities

We may disclose health information to authorized healthcare oversight agencies for activities such as:

• Audits
• Investigations
• Inspections
• Licensing reviews
• Professional disciplinary proceedings
• Regulatory compliance reviews

Workers’ Compensation, Law Enforcement, and Government Requests

We may use or disclose health information when permitted or required by law for:

• Workers’ compensation matters
• Certain law-enforcement requests
• Health oversight activities
• Military functions
• National security functions
• Other lawful government activities

Additional restrictions may apply to certain categories of health information.

Lawsuits and Legal Proceedings

We may disclose health information in response to a valid court order, administrative order, subpoena, or other lawful legal process, subject to applicable privacy protections.

Medical Examiners and Funeral Directors

We may disclose health information to a coroner, medical examiner, or funeral director when permitted or required by law.

Organ and Tissue Donation

Where applicable, we may disclose health information to organizations involved in organ, eye, or tissue donation and transplantation.

Serious Threats to Health or Safety

We may use or disclose health information when necessary and legally permitted to prevent or reduce a serious and imminent threat to a person or the public.

Uses and Disclosures Requiring Written Authorization

Uses or disclosures of PHI that are not otherwise permitted or required by HIPAA generally require your written authorization.

Examples may include:

• Certain marketing uses
• Sale of PHI
• Most uses of psychotherapy notes
• Other uses not otherwise permitted by law

You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance upon it.

Substance Use Disorder Records

Certain substance use disorder (“SUD”) records may receive additional protections under federal law, including 42 CFR Part 2.

To the extent Drip Vitals receives or maintains SUD patient records protected by Part 2, those records will be handled according to applicable Part 2 requirements.

Such records generally may not be used or disclosed in civil, criminal, administrative, or legislative investigations or proceedings against the patient without the patient’s written consent or appropriate court authorization as required by law.

If Drip Vitals uses Part 2 information for fundraising communications where applicable, we will provide the advance notice and choice required by law.

State Privacy Laws

Some states provide additional privacy protections that may be more protective than HIPAA.

Where applicable state law provides greater privacy protection, Drip Vitals will comply with the applicable more protective requirement.

Additional protections may apply to information involving:

• Mental health
• Substance use treatment
• HIV/AIDS
• Sexually transmitted infections
• Genetic information
• Reproductive healthcare
• Other specially protected healthcare information

Drip Vitals provides healthcare through telehealth.

Patient information may be transmitted through:

• Secure patient portal messaging
• Electronic health records
• Electronic prescription systems
• Video consultations
• Telephone calls
• Email
• SMS/text messaging

Drip Vitals uses reasonable safeguards designed to protect PHI.

Patients should use secure patient portal messaging for sensitive health information whenever possible.

Ordinary email and SMS may involve greater privacy risks than secure portal communications.

Patients may use the secure Drip Vitals patient portal to access certain healthcare information and communicate with Drip Vitals.

Portal information may include:

• Treatment information
• Clinical communications
• Prescription information
• Appointment information
• Medical records
• Other healthcare information

Patients are responsible for protecting their login credentials and preventing unauthorized access to their accounts.

Drip Vitals is required to maintain the privacy and security of protected health information.

If a breach occurs that compromises PHI and notification is required by law, Drip Vitals will notify affected individuals as required.

Drip Vitals is required by law to:

• Maintain the privacy and security of PHI
• Provide this Notice describing our privacy practices and legal duties
• Follow the terms of the Notice currently in effect
• Notify affected patients when required if a breach compromises PHI
• Respect patient privacy rights as required by law

We will not use or disclose your information in a manner not described in this Notice unless you authorize us to do so or applicable law permits or requires it.

We may change the terms of this Notice and our privacy practices.

Changes may apply to information we already maintain as well as information received in the future.

The updated Notice will be posted on the Drip Vitals website and will include a revised effective date.

You may request a current copy at any time.

To request access to your records, request a correction, request confidential communications, request restrictions, request an accounting of disclosures, or exercise another applicable HIPAA privacy right, contact:

Privacy Officer
Drip Vitals LLC
33 SW 2nd Ave, Suite 401
Miami, FL 33130
Phone: (888) 868-9906
Email: support@dripvitals.com

You may also contact Drip Vitals through your secure patient portal.

We may verify your identity before processing a privacy request.

If you believe your privacy rights have been violated, you may file a complaint with Drip Vitals:

Privacy Officer
Drip Vitals LLC
33 SW 2nd Ave, Suite 401
Miami, FL 33130
Phone: (888) 868-9906
Email: support@dripvitals.com

You may also file a complaint with the:

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775

Drip Vitals will not retaliate against you for filing a complaint. HHS’s current provider model expressly includes the patient’s right to complain to both the provider and HHS without retaliation.

Drip Vitals LLC
33 SW 2nd Ave, Suite 401
Miami, FL 33130
United States
Privacy Officer: Drip Vitals Privacy Officer
Phone: (888) 868-9906
Email: support@dripvitals.com

For medical questions, patients may communicate with Dr. Emmanuel Noel Cruz Tancinco through the Drip Vitals patient portal, telephone, SMS, email, or scheduled video consultation.

For medical emergencies, call 911 or go to the nearest emergency department.

See also our Privacy Policy, Consumer Health Data Privacy Policy, Telehealth Informed Consent, and Important Safety Information.