Privacy Policy

Last Updated: September 23, 2026 · Effective Since 2022

Treatment Vital ("we," "us," or "our") respects your privacy and is committed to safeguarding the personal and health information you share with us. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you have regarding your data. By using our website, services, or mobile application, you agree to the practices described in this policy.

1. Information We Collect

We collect several categories of information to deliver premium wellness services:

1.1 Personal Identifiers

• Full name, email, phone number, home address
• Date of birth, emergency contact details
• Insurance policy numbers (when billing insurance)

1.2 Health Information (Protected Health Information - PHI)

• Medical history, current diagnoses, medications
• Lab results, biomarker readings, vital signs
• Nutrition logs, fitness data, sleep patterns
• Session notes from practitioners

1.3 Technical & Usage Data

• IP address, browser type, device information
• Pages visited, time spent on site, referral sources
• Cookie data and analytics identifiers

1.4 Payment Information

• Credit card details (processed securely via PCI-compliant payment gateways; we never store full card numbers)
• Billing address and transaction history

2. How We Use Your Information

• Service Delivery: Providing personalized wellness care, coordinating specialists, and tracking your progress.
• Communication: Sending appointment reminders, wellness tips, and responding to inquiries.
• Billing & Insurance: Processing payments and submitting claims to insurance providers.
• Quality Improvement: Analyzing aggregate data to improve our services (always anonymized).
• Legal Compliance: Meeting HIPAA, state healthcare, and tax obligations.
• Marketing: Sending newsletters and offers only with your explicit consent.

3. HIPAA Compliance

As a provider of healthcare services, Treatment Vital is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA). We maintain:

• Administrative safeguards including employee training and access controls
• Technical safeguards including end-to-end encryption and secure servers
• Physical safeguards including secured facilities and restricted records access
• Signed Business Associate Agreements (BAAs) with every third-party vendor that handles PHI

4. How We Share Your Information

We never sell your data. We share information only in these limited circumstances:

• Practitioners on Our Team: Licensed professionals delivering your care.
• Service Vendors: Payment processors, cloud hosting, scheduling software (under BAAs).
• Insurance Providers: When submitting claims on your behalf.
• Legal Requirements: When required by law, court order, or to protect safety.
• Business Transfers: In the event of merger or acquisition, with notice to you.

5. Data Retention

We retain personal information for as long as necessary to deliver services and fulfill legal obligations. Medical records are retained for a minimum of 7 years (or longer where state law requires). You may request deletion of non-regulated data at any time.

6. Your Rights

Under HIPAA and applicable state laws (including CCPA for California residents), you have the right to:

• Access, download, or receive a copy of your information
• Request correction of inaccurate data
• Request deletion of non-regulated data
• Opt out of marketing communications
• Revoke consent for future PHI uses
• Request an accounting of disclosures
• Lodge a complaint with HHS or your state attorney general

To exercise any right, email privacy@treatmentvital.com.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through your browser settings. Essential cookies cannot be disabled; analytics and marketing cookies are optional.

8. Children's Privacy

Our services are available for minors when authorized by a parent or legal guardian. We do not knowingly collect information from children under 13 without verifiable parental consent.

9. Security Measures

We protect your data with AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication, regular penetration testing, and SOC 2 Type II certified infrastructure. Despite these measures, no transmission over the internet is 100% secure.

10. International Data Transfers

Treatment Vital operates primarily in the United States. If you access our services from outside the USA, your data will be transferred to and processed in the United States under appropriate safeguards.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their policies.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on our site at least 30 days before taking effect.

13. Contact Us

Questions about this Privacy Policy? Reach our Privacy Officer:

Treatment Vital — Privacy Office
Po Box 32335, Louisville, Kentucky 40232, USA
Email: privacy@treatmentvital.com
Phone: (651) 251-1220

Back to Home