HIPAA Notice of Privacy Practices

This notice explains how protected health information (“PHI”) is handled in connection with your Corivo Health membership, the role Corivo plays under the Health Insurance Portability and Accountability Act (“HIPAA”), and your rights. Please review it carefully.

Who We Are

Corivo, LLC (doing business as “Corivo Health,” “we,” or “us”) is a membership and marketing company. Corivo does not diagnose, treat, prescribe, or dispense medication, and does not make clinical decisions.

Medical care is provided by licensed, independent providers through contracted telehealth partners, and prescriptions are dispensed by state-licensed pharmacies. Those providers and pharmacies are the “covered entities” responsible for your PHI. Each of them maintains its own Notice of Privacy Practices, which it provides to you as part of your care and which governs how it uses and discloses your PHI. If you have not received a provider’s or pharmacy’s Notice of Privacy Practices, you may request it directly from them.

To the extent Corivo receives, maintains, or transmits PHI on behalf of those covered entities, Corivo acts as a “business associate” under written business associate agreements (BAAs), and safeguards that information as HIPAA requires of business associates.

Separately, the personal information you provide directly to Corivo, such as membership, account, billing, and marketing information, is handled as described in our Privacy Policy and Your Privacy Choices, not this notice.

How PHI Is Used and Disclosed

When Corivo handles PHI as a business associate, it does so only as permitted by its business associate agreements and by law, principally to help arrange and support your care and membership. For example, this may include routing your information to your chosen provider or pharmacy, supporting your coaching experience, and performing payment and administrative functions on behalf of, or at the direction of, a covered entity. Corivo also uses and discloses PHI as required or permitted by HIPAA, including to the covered entity itself, to you, and as required by law.

Corivo does not sell PHI, and does not use or disclose PHI for marketing except as permitted by law and with any authorization HIPAA requires. Any use or disclosure of PHI not permitted by our business associate agreements or by law will be made only with the authorization required under HIPAA, which may be revoked as provided by law.

The providers and pharmacies who care for you may use and disclose your PHI for treatment, payment, and health care operations, and for the other purposes described in their own Notices of Privacy Practices.

Your Rights

HIPAA gives you rights with respect to the PHI held by the covered entity that maintains your records. That is, your provider or pharmacy. These generally include the right to access and obtain a copy of your PHI, to request an amendment of your PHI, to receive an accounting of certain disclosures, to request restrictions on certain uses and disclosures, to request confidential communications by alternative means or at alternative locations, and to receive a paper copy of a covered entity’s notice.

Because your medical and pharmacy records are maintained by your provider or pharmacy, these rights are exercised through them, and they will respond as HIPAA requires. If you contact Corivo, we will help route your request to the appropriate covered entity. For the personal information Corivo holds directly, you can exercise your choices, including opting out of marketing and of any “sale” or “sharing” of your information, through our Privacy Policy and Your Privacy Choices.

Safeguards and Breach Notification

Corivo maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of PHI it handles. As a business associate, if Corivo discovers a breach of unsecured PHI, it will notify the applicable covered entity as required by law so that affected individuals can be notified in accordance with HIPAA.

Questions or Complaints

If you have questions about this notice or about how Corivo handles your information, contact us at:

Corivo, LLC (d/b/a Corivo Health)
3608 Spruce Avenue, West Palm Beach, FL 33407
privacy@corivohealth.com

To exercise your HIPAA rights over your medical or pharmacy records, contact your provider or pharmacy, the covered entity that maintains those records.

If you believe your privacy rights have been violated, you may file a complaint, without retaliation, with the covered entity, with Corivo, or with:

Secretary of the U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue SW
Washington, D.C. 20201

Changes to This Notice

We may update this notice from time to time. If we make material changes, we will post the revised notice on our website with a new “Last updated” date. The version in effect at the time PHI is handled will govern.