Book your 15-minute Intake Call with a hormone specialist.Book Now
NRG Clinic
Book

Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: October 22, 2026

Who We Are

This Notice of Privacy Practices (this “Notice”) applies to Energy Virtual Medical P.A., Energy Virtual Medical CA, P.C., and Energy Virtual Medical NJ, P.C., each doing business as “NRG Clinic” (collectively, “NRG Clinic,” “we,” “us,” or “our”). These affiliated medical practices share this Notice and may share protected health information (“PHI”) with each other for treatment, payment, and health care operations as permitted by law. NRG Clinic LLC, our management services organization, performs billing and administrative services for our practices as a business associate under a written Business Associate Agreement and is required to safeguard your information in accordance with HIPAA.

Our Duties

We are required by law to maintain the privacy and security of your PHI; to provide you this Notice of our legal duties and privacy practices and to follow the Notice currently in effect; and to notify you following a breach of your unsecured PHI. We reserve the right to change this Notice and to make the revised Notice effective for all PHI we maintain. The current Notice is available in your patient portal, on our website, and in paper form on request.

How We May Use and Disclose Your Health Information

The following categories describe the ways we may use and disclose PHI without your written authorization:

  • For treatment: to provide, coordinate, and manage your care — for example, sharing information with the clinicians involved in your care, the pharmacies that dispense your medications, and the laboratories that perform your testing; and to contact you about appointments, treatment options, or health-related services.
  • For payment: to bill you and collect payment for our services — for example, processing your card payments through our payment processors. We are a cash-pay practice and do not bill insurance; if you ask us to forward information to a third party (such as insurance information to a pharmacy), we will do so at your request.
  • For health care operations: to run our practices — quality assessment and improvement, care coordination, business planning, customer service, and audit and compliance activities. We may use de-identified information, from which information identifying you has been removed, for analysis and service planning.
  • As required by law: when federal, state, or local law requires disclosure.
  • Public health and safety: to public health authorities for preventing or controlling disease; to report suspected abuse, neglect, or domestic violence as required or permitted by law; to prevent or lessen a serious and imminent threat to your health or safety or that of others; and to the FDA to report adverse events or product problems.
  • Health oversight: to health oversight agencies for audits, investigations, inspections, and licensure activities authorized by law.
  • Judicial and administrative proceedings: in response to a court or administrative order, or to a subpoena, discovery request, or other lawful process if efforts have been made to notify you or obtain a protective order.
  • Law enforcement: as required by law or in response to a court order, warrant, subpoena, or administrative request, and in other limited circumstances such as identifying or locating a person.
  • Research: for research approved by an institutional review board or privacy board that has established protocols to protect your information.
  • Workers’ compensation: as necessary to comply with workers’ compensation or similar programs.
  • Coroners, medical examiners, funeral directors; organ donation; specialized government functions: as permitted by law, including military, veterans’, and national security purposes, and correctional or custodial situations.
  • People involved in your care: unless you object, we may share information directly relevant to a family member’s, relative’s, or friend’s involvement in your care or payment for your care, and may notify them of your location or general condition, including for disaster relief. To object, contact us using the information at the end of this Notice.

State Laws That Give You More Protection

Some states where we provide care have laws that protect certain health information more strictly than HIPAA does, such as information about mental health, HIV/AIDS, genetic testing, and sexually transmitted infections. When a state law gives you more protection or further limits a use or disclosure described in this Notice, we follow that law.

Substance Use Disorder Treatment Records

We are not a substance use disorder treatment program. We may, however, receive records about you from a federally assisted substance use disorder treatment program that are protected by federal law at 42 CFR Part 2 (“Part 2 records”), for example when you or another provider sends us your outside records. If we receive Part 2 records:

  • We will use and disclose them only as permitted by 42 CFR Part 2 and the written consent you gave to the program that sent them. If you gave a single consent for all future uses and disclosures for treatment, payment, and health care operations, we may use and disclose those records for those purposes as described in this Notice.
  • We will not use or disclose Part 2 records, or testimony about what they contain, in any civil, criminal, administrative, or legislative proceeding against you unless you give specific written consent, or a court issues an order after you are given notice and an opportunity to be heard, as required by 42 CFR Part 2. A court order authorizing such a use or disclosure must be accompanied by a subpoena or other legal requirement compelling the disclosure.

Information Shared With Others

When we disclose your PHI as described in this Notice to a person or organization that is not required to follow HIPAA, the recipient may share the information again, and it may no longer be protected by HIPAA.

Uses and Disclosures Requiring Your Written Authorization

Except as described above or as otherwise permitted or required by law, we will not use or disclose your PHI without your written authorization. In particular, most uses and disclosures of psychotherapy notes, uses and disclosures of PHI for marketing purposes, and any sale of PHI require your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

Your Rights Regarding Your Health Information

  • Right to access: you may inspect and receive a copy of your medical and billing records, including an electronic copy, by written request. We will respond within 30 days and may charge a reasonable, cost-based fee. In limited situations we may deny access, and we will explain your review rights in writing.
  • Right to amend: if you believe information in your record is incorrect or incomplete, you may request an amendment in writing, with a supporting reason. We will act on your request within 60 days. We may deny the request in certain cases — for example, if the information was not created by us or is accurate and complete — and will provide a written explanation and your options.
  • Right to an accounting of disclosures: you may request a list of certain disclosures we made of your PHI in the six years before your request, excluding disclosures for treatment, payment, and health care operations and certain other categories. The first accounting in a 12-month period is free.
  • Right to request restrictions: you may request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations, or to persons involved in your care. We are not required to agree, except: if you pay for a service in full out of pocket and request that we not disclose that service to your health plan, we must agree, unless the disclosure is required by law.
  • Right to confidential communications: you may ask us to communicate with you in a specific way or at a specific location — for example, only by e-mail or only at a certain phone number. We will accommodate all reasonable requests.
  • Right to a paper copy: you may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
  • Right to breach notification: we will notify you following a breach of your unsecured PHI, as required by law.

To exercise any of these rights, submit your request in writing using the contact information below.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be penalized or retaliated against in any way for filing a complaint.

To file a complaint with the Office for Civil Rights, visit www.hhs.gov/ocr/complaints, call 1-877-696-6775, or write to: U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue S.W., Washington, D.C. 20201.

Privacy Contact

For questions about this Notice or to exercise your rights, contact:

Privacy Officer, NRG Clinic E-mail: info@nrgclinic.com Phone: (855) 302-3403 Mail: 200 W. Palmetto Park Rd., Suite 306, Boca Raton, FL 33432