Privacy Policy
Privacy Policy and Notice of Privacy Practices
Last Updated: June 2026
Vitali-T Men's Health & Testosterone Clinic (DBA: Vitali-T Health & Wellness Clinic) ("Vitali-T," "we," "our," or "us") is committed to protecting your privacy and maintaining the confidentiality of your personal and protected health information.
This Privacy Policy and Notice of Privacy Practices describes how we collect, use, disclose, and safeguard your information when you visit our website, communicate with us, receive healthcare services, or otherwise interact with our practice.
This policy serves as both our Privacy Policy and our Notice of Privacy Practices under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as amended by the Health Information Technology for Economic and Clinical Health (HITECH) Act and subsequent federal regulations. It also describes our practices regarding website privacy, telehealth, electronic communications, and text messaging.
By using our website or receiving services from Vitali-T, you acknowledge that you have had the opportunity to review this Privacy Policy.
**Our Legal Responsibilities**
We are required by applicable federal and state law to:
- Maintain the privacy and security of your Protected Health Information ("PHI").
- Provide you with notice of our legal duties and privacy practices.
- Use and disclose your information only as permitted or required by law.
- Notify you following a breach of unsecured Protected Health Information when required by law.
We reserve the right to revise this Privacy Policy at any time. Any changes become effective upon posting the revised version on our website unless otherwise required by law. Revised policies apply to both existing and previously collected information. Material changes will be communicated as required by applicable law.
You may request a current copy of this Privacy Policy at any time.
**Information We Collect**
Depending on how you interact with us, we may collect:
**Personal Information**
- Name
- Date of birth
- Address
- Telephone number
- Email address
- Emergency contact information
- Insurance information, if applicable
- Payment and billing information
**Protected Health Information (PHI)**
During the course of providing healthcare services, we may collect health information including:
- Medical history
- Medications
- Allergies
- Laboratory results
- Diagnostic information
- Treatment plans
- Prescriptions
- Communications regarding your care
- Telehealth records
**Website Information**
When you visit our website, we may automatically collect certain technical information, including:
- IP address
- Browser type
- Device information
- Operating system
- Website usage data
- Cookies and similar technologies
This information helps us improve website functionality, security, and user experience.
**How We Use Your Information**
We use your information to:
- Provide healthcare services
- Coordinate your treatment
- Communicate with you
- Process payments
- Schedule appointments
- Respond to inquiries
- Improve patient care
- Operate and manage our practice
- Maintain legal and regulatory compliance
- Improve our website and services
We only collect and use the minimum information reasonably necessary to accomplish these purposes where applicable under HIPAA.
**How We May Use or Disclose Protected Health Information**
Federal law permits us to use and disclose your Protected Health Information without your written authorization for the following purposes.
**Treatment**
We may use and disclose your PHI to provide, coordinate, or manage your healthcare. This includes communication with physicians, nurse practitioners, pharmacists, laboratories, imaging centers, specialists, hospitals, and other healthcare providers involved in your care.
Examples include:
- Sending prescriptions to a pharmacy
- Ordering laboratory testing
- Consulting with another healthcare provider
- Coordinating referrals
**Payment**
We may use and disclose your PHI to obtain payment for healthcare services. This includes submitting claims, verifying benefits, obtaining prior authorizations, collecting payment, and communicating with insurance companies or other responsible parties.
**Healthcare Operations**
We may use your PHI for activities necessary to operate our practice, including:
- Quality improvement
- Clinical review
- Staff education and training
- Risk management
- Accreditation
- Licensing
- Compliance activities
- Internal auditing
- Appointment reminders
- Practice administration
**Business Associates**
We may disclose your information to third-party companies that perform services on our behalf, such as electronic medical record providers, billing companies, laboratories, pharmacies, payment processors, cloud storage providers, IT vendors, telehealth platforms, and other service providers.
These organizations are required by applicable law and written agreements to appropriately safeguard your Protected Health Information and may use or disclose your information only as necessary to perform services on our behalf. Service providers that facilitate SMS communications do not receive ownership of your mobile information and may use it only to deliver messaging services for Vitali-T Health & Wellness Clinic. Text messaging originator opt-in data and consent are not shared with third parties or affiliates for their own marketing or promotional purposes.
**Appointment Reminders and Healthcare Communications**
We may contact you regarding your care by:
- Telephone
- Voicemail
- Patient portal
- Postal mail
- Secure messaging
- SMS/text message
Examples include:
- Appointment reminders
- Laboratory reminders
- Prescription notifications
- Follow-up instructions
- Care coordination
- Billing communications
- Educational information related to your care
We will use reasonable safeguards to protect your privacy when communicating with you through these methods.
**Marketing and Educational Communications**
We may communicate with you regarding our healthcare services, educational materials, newsletters, health-related products or services, wellness programs, or other information that may be beneficial to you.
Where required by applicable law, we will obtain your authorization before using your Protected Health Information for marketing purposes.
You may opt out of non-essential marketing communications at any time by following the instructions provided in the communication or by contacting our office.
**Public Health and Other Permitted Disclosures**
We may use or disclose your Protected Health Information without your written authorization when permitted or required by law, including for:
- Public health activities, including reporting diseases, injuries, births, deaths, adverse events, or product recalls to authorized public health agencies.
- Reporting information to the U.S. Food and Drug Administration (FDA) or other regulatory agencies as required.
- Health oversight activities, including audits, inspections, investigations, licensing, accreditation, certification, and other oversight conducted by authorized governmental agencies.
- Judicial or administrative proceedings in response to a court order, subpoena, discovery request, or other lawful process, as permitted by law.
- Law enforcement purposes when required or permitted by applicable law.
- Workers' compensation or similar programs that provide benefits for work-related injuries or illnesses.
- Organ, eye, or tissue donation when necessary to facilitate donation or transplantation.
- Coroners, medical examiners, or funeral directors as authorized by law.
- To prevent or lessen a serious threat to the health or safety of an individual or the public when permitted by law.
- Military, national security, correctional institutions, or other specialized government functions when required by applicable law.
Except as described in this Privacy Policy or otherwise authorized by you, we will not disclose your Protected Health Information without your written authorization.
You may revoke your authorization at any time in writing, except to the extent action has already been taken in reliance upon it.
**Family Members and Others Involved in Your Care**
Unless you object, we may disclose relevant health information to a family member, caregiver, or other person involved in your care or payment for your care when appropriate.
If you are unable to make decisions because of an emergency or incapacity, we may use our professional judgment to determine whether such disclosure is in your best interests.
**Research**
We may use or disclose your Protected Health Information for research only when authorized by you or when otherwise permitted or required by applicable law and approved by an appropriate Institutional Review Board or Privacy Board.
**Telehealth Services**
Vitali-T offers telehealth services where permitted by law.
Telehealth appointments may involve the electronic transmission of medical information through secure communication technologies.
Although we employ reasonable administrative, technical, and physical safeguards to protect your information, no method of electronic communication or data transmission can be guaranteed to be completely secure.
By participating in telehealth services, you acknowledge the inherent privacy and security risks associated with electronic communications.
**Website Privacy**
When you visit our website, we may collect information that helps us operate, improve, and secure our website and services.
Information collected may include:
- Information you voluntarily submit through forms.
- Appointment requests.
- Contact requests.
- Newsletter or marketing subscriptions.
- IP address.
- Browser and device information.
- Website usage information.
- Cookies and similar technologies.
We use this information to:
- Respond to inquiries.
- Schedule appointments.
- Improve website performance.
- Analyze website traffic.
- Maintain website security.
- Improve the user experience.
We do not sell your personal information.
**Cookies and Analytics**
Our website may use cookies, pixels, and similar technologies to improve website functionality, remember your preferences, analyze website traffic, and better understand how visitors use our website.
Third-party services such as website analytics providers or advertising platforms may also place cookies on your device in accordance with their own privacy policies.
You may disable cookies through your browser settings; however, certain website features may not function properly.
**Electronic Communications**
If you communicate with us by email, text message, website forms, or other electronic methods, you acknowledge that these methods may not always be encrypted or completely secure.
Please avoid sending highly sensitive information through unsecured electronic communications unless specifically instructed to do so.
**SMS/Text Messaging Privacy**
If you choose to receive text messages from Vitali-T Health & Wellness Clinic, we may send:
- Appointment reminders
- Prescription notifications
- Laboratory reminders
- Billing notifications
- Follow-up communications
- Account notifications
- Educational information related to your care
- Promotional or marketing messages, where permitted by law and with your consent when required.
Message frequency varies.
Message and data rates may apply.
You may opt out of SMS communications at any time by replying STOP to any message. For assistance, reply HELP or contact our office directly.
Your consent to receive text messages is not a condition of receiving medical treatment.
Opting out of promotional text messages will not affect your ability to receive healthcare services. However, opting out of all SMS communications may prevent you from receiving appointment reminders, prescription notifications, laboratory notifications, or other important information regarding your care.
SMS consent is used solely to communicate with you as requested. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.
Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text messaging services necessary to deliver SMS communications.
We may use trusted service providers to facilitate text messaging on our behalf. These providers may access your information only as necessary to provide SMS delivery services and are contractually required to safeguard your information and comply with applicable privacy laws.
**Data Security**
We maintain reasonable administrative, technical, and physical safeguards designed to protect your personal information and Protected Health Information against unauthorized access, use, disclosure, alteration, or destruction.
While we strive to protect your information, no method of electronic transmission or data storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.
**Data Retention**
We retain your personal information and Protected Health Information for as long as necessary to provide healthcare services, comply with applicable legal and regulatory requirements, resolve disputes, enforce our agreements, and satisfy record retention obligations under applicable federal and state law.
When information is no longer required, we securely destroy or de-identify it in accordance with applicable law.
**Children's Privacy**
Our healthcare services and website are not intended for children under the age of 13 without the involvement of a parent or legal guardian.
When we provide healthcare services to minors as permitted by applicable law, we collect and use information only as necessary to provide those services and comply with legal requirements.
**Your Rights Regarding Your Protected Health Information**
You have the following rights regarding your Protected Health Information (PHI), subject to certain limitations under applicable law.
**Right to Access**
You have the right to inspect and obtain a copy of your Protected Health Information that we maintain and use to make decisions regarding your care. You may request your records in paper or, when readily producible, in an electronic format. Reasonable, cost-based fees permitted by law may apply.
**Right to Request an Amendment**
If you believe your health information is inaccurate or incomplete, you may request that we amend your record. Requests must be submitted in writing and include the reason for the requested amendment.
We may deny your request in certain circumstances**Privacy Policy and Notice of Privacy Practices**
**Effective Date:** May 21, 2026
**Last Updated:** July 2026
Vitali-T Men's Health & Testosterone Clinic (DBA: Vitali-T Health & Wellness Clinic) ("Vitali-T," "we," "our," or "us") is committed to protecting your privacy and maintaining the confidentiality of your personal and protected health information.
This Privacy Policy and Notice of Privacy Practices describes how we collect, use, disclose, and safeguard your information when you visit our website, communicate with us, receive healthcare services, or otherwise interact with our practice.
This policy serves as both our Privacy Policy and our Notice of Privacy Practices under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as amended by the Health Information Technology for Economic and Clinical Health (HITECH) Act and subsequent federal regulations. It also describes our practices regarding website privacy, telehealth, electronic communications, and text messaging.
By using our website or receiving services from Vitali-T, you acknowledge that you have had the opportunity to review this Privacy Policy.
**Our Legal Responsibilities**
We are required by applicable federal and state law to:
- Maintain the privacy and security of your Protected Health Information ("PHI").
- Provide you with notice of our legal duties and privacy practices.
- Use and disclose your information only as permitted or required by law.
- Notify you following a breach of unsecured Protected Health Information when required by law.
We reserve the right to revise this Privacy Policy at any time. Any changes become effective upon posting the revised version on our website unless otherwise required by law. Revised policies apply to both existing and previously collected information. Material changes will be communicated as required by applicable law.
You may request a current copy of this Privacy Policy at any time.
**Information We Collect**
Depending on how you interact with us, we may collect:
**Personal Information**
- Name
- Date of birth
- Address
- Telephone number
- Email address
- Emergency contact information
- Insurance information, if applicable
- Payment and billing information
**Protected Health Information (PHI)**
During the course of providing healthcare services, we may collect health information including:
- Medical history
- Medications
- Allergies
- Laboratory results
- Diagnostic information
- Treatment plans
- Prescriptions
- Communications regarding your care
- Telehealth records
**Website Information**
When you visit our website, we may automatically collect certain technical information, including:
- IP address
- Browser type
- Device information
- Operating system
- Website usage data
- Cookies and similar technologies
This information helps us improve website functionality, security, and user experience.
**How We Use Your Information**
We use your information to:
- Provide healthcare services
- Coordinate your treatment
- Communicate with you
- Process payments
- Schedule appointments
- Respond to inquiries
- Improve patient care
- Operate and manage our practice
- Maintain legal and regulatory compliance
- Improve our website and services
We only collect and use the minimum information reasonably necessary to accomplish these purposes where applicable under HIPAA.
**How We May Use or Disclose Protected Health Information**
Federal law permits us to use and disclose your Protected Health Information without your written authorization for the following purposes.
**Treatment**
We may use and disclose your PHI to provide, coordinate, or manage your healthcare. This includes communication with physicians, nurse practitioners, pharmacists, laboratories, imaging centers, specialists, hospitals, and other healthcare providers involved in your care.
Examples include:
- Sending prescriptions to a pharmacy
- Ordering laboratory testing
- Consulting with another healthcare provider
- Coordinating referrals
**Payment**
We may use and disclose your PHI to obtain payment for healthcare services. This includes submitting claims, verifying benefits, obtaining prior authorizations, collecting payment, and communicating with insurance companies or other responsible parties.
**Healthcare Operations**
We may use your PHI for activities necessary to operate our practice, including:
- Quality improvement
- Clinical review
- Staff education and training
- Risk management
- Accreditation
- Licensing
- Compliance activities
- Internal auditing
- Appointment reminders
- Practice administration
**Business Associates**
We may disclose your information to third-party companies that perform services on our behalf, such as electronic medical record providers, billing companies, laboratories, pharmacies, payment processors, cloud storage providers, IT vendors, telehealth platforms, and other service providers.
These organizations are required by applicable law and written agreements to appropriately safeguard your Protected Health Information and may use or disclose your information only as necessary to perform services on our behalf. Service providers that facilitate SMS communications do not receive ownership of your mobile information and may use it only to deliver messaging services for Vitali-T Health & Wellness Clinic. Text messaging originator opt-in data and consent are not shared with third parties or affiliates for their own marketing or promotional purposes.
**Appointment Reminders and Healthcare Communications**
We may contact you regarding your care by:
- Telephone
- Voicemail
- Patient portal
- Postal mail
- Secure messaging
- SMS/text message
Examples include:
- Appointment reminders
- Laboratory reminders
- Prescription notifications
- Follow-up instructions
- Care coordination
- Billing communications
- Educational information related to your care
We will use reasonable safeguards to protect your privacy when communicating with you through these methods.
**Marketing and Educational Communications**
We may communicate with you regarding our healthcare services, educational materials, newsletters, health-related products or services, wellness programs, or other information that may be beneficial to you.
Where required by applicable law, we will obtain your authorization before using your Protected Health Information for marketing purposes.
You may opt out of non-essential marketing communications at any time by following the instructions provided in the communication or by contacting our office.
**Public Health and Other Permitted Disclosures**
We may use or disclose your Protected Health Information without your written authorization when permitted or required by law, including for:
- Public health activities, including reporting diseases, injuries, births, deaths, adverse events, or product recalls to authorized public health agencies.
- Reporting information to the U.S. Food and Drug Administration (FDA) or other regulatory agencies as required.
- Health oversight activities, including audits, inspections, investigations, licensing, accreditation, certification, and other oversight conducted by authorized governmental agencies.
- Judicial or administrative proceedings in response to a court order, subpoena, discovery request, or other lawful process, as permitted by law.
- Law enforcement purposes when required or permitted by applicable law.
- Workers' compensation or similar programs that provide benefits for work-related injuries or illnesses.
- Organ, eye, or tissue donation when necessary to facilitate donation or transplantation.
- Coroners, medical examiners, or funeral directors as authorized by law.
- To prevent or lessen a serious threat to the health or safety of an individual or the public when permitted by law.
- Military, national security, correctional institutions, or other specialized government functions when required by applicable law.
Except as described in this Privacy Policy or otherwise authorized by you, we will not disclose your Protected Health Information without your written authorization.
You may revoke your authorization at any time in writing, except to the extent action has already been taken in reliance upon it.
**Family Members and Others Involved in Your Care**
Unless you object, we may disclose relevant health information to a family member, caregiver, or other person involved in your care or payment for your care when appropriate.
If you are unable to make decisions because of an emergency or incapacity, we may use our professional judgment to determine whether such disclosure is in your best interests.
**Research**
We may use or disclose your Protected Health Information for research only when authorized by you or when otherwise permitted or required by applicable law and approved by an appropriate Institutional Review Board or Privacy Board.
**Telehealth Services**
Vitali-T offers telehealth services where permitted by law.
Telehealth appointments may involve the electronic transmission of medical information through secure communication technologies.
Although we employ reasonable administrative, technical, and physical safeguards to protect your information, no method of electronic communication or data transmission can be guaranteed to be completely secure.
By participating in telehealth services, you acknowledge the inherent privacy and security risks associated with electronic communications.
**Website Privacy**
When you visit our website, we may collect information that helps us operate, improve, and secure our website and services.
Information collected may include:
- Information you voluntarily submit through forms.
- Appointment requests.
- Contact requests.
- Newsletter or marketing subscriptions.
- IP address.
- Browser and device information.
- Website usage information.
- Cookies and similar technologies.
We use this information to:
- Respond to inquiries.
- Schedule appointments.
- Improve website performance.
- Analyze website traffic.
- Maintain website security.
- Improve the user experience.
We do not sell your personal information.
**Cookies and Analytics**
Our website may use cookies, pixels, and similar technologies to improve website functionality, remember your preferences, analyze website traffic, and better understand how visitors use our website.
Third-party services such as website analytics providers or advertising platforms may also place cookies on your device in accordance with their own privacy policies.
You may disable cookies through your browser settings; however, certain website features may not function properly.
**Electronic Communications**
If you communicate with us by email, text message, website forms, or other electronic methods, you acknowledge that these methods may not always be encrypted or completely secure.
Please avoid sending highly sensitive information through unsecured electronic communications unless specifically instructed to do so.
**SMS/Text Messaging Privacy**
If you choose to receive text messages from Vitali-T Health & Wellness Clinic, we may send:
- Appointment reminders
- Prescription notifications
- Laboratory reminders
- Billing notifications
- Follow-up communications
- Account notifications
- Educational information related to your care
- Promotional or marketing messages, where permitted by law and with your consent when required.
Message frequency varies.
Message and data rates may apply.
You may opt out of SMS communications at any time by replying STOP to any message. For assistance, reply HELP or contact our office directly.
Your consent to receive text messages is not a condition of receiving medical treatment.
Opting out of promotional text messages will not affect your ability to receive healthcare services. However, opting out of all SMS communications may prevent you from receiving appointment reminders, prescription notifications, laboratory notifications, or other important information regarding your care.
SMS consent is used solely to communicate with you as requested. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.
Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text messaging services necessary to deliver SMS communications.
We may use trusted service providers to facilitate text messaging on our behalf. These providers may access your information only as necessary to provide SMS delivery services and are contractually required to safeguard your information and comply with applicable privacy laws.
**Data Security**
We maintain reasonable administrative, technical, and physical safeguards designed to protect your personal information and Protected Health Information against unauthorized access, use, disclosure, alteration, or destruction.
While we strive to protect your information, no method of electronic transmission or data storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.
**Data Retention**
We retain your personal information and Protected Health Information for as long as necessary to provide healthcare services, comply with applicable legal and regulatory requirements, resolve disputes, enforce our agreements, and satisfy record retention obligations under applicable federal and state law.
When information is no longer required, we securely destroy or de-identify it in accordance with applicable law.
**Children's Privacy**
Our healthcare services and website are not intended for children under the age of 13 without the involvement of a parent or legal guardian.
When we provide healthcare services to minors as permitted by applicable law, we collect and use information only as necessary to provide those services and comply with legal requirements.
**Your Rights Regarding Your Protected Health Information**
You have the following rights regarding your Protected Health Information (PHI), subject to certain limitations under applicable law.
**Right to Access**
You have the right to inspect and obtain a copy of your Protected Health Information that we maintain and use to make decisions regarding your care. You may request your records in paper or, when readily producible, in an electronic format. Reasonable, cost-based fees permitted by law may apply.
**Right to Request an Amendment**
If you believe your health information is inaccurate or incomplete, you may request that we amend your record. Requests must be submitted in writing and include the reason for the requested amendment.
We may deny your request in certain circumstances permitted by law. If we deny your request, we will provide a written explanation and information about your right to submit a statement of disagreement.
**Right to an Accounting of Disclosures**
You have the right to request an accounting of certain disclosures of your Protected Health Information made by our practice, except for disclosures exempt under HIPAA, such as those made for treatment, payment, healthcare operations, or pursuant to your authorization.
You may request an accounting covering up to six (6) years prior to the date of your request, as permitted by law.
**Right to Request Restrictions**
You may request restrictions on certain uses or disclosures of your Protected Health Information.
Although we are not required to agree to every requested restriction, we will comply when required by applicable law.
If you pay for a healthcare item or service entirely out of pocket, you may request that we not disclose information about that item or service to your health plan for purposes of payment or healthcare operations. We will honor such requests when required by law.
**Right to Confidential Communications**
You may request that we communicate with you through alternative means or at an alternative location, such as a different mailing address, email address, or telephone number.
We will accommodate reasonable requests whenever feasible.
**Right to Receive a Paper Copy**
You may request a paper copy of this Privacy Policy and Notice of Privacy Practices at any time, even if you previously agreed to receive it electronically.
**Breach Notification**
If your unsecured Protected Health Information is compromised in a manner requiring notification under applicable law, we will notify you without unreasonable delay and in accordance with federal and state law.
**Your Responsibilities**
To help us provide safe and effective care, you agree to provide accurate and current information and to promptly notify us of changes to your contact information, insurance information, or other information relevant to your care.
**Third-Party Websites**
Our website may contain links to third-party websites or services for your convenience. We are not responsible for the privacy practices, content, or security of websites that we do not own or control. We encourage you to review the privacy policies of any third-party websites you visit.
**Changes to This Privacy Policy**
We reserve the right to modify this Privacy Policy and Notice of Privacy Practices at any time to reflect changes in our privacy practices, legal requirements, technology, or business operations.
Any revised policy will become effective upon posting to our website unless otherwise required by law. The revised policy will apply to all information maintained by our practice.
The effective date at the beginning of this policy identifies the most recent revision.
**Complaints**
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer using the contact information below.
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.
We will not retaliate against you for filing a complaint or exercising any of your privacy rights.
Information regarding filing a complaint with the Office for Civil Rights is available at https://www.hhs.gov/ocr/privacy.
**Contact Information**
Vitali-T Men's Health & Testosterone Clinic
DBA: Vitali-T Health & Wellness Clinic
495 Olney Avenue
Astoria, Oregon 97103
Phone: (503) 902-5812
Email: info@vitali-t.clinic
Website: www.vitali-t.clinic
**Privacy Officer**
Privacy-related requests, questions, complaints, or requests to exercise your rights under this Privacy Policy may be directed to our Privacy Officer using the contact information above.
**Governing Law**
This Privacy Policy and Notice of Privacy Practices is intended to comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, applicable federal regulations, and applicable Oregon and Washington laws governing the privacy and security of health information.
If any provision of this policy is determined to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.
**Questions**
If you have questions about this Privacy Policy or our privacy practices, please contact us using the information provided above.
We are committed to protecting your privacy and maintaining the confidentiality of your personal and health information while providing high-quality healthcare services.