HIPAA Notice of Privacy Practices

MAREVA CARE

Mareva Care: HRT & Metabolic Wellness, PLLC

Effective Date: October 11, 2026
Website: www.marevacare.com
Service Area: Florida, United States

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Our Commitment to Your Privacy

Mareva Care: HRT & Metabolic Wellness, PLLC (“Mareva Care,” “we,” “our,” or “us”) is committed to protecting the privacy and confidentiality of your personal health information.

We provide healthcare services through telemedicine, including hormone replacement therapy, medical weight management, metabolic wellness, and preventive healthcare.

This Notice describes how we may use and disclose your Protected Health Information (PHI), your rights concerning that information, and our legal responsibilities under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and other applicable laws.

Mareva Care is required, when subject to HIPAA, to:

Maintain the privacy and security of your PHI.
Provide you with this Notice of our legal duties and privacy practices.
Follow the terms of the Notice currently in effect.
Notify affected individuals following a breach of unsecured PHI when required by law.
Comply with applicable federal and state privacy requirements.

2. How We Use and Disclose Your Health Information

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare.

Examples include:

Reviewing medical history, symptoms, medications, and laboratory results.
Developing individualized treatment plans.
Prescribing medications when clinically appropriate.
Coordinating care with other authorized healthcare professionals.
Communicating with pharmacies or laboratories when necessary for treatment.
Providing follow-up care and monitoring treatment response.

Payment

We may use and disclose PHI as necessary to obtain payment for healthcare services.

This may include processing consultation fees, follow-up appointments, and membership payments, as well as managing billing records and resolving payment-related questions.

Mareva Care operates as a cash-pay practice. Payment and membership transactions are managed through our designated patient-management platform.

Healthcare Operations

We may use and disclose PHI for legitimate healthcare operations, including:

Maintaining accurate medical records.
Quality improvement and patient safety activities.
Reviewing clinical services and outcomes.
Practice administration and compliance.
Professional licensing, auditing, and regulatory activities.
Managing authorized healthcare technology and service providers.

These activities are conducted in accordance with applicable privacy requirements.

3. Other Uses and Disclosures Permitted or Required by Law

HIPAA permits or requires certain uses and disclosures without your written authorization.

Depending on the circumstances, these may include:

Public Health and Safety

We may disclose information to authorized public health agencies for legally permitted activities, including disease reporting, adverse-event reporting, or preventing a serious and imminent threat to health or safety.

Legal and Regulatory Requirements

We may disclose PHI when required or permitted by applicable laws, court orders, subpoenas, regulatory investigations, or other lawful processes, subject to applicable safeguards.

Health Oversight

Information may be disclosed to authorized agencies conducting legally permitted audits, investigations, inspections, or licensing activities.

Abuse, Neglect, or Domestic Violence

We may disclose information to appropriate authorities when permitted or required by law.

Workers' Compensation

We may disclose information as authorized by applicable workers' compensation laws.

Medical Examiners and Funeral Directors

We may disclose PHI when permitted by law for identification, determining cause of death, or other authorized duties.

Organ and Tissue Donation

We may disclose relevant information to authorized organ procurement or transplant organizations when permitted by law.

Research

PHI may be used or disclosed for research when permitted by applicable law, including when appropriate authorization or an approved waiver is obtained.

Other Legally Permitted Purposes

Additional uses or disclosures may occur when specifically permitted or required by HIPAA or other applicable laws.

4. Your Choices Regarding Health Information

You may have choices regarding certain uses and disclosures of your information.

Family Members and Others Involved in Your Care

When permitted by law, we may share information relevant to your care or payment with individuals involved in your healthcare, considering your preferences and any applicable opportunity to agree or object.

Disaster Relief

We may share relevant information with authorized disaster relief organizations when legally permitted.

Marketing and Sale of PHI

Mareva Care will obtain your written authorization before using or disclosing PHI for marketing purposes when HIPAA requires authorization.

We will not sell PHI without any authorization required by law.

Psychotherapy Notes

Most uses and disclosures of psychotherapy notes, as specifically defined by HIPAA, require written authorization, subject to legal exceptions.

Other Uses

Uses and disclosures not otherwise permitted by law or described in this Notice will require your written authorization.

You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

5. Your Rights Regarding Your Health Information

You have important rights concerning your PHI.

Right to Access Your Medical Records

You may request to inspect or obtain copies of medical and billing records maintained in a designated record set.

We generally respond within 30 days, subject to any extension permitted by law. Reasonable, cost-based fees may apply when legally permitted.

Right to Request Corrections

You may request an amendment to information you believe is incorrect or incomplete.

We may deny certain requests as permitted by law and will explain applicable denial and disagreement procedures.

Right to Request Confidential Communications

You may request that we contact you through a particular method or at a particular location.

We will accommodate reasonable requests as required by law.

Right to Request Restrictions

You may request limitations on certain uses or disclosures of your PHI.

We are not required to agree to every restriction request.

However, when you pay in full out of pocket for a healthcare item or service, we must generally honor a request not to disclose PHI about that item or service to a health plan for payment or healthcare operations, unless disclosure is required by law.

Right to an Accounting of Disclosures

You may request an accounting of certain disclosures of your PHI, subject to applicable exclusions and time limitations.

Right to a Copy of This Notice

You may request a paper or electronic copy of this Notice at any time.

Right to Choose a Personal Representative

A person with appropriate legal authority may exercise applicable privacy rights on your behalf.

We may verify that person's authority before acting on a request.

Right to File a Complaint

You may file a complaint with Mareva Care or the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.

Mareva Care will not retaliate against you for filing a complaint.

6. Electronic Health Records and Patient Portal

Mareva Care uses Optimantra as its designated electronic health record and patient-management platform.

Optimantra supports:

Patient registration and clinical intake.
Appointment scheduling and management.
Medical history and clinical documentation.
Uploading and maintaining medical records.
Laboratory and diagnostic result documentation.
Medication and treatment management.
Secure patient portal messaging.
Telemedicine encounters.
Consultation, follow-up, and membership payments.

Clinical information submitted through Optimantra is managed within the designated healthcare platform and is not transmitted to or stored through Mareva Care's public Wix website as part of the patient portal workflow.

Mareva Care remains responsible for protecting patient information maintained on its behalf by authorized service providers.

7. Telemedicine and Secure Patient Communications

Mareva Care provides clinical services through telemedicine.

Patient communications may occur through:

Optimantra telemedicine encounters.
Secure Optimantra patient portal messaging.
Spruce healthcare communication services.

These systems support authorized clinical and administrative communications, including appointment coordination, follow-up care, treatment-related questions, and other patient-care activities.

We use reasonable safeguards appropriate to the communication method and applicable legal requirements.

Patients are encouraged to use designated secure channels when transmitting sensitive health information.

Electronic communications may carry privacy or security risks, and no electronic system can guarantee absolute security.

8. Public Website and Patient Information

Our public website, www.marevacare.com, provides general information about Mareva Care's services, consultation fees, memberships, and how to access our patient portal.

The website does not function as an electronic medical record system.

Patients access Optimantra through a separate patient portal link for scheduling, registration, clinical documentation, payments, and healthcare communications.

The only visitor-submitted form on the public website is a request for a complimentary five-minute introductory call regarding general questions about services, pricing, or memberships.

This form is not intended for submitting PHI or obtaining medical advice.

Visitors should not submit medical histories, diagnoses, laboratory results, prescriptions, or other sensitive medical information through the introductory-call request form.

Website data collection and privacy practices are described separately in our Website Privacy Policy.

9. Business Associates and Healthcare Service Providers

Mareva Care may engage authorized third-party service providers to support healthcare operations.

When required by HIPAA, we enter into Business Associate Agreements with organizations that create, receive, maintain, or transmit PHI on our behalf.

These agreements require appropriate safeguards and restrictions on the use and disclosure of PHI.

Authorized healthcare providers, pharmacies, laboratories, and other parties may receive relevant patient information when legally permitted or required for treatment, payment, healthcare operations, or other authorized purposes.

Mareva Care's public website does not provide direct pharmacy or laboratory links or electronically integrate patient records with these services.

10. Additional Protections for Certain Health Information

Some categories of health information may be subject to additional confidentiality requirements under federal or state law.

These may include certain mental health records, substance use disorder treatment records, HIV-related information, genetic information, and other specially protected records.

Substance Use Disorder Records — 42 CFR Part 2

Certain substance use disorder patient records may receive additional protection under federal law, including 42 CFR Part 2.

When Mareva Care receives or maintains records subject to Part 2, we will handle those records according to applicable confidentiality requirements.

Where applicable, Part 2 records may be used or disclosed for treatment, payment, or healthcare operations under a valid consent that meets Part 2 requirements.

Records disclosed under applicable Part 2 consent may be subject to HIPAA's rules for subsequent uses and disclosures, as permitted by law.

Part 2 records, or testimony describing their contents, generally may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against the patient without the patient's specific written consent or an appropriate court order, as required by law.

Where Part 2 applies, patients may have additional rights and protections, including rights relating to complaints, breach notification, and restrictions on certain disclosures.

Fundraising

Mareva Care does not currently use PHI for fundraising activities. If that practice changes, we will comply with applicable notice and opt-out requirements.

Other Specially Protected Information

We will comply with applicable federal and Florida laws that provide additional confidentiality protections.

11. Data Security and Record Retention

Mareva Care implements administrative, technical, and physical safeguards designed to protect PHI.

These safeguards may include:

Secure electronic health record systems.
Access restrictions and authentication.
Appropriate security settings and procedures.
Confidentiality practices.
Secure clinical communication systems.
Appropriate vendor agreements.
Workforce training, where applicable.

Medical records are retained according to applicable federal and Florida requirements.

We will provide notifications of breaches of unsecured PHI when required by law.

12. Changes to This Notice

Mareva Care reserves the right to revise this Notice and make the revised provisions effective for PHI we maintain, as permitted by law.

When material changes occur, the updated Notice will be made available on our website and through other appropriate channels.

The current version will include its effective date.

13. Privacy Questions and Complaints

For questions regarding this Notice, requests concerning your health information, or privacy-related complaints, please contact:

Mareva Care: HRT & Metabolic Wellness, PLLC

Privacy Officer: Barbara Silva DNP APRN

Mailing Address: 7901 4TH ST N STE 300 St. Petersburg, FL, 33702, USA

Telephone: (954) 710-5401

Email: Support@marevacare.com

Website: www.marevacare.com

Patients may also submit appropriate privacy-related communications through designated secure patient communication channels.

Please avoid including sensitive medical information in ordinary email.

You may also file a complaint with:

U.S. Department of Health and Human Services
Office for Civil Rights

Website: https://www.hhs.gov/ocr/complaints/index.html

Mareva Care will not retaliate against any individual for exercising privacy rights or submitting a complaint.

14. Availability of This Notice

This Notice of Privacy Practices is available:

On the Mareva Care website.
Upon request from Mareva Care.
As part of the applicable patient intake process.
Through an electronic or paper copy upon request.

Mareva Care will make a good-faith effort to obtain acknowledgment that patients received this Notice, as required by applicable law.

Acknowledgment of receipt does not constitute authorization for additional uses or disclosures of PHI.

Mareva Care: HRT & Metabolic Wellness, PLLC
HIPAA Notice of Privacy Practices

Effective Date: October 11, 2026