Notice of Privacy Practices

Last updated: September 2025

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

I. Who We Are
This Notice of Privacy Practices (“Notice”) describes the privacy practices of Aurum Infusion and Wellness Spa and its affiliates, including certain affiliated professional entities and their physicians, health care practitioners, and other personnel (“we” or “us”).

II. Our Privacy Obligations
We are required by law to maintain the privacy of your health information (“Protected Health Information” or “PHI”) and to provide you with this Notice of our legal duties and privacy practices with respect to your PHI. We are also obligated to notify you immediately following a Breach of unsecured PHI. When we use or disclose your PHI, we are required to abide by the terms of this Notice (or other notice in effect at the time of the use or disclosure).

III. Permissible Uses and Disclosures Without Your Written Authorization
In certain situations, which we describe in Section IV below, we must obtain your written authorization in order to use and/or disclose your PHI. We do not need any type of authorization, however, for the following uses and disclosures:

A. Uses and Disclosures for Treatment, Payment and Health Care Operations
We may use and disclose PHI, but not your “Highly Confidential Information” (defined in Section IV.B below), in order to treat you, obtain payment for services provided to you, and conduct our “Healthcare Operations” as detailed below.

Treatment: We may use and disclose your PHI for the coordination of treatment, for example, to connect you with a provider to diagnose and treat your injury or illness. We may also disclose PHI to other health care providers involved in your treatment.

Payment: In most cases, we may use and disclose your PHI to obtain payment for services that we provide to you.

Healthcare Operations: We may use and disclose your PHI for internal administration and planning, and for various activities that improve the quality and cost-effectiveness of the care that we deliver to you. For example, we may use PHI to evaluate the quality and competence of our physicians and other health care practitioners. We may also disclose PHI in order to resolve any complaints you may have.

We may also disclose PHI to your other healthcare providers when such PHI is required for them to treat you, receive payment for services they render to you, or conduct certain healthcare operations, such as quality assessment and improvement activities, reviewing the quality and competence of healthcare professionals, or for health care fraud and abuse detection or compliance.


B. Disclosure to Relatives, Close Friends and Other Caregivers
We may use or disclose your PHI to a family member, other relative, close personal friend, or any other person identified by you when you are present for, or otherwise available prior to, the disclosure, if we:

  1. Obtain your agreement;

  2. Provide you with the opportunity to object and you do not object; or

  3. Reasonably infer that you do not object.

We will only disclose PHI to the extent necessary and as permitted by law. If you are not present or cannot agree/ object due to incapacity or emergency, we may use professional judgment to determine if the disclosure is in your best interests.

C. Public Health Activities
We may disclose your PHI for the following public health activities:

  1. Reporting health information to public health authorities

  2. Reporting child abuse or neglect

  3. Reporting product or service issues to the FDA

  4. Alerting individuals exposed to communicable diseases

  5. Reporting work-related illnesses or injuries to employers

D. Victims of Abuse, Neglect or Domestic Violence
If we reasonably believe you are a victim, we may disclose PHI to government authorities authorized to receive such reports.

E. Health Oversight Activities
We may disclose PHI to health oversight agencies for oversight operations such as audits, inspections, or investigations.

F. Judicial and Administrative Proceedings
We may disclose PHI in response to legal orders or lawful processes in compliance with applicable laws.

G. Law Enforcement
We may disclose PHI to law enforcement officials when permitted by law or required by court order or subpoena.

H. Decedents
We may disclose PHI to coroners, medical examiners, or funeral directors to the extent necessary.

I. Research
We may disclose PHI for research when approved by an Institutional Review Board or Privacy Board.

J. Health or Safety
We may use or disclose PHI to prevent or lessen a serious and imminent threat to public or individual safety.

K. Specialized Government Functions
We may disclose PHI for specialized government activities, including military service or national security duties.

L. Workers’ Compensation
We may disclose PHI as required to comply with workers’ compensation laws.

M. As Required by Law
We may use or disclose PHI when required by laws not already described above.

IV. Uses and Disclosures Requiring Written Authorization

A. Marketing and Other Uses
We must obtain your written authorization before using or disclosing your PHI for marketing, selling PHI, or for any purpose not outlined in this Notice.

B. Highly Confidential Information
Certain PHI receives special protections, including information related to:

  • Mental health services

  • Substance abuse treatment

  • HIV/AIDS

  • Sexually transmitted diseases

  • Genetic testing

  • Child abuse

  • Domestic violence

  • Sexual assault

We may only disclose this information with your specific written authorization unless otherwise required by law.

C. Revoking Authorization
You may revoke your authorization at any time (unless we have already acted based on it) by sending a written request to:
privacy@auruminfusionandwellnessspa.com

Your Rights Regarding Your PHI

A. Questions & Complaints
You may contact us at any time at privacy@auruminfusionandwellnessspa.com with questions or complaints. You may also file a complaint with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

B. Right to Request Additional Restrictions
You may request restrictions on how your PHI is used or disclosed. Some requests must be honored by law; others may be declined but we will attempt to accommodate reasonable requests.

C. Right to Request Confidential Communications
You may request alternative means or locations for receiving PHI.

D. Right to Review and Copy PHI
You may request access to your medical and billing records. Fees may apply for copies.

E. Right to Amend Records
You may request corrections to your PHI if you believe information is incomplete or incorrect.

F. Right to Accounting of Disclosures
You may request a list of disclosures of your PHI made in the past six years, with some exceptions.

G. Right to a Copy of This Notice
You may request a digital copy of this Notice at any time by emailing privacy@auruminfusionandwellnessspa.com.

Effective Date and Changes

A. Effective Date
This Notice is effective as of September 2025.

B. Right to Change Terms
We may update this Notice at any time. Updated versions will be posted on our website:
www.auruminfusionandwellnessspa.com/npp

You may request a current copy at any time by emailing privacy@auruminfusionandwellnessspa.com