HIPAA Notice of Privacy Practices

Your Privacy is Our Priority

Arsenal Men's Health complies with the Health Insurance Portability and Accountability Act (HIPAA) and Utah Code § 26B-4-204. This notice describes how your personal health information (PHI) may be used and disclosed, and how you can access it.

How We Use Your Information

• Treatment: Used to deliver personalized healthcare services.
• Payment: May be used to obtain payment from insurers or processors.
• Healthcare Operations: Used internally to ensure quality, improve performance, and train providers.
• Technology Vendors: Shared only under HIPAA-compliant Business Associate Agreements (BAAs).

Your Rights Under HIPAA

• Access: Request copies of your PHI in paper or digital form.
• Correction: Ask us to amend incorrect or incomplete information.
• Restrictions: Request limits on what we use or disclose.
• Confidential Contact: Request communications via alternate channels.
• Disclosures: Receive notice if your PHI is compromised.
• Portability: Request secure transfer of records to other providers.
• Copy of This Notice: Available online or by written request.

Data Security and Technology Limitations

We protect your PHI using physical, electronic, and procedural safeguards. All data transmissions are encrypted. Access is role-based and logged. However, we are not liable for third-party technology failures, such as mobile carriers or email delivery platforms, that may impact communication security.

Marketing, Anonymized Data, and Research

We do not sell or share your PHI for marketing. If we ever use de-identified or anonymized data for research, it is handled in compliance with HIPAA §164.514. You may opt out of all marketing communication at any time.

Telehealth & SMS Communication

When you use our telehealth or messaging services, you agree to communicate electronically. We take reasonable precautions, but cannot guarantee against all transmission risk. We do not use SMS or unencrypted email for clinical decisions or lab results.

Legal Scope & Limitations

Arsenal Men’s Health is a provider-led men’s health clinic. We are not a primary care provider and recommend all patients maintain an active relationship with a general healthcare provider. We are not responsible for user-side privacy breaches due to shared devices, weak passwords, or email forwarding.

Record Retention Policy

We retain HIPAA communications, client records, and access logs for a minimum of six (6) years as required by federal law and Utah Code § 26B-4-204. Records may be retained longer for legal or compliance purposes.

Contact for Privacy Concerns

If you have any questions, please contact:

Effective Date

This HIPAA Notice is effective as of March 31, 2025 and may be updated periodically. The latest version will always be available on our website.