HIPAA Notice
Last updated: December 19, 2025
This notice describes how certain health information may be used and disclosed and how you can access it.
Note: Whether HIPAA applies depends on the healthcare provider(s) involved in your care and how information is handled. You may receive a separate Notice of Privacy Practices from your treating provider or medical group. If there is a conflict, the provider's notice will control for that provider's HIPAA-regulated activities.
Protected Health Information (PHI)
"Protected Health Information" (PHI) is individually identifiable health information that is created, received, maintained, or transmitted by a HIPAA covered entity or its business associate in connection with healthcare services.
How PHI May Be Used and Disclosed
When HIPAA applies, PHI may be used and disclosed in certain ways, including:
- Treatment: to provide, coordinate, or manage your care (for example, sharing with other providers involved in treatment).
- Payment: to obtain payment for healthcare services where applicable.
- Healthcare operations: for quality assessment, audits, training, and business management.
- Business associates: to vendors that perform services for a covered entity and agree to protect PHI.
- As required by law: to comply with legal obligations, court orders, and lawful requests.
- Public health and safety: for certain public health activities, to report adverse events, or to prevent a serious threat to health or safety.
Other uses and disclosures may require your written authorization.
Your HIPAA Rights (When Applicable)
When HIPAA applies, you may have the right to:
- Get a copy of your medical record (access).
- Ask to correct your medical record (amendment).
- Request an accounting of certain disclosures of your PHI.
- Request restrictions on certain uses and disclosures (in limited circumstances).
- Request confidential communications (for example, communications to a different address).
- Receive a paper copy of a provider's Notice of Privacy Practices.
To exercise HIPAA rights for care you received, follow the instructions provided by your treating provider or medical group. For questions about how Viril handles information through the platform, see our Privacy Policy.
Our Responsibilities
When HIPAA applies to a covered entity, it is required by law to maintain the privacy and security of PHI, provide notice of legal duties and privacy practices, and notify affected individuals following a breach of unsecured PHI.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with your treating provider or medical group and/or with the U.S. Department of Health and Human Services Office for Civil Rights. You will not be retaliated against for filing a complaint.
Contact
For general questions about this notice or the platform, contact us at support@viril.com.