Mobile Privacy Policy:

No Mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. You can opt out at any time by replying STOP. Message and data rates may apply.

By opting in, you agree to receive Customer Care , Account notifications, and Marketing messages from Amrita Life. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP. For help, reply HELP

You Can also email us at info@amritalifehealth.com.

——————————————————————————————————————

NOTICE OF PRIVACY PRACTICES and HIPAA FOR AMRITA LIFE

Effective Date: January 6, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

OVERVIEW

This HIPAA Notice of Privacy Practices (the “Notice”) will tell you about the ways Amrita Life and the licensed health care professionals providing professional services through Amrita Life (collectively the “Practice”), may disclose health information about you. This Notice will also describe your rights and certain obligations that we have regarding the use and disclosure of your health information. Amrita Life is a functional medicine practice specializing in hormone replacement therapy that offers services via telehealth and in-person visits in Naples, FL.  We share protected health information as necessary to carry out treatment, payment and health care operations, and for other purposes that are permitted or required by law, as permitted by the Health Insurance Portability and Accountability Act (“HIPAA”). This Notice applies only to health information that is “protected health information” as defined by HIPAA. It does not apply to information that is not covered by HIPAA.

We are required by law to: make sure that health information that identifies you is kept private; give you this notice of our legal duties and privacy practices with respect to your health information; notify you following a breach of your unsecured protected health information; and follow the terms of the notice that are currently in effect. Although this notice is being provided to you electronically, and by signing an acknowledgment of receipt of this notice, you consent to the provision of this notice electronically, you have the right to request a paper copy of this notice. We reserve the right to change our privacy practices and the terms of this Notice at any time and reserve the right to make any updated or new notice provisions effective for all protected health information that we maintain. In addition, updates described in this Notice are effective for all health information maintained by Amrita Life, including any health information collected prior to the effective date hereof. You may obtain a copy of the revised notice on our website. This notice is effective as of January 6, 2026.

HOW YOUR INFORMATION IS USED

We may use and disclose your health information for the purposes of providing services and quality care. For the avoidance of doubt, providing treatment services, collecting payment and conducting healthcare operations are all necessary activities for quality care. State and federal laws allow us to use and disclose your health information for these purposes.

Here are some helpful examples, but this list is not exhaustive:

• Using your information for providing treatment. For example, If your treating provider cannot prescribe medications but wants to refer you to a prescriber in your insurance network, he or she may use your health information for the purpose of referring you to a prescriber who is affiliated with the Practice.
• The Practice or its business associates may use and disclose health information in order to verify your insurance and coverage.
• Helping manage the health care treatment you receive.
• For example, the Practice or its business associates may receive and use information from its providers to arrange additional services for you.
• Example of using and disclosing your health information for collecting payment
• The Practice or its business associates will submit claims for reimbursement to your insurance company in order for them to pay us for the services we provide to you, which requires using your health information.
• Examples of using and disclosing your health information for healthcare operations
• The Practice or its business associates will use and disclose your health information for the review of treatment procedures, and may use it to review documentation to ensure provider compliance and quality care, and may use it internally to analyze our website and technologies through which we provide you services.
• Health Information Exchanges
• Amrita Life may participate in health information exchanges (HIEs) and may electronically access or share your health information for treatment, payment and healthcare operations purposes with other participants in the HIEs. HIEs allow Amrita Life, and your other healthcare providers and organizations involved in your care, to efficiently access, share, and better use information necessary for your treatment and other lawful purposes. If you are a resident of a state that allows you to opt out of Amrita Life requesting or sharing your data with an HIE, and you would like to opt out, contact us at amritalife@protonmail.com with the subject line “HIE Opt-Out.”
• If you are a resident of a state that also requires your authorization for Amrita Life to access your data from HIEs, and you would like to opt in, contact us at amritalife@protonmail.com with the subject line “HIE Opt-In.” You may later opt out of allowing Amrita Life to access or share your data with HIEs at any time. Please note that any information that has already been shared cannot be withdrawn but in some systems may no longer be visible to requesting parties.

For uses and disclosures for purposes other than treatment, payment and operations, we are required to have your written authorization, unless the use or disclosure falls within an exception, such as those described below. Most uses and disclosures of psychotherapy notes (as that term is defined in the HIPAA Privacy Rule), uses and disclosures for marketing purposes, and disclosures that constitute the sale of Personal Information require your authorization. Authorizations can be revoked at any time to stop future uses/disclosures except to the extent that we may have already taken any action in reliance on your authorization.

DISCLOSURES THAT CAN BE MADE WITHOUT AN AUTHORIZATION

• Emergencies. Sufficient information may be shared to address an immediate emergency you are facing.
• Judicial and Administrative Proceedings. We may disclose your personal health information in the course of a judicial or administrative proceeding in response to a valid court order or other lawful process, including if you were to make a claim for Workers Compensation.
• Public Health Activities. If we felt you were an immediate danger to yourself or others, we may disclose health information about you to the authorities, as well as alert any other person who may be in danger.
• Child/Elder Abuse. We may disclose health information about you related to the suspicion of child and/or elder abuse or neglect.
• Criminal Activity or Danger to Others. We may disclose health information if a crime is committed on our premises or against our personnel, or if we believe there is someone who is in immediate danger.
• Health Oversight Activities. We may disclose health information to a health oversight agency for activities authorized by law. These activities might include audits or inspections and are necessary for the government to monitor the health care system and assure compliance with civil rights laws. Regulatory and accrediting organizations may review your case record to ensure compliance with their requirements. The minimum necessary information will be provided in these instances.
• Business Associates. The Practice may disclose the minimum necessary health information to our business associates that perform functions on our behalf or provide us with services if the information is necessary for such functions or services. For example, the Practice contracts with a vendor for filing claims with insurance companies. In the process of filing claims, that organization will come into contact with your information. We also contract with a vendor that collects and manages internet or other electronic network activity on our sites and services and internally encodes it so that we can determine and manage information that might be health information. In addition, we have a vendor that collects and analyzes information about how our users interact with our website to support our health care operations. All of our business associates sign agreements to protect the privacy of your information and are not allowed to use or disclose any information other than as specified in our contract, and are obligated to promptly notify us in the event there is a breach of protected health information (as defined by HIPAA).
• Trusted Exchange Framework and Common Agreement (“TEFCA”). The Practice or its business associates may disclose health information through a TEFCA for HIPAA-authorized treatment purposes, subject to contractual agreements to protect the privacy and security of health information as required by HIPAA, in order to manage or coordinate your health care, arrange for additional services, and/or for our health care operations.
• Research. Under certain circumstances, we may use and disclose health information for research. We may permit researchers to look at non-identifying information to help them plan research projects.
• Marketing. We may send you newsletters or information about services we provide in which we feel you might be interested. You may at any time request that your name be removed from our mailing list.
• Scheduling appointments. We may email or call you to schedule or remind you of appointments.

YOUR INDIVIDUAL RIGHTS

1. Right to Inspect and Copy. You have the right to look at or get copies of your health information, with limited exceptions. Your request must be in writing. If you request a copy of the information, a reasonable charge may be made for the costs incurred.
2. Right to Amend. You have the right to request that we amend your health information. Your request must be in writing, and it must explain why the information should be amended. We have the right to deny your request under certain circumstances.
3. Right to an Accounting of Disclosures. You have the right to receive a list of instances in which we have disclosed your health information for a purpose other than treatment, payment, or health care operations. To request an accounting of disclosures, you must submit your request in writing to the Privacy Officer. Such accountings remain available for six years after the last date of service at the Practice.
4. Right to Request Restrictions. You have the right to request a restriction or limitation on the health information we use or disclose about you. While you are in treatment, a written request should be made with your therapist. To request a restriction after therapy is completed, you must make your written request to the Privacy Officer. Please note that we are not required to agree to your request, except when a restriction is requested regarding a disclosure to a health plan in situations where the patient has paid for services in full and where the purpose of the disclosure is for payment. If we do agree, we will abide by the restriction unless the information is needed in an emergency or we are required to disclose it by law.
5. Right to Request Confidential Communications. You have the right to request that we communicate with you about health matters in a certain way or at a certain location. For example, you may ask that we contact you only by mail or at work. You must make this request in writing and it must specify the alternative means or location that you would like us to use to provide you information about your health care. We will make every attempt to accommodate reasonable requests.
6. Right to File Complaints. You may complain to us and to the Secretary of Health and Human Services if you believe your privacy rights have been violated. You may file a complaint with us by contacting the Privacy Officer at info@amritalifehealth.com or via phone at (239) 966-2478. You will not be retaliated against for filing a complaint. You may also contact the Privacy Officer for further information about this notice.

EMAIL AND TEXT MESSAGES

Some of our patients prefer to communicate with their provider via email or text message. Email and text messages have inherent privacy and security risks, and you should be aware of those before using emails and text messages. Errors in transmission or interception of messages can occur. Your email or text message is not a secure communication between you and your treating provider. At your health care provider’s discretion, your email or text message any and all responses may become part of your medical record. Additionally, for urgent or an emergency situation, you should not rely on email communication with providers affiliated with the Practice. In those situations, you should call 911.

ABOUT AMRITA LIFE

Amrita Life provides professional healthcare services in functional medicine and hormone replacement therapy via telehealth and in-person visits.

Privacy Policy for Amrita Life

Effective Date: January 6, 2026 Last Updated: March 19, 2026

Amrita Life (“we,” “us,” or “our”) operates the website amritalifehealth.com (the “Website”) and provides functional medicine, bioidentical hormone replacement therapy (BHRT), telehealth consultations, nutritional guidance, body composition analysis, lab testing reviews, and related wellness services (collectively, the “Services”). We are committed to protecting your privacy and safeguarding your personal information, including protected health information (“PHI”) as defined under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (“HITECH”).

This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our Website, interact with us via SMS/text messaging, schedule appointments, use our telehealth platform, or otherwise engage with our Services. It applies to all visitors, patients, and users (“you” or “your”).

By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Services.

1. Information We Collect

We collect the following types of information:

Personal Information You Provide Directly:

• Name, date of birth, address, phone number, email address
• Health and medical information (e.g., symptoms, medical history, lab results, hormone levels)
• Payment information (handled securely by third-party processors; we do not store full card details)
• Information provided during telehealth consultations, consultations with Dr. Tania Espinal-Krane, or communications with our team

Information Collected Automatically:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, referral sources)
• Cookies and similar technologies (for site functionality, analytics, and preferences)

SMS/Text Messaging Information:

• Phone number (for opt-in communications such as appointment reminders, lab updates, wellness tips, and occasional promotions)
• Consent records and opt-out requests

Sensitive Health Information (PHI):

• Collected only through secure, HIPAA-compliant channels (e.g., patient portal, telehealth platform, or in-person/telehealth consultations). We do not collect or store PHI via unsecured email or standard SMS.

2. How We Use Your Information

We use your information to:

• Provide and improve our Services (e.g., schedule appointments, conduct telehealth visits, review labs, develop personalized BHRT/nutrition plans)
• Communicate with you (appointment reminders, follow-up care, wellness tips)
• Process payments and billing
• Comply with legal obligations (e.g., HIPAA reporting, FDA requirements for BHRT)
• Send marketing communications (e.g., promotions for free consultations) only with your consent
• Analyze usage to enhance our Website and Services
• Protect against fraud, security threats, or legal claims

For SMS specifically: We use your phone number only for the purposes you consented to (e.g., reminders, updates, tips). Frequency is up to 4 messages per month unless otherwise disclosed.

3. How We Share Your Information

We share your information only as permitted or required by law:

With Your Consent: For marketing or non-treatment purposes. For Treatment, Payment, and Health Care Operations (TPO): With other providers, labs, billing services, or telehealth platforms involved in your care (all HIPAA-compliant). Business Associates: With vendors who assist us (e.g., EMR systems, payment processors, SMS platforms) under HIPAA business associate agreements. Legal Requirements: To comply with subpoenas, court orders, public health reporting, abuse/neglect investigations, or audits by HHS. Business Transfers: In the event of merger, acquisition, or sale of assets.

We do not sell your personal information or PHI. We do not share PHI via SMS (messages are generic; sensitive details are shared via secure portal or phone).

4. SMS/Text Messaging Specifics (TCPA Compliance)

If you opt in to receive SMS messages (via keyword, website form, verbal consent during consultation, or other method), you agree to receive recurring messages including appointment reminders, lab updates, wellness tips, and occasional promotions (up to 4 per month). Message and data rates may apply.

• Opt-In: Consent is required before any marketing messages. We obtain explicit consent (e.g., verbal script during consult: “Do I have your permission to send appointment reminders and updates via text? Msg & data rates may apply. Text HELP for help, STOP to opt out.”).
• Opt-Out: Reply STOP, UNSUBSCRIBE, END, CANCEL, or QUIT to stop receiving messages. You will receive a confirmation: “Amrita Life: You have been unsubscribed and will receive no further messages.”
• Help: Reply HELP for support info.
• We honor all opt-out requests immediately and do not send further messages except as required by law.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including encryption for telehealth, HIPAA-compliant platforms for PHI, and secure storage for non-PHI data. However, no method of transmission over the internet is 100% secure.

6. Your Rights

Under HIPAA (for PHI) and applicable laws (e.g., CCPA for California residents if applicable):

• Access, inspect, and obtain copies of your PHI
• Request amendments to inaccurate PHI
• Request restrictions on certain uses/disclosures
• Receive an accounting of disclosures
• Opt out of certain communications
• File a complaint with us or HHS Office for Civil Rights

For non-PHI personal information: Rights to access, correct, delete, or opt out of certain processing (contact us to exercise).

7. Data Retention

We retain information as long as necessary for the purposes outlined, to comply with legal obligations, resolve disputes, or enforce agreements. PHI is retained per Florida and federal medical record retention laws (typically 7 years after last encounter).

8. Children’s Privacy

Our Services are not directed to children under 13. We do not knowingly collect information from children under 13 without verifiable parental consent, in compliance with COPPA.

9. International Users

Our Services are hosted in the United States. If you access from outside the U.S., your information may be transferred to and processed in the U.S., where privacy laws may differ.

10. Changes to This Policy

We may update this Privacy Policy. Changes will be posted here with an updated “Last Updated” date. Continued use of our Services after changes constitutes acceptance.

11. Contact Us

For questions, requests, or complaints about this Privacy Policy or your information: info@amritalifehealth.com

For HIPAA complaints: Contact our Privacy Officer at the above or file with the U.S. Department of Health and Human Services Office for Civil Rights.

Thank you for trusting Amrita Life with your health and privacy. We are committed to protecting it.