Legal
HIPAA Notice of Privacy Practices
Last updated: July 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU MAY ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This Notice of Privacy Practices describes how Melbi Wellness, including Melbi Health and Wellness LLC, doing business as Melbi Wellness, as applicable, may use and disclose your protected health information, also known as "PHI," to carry out treatment, payment, healthcare operations, and other purposes permitted or required by law. For purposes of this Notice, "Melbi Wellness," "Melbi," "we," "our," and "us" refer to Melbi Wellness and its affiliates, as applicable. "You" and "your" refer to the individual receiving, requesting, or using Melbi Wellness services.
Melbi Wellness provides access to wellness-related services, educational information, technology tools, customer support, care coordination, and, where applicable, access to independent licensed healthcare providers, medical groups, pharmacies, laboratories, technology platforms, payment processors, shipping and fulfillment providers, and other service providers. Melbi Wellness does not itself practice medicine, prescribe medication, dispense medication, or make clinical treatment decisions unless expressly stated otherwise. Any medical care, clinical evaluation, diagnosis, prescription decision, treatment recommendation, pharmacy service, or laboratory service is provided by the applicable licensed healthcare provider, medical group, pharmacy, laboratory, or other licensed professional or entity, as applicable.
This Notice applies to PHI that Melbi Wellness creates, receives, maintains, or transmits when we are acting as a HIPAA covered entity, business associate, subcontractor business associate, or otherwise in a role where HIPAA applies. Where an independent healthcare provider, medical group, pharmacy, laboratory, or other HIPAA-covered entity provides services to you, that entity may provide its own Notice of Privacy Practices. This Notice does not replace any Notice of Privacy Practices provided by your healthcare provider, medical group, pharmacy, or other covered entity.
We are required by law, where applicable, to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, notify you following a breach of unsecured PHI, and abide by the terms of the Notice currently in effect.
How we may use and disclose your PHI
We may use and disclose your PHI for the following purposes:
A. Treatment
We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This may include sharing information with independent healthcare providers, medical groups, pharmacies, laboratories, care coordinators, technology platforms, or other professionals or entities involved in your care. Examples may include using your intake form, health questionnaire, symptoms, medical history, medication history, prescription request, lab results, allergies, shipping information, or provider communications to help facilitate provider review, treatment decisions, pharmacy fulfillment, refill review, follow-up communications, or related care coordination.
B. Payment
We may use and disclose your PHI to obtain payment for healthcare-related services, products, prescription fulfillment, pharmacy services, technology services, or other services provided or coordinated through Melbi Wellness. Examples may include processing payments, confirming transaction details, issuing refunds, resolving billing questions, managing chargebacks, collecting amounts owed, or sharing information with payment processors, providers, pharmacies, or other service providers involved in payment or billing. Melbi Wellness is generally a cash-pay wellness platform and may not bill insurance unless expressly stated otherwise. If insurance, health plans, or reimbursement services are involved in the future, PHI may be used or disclosed for eligibility verification, billing, claims, payment, or related purposes.
C. Healthcare operations
We may use and disclose your PHI for healthcare operations and related business activities. These may include quality assessment, care coordination, customer support, case management, provider support, pharmacy coordination, compliance activities, legal services, auditing, training, credentialing support, technology administration, security, fraud prevention, service improvement, and other operational activities permitted by law.
D. Pharmacy fulfillment and prescription coordination
We may use and disclose your PHI to coordinate prescription requests, prescription review, pharmacy processing, compounding, dispensing, shipping, refill review, medication questions, pharmacy support, and related fulfillment services. This may include sharing PHI with pharmacies, providers, fulfillment vendors, shipping providers, technology platforms, or other parties reasonably necessary to process, dispense, ship, or support your requested products or services.
E. Communications with you
We may use and disclose your PHI to communicate with you regarding your account, intake forms, treatment requests, provider review, prescription status, pharmacy fulfillment, order status, shipping, billing, refill reminders, care coordination, customer support, service updates, safety information, and other matters related to the Services. We may communicate with you by email, phone, text message, patient portal, online chat, or other communication method, depending on the services you use and the contact information you provide.
F. As required by law
We may use and disclose your PHI when required to do so by federal, state, or local law.
G. Public health and safety
We may use and disclose your PHI for public health and safety purposes where permitted or required by law. This may include reporting adverse events, product issues, medication reactions, communicable diseases, abuse, neglect, domestic violence, threats to health or safety, or other public health matters.
H. Health oversight activities
We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, licensure, disciplinary actions, compliance reviews, or regulatory oversight.
I. Judicial and administrative proceedings
We may disclose your PHI in response to a court order, administrative order, subpoena, discovery request, or other lawful process, when permitted or required by law.
J. Law enforcement
We may disclose your PHI for law enforcement purposes where permitted or required by law, such as to comply with a court order, warrant, subpoena, summons, or other legal process.
K. Serious threats to health or safety
We may use or disclose your PHI when necessary to prevent or reduce a serious and imminent threat to your health or safety or the health or safety of another person or the public, as permitted by law.
L. Research
We may use or disclose your PHI for research purposes only when permitted by law and where required privacy protections are in place, such as review by an institutional review board, privacy board, authorization, waiver of authorization, or use of de-identified or limited data, as applicable.
M. Workers' compensation
We may disclose your PHI as authorized by and to the extent necessary to comply with workers' compensation or similar laws.
N. Military, veterans, national security, and specialized government functions
If applicable, we may disclose your PHI for military, veterans, national security, protective services, or other specialized government functions as permitted or required by law.
O. Correctional institutions
If you are an inmate or are in the custody of a law enforcement official, we may disclose your PHI to the correctional institution or law enforcement official where permitted or required by law.
P. Organ and tissue donation
If applicable, we may disclose PHI to organizations involved in organ procurement, tissue donation, transplantation, or donation services as permitted by law.
Uses and disclosures that may require your written authorization
We will obtain your written authorization before using or disclosing your PHI for purposes that require authorization under HIPAA or other applicable law. These may include, where applicable:
- Most uses and disclosures of psychotherapy notes;
- Uses or disclosures of PHI for certain marketing purposes;
- Disclosures that constitute a sale of PHI;
- Other uses and disclosures not described in this Notice or otherwise permitted by law.
If you provide written authorization, you may revoke it in writing at any time, except to the extent we have already relied on the authorization.
Marketing and advertising
Melbi Wellness does not knowingly use PHI, medical intake responses, prescription requests, provider communications, lab results, patient portal messages, or pharmacy fulfillment communications for targeted advertising, retargeting, lookalike audience creation, or cross-context behavioral advertising. We do not knowingly disclose PHI to advertising platforms for targeted advertising.
Melbi Wellness may use limited website analytics, cookies, pixels, tags, or similar technologies on general informational pages of our website to understand website performance, improve services, measure marketing effectiveness, and prevent fraud. We do not intend for advertising pixels or similar tracking technologies to collect or transmit PHI, patient portal communications, medical intake responses, prescription information, lab results, provider messages, or pharmacy fulfillment communications. If we learn that a tracking technology, analytics tool, advertising platform, or service provider has collected or received PHI in a manner inconsistent with this Notice or applicable law, we will take reasonable steps to investigate, mitigate, and address the issue as required by law.
Your rights regarding PHI
You have the following rights with respect to your PHI, subject to applicable legal limitations.
A. Right to inspect and receive a copy
You have the right to inspect and receive a copy of certain PHI that we maintain about you in a designated record set, subject to certain exceptions. To request access, contact us at info@melbiwellness.com. We may charge a reasonable, cost-based fee for copying, mailing, or other supplies associated with your request, where permitted by law.
B. Right to request an amendment
You have the right to request that we amend PHI if you believe it is incorrect or incomplete. To request an amendment, contact us at info@melbiwellness.com and explain the information you believe is incorrect or incomplete and why. We may deny your request in certain circumstances, including if we determine the information is accurate and complete, was not created by us, is not part of the records we maintain, or is not available for inspection under applicable law.
C. Right to an accounting of disclosures
You have the right to request an accounting of certain disclosures of your PHI made during the six years before your request, subject to exceptions. The accounting generally does not include disclosures made for treatment, payment, or healthcare operations; disclosures made to you; disclosures made pursuant to an authorization; disclosures made for certain legal or administrative purposes; or other disclosures excluded by law. To request an accounting, contact us at info@melbiwellness.com.
D. Right to request restrictions
You have the right to request a restriction on certain uses or disclosures of your PHI for treatment, payment, or healthcare operations. We are not required to agree to every requested restriction, but we will consider reasonable requests as required by law. If you pay out-of-pocket in full for a healthcare item or service and request that PHI about that item or service not be disclosed to a health plan for payment or healthcare operations purposes, we will comply with the request where required by law, unless disclosure is otherwise required by law. To request a restriction, contact us at info@melbiwellness.com.
E. Right to request confidential communications
You have the right to request that we communicate with you about your PHI in a certain way or at a certain location. For example, you may request that we contact you only by email, only through the patient portal, or at a specific phone number. To request confidential communications, contact us at info@melbiwellness.com. We will accommodate reasonable requests where required by law.
F. Right to a paper copy of this Notice
You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically. To request a paper copy, contact us at info@melbiwellness.com.
G. Right to be notified of a breach
You have the right to be notified if we discover a breach of unsecured PHI involving your information, as required by law.
H. Right to file a complaint
You have the right to file a complaint if you believe your privacy rights have been violated. You may file a complaint with Melbi Wellness by contacting us at info@melbiwellness.com. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.
Transmission and security of PHI
We are committed to protecting the privacy and security of PHI. Where we transmit PHI electronically, we use reasonable safeguards designed to protect PHI, which may include secure portals, encryption, access controls, authentication, SSL or equivalent technology, secure vendors, and other administrative, technical, and physical safeguards. However, no method of electronic transmission, email, text message, mobile network, or electronic storage is completely secure. We cannot guarantee absolute security.
Where available, sensitive health-related information may be provided through a secure portal, secure messaging tool, encrypted method, or other secure process. If you specifically request that we send sensitive information by unencrypted email or text message, you acknowledge that unencrypted communications may not be secure and may be accessible to others. We may decline to send certain sensitive information through unencrypted channels where we believe doing so would create an unreasonable privacy or security risk or would not comply with applicable law.
State-specific privacy protections
Certain states may provide additional privacy protections for medical information, PHI, reproductive health information, mental health records, HIV/AIDS-related information, substance use disorder treatment records, genetic information, biometric information, or other sensitive health-related information. Where applicable, we will comply with federal and state privacy laws that apply to the information and services at issue.
A. Florida residents
For Florida residents, we comply with applicable Florida privacy and healthcare confidentiality laws, including protections that may apply to certain mental health records, HIV/AIDS-related information, substance use disorder information, and other sensitive health-related information. We will obtain written authorization or consent before disclosing certain sensitive information where required by law.
B. California residents
For California residents, additional rights and protections may apply under the California Confidentiality of Medical Information Act, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and other applicable California privacy laws. California residents may have the right to access certain information, request correction or deletion of certain information, request restrictions on certain disclosures, opt out of certain sale or sharing activities, limit certain uses of sensitive personal information, and exercise other rights as required by law. We do not knowingly sell PHI for monetary consideration. We do not knowingly use or disclose PHI for marketing purposes without authorization where authorization is required by law.
C. New York residents
For New York residents, additional protections may apply to certain HIV-related information, mental health records, genetic testing information, and other sensitive health-related information. We will obtain consent or authorization for disclosures where required by law.
D. Texas residents
For Texas residents, additional privacy protections may apply under the Texas Medical Records Privacy Act and other applicable Texas privacy laws. We will comply with applicable Texas requirements for electronic PHI, disclosure limitations, consent, and destruction of protected information where required by law.
E. Illinois residents
For Illinois residents, additional protections may apply to certain mental health records, HIV/AIDS-related information, genetic testing information, biometric information, and other sensitive health-related information. We will obtain written consent or authorization where required by law and comply with applicable breach notification requirements.
F. Massachusetts residents
For Massachusetts residents, additional protections may apply to certain mental health records, HIV/AIDS-related information, genetic testing information, and other sensitive health-related information. We will comply with applicable Massachusetts privacy and security requirements where required by law.
G. Other state rights
If you reside in a state with additional privacy protections, you may have additional rights related to your PHI or health-related information. You may contact us at info@melbiwellness.com for more information about your rights.
Changes to this Notice
We reserve the right to change this Notice at any time. The revised Notice will apply to PHI we already have about you, as well as PHI we receive in the future. When we update this Notice, we will revise the effective date above and make the current Notice available on our website. If we make a material change to our privacy practices, we will update this Notice as required by law.
Contact information
To exercise your rights, file a complaint, request a copy of this Notice, or ask questions about this Notice or our privacy practices, please contact:
Melbi Wellness
Website: https://melbiwellness.com
Patient Portal: https://my.melbiwellness.com
Privacy Email: info@melbiwellness.com