Privacy Policy
Effective Date: October 14, 2026
Nuvelo Wellness (“Nuvelo,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information, including protected health information, when you visit nuvelowellness.com, complete our online health assessment, or receive telehealth services from us.
“Protected health information” or “PHI” means individually identifiable health information that is protected by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”).
Where We Serve
Nuvelo Wellness services are currently available only to patients located in South Carolina. If you are located outside South Carolina, we are not able to provide services to you at this time.
Information We Collect
Depending on how you interact with us, we may collect:
- Contact and identity information: such as your name, email address, phone number, date of birth, and mailing or shipping address.
- Health information: such as your answers to our health assessment and intake questions, medical history, symptoms, medications, lab results, treatment plans, provider notes, and prescriptions.
- Communications and scheduling information: such as messages you send us and appointment details.
- Payment information: the information needed to process payment for services, where applicable.
- Technical information: such as your IP address, device and browser type, pages viewed, referring website, the date and time of your visit, and information collected through cookies and similar technologies (see “Cookies, Analytics, and Advertising Pixels” below).
How We Use Your Information
We use your information to:
- Provide telehealth services, including evaluating whether our services are appropriate for you;
- Coordinate laboratory testing and the prescribing, preparation, and delivery of any medication prescribed to you;
- Communicate with you about your care, appointments, and account;
- Process payments and manage billing;
- Operate, maintain, and secure our website and services, and review the quality of our care;
- Understand how our website is used and measure our advertising (see the cookies section below); and
- Comply with legal and regulatory obligations.
How We Share Your Information
We share information only as described in this policy or as permitted or required by law:
- Healthcare providers and care team: licensed providers involved in your care.
- Pharmacy: when a provider prescribes medication, we send the prescription and the information needed to fill and ship it to a licensed pharmacy. Our current fulfillment pharmacy is Rush Pharmacy, 1977 Alafaya Trail, Suite 1121, Oviedo, Florida 32765.
- Laboratories: to order and receive your lab tests.
- Service providers: vendors that help us run our business, such as those that host our website and forms, provide scheduling and communications tools, or process payments. Where a vendor creates, receives, maintains, or transmits PHI on our behalf, we require the vendor to protect it as HIPAA requires.
- Legal and public-interest purposes: when required or permitted by law, such as in response to a court order, to comply with a legal obligation, or for public health activities.
- With your authorization: for any other purpose, only with your written authorization, which you may revoke at any time in writing (except to the extent we have already acted on it).
We do not sell your protected health information, and we do not use or disclose it for marketing purposes without your written authorization, as HIPAA requires.
HIPAA and Our Notice of Privacy Practices
Our health care services are subject to HIPAA. HIPAA permits us to use and disclose PHI for treatment, payment, and health care operations without your written authorization, and for certain other purposes described above. Our Notice of Privacy Practices describes in more detail how medical information about you may be used and disclosed and how you can get access to it. You may request a copy of our Notice of Privacy Practices at any time using the contact information at the end of this policy.
How We Comply With Privacy and Health Information Laws
We are committed to handling your information in line with HIPAA and the other privacy laws that apply to our operations. In practice, this means:
- HIPAA Rules. We handle PHI in accordance with the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule.
- Minimum necessary. Except for treatment purposes, we aim to use, request, and disclose only the minimum amount of PHI needed for the task.
- Safeguards. We use administrative, technical, and physical safeguards intended to protect the confidentiality, integrity, and availability of PHI, including encrypted transmission of information submitted through our website (see “Data Security”).
- Vendor agreements. Where a vendor handles PHI for us, we require a written agreement obligating the vendor to safeguard that information as HIPAA requires.
- Workforce expectations. People who work with PHI on our behalf are expected to follow our privacy and security policies.
- Patient rights. We honor the individual rights HIPAA gives you, described in “Your Privacy Rights” below.
- Breach notification. If a breach of unsecured PHI occurs, we will notify affected individuals, the U.S. Department of Health and Human Services, and others as required by law, within the timeframes the law requires.
- Service area. We provide services only to patients located in South Carolina.
- Other laws. We also follow other federal and state privacy, health information, and consumer protection laws that apply to our operations.
Data Security and SSL/HTTPS Encryption
Our website, including the pages where you submit information, is delivered over HTTPS using SSL/TLS encryption, which helps protect information while it travels between your browser and our servers. Our online health assessment is provided through a third-party form platform that is also accessed over HTTPS.
No method of transmitting or storing information is completely secure, and we cannot guarantee absolute security. To help protect yourself, please share sensitive health details only through our secure forms or by phone, and avoid sending them by regular email or text message.
Your Privacy Rights
Under HIPAA, you have the right to:
- Access — inspect and obtain a copy of your PHI that we maintain in your designated record set, including an electronic copy where readily producible;
- Amendment — ask us to amend PHI you believe is incorrect or incomplete (we may deny the request in certain circumstances and will explain why in writing);
- Restrictions — ask us to restrict certain uses and disclosures of your PHI. We are not required to agree to every request, but we will honor a request not to disclose PHI to your health plan for a service you have paid for in full out of pocket, as HIPAA requires;
- Accounting of disclosures — request a list of certain disclosures of your PHI that we have made;
- Confidential communications — ask that we contact you in a particular way or at a particular location, and we will accommodate reasonable requests;
- Notice — receive a copy of our Notice of Privacy Practices; and
- Complaints — file a complaint with us, or with the U.S. Department of Health and Human Services Office for Civil Rights, if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.
To exercise any of these rights, contact us using the information below. We may need to verify your identity before acting on a request.
Cookies, Analytics, and Advertising Pixels
We use cookies and similar technologies on our website. Specifically, we currently use:
- Google Analytics, a web analytics service provided by Google, to understand how visitors use our website, such as which pages are viewed, how long visitors stay, and the type of device and browser used. Google Analytics may collect your IP address and set cookies.
- Meta Pixel, an advertising and measurement tool provided by Meta Platforms, Inc., to measure the effectiveness of our advertising on Facebook and Instagram and to show our ads to people who may be interested in our services. Meta Pixel may collect information about your visit, such as the pages you view and actions you take, along with browser and device information, and may send it to Meta.
These providers may place cookies in your browser and receive information directly from your browser. Their use of that information is governed by their own privacy policies. You can limit or block these tools by adjusting your browser’s cookie settings, using the Google Analytics opt-out browser add-on, and managing your ad preferences in your Facebook or Instagram account settings. Blocking cookies may affect how some parts of our website work.
Children’s Privacy
Our services are intended for adults. We do not knowingly collect personal information from anyone under 18.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will post the updated policy on this page and revise the effective date above.
Contact Us About Privacy
If you have questions about this policy, want to exercise your privacy rights, wish to request our Notice of Privacy Practices, or want to report a privacy concern, contact us:
- Email: info@nuvelowellness.com
- Phone: (888) 774-7168