Privacy Policy

Privacy Policy

Last Updated: June 16, 2026

Introduction

Invigorate Asheville (“we,” “our,” or “us”) is committed to protecting your privacy and safeguarding the personal and health information you provide. This Privacy Policy explains how we collect, use, disclose, and protect information obtained through our website, services, communications, and patient interactions.

By using our website, you agree to the practices described in this Privacy Policy.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

  • Name
  • Email address
  • Telephone number
  • Mailing address
  • Date of birth
  • Appointment requests
  • Information submitted through contact forms
  • Information submitted during patient intake

Health Information

If you become a patient or communicate health-related information through our website, forms, scheduling tools, or communications, we may collect information related to your medical history, symptoms, treatments, medications, and other health information necessary to provide healthcare services.

Automatically Collected Information

When you visit our website, we may automatically collect:

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • Referring websites
  • Usage statistics
  • Cookies and similar technologies

How We Use Information

HOW WE MAY USE AND DISCLOSE INFORMATION ABOUT YOU

We may use and disclose personal and identifiable health information about you in different ways. All of the ways in which we may use and disclose information without your prior permission will fall within one of the following listed categories, although not every possible use or disclosure falling within a category will be listed. We are required to obtain your written authorization for any other uses and disclosures of your health information not listed below. If you provide us with such permission, you may revoke that permission, in writing, at any time. If you revoke your permission, we will no longer use or disclose personal information about you for the reasons covered by your written authorization; however, we will be unable to take back any disclosures already made based upon your original permission.

1. Treatment. We will use health information about you to furnish healthcare services and supplies to you, in accordance with our policies and procedures. We may also communicate with other healthcare providers to coordinate or manage your healthcare. For example, we will use your medical history, such as any presence or absence of heart disease, to assess your health and perform requested services. As another example, we may use your health information to restock vitamin prescriptions provided at the time of treatment.

2. Treatment Alternatives. We may use and disclose your personal health information in order to tell you about or recommend possible treatment options, alternatives or health-related services that may be of interest to you.

3. Individuals Involved in Your Care or Payment for Your Care/Disaster Relief. We may disclose health information about you (i) to a relative, close personal friend, or any other person you identify as part of your “circle of care,” if the information is directly relevant to their involvement in your care; or (ii) to the above individuals or a disaster relief organization (such as the Red Cross), if we need to notify someone about your location or condition. You may object to any of these disclosures, and if you object, we will not disclose the information except in certain circumstances such as an emergency.

4. Waiting Rooms – We may use a sign-in sheet at the registration desk where you will be asked to sign your name. We may also call you by name in the waiting room when we are ready to begin your treatment.

5. Payment. We will use and disclose health information about you to bill for our services and to collect payment from you or your insurance company. For example, we may need to give payer information about your current medical condition so that we may receive payment for the examinations or other services that we have furnished you.

6. Health Care Operations. We will use and disclose your health information to conduct the business activities of our organization. These activities include, but are not limited to, quality assessment and improvement activities, review of the performance and qualifications of employees, evaluating practitioner and provider performance, conducting training programs, accreditation, certification, licensing or credentialing activities.

7. Appointment Reminders. We may use and disclose medical information to contact you as a reminder that you have an appointment or that you should schedule an appointment.

8. Business Associates. We sometimes work with outside individuals and businesses that help us operate our business successfully. We may disclose your health information to these business associates so that they can perform the tasks that we hire them to do. Our business associates must provide us with certain written assurances that they will respect the confidentiality of your personal and identifiable health information. 

9. Required by Law. We may disclose health information about you when we are required to do so by federal, state, or local law, subject to the limitations of such law and the physician-patient privilege, as applicable.

10. Public Health. We may disclose protected health information (PHI) about you in connection with certain public health reporting activities. For instance, we may disclose such information to a public health authority authorized to collect or receive PHI for the purpose of preventing or controlling disease, injury or disability, or, at the direction of a public health authority, to an official of a foreign government agency that is acting in collaboration with a public health authority. Public health authorities include state health departments, the Center for Disease Control, the Food and Drug Administration, the Occupational Safety and Health Administration and the Environmental Protection Agency, to name a few. We are also permitted to disclose protected health information to a public health authority or other government authority authorized by law to receive reports of child abuse or neglect.

Additionally we may disclose protected health information to a person subject to the Food and Drug Administration’s power for the following activities: to report adverse events, product defects or problems, or biological product deviations, to track products, to enable product recalls, repairs or replacements, or to conduct post marketing surveillance.

11. Abuse Neglect or Domestic Violence. We may disclose your protected health information in situations of domestic abuse or neglect or abuse of persons other than children.

12. Healthcare Oversight. We may disclose protected health information in connection with certain health oversight activities of licensing and other agencies. Health oversight activities include audit, investigation, inspection, licensure or disciplinary actions, and civil, criminal, or administrative proceedings or actions or any other activity necessary for the oversight of 1) the health care system, 2) governmental benefit programs for which health information is relevant to determining beneficiary eligibility, 3) entities subject to governmental regulatory programs for which health information is necessary for determining compliance with program standards, or 4) entities subject to civil rights laws for which health information is necessary for determining compliance.

13. Law Enforcement. We may disclose certain information in response to a warrant, subpoena, or other order of a court or administrative hearing body, and in connection with certain government investigations and law enforcement activities.


14. Decedents Information. We may release personal health information to a coroner or medical examiner to identify a deceased person or determine the cause of death, or to funeral directors. We also may release personal health information to organ procurement
organizations, transplant centers, and eye or tissue banks.

15. Workers Compensation. We may release certain personal health information to workers’ compensation or similar programs.

16. Serious Threats to Health or Safety. Information about you also will be disclosed when
necessary to prevent a serious threat to your health and safety or the health and safety of others.

17. Research. We may use or disclose certain personal health information about your condition and treatment for research purposes where an Institutional Review Board or a similar body referred to as a Privacy Board determines that your privacy interests will be adequately protected in the study. We may also use and disclose your protected health information to prepare or analyze a research protocol and for other research purposes.

18. Armed Forces and other Government Functions. If you are a member of the Armed Forces, we may release personal health information about you as required by military command authorities. We also may release personal health information about foreign military personnel to the appropriate foreign military authority. We may also disclose protected health information for national security and intelligence activities and for the provision of protective services to the President of the United States and other officials or foreign heads of state.

19. Judicial or Administrative Proceedings. We may disclose your protected health information
for legal or administrative proceedings that involve you. We may release such information upon order of a court or administrative tribunal. We may also release protected health information in the absence of such an order and in response to a subpoena, discovery request or other lawful request, if certain steps have been taken to notify you or secure a protective order.

20. Inmates. If you are an inmate, we may under certain circumstances disclose protected health information about you to a correctional institution where you are incarcerated or to certain
law enforcement officials.

OTHER USES AND DISCLOSURES OF YOUR HEALTH INFORMATION

Under any circumstances other than those listed above, we will ask for your written authorization before we use or disclose PHI about you. Any use or disclosure of psychotherapy notes, uses and disclosures of PHI for marketing purposes and disclosures that constitute the sale of PHI require your written authorization. If you sign a written authorization allowing us to disclose PHI about you in a specific situation, you can later cancel your authorization in writing by contacting us at the address below. If you cancel your authorization in writing, we will not disclose PHI about you after we receive your cancellation, except for disclosures which were being processed before we received your
cancellation.

Protected Health Information (PHI)

To the extent we collect or maintain Protected Health Information (PHI), we handle such information in accordance with applicable federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA), where applicable.

Health information provided for treatment, payment, and healthcare operations may be used and disclosed as permitted by law.

Patients may receive additional privacy disclosures through our Notice of Privacy Practices.

Disclosure of Information

We do not sell personal information.

We may share information with:

  • Healthcare providers involved in your care
  • Laboratories and testing facilities
  • Payment processors
  • Electronic health record providers
  • Scheduling and patient communication platforms
  • Website hosting providers
  • Analytics providers
  • Service providers acting on our behalf
  • Government agencies or regulators when required by law

Patient-facing 3rd party platforms used:

  • Scheduling: MindBody
  • Charting: Waiver King
  • EHR: Practice Fusion
  • Payment processing: Bank of America
  • Email: Mailchimp

All disclosures are limited to purposes permitted by applicable law.

Cookies and Tracking Technologies

Our website may use cookies, pixels, analytics tools, and similar technologies to improve website functionality and understand website usage.

These technologies may collect information about your interactions with our website.

You may modify your browser settings to manage cookies; however, some website functionality may be affected.

Information submitted through appointment requests, contact forms, or other website features may not be subject to the same protections as information maintained within our designated medical record systems until it is received and incorporated into our patient records.

Patients seeking treatment will receive additional privacy disclosures through our separate HIPAA Notice of Privacy Practices, which governs the use and disclosure of Protected Health Information maintained as part of healthcare services.

Analytics and Advertising

We may use third-party services such as Google Analytics and other website performance tools to better understand visitor behavior and improve our website.

These providers may collect information as described in their respective privacy policies.

We do not use website information to make treatment decisions.

Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information and health information from unauthorized access, use, alteration, or disclosure.

However, no method of transmission or storage can be guaranteed to be completely secure.

Patient Communications

If you communicate with us by email, web form, telephone, text message, or other electronic means, you acknowledge that such communications may involve inherent privacy and security risks.

Please avoid transmitting highly sensitive information through unsecured channels.

Email Communications

If you choose to subscribe to our newsletter, promotions, educational content, or other email communications, we may collect and store your name and email address using a third-party email marketing provider, including Mailchimp.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the email or by contacting us directly.

We do not use email marketing platforms to store Protected Health Information except as permitted by applicable law and our service provider agreements.

INDIVIDUAL RIGHTS

You have the following rights with respect to your health information. To exercise any of your rights,
please contact us at:
Invigorate Asheville, P.A.
Attn: Privacy Officer
1378 Hendersonville Road, Suite E1
Asheville, North Carolina 28803
828-237-1511

1. You have the right to ask for restrictions on the ways in which we use and disclose your medical information beyond those imposed by law. We will consider your request, but we are not required to agree to it. However, we do have to agree if you request that we not disclose your PHI to your health plan for health services or items for which you paid out-of-pocket in full. You may request a restriction by sending your request in writing to our Privacy Officer.

2. You have the right to request that you receive communications containing your protected health information from us by alternative means or at alternative locations. For example, you may ask that we only contact you at home or by mail. We will try to accommodate reasonable requests. We may also condition this accommodation by asking you for information as to how payment will be handled or specification of an alternative address or other method of contact. We will not request an explanation from you as to the basis for the request. Please make this request in writing by contacting our Privacy Officer.

3. Except under certain circumstances, you have the right to access, inspect and copy medical and billing records about you. A reasonable cost-based fee will be charged for expenses such as staff time, copying, and mailing. Contact us as indicated at the end of this Notice to obtain information about our fees or if you have any questions about accessing your health information. All requests must be sent in writing to the Privacy Officer.

4. If you believe that certain information in your records is incorrect or incomplete, you have the
right to ask us to correct or supplement the records. Under certain circumstances, we may
deny your request.

5. You have a right to ask for a list of certain instances when we have used or disclosed your medical information. If you ask for this information from us more than once every twelve months, we will charge you a reasonable cost-based fee for each request.
6. You have the right to a copy of this Notice in paper form, even if you have agreed to accept this notice electronically. You may ask us for a copy at any time. You may also obtain a copy of this form at our web site: invigorateasheville.com
7. You have the right to be notified in the event that we discover a breach of unsecured PHI involving your medical information.

COMMENTS/COMPLAINTS

If you have any questions, concerns or want to obtain more information concerning this Notice of Privacy Practices, you may contact our Privacy Officer at the address and telephone number listed above.

If you are concerned that we may have violated your privacy rights or you disagree with a decision we have made regarding your access to your health information or any other request you have made in the exercise of your rights, you may complain to our Privacy Officer at the address and telephone number above, or you may complain in writing to the federal government at the following address:
Region IV, Office for Civil Rights, U.S. Department of Health And Human Services, Atlanta Federal
Center, Suite 3B70, 61 Forsyth Street, SW, Atlanta, Georgia 30303-8909. We support your right to
the privacy in your health information and we will not retaliate against you in any way for filing a
complaint.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of third-party websites.

Children’s Privacy

Our website is not directed toward children under the age of 13. We do not knowingly collect personal information from children through the website without appropriate authorization.

Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated effective date.

Notice of Privacy Practices

Patients may request a copy of our Notice of Privacy Practices, which describes how medical information may be used and disclosed and explains patient rights regarding health information.

HIPAA Compliance Statement

Invigorate Asheville is committed to protecting the privacy and security of patient health information in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable federal and state privacy laws.

We maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of Protected Health Information (PHI).

Protected Health Information may be collected, used, and disclosed only as permitted by applicable law and for purposes including treatment, payment, healthcare operations, and other legally authorized activities.

We limit access to Protected Health Information to authorized workforce members and service providers who require access to perform their job responsibilities or support healthcare operations.

Invigorate Asheville maintains policies and procedures designed to:

  • Protect the privacy and security of patient information
  • Restrict unauthorized access to Protected Health Information
  • Train workforce members regarding privacy and security obligations
  • Investigate potential privacy or security incidents
  • Respond to and report breaches as required by law
  • Maintain appropriate safeguards for electronic Protected Health Information

Patients’ rights regarding Protected Health Information, including rights of access, amendment, accounting of disclosures, and confidential communications, are described in our Notice of Privacy Practices.

Questions regarding our HIPAA compliance practices may be directed to:

Invigorate Asheville

1378 Hendersonville Road, Suite E1
Asheville, NC 28803

Phone: 828-237-1511

Email: wellness@invigorateasheville.com  wellness@invigorateasheville.com