HIPAA Notice of Privacy Practices

Our commitment

Havok Fitness LLC handles Protected Health Information (PHI) — including prescriptions, intake answers, and physician communications — in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act.

Permitted uses & disclosures

We use PHI to (a) verify and fulfill your order with licensed providers and verified vendors, (b) provide customer support and refill reminders, (c) bill for services, and (d) comply with legal obligations. We will not use or disclose your PHI for marketing without your written authorization.

Safeguards

PHI is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is role-based, audit-logged, and restricted to staff with a need to know. Workforce members receive annual HIPAA training. We maintain Business Associate Agreements with our infrastructure and vendor partners.

Verification calls — no VoIP

To protect your PHI, prescription verification calls are placed only to real, personal mobile or landline numbers. VoIP / virtual numbers are not accepted because they cannot be reliably verified or secured.

Your rights

You have the right to: inspect and copy your PHI, request amendments, request an accounting of disclosures, request restrictions on use, request confidential communications, and file a complaint without retaliation. Contact support@havokfitness.com or call +1 (786) 607-4760, or the U.S. Department of Health & Human Services Office for Civil Rights.

Breach notification

In the unlikely event of a breach of unsecured PHI, we will notify affected individuals without unreasonable delay, in accordance with HIPAA breach-notification rules.