Privacy Policy

Notice of Privacy Practices (HIPAA)

Effective date: September 18, 2026. This Notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. It applies to Arbour Longevity (Endurance Practice Management LLC, doing business as Arbour Longevity, and its affiliated clinical practice), 2217 Packard St #15, Ann Arbor, MI 48104.

Our legal duties. We are required by the Health Insurance Portability and Accountability Act (HIPAA), 45 CFR Parts 160 and 164, and applicable Michigan law, including the Michigan Medical Records Access Act (MCL 333.26261 et seq.) and the Michigan Identity Theft Protection Act (MCL 445.61 et seq.), to keep your protected health information (PHI) private, to give you this Notice of our legal duties and privacy practices, to follow the terms of the Notice currently in effect, and to notify you if a breach of your unsecured PHI occurs.

How we may use and disclose your PHI without your written authorization. Treatment: to provide, coordinate and manage your care, including sharing information with pharmacies (for example, when a prescription is sent to a compounding or retail pharmacy), laboratories and other clinicians involved in your care. Payment: to bill and collect payment for services, including processing card, HSA/FSA or financing transactions. Health care operations: for quality review, training, credentialing, compliance and business planning. Appointment reminders and care communications: we may contact you by phone, text or email about appointments, results and treatment options; you may ask us to use a specific method. As required or permitted by law: for public health activities, reporting of abuse or neglect, health oversight, judicial and administrative proceedings, law enforcement, to avert a serious threat to health or safety, and as otherwise required by law. Business associates: vendors that perform services for us (electronic health records, telehealth video, scheduling, payment and messaging platforms) are bound by written agreements to protect your PHI.

Uses and disclosures that require your written authorization. We will not use or disclose your PHI for marketing, sell your PHI, or share psychotherapy notes without your written authorization, except as permitted by law. Any other use or disclosure not described in this Notice requires your written authorization. You may revoke an authorization in writing at any time; the revocation will not apply to actions we have already taken in reliance on it.

Your rights. You have the right to: (1) inspect and obtain a copy of your medical and billing records, in paper or electronic form, generally within 30 days of a written request (a reasonable, cost-based fee may apply as permitted by Michigan law); (2) request an amendment of your records if you believe they are incorrect or incomplete; (3) receive an accounting of disclosures we have made of your PHI for purposes other than treatment, payment or health care operations for the six years before your request; (4) request restrictions on how we use or disclose your PHI, including the right to restrict disclosure to a health plan for services you have paid for in full out of pocket, which we must honor; (5) request confidential communications by a specific method or at a specific location; (6) obtain a paper copy of this Notice on request, even if you agreed to receive it electronically; and (7) choose someone to act for you, such as a medical power of attorney or legal guardian. To exercise any of these rights, contact our Privacy Officer using the details below.

Breach notification. If a breach of your unsecured PHI occurs, we will notify you in writing without unreasonable delay and no later than 60 days after discovery, as required by 45 CFR 164.400-414 and Michigan law.

Telehealth. Video visits are conducted on a HIPAA-compliant platform under a business associate agreement. Social media, SMS and standard email are not secure channels; please do not send PHI through them.

Complaints. If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, DC 20201, 1-800-368-1019, www.hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.

Changes to this Notice. We reserve the right to change this Notice and to make the revised Notice effective for PHI we already hold. The current Notice is posted on this page and available at the clinic.

Privacy Officer. Gandhi Bhattarai, FNP, PMHNP, Anti-Aging & Regenerative Medicine, Privacy Officer, Arbour Longevity, 2217 Packard St #15, Ann Arbor, MI 48104. Phone: (734) 436-3357. Email: privacy@arbourlongevity.com.