Notice of Privacy Practices 

Table of Contents

Effective Date: 01/21/2025

Last Updated: 03/03/2026

Medical Director: Allison Lane, MD 

Entity: PURE IV LANE MEDICAL, PLLC

Our Commitment to Your Privacy 

Pure IV understands that your health information is personal and private. We are committed to protecting the privacy and security of your protected health information (PHI) in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and all applicable state privacy laws. 

Protected health information includes any individually identifiable information about your health, the healthcare services you receive, and payment for those services. This includes your name, address, date of birth, phone number, email address, medical history, treatment records, health intake forms, vital signs, Nurse Practitioner assessment notes, and any other information collected in connection with your care. 

This Notice of Privacy Practices explains how Pure IV may use and disclose your PHI, your rights regarding your PHI, and our legal obligations to protect it. This Notice applies to all services provided by Pure IV, including in-person treatments by our licensed providers and telehealth assessments conducted by our Nurse Practitioners via live televisit. 

We are required by law to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices, and to follow the terms of this Notice currently in effect. We reserve the right to change the terms of this Notice at any time. Any changes will apply to all PHI we maintain. If we make material changes to this Notice, we will post the revised Notice on our website at pureiv.com/privacy-practices and make the updated Notice available to you upon request. 

How We May Use and Disclose Your Protected Health Information 

Pure IV may use and disclose your PHI for the following purposes without your written authorization: 

For Treatment 

We may use and disclose your PHI to provide, coordinate, and manage your healthcare and related services. This includes sharing your health intake information with the Nurse Practitioner conducting your live televisit assessment, communicating treatment orders and clinical notes between the NP and your bedside provider, documenting your vital signs, treatment details, and any adverse events, and sharing relevant information with other healthcare providers if you are referred for additional care. For example, your health intake responses are reviewed in real time by the NP during your live phone assessment so that the NP can approve a treatment plan specific to your health profile. 

For Payment 

We may use and disclose your PHI as necessary to obtain payment for services provided. This may include processing credit card or other payment transactions, providing billing statements, and communicating with your payment processor. Pure IV is a self-pay wellness service and does not bill insurance. However, if payment processing requires disclosure of limited information to a third-party payment processor, that processor operates under a Business Associate Agreement with Pure IV. 

For Healthcare Operations 

We may use and disclose your PHI for operational activities necessary to run our business and ensure quality care. These activities include quality assessment and improvement activities, reviewing clinical performance of our providers and NPs, conducting internal audits and compliance reviews, training and credentialing of staff, business planning, management, and general administration, and resolving patient complaints or inquiries. 

As Required by Law 

We may use or disclose your PHI when required to do so by federal, state, or local law. 

Public Health Activities 

We may disclose your PHI for public health activities as permitted by law, including reporting to a public health authority to prevent or control disease, injury, or disability, and reporting adverse events or product defects related to medical treatments. 

Health Oversight Activities 

We may disclose your PHI to a health oversight agency for activities authorized by law, including audits, investigations, inspections, and licensure actions. 

Judicial and Administrative Proceedings 

We may disclose your PHI in response to an order of a court or administrative tribunal. We may also disclose your PHI in response to a subpoena, discovery request, or other lawful process, subject to the requirements of applicable law. 

Law Enforcement 

We may disclose your PHI for certain law enforcement purposes, including in response to a court order, warrant, subpoena, or summons, or to identify or locate a suspect, fugitive, material witness, or missing person. 

To Avert a Serious Threat to Health or Safety 

We may use or disclose your PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law and ethical standards. 

Coroners, Medical Examiners, and Funeral Directors

We may disclose your PHI to a coroner, medical examiner, or funeral director as necessary for them to carry out their duties as authorized by law. 

Workers' Compensation 

We may disclose your PHI as necessary to comply with workers' compensation or similar laws. 

Specialized Government Functions 

We may disclose your PHI for specialized government functions, including military and veteran activities, national security and intelligence activities, and protective services for the President of the United States. 

Uses and Disclosures That Require Your Written Authorization 

Except as described in this Notice, we will not use or disclose your PHI without your written authorization. If you provide us with a written authorization to use or disclose your PHI, you may revoke that authorization at any time by submitting a written revocation to our Privacy Officer. Your revocation will not affect any uses or disclosures made in reliance on your authorization before we received your revocation. 



The following uses and disclosures of your PHI require your written authorization: most uses and disclosures of psychotherapy notes (if applicable), uses and disclosures of your PHI for marketing purposes, disclosures of your PHI that constitute a sale of PHI, and any other uses and disclosures not described in this Notice.

Your Rights Regarding Your Protected Health Information

You have the following rights with respect to your PHI. To exercise any of these rights, submit a written request to our Privacy Officer using the contact information at the end of this Notice. 

Right to Access Your PHI 

You have the right to inspect and obtain a copy of your PHI that is maintained in our records, including your health intake forms, NP assessment notes, treatment records, vital signs, and billing records. We will provide your records in the format you request if they are readily producible in that format. If we maintain your records electronically, you have the right to receive an electronic copy. We may charge a reasonable, cost-based fee for the labor of copying, postage (if mailed), or preparation of a summary if you request one. We will respond to your request within 30 days. In certain limited circumstances, we may deny your request, but we will explain the reason for the denial in writing and inform you of your right to have the denial reviewed. 

Right to Request an Amendment 

You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. We may deny your request in certain circumstances, such as if we did not create the information, if the information is not part of the records we maintain, or if we determine the information is accurate and complete. If we deny your request, we will provide a written explanation of the denial and inform you of your right to submit a written statement of disagreement. 

Right to an Accounting of Disclosures 

You have the right to request an accounting of certain disclosures of your PHI that we have made. This accounting does not include disclosures made for treatment, payment, or healthcare operations, disclosures made to you or authorized by you, or certain other disclosures permitted by law. We will provide the first accounting in any 12-month period free of charge. We may charge a reasonable fee for additional requests within the same period. 

Right to Request Restrictions 

You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree to your request except in one circumstance: if you pay for a service in full out of pocket and request that we not disclose information about that service to a health plan for the purpose of payment or healthcare operations, we must honor that restriction. Since Pure IV is a self-pay service and does not bill insurance, this provision is generally satisfied by our standard operations. 

Right to Request Confidential Communications 

You have the right to request that we communicate with you about your health information in a specific way or at a specific location. For example, you may request that we contact you only at a certain phone number or only by email. We will accommodate reasonable requests. You do not need to explain the reason for your request. 

Right to Receive a Paper Copy of This Notice 

You have the right to receive a paper copy of this Notice of Privacy Practices at any time, even if you have previously received a copy or agreed to receive this Notice electronically. To obtain a paper copy, contact our Privacy Officer using the information at the end of this Notice. 

Right to Be Notified of a Breach 

You have the right to be notified if a breach of your unsecured PHI occurs. In the event of a breach, we will notify you as required by law, including a description of the breach, the types of information involved, steps you should take to protect yourself, what we are doing to investigate and mitigate the breach, and contact information for you to ask questions or learn more. 

How We Protect Your Information 

Pure IV implements administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of your PHI, in accordance with the HIPAA Security Rule (45 CFR Part 164, Subpart C). 

Administrative Safeguards 

Pure IV maintains written privacy and security policies and procedures. We designate a Privacy Officer responsible for the development and implementation of our privacy practices. All Pure IV team members, including providers, NPs, and administrative staff, receive training on HIPAA privacy and security requirements. We conduct regular risk assessments to identify potential vulnerabilities and implement corrective action plans. We maintain Business Associate Agreements (BAAs) with all third-party vendors and service providers who have access to your PHI, including our telehealth platform, electronic health records system, payment processor, and communication tools. 

Physical Safeguards 

Because Pure IV is a mobile service, our physical safeguards are tailored to the mobile healthcare environment. Providers secure all devices containing PHI during transport and treatment. Patient records are not left unattended in vehicles or at treatment locations. Physical documents containing PHI, if any, are stored securely and disposed of properly through shredding or secure destruction. 

Technical Safeguards 

Pure IV uses encryption for electronic PHI (ePHI) both in transit and at rest. Access to systems containing ePHI is restricted to authorized personnel through unique user identification and authentication controls. We maintain audit logs to track access to ePHI and detect unauthorized activity. Our telehealth platform used for NP televisits is HIPAA-compliant and operates under a Business Associate Agreement. Electronic communications containing PHI are conducted through secure, encrypted channels. 

Privacy Protections for Telehealth Services 

Pure IV conducts a live Nurse Practitioner televisit with every patient before every treatment. These televisits involve the collection, transmission, and use of your protected health information. The following privacy protections apply specifically to your telehealth interactions with Pure IV. 

The telehealth platform used for NP televisits is HIPAA-compliant and operates under a Business Associate Agreement with Pure IV. Your health information transmitted during the televisit is encrypted in transit. Only the authorized NP conducting your assessment and the licensed provider present at your bedside have access to the information discussed during the televisit. NP assessment notes are documented and stored securely as part of your treatment record. Pure IV does not record audio or video of your NP televisit without your explicit consent. 

Please be aware that the privacy of your telehealth session depends in part on your environment. If you are in a public location or other people are present during your televisit, information discussed during the call may be overheard. You are encouraged to find a private location for your NP assessment when possible, though we understand that mobile service locations (homes, hotels, offices) vary in privacy. 

Business Associates 

Pure IV works with third-party service providers (business associates) who may need access to your PHI in order to perform services on our behalf. We require each business associate to enter into a Business Associate Agreement (BAA) that obligates them to protect your PHI in accordance with HIPAA and to notify us of any security incidents or breaches. 

Categories of business associates who may have access to your PHI include our electronic health records and patient management platform, our telehealth platform used for NP televisits, our payment processing provider, our appointment scheduling platform, our communication tools (secure messaging, email, or text for appointment reminders), our cloud storage or data hosting provider, and any external consultants or auditors engaged for quality improvement or compliance purposes. 

Pure IV does not sell your PHI to any third party. We do not disclose your PHI to third parties for marketing purposes without your written authorization.

Breach Notification

In the event that a breach of your unsecured PHI occurs, Pure IV will notify you without unreasonable delay and in no case later than 60 days following the discovery of the breach, as required by the HIPAA Breach Notification Rule (45 CFR Part 164, Subpart D) and the HITECH Act. 

The notification will include a description of what happened, including the date of the breach and the date of discovery. It will describe the types of PHI involved, such as your name, date of birth, health information, or other identifiers. The notification will describe what steps you should take to protect yourself from potential harm. It will explain what Pure IV is doing to investigate the breach, mitigate its effects, and prevent future occurrences. It will provide contact information for you to ask questions or obtain additional information. 

If the breach affects 500 or more individuals, Pure IV will also notify the U.S. Department of Health and Human Services and, where required, prominent media outlets, as required by law.

Website and Digital Privacy Practices

Pure IV's website at pureiv.com may use cookies, analytics tools, and other tracking technologies. We are committed to ensuring that these technologies do not collect or transmit your protected health information in violation of HIPAA. 

Pure IV does not use tracking pixels, cookies, or analytics tools on authenticated patient portal pages or any page where PHI could be associated with a user's browsing activity. If any analytics tools are used on our public-facing website, they are configured to avoid collecting individually identifiable health information. 

If you submit a health intake form, booking request, or other health-related information through our website, that data is transmitted using encrypted (HTTPS/TLS) connections and is stored in HIPAA-compliant systems. 

Privacy of Minors 

Pure IV provides services to patients of all ages, including minors under the age of 18. For minor patients, the parent or legal guardian who provides informed consent for treatment is generally the personal representative with the authority to exercise the minor's HIPAA rights, including the right to access, amend, and request restrictions on the minor's PHI. 

State laws may grant certain minors the ability to consent to their own healthcare in specific circumstances. In such cases, state law may limit the parent's or guardian's access to the minor's PHI. Pure IV will follow applicable state law when it provides greater privacy protections for minors than HIPAA. 

State-Specific Privacy Protections 

HIPAA establishes a federal floor for the protection of health information, but many states in which Pure IV operates have additional health privacy laws that may provide greater protections. Where state law is more protective of your privacy than HIPAA, Pure IV will follow the more protective standard. 

State-specific privacy laws that may apply to your care include, but are not limited to, state consumer data privacy laws, state health information privacy statutes, state telehealth and telemedicine privacy requirements, and state laws governing the privacy of specific categories of health information. Pure IV monitors regulatory changes across all states in which it operates and updates its privacy practices as needed to maintain compliance. 

Changes to This Notice 

Pure IV reserves the right to change this Notice of Privacy Practices at any time. Any changes will be effective for all PHI that we maintain at the time of the change, as well as any PHI we create or receive after the change takes effect. If we make a material change to this Notice, we will post the revised Notice on our website at pureiv.com/privacy-practices, make the revised Notice available at your next appointment or upon request, and include the effective date of the revision prominently on the Notice. 

We will not retroactively apply any changes that reduce your privacy rights to PHI collected under a prior version of this Notice without your written authorization.

Complaints 

If you believe your privacy rights have been violated, you have the right to file a complaint with Pure IV or with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). 

To file a complaint with Pure IV, contact our Privacy Officer using the information below. To file a complaint with OCR, you may visit the OCR website at www.hhs.gov/ocr/privacy/hipaa/complaints, call OCR at 1-800-368-1019 (TDD: 1-800-537-7697), or write to the Office for Civil Rights, U.S. Department of Health and Human Services, 200 Independence Avenue SW, Room 509F, HHH Building, Washington, DC 20201. 

You will not be retaliated against in any way for filing a complaint. 

Privacy Officer Contact Information 

If you have questions about this Notice, wish to exercise any of your rights described in this Notice, or wish to file a complaint, please contact: 

Pure IV Privacy Officer 

Joseph Lopez

19390 W PALO VERDE DR

Email: info@pureiv.com

Phone: (833) 688-1299

Medical Director: Allison Lane, MD 

Acknowledgment of Receipt 

Pure IV is required to make a good-faith effort to obtain a written acknowledgment from each patient that they have received this Notice of Privacy Practices. You will be asked to sign an Acknowledgment of Receipt form at your first appointment. If you decline to sign the acknowledgment, we will document that the Notice was offered and that you declined to sign, and we will still provide your treatment. 

For patients who book online or receive their first NP televisit electronically, the Notice will be provided via email or through a link on our website, and electronic acknowledgment of receipt will be requested through our booking or intake process.