Privacy Policy

Kyvitra Health PLLC
Effective Date: June 22, 2026
Kyvitra Health PLLC ("Kyvitra Health," "we," "our," or "us") values your privacy. We are committed to protecting your personal information and maintaining the confidentiality of your health information in accordance with applicable federal and state laws, including the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), the Health Information Technology for Economic and Clinical Health Act ("HITECH"), and applicable Texas privacy laws.
Please read this Privacy Policy carefully before using our website or telemedicine services.

Who We Are

Kyvitra Health PLLC is a Texas-based telemedicine medical practice that provides virtual healthcare services, including but not limited to:
  • Primary Care
  • Lifestyle Medicine
  • Precision Medicine
  • Pharmacogenomic (PGx) Testing
  • Genetic Testing
  • Hormone Health
  • Weight Management
  • Preventive Medicine
  • Medical Consultations
  • Care Coordination
Information We Collect

We may collect several categories of information.

Personal Information

When you use our website or become a patient, we may collect:

  • Full name

  • Date of birth

  • Mailing address

  • Phone number

  • Email address

  • Emergency contact

  • Government-issued identification (when required)

  • Insurance information (if applicable)

  • Payment information

  • Preferred pharmacy

  • Preferred laboratory

Protected Health Information (PHI)

During the course of your care, we may collect health information, including:

  • Medical history

  • Current medications

  • Allergies

  • Symptoms

  • Diagnoses

  • Laboratory results

  • Imaging reports

  • Family history

  • Genetic testing information

  • Pharmacogenomic testing results

  • Treatment plans

  • Clinical notes

  • Audio or video communications during telemedicine visits

Protected Health Information is safeguarded under HIPAA.

Website Information

When you visit our website, we may automatically collect:

  • IP address

  • Browser type

  • Device information

  • Operating system

  • Date and time of access

  • Website usage statistics

  • Cookies and analytics information

This information helps us improve our website and user experience.

How We Use Your Information

We use your information to:

  • Provide medical care

  • Coordinate healthcare services

  • Schedule appointments

  • Conduct telemedicine visits

  • Process laboratory orders

  • Interpret genetic and pharmacogenomic testing

  • Communicate with you regarding your healthcare

  • Process payments

  • Improve patient care

  • Improve website functionality

  • Respond to inquiries

  • Comply with legal obligations

  • Detect fraud or misuse

HIPAA Compliance

Kyvitra Health complies with all applicable HIPAA Privacy and Security Rules.

We maintain administrative, physical, and technical safeguards to protect your Protected Health Information.

These safeguards include:

  • Encrypted communications

  • Secure electronic medical records

  • Role-based access controls

  • Multi-factor authentication where appropriate

  • HIPAA-compliant telemedicine platforms

  • Secure cloud storage

  • Routine security monitoring

  • Staff HIPAA training

  • Business Associate Agreements with vendors that handle PHI

Telemedicine Privacy

Telemedicine appointments occur using secure, encrypted technology.

Although we use commercially reasonable safeguards to protect your information, no method of electronic transmission can be guaranteed to be completely secure.

Patients are encouraged to:

  • Attend visits in a private location.

  • Use a secure internet connection.

  • Protect their own login credentials.

  • Avoid public Wi-Fi whenever possible.

Genetic Information

Kyvitra Health recognizes the sensitive nature of genetic information.

Genetic information collected through our services is:

  • Used only for healthcare purposes

  • Stored securely

  • Shared only as permitted by law or with your authorization

  • Protected under HIPAA and, where applicable, the Genetic Information Nondiscrimination Act (GINA)

We do not sell genetic information.

Laboratory Services

Kyvitra Health may coordinate laboratory testing with independent CLIA-certified laboratories.

Laboratories receive only the information necessary to perform testing and report results.

Laboratories maintain their own privacy practices.

Payment Information

Payments may be processed by secure third-party payment processors.

Kyvitra Health does not store complete credit card numbers on its servers.

Payment processors maintain their own privacy and security standards.

Cookies

Our website may use cookies to:

  • Improve website functionality

  • Remember preferences

  • Analyze website traffic

  • Enhance user experience

You may disable cookies through your browser settings; however, some features of the website may not function properly.

Analytics

We may use website analytics tools to understand:

  • Website traffic

  • Visitor behavior

  • Popular pages

  • Website performance

Analytics data is generally collected in aggregate and is not intended to identify individual users.

Communications

We may communicate with you through:

  • Email

  • Telephone

  • SMS/text messaging

  • Patient Portal

  • Secure messaging

These communications may include:

  • Appointment reminders

  • Prescription information

  • Laboratory notifications

  • Educational materials

  • Billing information

  • Follow-up instructions

Standard messaging and data rates may apply.

Marketing Communications

We may occasionally send newsletters or educational information.

You may unsubscribe from non-medical marketing emails at any time.

Healthcare-related communications that are necessary for your care may still be sent.

How We Share Information

We may disclose information to:

  • Your treating healthcare providers

  • Laboratories

  • Pharmacies

  • Hospitals

  • Imaging centers

  • Health information exchanges (where applicable)

  • Business Associates

  • Government agencies when required by law

  • Public health authorities

  • Law enforcement when legally required

We do not sell your personal information or Protected Health Information.

Business Associates

Certain vendors assist us with operations, including:

  • Electronic medical record systems

  • Telemedicine software

  • Secure cloud hosting

  • Billing services

  • Technology support

Each vendor that accesses Protected Health Information is required to sign a HIPAA Business Associate Agreement when applicable.

Children's Privacy

Kyvitra Health does not knowingly collect personal information from children without appropriate parental or legal guardian consent.

Parents or legal guardians must authorize treatment of minors as required by applicable law.

Data Retention

Medical records are retained in accordance with:

  • HIPAA

  • Texas Medical Board requirements

  • Applicable federal and state record retention laws

Records are securely destroyed when retention periods expire, unless longer retention is required by law.

Data Security

We implement reasonable and appropriate safeguards including:

  • Encryption

  • Firewalls

  • Secure servers

  • Password protection

  • Access controls

  • Routine software updates

  • Security monitoring

  • Employee confidentiality agreements

  • HIPAA workforce training

Despite these measures, no system can guarantee absolute security.

Your HIPAA Rights

Patients have the right to:

  • Access their medical records

  • Request copies of records

  • Request corrections to medical information

  • Request restrictions on certain disclosures

  • Request confidential communications

  • Receive an accounting of disclosures, as required by law

  • Obtain a copy of our Notice of Privacy Practices

  • File a privacy complaint without fear of retaliation

Requests should be submitted in writing.

Third-Party Websites

Our website may contain links to third-party websites.

Kyvitra Health is not responsible for the privacy practices or content of external websites.

Users should review each website's privacy policy independently.

Do Not Track Signals

Some browsers support "Do Not Track" requests.

Because there is no universally accepted standard, our website may not respond to these signals.

International Users

Kyvitra Health provides services primarily within the United States.

Individuals accessing our website from outside the United States understand that information may be processed within the United States.

Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Any changes will be posted on this page with a revised Effective Date.

Continued use of our website after updates constitutes acceptance of the revised Privacy Policy.

Contact Us

If you have questions regarding this Privacy Policy or our privacy practices, please contact:

Kyvitra Health PLLC
Privacy Officer
Houston, Texas, United States
Email: contact@kyvitrahealth.com
Phone: (832) 937-7483

Notice of Privacy Practices

This Privacy Policy explains how information collected through our website and services is handled. It is separate from our HIPAA Notice of Privacy Practices (NPP), which describes how Protected Health Information may be used and disclosed for treatment, payment, healthcare operations, and other purposes permitted by law. Patients will receive or have access to our Notice of Privacy Practices before or at the time services are provided.

Disclaimer: This Privacy Policy is intended for informational purposes and should be reviewed by legal counsel familiar with HIPAA, Texas telemedicine regulations, and any applicable consumer privacy laws before publication.