HIPAA

Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: June 1, 2026  ·  Last Updated: June 1, 2026

Who We Are

The Hydro Drip Bar — Gluta Hub is a healthcare provider operating IV hydration therapy and wellness clinics in California. As a covered entity under HIPAA, we are required by law to maintain the privacy of your Protected Health Information (PHI) and to provide you with this Notice of our legal duties and privacy practices.

Medical Director: Dr. Guillermo Castillo, MD, Board Certified in Family Medicine

Privacy Contact: info@thehydrodripbar.com | (951) 319-2382

What Is Protected Health Information (PHI)?

PHI includes any information that identifies you and relates to your past, present, or future physical or mental health condition, provision of healthcare to you, or payment for healthcare services. This includes your treatment records, health intake forms, clinical notes, and any communications about your care.

How We Use Your PHI

We use your PHI for the following primary purposes without requiring additional authorization:

Treatment

We use your PHI to provide, coordinate, and manage your IV therapy and wellness treatments. Our nursing staff and Medical Director may review your health history to determine appropriate treatment formulations and monitor your care.

Payment

We may use your PHI to process payment for services, including submitting claims to any applicable health savings account (HSA/FSA) programs. We do not bill traditional health insurance for our elective wellness services.

Healthcare Operations

We may use your PHI for quality assurance, staff training, administrative operations, and compliance purposes to ensure the consistent delivery of safe, high-quality care.

Permitted Disclosures Without Your Authorization

In addition to treatment, payment, and operations, we may disclose your PHI without your written authorization in the following circumstances:

  • As Required by Law: Disclosures mandated by federal, state, or local law
  • Public Health Activities: Reporting communicable diseases, adverse drug reactions, or vital statistics to authorized public health authorities
  • Health Oversight Activities: Audits, investigations, or licensing proceedings by government health agencies
  • Judicial or Administrative Proceedings: In response to a court order or subpoena
  • Law Enforcement: For limited law enforcement purposes as permitted by HIPAA
  • Serious Threats to Health or Safety: To prevent or lessen a serious and imminent threat to a person or the public
  • Workers' Compensation: To comply with workers' compensation laws

Uses Requiring Your Written Authorization

For any uses or disclosures not described in this Notice, we will obtain your written authorization before using or disclosing your PHI. This includes:

  • Most uses of PHI for marketing purposes
  • Sale of PHI
  • Disclosure of psychotherapy notes
  • Any other use not permitted by law without consent

You have the right to revoke an authorization at any time in writing, except to the extent that we have already acted in reliance on it.

Your Rights Regarding Your PHI

Right to Access

Request a copy of your health records and treatment documentation. We will provide access within 30 days.

Right to Amend

Request corrections to your PHI if you believe it is inaccurate or incomplete.

Right to an Accounting

Request a list of disclosures we have made of your PHI for purposes other than treatment, payment, or operations.

Right to Restrict

Request restrictions on how we use or disclose your PHI for treatment, payment, or operations. We are not required to agree, but will consider all reasonable requests.

Right to Confidential Communications

Request that we communicate with you about your PHI in a specific manner or at a specific location.

Right to a Paper Copy

Request a paper copy of this Notice of Privacy Practices at any time, even if you received it electronically.

To exercise any of these rights, please contact our Privacy Officer at info@thehydrodripbar.com.

Our Safeguards

We maintain the following safeguards to protect your PHI:

  • Administrative: Staff HIPAA training, access controls, and privacy policies and procedures
  • Physical: Secure storage of paper records, restricted access to clinical areas, and secure document destruction
  • Technical: Encrypted data transmission, secure electronic record systems, password protections, and access logging

Breach Notification

In the event of a breach of unsecured PHI, we will notify you as required by the HIPAA Breach Notification Rule, generally within 60 days of discovering the breach. Notification will include a description of the breach, the types of information involved, steps you can take to protect yourself, and what we are doing to investigate and mitigate the breach.

Filing a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights. You will not be penalized or retaliated against for filing a complaint.

Contact Our Privacy Officer

We reserve the right to change this Notice and to make the revised or changed Notice effective for medical information we already have about you as well as any information we receive in the future. We will post the new Notice on our website and have paper copies available at our clinics.

Related Legal Documents

Privacy Policy Terms & Conditions Medical Disclaimer Informed Consent Accessibility