Last updated: July 4, 2026
Nuvitru Wellness LLC ("Nuvitru," "we," "us") is committed to protecting your health information. This notice explains what consumer health data we collect, how we use and share it, and the rights you have — regardless of which state you live in.
13.1 What "Consumer Health Data" Means
Consumer health data is personal information linked to you that identifies your past, present, or future physical or mental health status. At Nuvitru this includes: intake and health-history information; symptoms, conditions, medications, and supplements you report; functional lab test orders and results; body composition and biometric measurements (e.g., InBody scans); session notes and care plans; supplement protocols; wellness-therapy screening and usage records; appointment and purchase history that reveals health information; and messages you exchange with your care team.
13.2 How We Collect It
We collect consumer health data directly from you (forms, sessions, portal messages, and communications), from devices and measurements used during in-clinic services, and from third parties you authorize — laboratories that process your tests, your other providers when you direct records to us, and the platforms we use to run our practice (client portal/EHR, booking, payment).
13.3 How We Use It
We use consumer health data only to: provide and personalize your care, programs, and protocols; order and interpret lab testing you purchase; recommend and fulfill supplement protocols; screen you for the safety of in-clinic therapies; schedule appointments, process payments, and administer your account; communicate with you about your care; maintain clinical records as required by professional standards and law; ensure safety, security, and legal compliance; and improve our services using de-identified or aggregated data that can no longer reasonably identify you.
We do not use your consumer health data for targeted advertising, and we never sell it. We will not collect, use, or share consumer health data for purposes beyond those above without first obtaining your consent, where required by your state's law.
13.4 Who We Share It With
We share consumer health data only with:
- Your Nuvitru care team — the practitioners collaborating on your care.
- Service providers (processors) bound by contract to use your data only on our instructions — our EHR/client portal (Healthie), scheduling, payment, communications, and IT vendors.
- Laboratories and dispensaries — to fulfill the testing and supplement orders you place.
- Your other providers — when you ask us to send records.
- Legal and safety recipients — when required by law (e.g., subpoena, court order, mandatory reporting) or to prevent serious harm.
- A successor entity in a business transfer, bound by these commitments.
We do not share consumer health data with third parties for their own marketing. We do not provide health data to advertising platforms.
13.5 Your Rights Over Health Data
Wherever you live, you may: access the consumer health data we hold about you and receive a copy; request a list of third parties with whom we have shared it; correct inaccurate data; delete your data (subject to clinical record-retention laws — we will tell you if a retention requirement limits deletion and delete what we lawfully can); withdraw consent to collection or sharing going forward; and appeal any denial. Exercise these rights through the Privacy Requests page. We will never discriminate against you or reduce your care because you exercised a privacy right.
13.6 Consent
Where your state requires opt-in consent to collect or share consumer health data (e.g., Washington, Nevada), we obtain it at intake before collection, and separately for any sharing beyond what is necessary to provide the services you requested. Consent to sell consumer health data would require a separate, signed authorization — we do not sell consumer health data and will not ask for such an authorization.
13.7 Security and Retention
We protect health data with encryption in transit, role-based access limited to those who need it for your care, vendor security review, and staff confidentiality obligations. Clinical records are retained per professional record-keeping requirements (generally at least 5–7 years after last treatment in Texas; longer for minors) and then securely destroyed or de-identified.
13.8 Breach Notification
If a security incident affects your unsecured health information, we will notify you and regulators as required by applicable law, including the FTC's Health Breach Notification Rule and state breach-notification statutes.
13.9 Complaints and Contact
Questions, concerns, or complaints about our health-data practices: hello@nuvitru.com · (512) 501-2611 · Nuvitru Wellness LLC, Attn: Privacy, 3313 Ranch Road 620 S, Suite 200, Austin, TX 78738. You may also contact your state Attorney General.
13.10 Changes
We will post updates here with a new effective date and, where required by law, obtain fresh consent before materially expanding how we use or share consumer health data.