Privacy Policy

1. Introduction

MGB Adventure LLC, doing business as Enlive Nashville: Mobile Hydration (“Company,” “we,” “our,” or “us”), is committed to protecting the privacy and confidentiality of our clients’ personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard information in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), applicable Tennessee healthcare regulations, and, where applicable, the California Consumer Privacy Act (CCPA/CPRA).

2. Information We Collect

- Personal Information: Name, address, phone number, email, date of birth, gender.
- Protected Health Information (PHI): Medical history, allergies, medications, vital signs, treatment notes, referrals, laboratory results, telehealth consultation notes, and prescriptions.
- Payment Information: Credit/debit card or HSA account details processed through Hydreight (third-party HIPAA-compliant system).
- Website and Digital Information: Appointment requests, contact forms, cookies, analytics, and tracking tools.
- Marketing Information: Testimonials, reviews, and communication preferences (with written consent).

3. Methods of Collection

- Our website (appointment requests, contact forms).
- The Hydreight app or digital platform (patient registration, records, billing).
- Telehealth consultations conducted via Hydreight.
- Direct communications by phone, email, or SMS.

4. Use of Information

- Provide medical treatment and document services.
- Schedule, administer, and manage appointments.
- Process billing, payments, and insurance/HSA claims.
- Deliver telehealth consultations and prescriptions.
- Comply with HIPAA and state record requirements.
- Communicate with clients for reminders and follow-ups.
- Send promotional emails/SMS (subject to opt-out rights).
- Improve website functionality and internal reporting.

5. Data Storage and Protection

- All records stored in Hydreight’s HIPAA-compliant cloud system.
- Data encrypted in transit and at rest.
- Access restricted to owners, admin staff, and physician with role-based permissions.
- Records retained per HIPAA and Tennessee state law.
- Hydreight provides secure data backup and recovery.

6. Legal Compliance

- We comply with HIPAA Privacy, Security, and Breach Notification Rules.
- We maintain Business Associate Agreements (BAAs) with Hydreight and vendors handling PHI.
- We comply with Tennessee healthcare privacy regulations.
- California residents have rights under CCPA/CPRA.
- We notify patients promptly in the event of a data breach.

7. Patient Rights

- Access: Request copies of records.
- Amendment: Request corrections.
- Deletion: Request deletion of personal/marketing information (subject to HIPAA requirements).
- Marketing Opt-Out: Opt out of promotional communications.
- Complaints: Contact support@enlivenashville.com or HHS.

8. Third-Party Services

- Hydreight: Patient management and payment.
- Twilio: SMS for reminders and marketing.
- Testimonials/photos used only with written consent, without identifying details.
- We do not sell or rent client data.

9. Policy Updates

We reserve the right to update this Privacy Policy at any time. Updates will be posted on enlivenashville.com and sent via email. Effective and Last Updated dates will be displayed at the top of the policy.

10. Contact Information

Enlive Nashville: Mobile Hydration
Attn: Privacy Officer
535 Shady Dell Trail
Smyrna, TN 37167
Email: support@enlivenashville.com