NoVa Spine & Wellness › Legal
Legal & Compliance Notices

Privacy Policy &
HIPAA Notice of Privacy Practices

NoVa Spine & Wellness · Dr. Nick Weber, DC
10617 Jones Street, Suite 101A, Fairfax, VA 22030
Effective: January 1, 2025
🏥 HIPAA

Notice of Privacy Practices

Covered Entity
NoVa Spine & Wellness
Responsible Provider
Dr. Nick Weber, DC
Effective Date
January 1, 2025
Last Revised
January 1, 2025
This Notice Describes Your Rights
This notice describes how medical information about you may be used and disclosed, and how you can get access to this information.
We are required by law to maintain the privacy of your protected health information (PHI) and to provide you with notice of our legal duties and privacy practices with respect to your protected health information. We are required to abide by the terms of this Notice of Privacy Practices currently in effect. We reserve the right to change the terms of this Notice and to make the new provisions effective for all protected health information we maintain. If we revise this Notice, we will make the updated Notice available in our office and on our website.
10617 Jones Street, Suite 101A, Fairfax, VA 22030

Your protected health information (PHI) includes information that identifies you and relates to your past, present, or future physical health condition, health care services provided to you, or payment for those services. This includes your name, address, date of birth, Social Security number, diagnosis codes, treatment records, and billing information.

📋 Uses & Disclosures

How We Use and Disclose Your Health Information

The following describes the ways we may use and disclose health information that identifies you.

Uses and Disclosures for Treatment, Payment, and Operations

The law permits us to use your health information for treatment, payment, and health care operations without obtaining your authorization in most circumstances.

  • Treatment. We may use your health information to provide, coordinate, or manage your chiropractic care.
  • Payment. We may use and disclose your health information to bill for services rendered and to collect payment.
  • Health Care Operations. We may use your health information to support our business operations, including quality assessment, training, credentialing, and compliance activities. We do not sell patient data or use it for marketing without your explicit written authorization.
Other Permitted or Required Disclosures
  • As required by law. We will disclose your health information when required to do so by federal, state, or local law.
  • Health oversight activities. We may disclose your health information to a health oversight agency for activities authorized by law.
  • Workers’ Compensation. We may disclose your health information to comply with workers’ compensation laws as required by Virginia state law.
  • Serious threats to health or safety. We may use and disclose your health information when necessary to prevent a serious threat to health and safety.
  • Appointment reminders. We may contact you with appointment reminders or information about treatment options.
Uses and Disclosures Requiring Your Written Authorization

For any uses or disclosures other than those described above, we will obtain your written authorization. This includes most disclosures of psychotherapy notes, marketing communications, and sale of your health information.

If you authorize us to use or disclose your health information, you may revoke that authorization in writing at any time.

Note on Electronic Records: Our practice uses electronic health records (EHR) software for patient record management. All patient records are stored securely in HIPAA-compliant systems with encryption, access controls, and audit logging.
⚖️ Your Rights

Your Rights Regarding Your Health Information

You have the following rights with respect to your protected health information. To exercise these rights, submit a written request to Dr. Nick Weber, Privacy Officer, 10617 Jones Street, Suite 101A, Fairfax, VA 22030, or call 703-447-1121.

Your Right
Description
How to Exercise
Right to Access
You have the right to inspect and receive a copy of your health information, including medical and billing records.
Submit a written request. We will provide a copy or summary within 30 days. A reasonable copying fee may apply.
Right to Amend
You may request that we correct incomplete or inaccurate information in your health record.
Submit written request with reason for amendment.
Right to Restrict
You may request restrictions on how we use or disclose your health information for treatment, payment, or operations.
Submit written request. We will accommodate reasonable requests when possible.
Right to Confidential Communication
You may request that we communicate with you in a specific way or at a specific location.
Verbal or written request. We will accommodate all reasonable requests.
Right to an Accounting of Disclosures
You may request a list of certain disclosures of your health information made in the prior six years.
Written request. First list in a 12-month period is free.
Right to a Copy of This Notice
You may request a paper copy of this Notice at any time.
Request at front desk or by calling 703-447-1121. Available at no charge.
Right to File a Complaint
You have the right to complain to us or to the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.
Contact us directly or file with the HHS Office for Civil Rights. We will not retaliate against you.
📜 Our Duties

Our Duties and Obligations

We Are Required To
  • Maintain the privacy and security of your protected health information
  • Provide you with this Notice of our legal duties and privacy practices
  • Follow the terms of the Notice currently in effect
  • Notify you in the event of a breach of your unsecured protected health information
Breach Notification

In the event of a breach of your unsecured protected health information, we are required by the HIPAA Breach Notification Rule to notify you without unreasonable delay, and in most cases within 60 days of discovery of the breach.

Privacy Officer

Our designated Privacy Officer is Dr. Nick Weber, DC. You may contact the Privacy Officer at 703-447-1121 with any questions about this Notice or our privacy practices.

Government Complaints

If you believe your privacy rights have been violated, you may file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights at www.hhs.gov/ocr/privacy/hipaa/complaints/ or 1-800-368-1019. We will not retaliate against you for filing a complaint.

🌐 Website Privacy

Website Privacy Policy

This section describes how NoVa Spine & Wellness collects, uses, and protects information gathered through our website at novaspinenow.com.

Information We Collect
  • Contact form submissions. When you submit our contact form, we collect your name, email address, phone number, and the content of your message. This information is used solely to respond to your inquiry.
  • Appointment booking. When you book through our scheduling system (PayDC), you provide information directly to that platform, which maintains its own privacy policy.
  • Automatically collected data. Our website hosting provider and analytics tools automatically collect certain technical information, including your IP address, browser type, pages visited, and time spent on pages.
Important: Our website contact form is not a secure channel for transmitting protected health information (PHI). Do not submit specific medical information through the website contact form. For health-related communications, please call 703-447-1121 directly.
How We Use Website Information
  • To respond to your contact form inquiry
  • To schedule appointments and confirm bookings
  • To monitor and improve website performance
  • To comply with legal obligations

We do not sell, rent, trade, or share your contact information with third parties for their marketing purposes.

Data Security

Our website is hosted on SiteGround’s secure infrastructure with SSL/TLS encryption. However, no method of transmission over the internet is completely secure.

🍪 Cookies & Analytics

Cookies and Analytics

Types of Cookies We Use
  • Essential cookies. Required for the website to function. These cannot be disabled without breaking core functionality.
  • Analytics cookies. We may use Google Analytics to understand how visitors interact with our website. These cookies collect aggregate information that does not identify individual users.
  • Preference cookies. These remember choices you make on our website to improve your experience on return visits.
We do not use advertising cookies, remarketing pixels, or any tracking technology designed to follow you across other websites.
🔗 Third Parties

Third-Party Services

Scheduling System

Online appointment scheduling is powered by PayDC. PayDC is a HIPAA-covered business associate and we maintain a Business Associate Agreement (BAA) with PayDC governing any protected health information processed through their system.

Website Hosting

Our website is hosted by SiteGround. SiteGround does not have access to patient health information.

Email

Do not send protected health information via email unless you have been provided a secure patient portal link by our office. Standard email is not a HIPAA-secure channel.

📬 Contact & Complaints

Questions, Requests, and Complaints

If you have questions about this Notice, wish to exercise any of your rights, or believe your privacy rights have been violated, please contact us directly.

Privacy Contact
NoVa Spine & Wellness — Privacy Officer
Dr. Nick Weber, DC, serves as Privacy Officer. All privacy requests, complaints, and inquiries should be directed to:
NoVa Spine & Wellness · 10617 Jones Street, Suite 101A · Fairfax, VA 22030
Hours: Mon–Thu 9 AM–6 PM · Fri 9 AM–3 PM
Amendments to This Notice

We reserve the right to change this Notice and our privacy practices at any time. Any revised Notice will be available in our office and posted on this page.

Governing Law

This Notice is governed by HIPAA and its implementing regulations, the Virginia Consumer Data Protection Act (VCDPA) to the extent applicable, and other applicable federal and Virginia state law.

This document was last reviewed and updated on January 1, 2025. NoVa Spine & Wellness · 10617 Jones Street, Suite 101A · Fairfax, VA 22030 · 703-447-1121