top of page

Privacy Policy

Last Updated

10/2/2026

Optima Hormone & Longevity respects your privacy and is committed to protecting information entrusted to us.

This Privacy Policy explains how information may be collected, used, disclosed, and protected when you visit our website, contact our practice, use our online services, or interact with third-party systems linked from our website.

This page also includes information concerning our obligations under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and your rights regarding protected health information (“PHI”).

Practice: Optima Hormone & Longevity
Medical Director / Privacy Officer: Alberto R. Concepcion, M.D.
Primary Location: Bonita Springs, Florida
Phone: 786-322-6141
Email: admin@optimatelehealthclinic.com

PART I — WEBSITE PRIVACY POLICY

1. Scope of This Website Privacy Policy
This Website Privacy Policy applies to information collected through:

  • Our public website

  • General website contact forms

  • Website communications

  • Cookies and similar technologies

  • Website analytics

  • Interactions with links, buttons, and forms provided through the website

It does not replace the HIPAA Notice of Privacy Practices that applies to protected health information created or received as part of an established patient relationship.
Our website may also link to a separate patient portal, telehealth platform, scheduling system, laboratory, pharmacy, payment processor, or other third-party service. Those systems may have their own privacy practices and terms.
2. Information We May Collect
Depending on how you interact with our website, we may collect the following types of information.
Information You Provide Directly
You may voluntarily provide information such as:

  • Name

  • Email address

  • Telephone number

  • General inquiry or message

  • Scheduling-related information

  • Communications you send to us

  • Other information you voluntarily provide

Our general website contact form is intended for general inquiries only.
Please do not submit medical history, diagnoses, symptoms, laboratory results, prescriptions, medication information, insurance information, Social Security numbers, payment-card information, or other sensitive health information through a general website contact form unless the form has specifically been identified as a secure, approved method for submitting such information.
3. Information Collected Automatically
When you visit our website, certain information may be collected automatically by our website platform, hosting provider, analytics services, or similar technologies.
This information may include:

  • IP address

  • Device type

  • Browser type

  • Operating system

  • Approximate geographic region

  • Referring website

  • Pages viewed

  • Date and time of access

  • Time spent on pages

  • Links or buttons clicked

  • Website performance and error information

  • Cookie and similar technology identifiers

We generally use this information to operate, secure, analyze, and improve our website.
4. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Cookies may be used for purposes such as:

  • Essential website functionality

  • Security

  • Remembering user preferences

  • Measuring website traffic and performance

  • Understanding how visitors use the website

  • Analytics

  • Marketing or advertising, if such tools are enabled

Where required, visitors may be given options to manage non-essential cookies through a cookie banner or privacy settings.
Disabling certain cookies may affect website functionality.
5. Analytics and Tracking Technologies
We may use website analytics or similar tools to understand website performance and visitor behavior.
Because healthcare websites can involve sensitive contexts, we take care when selecting and configuring tracking technologies.
HIPAA-regulated organizations must evaluate online tracking technologies carefully because tracking code can transmit information about visitors to third parties. HHS specifically warns regulated entities to assess their use of website and app tracking technologies under HIPAA. HHS.gov
We do not intend to use public-facing website analytics to disclose protected health information for advertising purposes without appropriate legal authorization.
6. How We Use Website Information
We may use information collected through our public website to:

  • Respond to general inquiries

  • Provide customer service

  • Provide information about our practice and services

  • Assist with appointment or scheduling questions

  • Maintain and operate the website

  • Detect fraud, abuse, or security issues

  • Analyze website performance

  • Improve website usability

  • Comply with legal obligations

  • Protect the rights, safety, and property of the Practice, our patients, and others

Information collected through the website will not be used for materially different purposes without an appropriate legal basis or notice when required.
7. General Website Contact Forms Are Not Patient Portals
Submitting a general website contact form does not establish a physician-patient relationship.
Do not use a general website form to communicate:

  • Urgent or emergency medical issues

  • Detailed symptoms

  • Medical diagnoses

  • Laboratory results

  • Prescription questions requiring clinical review

  • Medication lists

  • Sensitive medical records

  • Insurance information

  • Other protected health information

Patients should use the Practice's designated secure patient or telehealth system for clinical communications when instructed to do so.
8. Wix Website Platform and HIPAA Configuration
This website is built and hosted using Wix Studio.
Wix currently offers PHI-protection features and a Business Associate Agreement (“BAA”) for eligible Wix plans. Wix states that a healthcare organization should activate PHI Protection and execute the BAA before collecting, storing, or processing PHI through Wix. Wix also notes that certain apps and features may not be compatible with HIPAA mode. Wix Help Center
Accordingly, Optima Hormone & Longevity will not intentionally use an ordinary Wix website feature to collect PHI unless that feature has been appropriately configured and approved for that purpose.
Until PHI Protection and all required agreements/configurations are confirmed, the public website contact form should remain limited to general, non-medical inquiries.
9. Appointment and Patient Platforms
The website may link visitors to an external appointment scheduling, patient intake, electronic health record, telehealth, laboratory, pharmacy, or patient-portal platform.
Information entered directly into those services is generally collected by that provider and may be subject to:

  • That provider's privacy policy

  • HIPAA requirements where applicable

  • Business Associate Agreements

  • Separate terms of service

  • Other applicable federal or state laws

Optima Hormone & Longevity does not control every aspect of independently operated third-party websites.
You should review the privacy practices of third-party services before submitting information to them.
10. Payment Information
If online payment functionality is provided, payment information may be processed by a third-party payment processor.
The Practice may receive transaction-related information such as:

  • Payment status

  • Amount paid

  • Transaction reference

  • Billing information necessary for practice operations

We do not intend to store full payment-card numbers directly through a general website form.
11. How We May Share Website Information
We may share information when reasonably necessary with vendors that support our operations, including providers of:

  • Website hosting

  • Information technology

  • Email services

  • Scheduling

  • Telehealth

  • Electronic health records

  • Payment processing

  • Laboratory services

  • Pharmacy services

  • Customer support

  • Analytics

  • Security

  • Professional legal, accounting, or compliance services

When a vendor handles PHI on behalf of the Practice and qualifies as a HIPAA business associate, appropriate contractual protections, including a Business Associate Agreement when required, should be used.
We may also disclose information when required or permitted by law.
12. Sale of Personal Information
Optima Hormone & Longevity does not intend to sell patient medical information.
We do not intend to sell PHI for advertising or commercial purposes without authorization where authorization is required by law.
If our data practices materially change, this Privacy Policy will be updated as required.
13. Data Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the information we handle.
No website, network, email service, cloud service, or electronic transmission can be guaranteed to be completely secure.
Florida law requires covered entities that maintain specified personal information to take reasonable measures to protect electronic personal information. Florida's statutory definition includes certain medical and health-insurance information. Online Sunshine
Visitors should avoid submitting sensitive information through channels that have not been designated for that purpose.
14. Data Breach Notification
If a security incident affects information that is subject to applicable breach-notification laws, Optima Hormone & Longevity will evaluate the incident and provide notifications as required by applicable law.
Different requirements may apply depending on whether the affected information constitutes:

  • Protected health information under HIPAA

  • Personal information under Florida law

  • Information protected by another federal or state law

15. Data Retention
We retain information only for as long as reasonably necessary for purposes such as:

  • Providing services

  • Responding to inquiries

  • Maintaining business and medical records

  • Billing

  • Legal compliance

  • Security

  • Resolving disputes

  • Enforcing agreements

Medical records may be subject to separate retention requirements and are not governed solely by this Website Privacy Policy.
16. Children
Our services are directed primarily toward adults.
Our public website is not intended to knowingly collect personal information from children through general contact forms without appropriate involvement of a parent or legal guardian where required.
If we learn that information was collected improperly from a child, we will take appropriate steps consistent with applicable law.
17. Links to Third-Party Websites
Our website may contain links to:

  • Scheduling platforms

  • Patient portals

  • Pharmacies

  • Laboratories

  • Educational resources

  • Social media

  • Payment services

  • Other external websites

A link does not mean that we control or endorse the third party's privacy practices.
Once you leave our website, the privacy practices of that third party generally apply.
18. Your Website Privacy Choices
Depending on the functionality available on our website, you may be able to:

  • Manage cookie preferences

  • Decline certain optional cookies

  • Unsubscribe from marketing communications

  • Request correction of contact information

  • Ask questions about our website privacy practices

Requests concerning medical records or PHI should be directed to the Privacy Officer as described below.
19. Florida Privacy and Security Laws
Optima Hormone & Longevity operates in Florida and complies with applicable Florida privacy and data-security requirements.
Florida's general data-security law imposes security and breach-notification obligations on covered entities that maintain certain personal information. Online Sunshine
Florida also maintains the Florida Digital Bill of Rights. Importantly, the statute expressly exempts HIPAA covered entities and business associates governed by HIPAA privacy, security, and breach-notification regulations from that part of the statute. Online Sunshine
Other state or federal privacy laws may apply depending on the nature of the information and activity involved.
20. Changes to This Privacy Policy
We may revise this Privacy Policy periodically to reflect:

  • Changes to our services

  • Changes to website functionality

  • Changes to vendors

  • Changes to legal requirements

  • Changes to security or privacy practices

The updated version will be posted on this page with a revised Last Updated date.
Material changes will be handled in accordance with applicable law.

PART II — NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Covered Entity: Florida Bioidentical Hormone and Telehealth Internal Medicine P.A. / Optima Hormone & Longevity

Effective Date: September 1, 2026

Privacy Officer: Alberto Concepcion, M.D.
Phone: 786-322-6141
Email: admin@optimatelehealthclinic.com

HHS requires a HIPAA-covered provider's NPP to explain uses and disclosures of PHI, individual rights, the provider's legal duties, and how to contact the organization regarding privacy. HHS.gov

21. Our Responsibilities

We are required by law to:

  • Maintain the privacy and security of protected health information.

  • Provide you with notice of our legal duties and privacy practices.

  • Follow the privacy practices described in the Notice currently in effect.

  • Notify affected individuals when required following certain breaches of unsecured PHI.

  • Make the current Notice available upon request.

  • Post the Notice on our website when required.

HHS's current model NPP likewise states that providers must maintain PHI privacy and security, notify individuals when applicable breaches occur, follow their notice, and provide copies of it. HHS.gov

22. Information Covered by the HIPAA Notice

PHI may include information relating to:

  • Your identity

  • Medical history

  • Symptoms

  • Diagnoses

  • Physical or mental health conditions

  • Laboratory results

  • Prescriptions

  • Treatment

  • Billing

  • Payment

  • Patient-portal communications

  • Telehealth communications

  • Medical records

  • Other individually identifiable health information

23. Treatment

We may use or disclose PHI to provide, coordinate, or manage your care.

Examples may include:

  • Reviewing medical history

  • Reviewing laboratory results

  • Consulting with another clinician

  • Sending prescriptions to pharmacies

  • Coordinating laboratory testing

  • Communicating with specialists

  • Providing follow-up care

  • Discussing refills or treatment results

24. Payment

We may use or disclose information as necessary to process payment and manage financial aspects of your care.

Although Optima Hormone & Longevity is currently a cash-pay practice and does not bill insurance, PHI may still be used as reasonably necessary for:

  • Payment processing

  • Receipts

  • Account management

  • Billing questions

  • Collection of authorized balances

25. Health Care Operations

We may use and disclose PHI as permitted for health care operations such as:

  • Quality assessment

  • Credentialing

  • Compliance

  • Staff training

  • Auditing

  • Customer service

  • Appointment reminders

  • Business planning

  • Practice administration

  • Care coordination

26. Business Associates

We may work with third-party businesses that perform services involving PHI.

Examples may include:

  • Electronic health record providers

  • Telehealth platforms

  • Billing vendors

  • IT or cloud providers

  • Laboratories

  • Pharmacies

  • Secure messaging providers

  • Other health care support services

When required by HIPAA, we enter into appropriate Business Associate Agreements governing those vendors' handling of PHI.

27. Uses and Disclosures Required or Permitted by Law

HIPAA and other laws permit or require certain disclosures without patient authorization in defined circumstances.

These may include:

  • Public health activities

  • Required communicable-disease reporting

  • Reports of abuse, neglect, or domestic violence

  • Health oversight activities

  • Court or administrative proceedings

  • Certain law-enforcement purposes

  • Coroners and medical examiners

  • Workers' compensation

  • Organ donation activities

  • Certain approved research

  • Specialized government functions

  • Prevention of a serious and imminent threat to health or safety

  • Other disclosures required by law

28. Uses Requiring Authorization

Certain uses or disclosures may require your written authorization.

These may include, subject to applicable law:

  • Certain marketing uses of PHI

  • Sale of PHI

  • Most uses or disclosures of psychotherapy notes, if applicable

  • Other uses not otherwise permitted by law or this Notice

You generally may revoke an authorization in writing, subject to legal limitations and actions already taken in reliance on the authorization.

29. Your Rights Regarding PHI

You may have the right, subject to HIPAA and applicable law, to:

  • Inspect your medical records.

  • Obtain paper or electronic copies of certain records.

  • Request correction or amendment of information you believe is incorrect or incomplete.

  • Request confidential communications.

  • Ask us to contact you in a particular way or at an alternative address.

  • Request restrictions on certain uses or disclosures.

  • Obtain an accounting of certain disclosures.

  • Receive a paper copy of this Notice.

  • Designate a legally authorized person to act for you.

  • Receive notification following certain breaches of unsecured PHI.

  • File a privacy complaint without retaliation.

HHS identifies these individual rights and requires them to be described in the provider's Notice of Privacy Practices. HHS.gov

30. Out-of-Pocket Restriction Requests

If you pay in full out of pocket for a particular health care item or service, you may have the right under HIPAA to request that we not disclose information about that item or service to a health plan for payment or health care operations, unless disclosure is otherwise required by law.

31. Personal Representatives

If another individual has legal authority to act on your behalf regarding health care matters, such as through a valid medical power of attorney or guardianship, that person may be able to exercise applicable privacy rights for you as permitted by law.

32. Telehealth Privacy

Telehealth communications are subject to privacy and security safeguards applicable to the platform and circumstances being used.

Patients should:

  • Participate from a private location whenever reasonably possible.

  • Avoid joining a medical visit while driving or operating a moving vehicle.

  • Inform the clinician if another individual is present.

  • Use a secure device and connection when possible.

  • Protect patient-portal credentials and passwords.

The Practice may verify your identity and physical location at the time of a telehealth visit.

33. Electronic Communications

Electronic communications carry inherent privacy and security risks.

Patients should use the secure communication method designated by the Practice for clinical information.

Ordinary website forms, text messages, and standard email may not be appropriate for detailed medical communications unless specifically approved for that purpose.

34. Substance Use Disorder Records

Federal law provides additional protections for certain substance use disorder records maintained by federally assisted programs governed by 42 CFR Part 2.

Optima Hormone & Longevity is not represented as a Part 2 substance use disorder program.

If the Practice receives information protected by Part 2, that information will be handled in accordance with applicable federal requirements.

HHS's February 2026 HIPAA model notices were revised to account for the 2024 Part 2 Final Rule and related HIPAA requirements. HHS.gov

35. Complaints

If you believe your privacy rights have been violated, you may contact:

Privacy Officer
Alberto Concepcion, M.D.
Optima Hormone & Longevity

Phone: 786-322-6141
Email: admin@optimatelehealthclinic.com

You will not be retaliated against for filing a privacy complaint.

You may also submit a complaint to the:

U.S. Department of Health and Human Services
Office for Civil Rights

HHS provides a process for filing HIPAA privacy complaints. HHS.gov

36. Changes to the Notice of Privacy Practices

We may change our privacy practices and this Notice as permitted by law.

Revised terms may apply to information already maintained by the Practice as well as information received after the change.

The current Notice will be made available:

  • On our website

  • Upon request

  • Through other methods required by law

37. Contact Us

For questions about this Privacy Policy, website privacy, HIPAA rights, or the Notice of Privacy Practices, contact:

Optima Hormone & Longevity
Privacy Officer: Alberto Concepcion, M.D.
Phone: 786-322-6141
Email: admin@optimatelehealthclinic.com

For clinical matters, patients should use the secure patient communication system designated by the Practice.

For emergencies, call 911 or seek emergency medical care.

bottom of page