Terms & Conditions

HIPAA and Personal Information Protection Policy (Florida) 1. Purpose and Scope This policy outlines the measures Tyson Athletics LLC (“the Company”) takes to protect the privacy and security of your health and personal information, in compliance with the Health Insurance Portability and Accountability Act (HIPAA), the Florida Information Protection Act of 2014 (FIPA), and all applicable state and federal laws. This agreement applies to all clients, users, and any individual submitting protected health or personal information through our services, whether in person or via digital platforms. 2. Definition of Protected Information •Protected Health Information (PHI): Any individually identifiable health information, including but not limited to medical history, treatment records, and information related to physical or mental health, transmitted or maintained in any form or medium. •Personally Identifiable Information (PII): Any information that can be used to identify an individual, such as name, address, email, phone number, date of birth, or other identifiers. Under FIPA, this also includes email addresses, security questions, and other sensitive data not explicitly covered by HIPAA. 3. Collection and Use We collect PHI and PII solely for the purpose of providing professional services, facilitating communication, and complying with legal and regulatory requirements. We do not use or disclose your information for any other purpose without your explicit written consent, except as permitted or required by law. 4. Access and Rights You have the right to access, inspect, and obtain a copy of your health records and personal information maintained by the Company. Requests for access will be fulfilled in a timely manner, consistent with federal and Florida law. Under current Florida law, you are entitled to inspection within 24 hours (excluding weekends and holidays) and copies within two working days of your request. 5. Security Measures The Company implements administrative, physical, and technical safeguards to protect your PHI and PII against unauthorized access, disclosure, alteration, or destruction. This includes, but is not limited to: •Secure storage and transmission of electronic records •Access controls and authentication protocols •Staff training on privacy and security best practices •Regular review and update of security policies in accordance with evolving federal and state requirements 6. Data Retention Your records will be retained for a minimum of six years from the date of creation or last use, in accordance with HIPAA retention requirements. After this period, records will be securely destroyed. 7. Breach Notification In the event of a data breach involving your PHI or PII, Tyson Athletics LLC will notify you without unreasonable delay and no later than 30 days after discovery, as mandated by FIPA and HIPAA. Notification will include the nature of the breach, the information involved, steps taken to mitigate harm, and contact information for further inquiries. 8. Disclosure We will not disclose your PHI or PII to third parties except as required or permitted by law, such as for treatment, payment, healthcare operations, or as otherwise authorized by you in writing. Any disclosure will be limited to the minimum necessary information to achieve the intended purpose. 9. Compliance and Enforcement The Company is committed to full compliance with all applicable privacy and security laws. Violations of this policy by staff or associates may result in disciplinary action, up to and including termination and legal penalties. Clients may file complaints regarding privacy practices with the Company or directly with the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR). 10. Policy Updates This policy may be updated periodically to reflect changes in laws, regulations, or business practices. Clients will be notified of any material changes. By engaging our services or submitting information, you acknowledge and agree to the terms outlined in this policy.