Effective date: August 17, 2026
Last updated: August 17, 2026
Aura Wellness is a Florida telehealth practice. This policy explains how we handle your health information as your healthcare provider, and — separately — what our website collects when you visit it. Those are two different things, and we keep them separate below on purpose.
Aura Wellness is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations at 45 C.F.R. Parts 160 and 164. Protected health information, or PHI, is information that identifies you and relates to your health, your care, or payment for your care.
We may use and disclose your PHI without your separate written authorization for three purposes:
We may also use or disclose PHI where the law requires or permits it, such as public health reporting, responding to a lawful court order, or reporting suspected abuse or neglect. Most other uses — including any marketing use, and any sale of PHI — require your prior written authorization, which you may revoke in writing at any time.
We maintain administrative, physical, and technical safeguards to protect your PHI:
Your PHI is held in a HIPAA-compliant electronic medical record. Access to that record is restricted to authorized clinical personnel who need it to provide or support your care.
You have the following rights over your health information. To exercise any of them, contact our Privacy Officer using the details at the bottom of this page. We will respond within the timeframes HIPAA requires.
You may also read our full Notice of Privacy Practices.
Some services we rely on require a vendor to handle PHI on our behalf. Aura Wellness executes a written business associate agreement with every vendor that creates, receives, maintains, or transmits PHI for us. That agreement obligates the vendor to safeguard your information, to use it only for the purposes we permit, and to report any breach to us.
Vendors under business associate agreements include our electronic medical record provider, our patient communications platform, and our cloud storage provider.
In addition to HIPAA, Aura Wellness is subject to the Florida Information Protection Act, Fla. Stat. §501.171.
Under that law, if your personal information is involved in a breach of security, we will notify you as quickly as possible and no later than 30 days after we determine a breach occurred or have reason to believe one occurred. The notice will describe what happened, the types of information involved, and what you can do in response.
If a breach affects 500 or more Floridians, we will also notify the Florida Department of Legal Affairs within 30 days. If a breach affects more than 1,000 people, we will notify the national consumer reporting agencies as the statute requires. Where HIPAA’s breach notification rule also applies, we follow both sets of obligations.
If you believe your privacy rights have been violated, you may complain to us, to the federal government, or to both. We will not retaliate against you for filing a complaint, and filing one will not affect your care.
To complain to Aura Wellness: contact our Privacy Officer using the details below. Please describe what happened and when. We will investigate and respond in writing.
To complain to the federal government: you may file with the U.S. Department of Health and Human Services, Office for Civil Rights.
A complaint to OCR must generally be filed within 180 days of when you knew the problem occurred.
This section is about our website — not about your medical record. Information collected through theaurawellness.com is handled separately from the protected health information described above.
This site uses Google Analytics to understand how visitors use the site in aggregate — which pages are read, how people arrive, and where they leave. Google Analytics sets cookies on your device to do this.
You can opt out in any of these ways:
Google Analytics, loaded through Google Site Kit, is the only third-party analytics tag on this website. We do not run advertising or retargeting pixels on this site — there is no Meta/Facebook pixel, no TikTok pixel, and no advertising conversion tag.
Our booking button takes you to Jane, our scheduling and patient records provider, at theaurawellness.janeapp.com. Once you are on that site you are covered by Jane’s privacy policy as well as ours.
This website is not a channel for transmitting protected health information. Website forms and email are not secure and are not part of your medical record. Please do not use them to send symptoms, diagnoses, medication details, lab results, or any other clinical information.
For anything clinical, use the patient portal or call us at 1-813-755-4461. If you are having a medical emergency, call 911.
Questions about this policy, requests to exercise your rights, and privacy complaints all go to:
Nasser Al-Hafi, Privacy Officer
Aura Wellness — Tampa, Florida
Email: nasser@theaurawellness.com
Phone: 1-813-755-4461
We may update this policy. When we do, we will change the “last updated” date above and post the revised policy on this page.
