CURA Functional Health | Privacy & Data Security Policy

Notice of Voluntary HIPAA-Standard Privacy Practices

Business Name: CURA Functional Health

Director/Privacy Officer: Dr. Murtaza Bhatti

Effective Date: December 25, 2025

THIS NOTICE DESCRIBES HOW YOUR PRIVACY IS PROTECTED AND HOW YOUR INFORMATION MAY BE USED. PLEASE REVIEW IT CAREFULLY.

1. Clinical Disclaimer

CURA Functional Health provides health coaching, metabolic education, and wellness consulting. This is not a medical practice, and the services provided do not constitute medical treatment, diagnosis, or a formal doctor-patient relationship. While Dr. Murtaza Bhatti is a board-certified physician, his role within CURA Functional Health is that of a health consultant and educator. You are encouraged to remain under the care of your primary treating physician for all medical diagnoses and prescriptions.

2. Voluntary HIPAA Compliance

Because we are a coaching and educational entity and do not engage in standard electronic "covered" insurance transactions, CURA Functional Health is not legally classified as a "Covered Entity" under the Health Insurance Portability and Accountability Act (HIPAA). However, we believe your health data deserves the highest level of protection. Therefore, we voluntarily elect to maintain HIPAA-standard privacy and security protocols. We treat your personal health information (PHI) with the same rigor and security required of a traditional medical clinic.

3. How We Use and Disclose Your Information

We use the information you provide (such as health history, lab markers, and progress logs) for the following purposes:

Coaching Services: To tailor our metabolic education and remission protocols to your specific needs.

Encrypted Communication: To send appointment reminders and program updates via secure, encrypted channels.

Business Operations: We share data with our "Business Associates" (e.g., HIPAA-compliant cloud storage, secure CRM, and laboratory interfaces) who are contractually bound to protect your data.

Marketing & Education: We may contact you regarding our masterclasses or health resources. We will never sell your data to third parties.

4. Your Data Rights

Even though we are a coaching entity, we grant you the following rights regarding your information:

Right to Access: You may request a copy of the health data we have on file for you at any time.

Right to Amend: You may request that we correct any inaccuracies in your coaching record.

Right to Privacy: You may request that we only contact you via specific secure channels (e.g., a specific email or portal).

Right to Deletion: Upon your request, we will securely destroy your records, subject to our internal data retention and legal backup policies.

5. Security Measures

We implement administrative, physical, and technical safeguards to protect your data, including:

Encryption: All digital data is stored and transmitted using industry-standard encryption.

Staff Training: Any team members assisting with your coaching are trained in privacy confidentiality.

Breach Notification: In the unlikely event of a data breach, we will notify you immediately via the email address on file.

6. Changes to This Policy

CURA Functional Health reserves the right to change this policy. Any changes will apply to all information we maintain. The current version will always be available on our website.

7. Questions and Contact

If you have questions regarding this policy or how your data is handled, please contact:

Dr. Murtaza Bhatti Email: [email protected]