Effective Date: 1/27/2026

This Privacy Policy describes how INVESSEL HEALTH & WELLNESS PLLC ("we," "us," or "our") collects, uses, discloses, and protects personal information and health information when you use our website, telehealth services, patient portal, and integrated third-party platforms, including BodySite. 

1. Information We Collect

We may collect the following categories of information:

A. Personal Information

Name, email address, phone number, date of birth, and contact details

Account and login information (excluding passwords for third-party platforms)

B. Health and Wellness Information (PHI)

Medical history, intake forms, assessments, and questionnaires

Biometrics and body composition data

Lab results and health metrics

Treatment plans, notes, and communications

C. Technical and Usage Information

Device information, IP address, browser type, and usage data

Interaction data related to our website and digital platforms

D. Information from Third-Party Integrations

When you authorize integrations such as BodySite, we may receive data from those platforms, including assessments, forms, progress data, and related health information.

2. How We Use Your Information

We use your information to:

Provide telehealth, clinical, and wellness services

Create and manage your account and patient records

Sync and display data from authorized third-party platforms (e.g., BodySite)

Communicate with you regarding your care and services

Improve our services, operations, and patient experience

Comply with legal, regulatory, and professional obligations

3. Sharing and Disclosure of Information

We may share your information with:

A. Authorized Third-Party Platforms

If you connect BodySite or other platforms, we share and receive data with those platforms as necessary to provide the integration.

B. Service Providers

We may share information with vendors who support our operations (e.g., cloud hosting, analytics, customer support), subject to confidentiality and security obligations.

C. Healthcare Professionals

Information may be shared with clinicians or members of your care team involved in your treatment.

D. Legal and Regulatory Authorities

We may disclose information when required by law or to protect our legal rights.

We do not sell your personal or health information.

4. BodySite Disclosure

By connecting BodySite or using integrated services through BodySite, you authorize us to access, receive, and process your data from those platforms in accordance with this Privacy Policy. This data may be used for clinical, operational, and administrative purposes.

You may revoke this authorization at any time by disconnecting the integration or contacting us. Revocation will stop future data syncing, but previously collected information may be retained as required by law or clinical record obligations.

5. Data Storage and Security

We use administrative, technical, and physical safeguards to protect your information, including encryption and access controls. Where applicable, we follow HIPAA-compliant practices and work with vendors that support HIPAA requirements.

6. Data Retention

We retain personal and health information for as long as necessary to:

Provide services to you

Comply with legal, regulatory, and professional requirements

Resolve disputes and enforce agreements

Retention periods may vary based on the type of information and applicable laws.

7. Your Rights and Choices

You may:

Request access to or correction of your information

Request deletion of your information, subject to legal and clinical record requirements

Revoke consent for third-party integrations

To exercise these rights, contact us at:

Email: [email protected]

8. Account Deactivation and Integration Revocation

If you deactivate your account or revoke access to BodySite or other integrations:

Data syncing will stop going forward

Previously collected data may be retained as required by law or clinical obligations

You may request deletion of eligible data as described above

9. Children’s Privacy

Our services are not intended for individuals under the age of 18 unless provided with parental or legal guardian consent.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Invessel Health & Wellness PLLC  

[email protected]

116 Agnes Road Suite 200 

Knoxville, TN 37919 

This Privacy Policy is intended to describe general data practices and does not replace required HIPAA Notices of Privacy Practices where applicable.