HIPAA Notice of Privacy Practice

This notice describes how your health information may be used and disclosed, and how you can access this information. Please review it carefully.

Las Updated: May 19th, 2025

1. Who We Are

MovIQ Health, a registered Doing Business As (DBA) of GaitLab LLC, is a Nevada-based healthcare provider specializing in the measurement and analysis of human movement. We deliver objective mobility assessments, biomechanical evaluations, and personalized movement reports using clinical-grade technology, including motion capture, force plates, and balance analysis.

Our services are designed to help individuals understand their functional mobility, detect early signs of decline, and track movement health over time through data-driven insights. Because we work with sensitive health information, we are deeply committed to protecting the privacy, confidentiality, and security of your Protected Health Information (PHI) in full compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and all relevant federal and state privacy laws.

This Notice of Privacy Practices outlines how we may use and disclose your PHI, your rights under HIPAA, and the steps we take to ensure your health information remains secure and protected.

2. Our Legal Duty

Under the Health Insurance Portability and Accountability Act (HIPAA), MovIQ Health (DBA of GaitLab LLC) is classified as a covered entity and is legally required to protect the privacy and security of your Protected Health Information (PHI).

In accordance with federal law, we are required to:

  • Maintain the Privacy of Your Health Information
    We must safeguard your PHI from unauthorized use, access, or disclosure. This includes all information that identifies you and relates to your past, present, or future physical condition, healthcare services, or payment for those services.

  • Provide You with This Notice
    We are required to give you this Notice of Privacy Practices to explain our legal obligations, your rights, and how we may use and share your health information.

  • Abide by the Terms of This Notice
    We must follow the privacy practices described in this Notice for as long as it is in effect. If we make changes to our privacy practices, we will revise this Notice and provide the updated version to you upon request or by posting it on our website.

We take our legal obligations seriously and strive to uphold the highest standards of privacy and security in all aspects of your care and data handling.

3. How We May Use and Disclose Your Health Information

In certain situations, the law allows us to use or disclose your Protected Health Information (PHI) without your express written permission. These uses are typically related to treatment, operations, legal compliance, and public health. Below are examples of situations where we may use or share your PHI without your prior written authorization:

1. For Treatment

We may use or share your health information to provide, coordinate, or manage your care. This includes sharing your assessment results or mobility reports with:

  • A physician or physical therapist you authorize

  • Another healthcare professional involved in your care
    For example, we may share your MovIQ Score with your primary care provider to support a broader treatment plan.

2. For Payment

If applicable, we may use and disclose your information to bill and receive payment for services you receive from us. This may include verifying eligibility, confirming benefits, or processing claims through third-party billing providers (if used in the future).

3. For Healthcare Operations

We may use and disclose your PHI to support our daily operations and improve the quality and safety of our services. Examples include:

  • Internal quality assessment

  • Credentialing and training staff

  • Client satisfaction analysis

  • HIPAA-compliant audits and reviews

4. As Required by Law

We will disclose your PHI if required to do so by federal, state, or local law. For example:

  • In response to a court order, subpoena, or warrant

  • To comply with health oversight agencies or regulators

  • When required for government audits or investigations

5. Public Health and Safety

We may disclose PHI to public health authorities for purposes such as:

  • Reporting suspected abuse or neglect (as required by law)

  • Preventing or controlling disease, injury, or disability

  • Reporting adverse events or safety issues

6. To Prevent Serious Threats to Health or Safety

We may use or disclose your PHI if we believe it is necessary to prevent a serious and imminent threat to your health or safety, or the health or safety of another person or the public. Such disclosures will only be made to individuals or organizations able to help mitigate the threat.

7. Health Oversight Activities

We may disclose PHI to health oversight agencies for legally authorized activities such as inspections, investigations, and licensure actions related to the healthcare system.

8. Law Enforcement Purposes

We may disclose your health information to law enforcement officials:

  • In response to a court order, subpoena, or search warrant

  • To report a crime on our premises

  • To assist in locating a suspect, witness, or missing person (as permitted by law)

9. Business Associates

We may share your PHI with third-party service providers (known as "Business Associates") who help us operate our services—such as IT providers, secure storage vendors, or analytics firms. These Business Associates are contractually required to comply with HIPAA and sign a Business Associate Agreement (BAA) before accessing any PHI.

10. Workers’ Compensation

We may disclose your information as necessary to comply with workers’ compensation laws and similar programs.

4. When We Need Your Written Authorization

In general, MovIQ Health may only use or disclose your Protected Health Information (PHI) without your written consent in the specific situations outlined earlier in this notice. Any other use or disclosure not expressly permitted by HIPAA or this Notice will require your prior written authorization.

We will specifically request your written authorization before:

1. Using or Disclosing Your Information for Marketing Purposes

We will not use your health information to promote or market third-party products or services unless you have explicitly agreed to such use. If we ever wish to use your information in this way, we will first provide a clear explanation and request your signed authorization.

2. Selling Your Health Information

MovIQ Health does not sell your PHI. However, if in the future we propose any activity that would involve the sale of your health information, we will only proceed after obtaining your express written permission. HIPAA prohibits the sale of PHI without authorization.

3. Sharing Psychotherapy Notes (if applicable)

Although MovIQ Health does not typically collect psychotherapy notes, any such notes—if maintained—are given special protection under HIPAA. We will not share them without your explicit authorization, except as allowed by law.

4. Using Your Information for Any Other Purpose Not Outlined in This Notice

If we wish to use or disclose your PHI in any way that is not specifically covered in this Notice, we will first seek your written authorization before doing so. This includes uses not related to treatment, payment, operations, legal compliance, or public health.

Revoking Your Authorization

You have the right to revoke your authorization at any time in writing. Your revocation must be submitted to us in writing and will apply to all future uses or disclosures.
However, please note:

  • The revocation will not affect any disclosures we have already made in reliance on your prior authorization.

  • Certain records or actions taken before revocation may still be retained or used to comply with legal or operational obligations.

To revoke your authorization or ask questions about a prior consent, contact us at info@moviqhealth.com

5. Your HIPAA Privacy Rights

Under HIPAA, you have several important rights related to your Protected Health Information (PHI). MovIQ Health is committed to upholding these rights and ensuring you have meaningful control over your personal health data.

You may exercise any of the rights below by submitting a written request to us. Instructions for how to contact us are provided at the end of this notice.

a) Right to Access Your Health Information

You have the right to view and obtain a copy of your health information maintained by MovIQ Health, including:

  • MovIQ Report

You may request an electronic or paper copy of your records. We may charge a reasonable, cost-based fee for copying, mailing, or preparing these documents if permitted by law.

b) Right to Request Corrections (Amendments)

If you believe that any information we maintain about you is inaccurate or incomplete, you have the right to request a correction or amendment.
Your request must:

  • Be submitted in writing

  • Specify what information you believe is incorrect and why

  • Identify the portion of the record you want amended

We will review your request and respond within the timeframes required by law. We may deny your request in certain cases (e.g., if the record was not created by us or is accurate as-is), but we will explain our reasoning and allow you to add a statement of disagreement to your record.

c) Right to Request Restrictions on Use or Disclosure

You have the right to request restrictions on:

  • How we use your PHI for treatment, payment, or healthcare operations

  • What information we share with others involved in your care or payment

While we are not required to agree to every restriction, we will consider all requests carefully and inform you of our decision. If we do agree to a restriction, we will honor it unless it is overridden by an emergency or legal obligation.

d) Right to Request Confidential Communications

You may request that we communicate with you about your health information in a specific way (e.g., by email, at a different address, or using a private phone number).
We will accommodate reasonable requests whenever feasible to protect your privacy.

e) Right to Receive an Accounting of Disclosures

You may request a list of instances in which we disclosed your PHI to third parties during the past six (6) years, excluding disclosures made for:

  • Treatment

  • Payment

  • Healthcare operations

  • Disclosures you authorized

  • Certain other exempt purposes (e.g., national security, law enforcement)

This list will include the date, purpose, and recipient of each disclosure. You may request one free accounting per year; additional requests may be subject to a nominal fee.

f) Right to File a Complaint

If you believe that your privacy rights have been violated, you may file a complaint with:

  • MovIQ Health (DBA of GaitLab LLC)

  • The U.S. Department of Health and Human Services (HHS), Office for Civil Rights

You will not be retaliated against or penalized in any way for filing a complaint. To file directly with us, please use the contact information provided below.

6. Our Responsibilities

  • At MovIQ Health (DBA of GaitLab LLC), we take our legal and ethical obligations seriously when it comes to protecting your health information. Under the Health Insurance Portability and Accountability Act (HIPAA) and applicable state laws, we are required to:

    ✅ Maintain the Privacy and Security of Your Protected Health Information (PHI)

    We are legally obligated to safeguard your health information using administrative, technical, and physical security measures that meet or exceed industry standards. This includes restricting access to authorized personnel, using secure systems for storage and communication, and providing regular HIPAA training to our staff.

    ✅ Notify You in the Event of a Breach

    If a data breach occurs that may have compromised the privacy or security of your PHI, we are required by law to:

    • Notify you promptly and in writing

    • Provide a description of what happened

    • Explain what information was involved

    • Describe the steps we are taking to mitigate harm and prevent future occurrences

    This applies to both electronic and paper-based records and includes any unauthorized access, use, or disclosure of your PHI.

    ✅ Honor This Notice and Only Use or Disclose Your Information as Stated

    We will not use or disclose your health information in any way that is inconsistent with this Notice of Privacy Practices unless:

    • You provide us with explicit written authorization, or

    • We are legally required to do so under the exceptions described earlier

    Any use of your information beyond the scope of this notice will be communicated to you, and your written consent will be obtained in advance.

7. Changes to This Notice

We reserve the right to revise or update this Notice of Privacy Practices at any time, as permitted or required by law. Any changes we make will apply to all Protected Health Information (PHI) we maintain—including information we collected before the changes took effect.

If we make material changes to our privacy practices, we will:

  • Update the “Effective Date” listed at the top of this notice

  • Post the revised version on our official website at www.moviqhealth.com

  • Provide a printed copy of the revised notice upon request or at your next in-person visit

We encourage you to review this notice periodically to stay informed about how your information is protected and used. Your continued use of our services following an update constitutes your acknowledgment and agreement to the revised practices.

8. Contact Us

If you have any questions about this Notice of Privacy Practices, would like to exercise your privacy rights, or wish to file a complaint about how your information has been handled, please contact us using the information below:

MovIQ Health
A DBA of GaitLab LLC
9408 Del Webb Blvd, Las Vegas, NV 89134
📧 Email: info@moviqhealth.com
📞 Phone: (702) 268-5090
🌐 Website: www.moviqhealth.com

You may also submit a complaint directly to the U.S. Department of Health and Human Services (HHS), Office for Civil Rights, if you believe your privacy rights under HIPAA have been violated. You will not face any form of retaliation or penalty for filing a complaint.

We are committed to protecting your information and upholding your rights. Thank you for trusting MovIQ Health with your mobility and wellness care.