This notice describes how medical information about you may be used and disclosed, and how you can get access to it. Please review it carefully. It applies to Strive to Thrive Wellness, PLLC and to Dr. Stephen L. Rivoli. Effective September 6, 2026.
We are required by law to keep your health information private, to give you this notice of our legal duties and privacy practices, to follow the notice currently in effect, and to tell you if a breach ever affects your information. The practice is small on purpose: one physician, who is also the privacy officer, and no staff.
For treatment. To evaluate you, plan and provide your care, prescribe, order laboratory tests, and coordinate with the laboratory and pharmacy that serve you, and — with your written authorization — with your primary care physician or other clinicians involved in your care.
For payment. To invoice you, record your payment and give you an itemized receipt. We do not bill insurance and do not share your information with insurers unless you ask us to.
For health-care operations. To run the practice: keeping your record, reviewing the quality of care, and the checks required by law such as consulting the state prescription-monitoring programme before a controlled-substance prescription.
As required by law. We may disclose information when a law requires it — for example reporting to public-health authorities, responding to a valid court order, or reporting suspected abuse — and, if necessary, to prevent a serious and imminent threat to your health or safety or someone else's.
Only with your written authorization. Any use in marketing; any sale of your information (which we do not do); any disclosure of psychotherapy notes (which we do not keep); and any other use not described here. Information about HIV status, mental-health treatment, substance-use treatment and genetic testing carries additional protection under New York and Florida law and is disclosed only with a specific authorization or as those laws expressly permit. You may revoke an authorization in writing at any time, except to the extent we have already acted on it. Refusing an authorization never affects your care.
Your record — your visit notes, results, plans, consents and correspondence — is held in the practice's Google Workspace under a signed Business Associate Agreement with Google. It is encrypted, and accessible only to Dr. Rivoli. The laboratories and pharmacies that serve you are covered entities in their own right and receive only what they need to serve you. No other company holds your health information on our behalf. Your record is retained for at least six years after your last visit, and longer where the law requires.
Video visits are recorded, transcribed and summarized so that your visit note is thorough. Once the note is written and signed, the recording, transcript and automatic notes are permanently deleted, usually the same day. The introductory telephone call is not recorded.
Email to the practice's mailbox is the channel for questions and refills between visits. Ordinary email is not encrypted end to end between your provider and ours; include what you are comfortable sending, and keep anything you would rather not put in writing for a visit. Forms on this website for people who are not yet patients ask for nothing clinical.
We may change this notice, and the new notice will apply to all information we hold. The current notice is always published at sttmed.com/privacy.html, and material changes are sent to current patients by email.
Privacy Officer: Stephen L. Rivoli, DO, MPH, MA, CPHQ, CPPS
Strive to Thrive Wellness, PLLC
drrivoli@sttmed.com
Notice of Privacy Practices v1.0, effective September 6, 2026.