Legal · HIPAA

Notice of Privacy Practices.

How OneStickUSA collects, uses, and protects your health information — and the rights you have over it.

Effective date · January 1, 2026

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

01 — Who we are

A small concierge phlebotomy practice.

OneStickUSA is the independent mobile-phlebotomy practice of Alicia Edwards, serving private clients along Florida's east coast. Specimens collected at OneStickUSA visits are processed by TrufaMED Urgent Care — a separate Joint Commission–accredited, moderate complexity laboratory operating under its own license.

For the purposes of this notice, "we," "us," and "OneStickUSA" refer to OneStickUSA only. OneStickUSA is solely responsible for the mobile collection of specimens; TrufaMED is solely responsible for the laboratory processing of those specimens. When PHI is shared between the two for laboratory processing, that relationship is governed by a separate business associate or organized health care arrangement.

Nothing on this website should be construed as creating joint liability, agency, employment, or partnership between OneStickUSA and TrufaMED Urgent Care. Each business is independently licensed and insured and is responsible only for the services it directly provides.

02 — What is protected health information

"PHI," in plain language.

Protected Health Information (PHI) is any information that identifies you and relates to your health, your healthcare, or payment for that healthcare. This includes your name combined with the tests being drawn, your address combined with a visit date, your physician's name in the context of an order, and your insurance information when applicable.

OneStickUSA does not collect PHI on this website. Our website forms collect only contact information — name, phone, email, city, and a preferred callback time. Health-related details are collected separately, over a private phone call or via a HIPAA-compliant intake link sent after your initial contact.

03 — How we may use and disclose your PHI

Treatment, payment, and operations.

Under HIPAA, we are permitted to use and disclose your PHI without separate authorization for the following purposes:

Treatment. To collect, transport, and deliver specimens to the laboratory; to coordinate care with your ordering physician; to schedule and prepare for visits.
Payment. To collect payment for services rendered, or to bill your insurance, HSA, or FSA where applicable.
Healthcare operations. Quality assurance, training, credentialing, and the day-to-day administration of our practice.

We may also use or disclose your PHI without your authorization in the following circumstances permitted or required by law:

When required by federal, state, or local law.
For public health activities (e.g., reporting communicable diseases as required).
To report suspected abuse, neglect, or domestic violence as required by law.
For health oversight activities (audits, investigations) by authorized agencies.
In response to a court order, subpoena, or other lawful legal process.
To coroners, medical examiners, or funeral directors when necessary.
For specialized government functions (military, national security, correctional institutions) as defined by law.
To prevent a serious threat to your health, the health of another person, or public safety.
For workers' compensation matters where applicable.

All other uses and disclosures of your PHI will be made only with your written authorization. You may revoke that authorization at any time in writing, except to the extent we have already acted in reliance on it.

04 — Marketing and the sale of PHI

We do not sell your PHI. Ever.

OneStickUSA does not sell your protected health information, and we do not use it for marketing communications without your written authorization. Our website analytics and any advertising scripts (if present) are configured to exclude PHI; identifiers like your name, test type, or visit reason are never transmitted to marketing or advertising platforms.

We do not share psychotherapy notes (we do not produce them in the course of phlebotomy services).

05 — Your rights

What you can ask of us.

You have the following rights regarding your PHI. To exercise any of them, contact our Privacy Officer (information below).

Right to inspect and copy. You may request a copy of the PHI we maintain about you. We may charge a reasonable fee for the cost of copying and mailing.
Right to amend. You may request that we correct PHI you believe is inaccurate or incomplete. We may deny your request in limited circumstances, in which case we will provide a written explanation.
Right to an accounting of disclosures. You may request a list of certain disclosures we have made of your PHI in the six years prior to your request.
Right to request restrictions. You may ask us to restrict how we use or disclose your PHI for treatment, payment, or operations. We are not required to agree, except where you pay out of pocket in full for a service and ask that the information not be shared with your health plan.
Right to request confidential communications. You may ask that we contact you at a specific address, phone, or email — for example, a personal phone instead of a work line.
Right to a paper copy of this notice. Even if you have received this notice electronically, you may request a paper copy at any time.
Right to be notified of a breach. If there is a breach of unsecured PHI affecting you, we will notify you in accordance with applicable law.

06 — Our duties

What we owe you.

OneStickUSA is required by law to:

Maintain the privacy of your protected health information.
Provide you with this notice describing our legal duties and privacy practices.
Follow the terms of the notice currently in effect.
Notify you if a breach occurs that may have compromised the privacy or security of your information.

07 — Filing a complaint

If you believe your privacy has been violated.

You may file a complaint with OneStickUSA by contacting our Privacy Officer (below). You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.

Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Online: hhs.gov/hipaa/filing-a-complaint

We will not retaliate against you for filing a complaint.

08 — Changes to this notice

When this notice is updated.

We reserve the right to change this notice and to make the revised notice effective for PHI we already have about you, as well as any information we receive in the future. The current notice will always be available on this page with its effective date, and on request from our Privacy Officer.

09 — Privacy Officer

How to reach us.

Alicia Edwards · Privacy Officer
OneStickUSA
954.670.3184
alicia@onestickusa.com

Please do not include health or medical details in unsecured email. For sensitive matters, we will provide a HIPAA-compliant channel.

Last updated · January 1, 2026