Effective Date: January 1, 2024 | Last Updated: March 31, 2026
1. Introduction and Scope
Nova Prime Physical Therapy, LLC ("Nova Prime PT," "we," "our," or "us") is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website (novaprimept.com), use our services, or otherwise interact with us.
Our physical therapy practice is located at 13995 Metrotech Dr, Chantilly, VA 20151, and we serve patients throughout Northern Virginia, including Fairfax, Centreville, Herndon, Reston, South Riding, and Oak Hill.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or services.
2. HIPAA Compliance Notice
As a healthcare provider, Nova Prime Physical Therapy is a "covered entity" under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). We are committed to maintaining the privacy and security of your Protected Health Information (PHI) in accordance with HIPAA and the HITECH Act.
Important: This Privacy Policy is supplemented by our Notice of Privacy Practices, which specifically addresses how we use and disclose your PHI for treatment, payment, and healthcare operations. A copy of our Notice of Privacy Practices is available at our office and upon request.
Under HIPAA, you have specific rights regarding your health information, including the right to:
Receive a copy of your health records
Request corrections to your health information
Obtain an accounting of certain disclosures of your health information
Request restrictions on certain uses and disclosures
Request confidential communications
File a complaint if you believe your privacy rights have been violated
3. Information We Collect
3.1 Protected Health Information (PHI)
In the course of providing physical therapy services, we collect and maintain PHI, including:
Medical History: Past medical conditions, surgeries, injuries, current health status, medications, and allergies
Under the Virginia Consumer Data Protection Act (VCDPA), Virginia residents have the right to:
Opt-out of analytics tracking
Access their analytics data through Google's tools
Delete their data through Google's privacy settings
Request information about our data practices
Important: We never collect or store personal health information in our website analytics. All analytics data is processed by Google according to their privacy and security standards.
9. Your Rights
9.1 HIPAA Rights (PHI)
Right to Access: Obtain copies of your health records (we may charge a reasonable fee)
Right to Amend: Request corrections to inaccurate information
Right to Accounting: Receive a list of disclosures of your PHI
Right to Restrict: Request limitations on certain uses and disclosures
Right to Confidential Communications: Request alternative communication methods
Right to Notice: Receive this Privacy Policy and our Notice of Privacy Practices
Right to Complain: File a complaint without fear of retaliation
9.2 Virginia Consumer Data Protection Act (VCDPA) Rights
Virginia residents may have additional rights under the VCDPA regarding personal data (excluding PHI):
Right to confirm whether we process your personal data
Right to access your personal data
Right to correct inaccuracies
Right to delete personal data
Right to data portability
Right to opt out of targeted advertising and sale of personal data
10. Third-Party Links and Services
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Children's Privacy
Our website is not directed to children under 13. We do not knowingly collect personal information from children under 13 through our website. However, we do provide physical therapy services to minor patients with parental/guardian consent. Parents and guardians have the right to access and control their minor child's health information.
12. Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with:
Federal Law: Health Insurance Portability and Accountability Act (HIPAA), HITECH Act
Virginia State Law: Virginia Consumer Data Protection Act (VCDPA), Virginia Health Records Privacy Act
Local Jurisdiction: Any disputes shall be resolved in the courts of Fairfax County, Virginia, or the United States District Court for the Eastern District of Virginia
In the event of a conflict between federal and state law, we will comply with the law that provides greater privacy protection.
13. Breach Notification
In the event of a breach of unsecured PHI, we will notify affected individuals in accordance with HIPAA Breach Notification requirements. Notification will be provided without unreasonable delay and no later than 60 days after discovery of the breach.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated through:
Posting the revised policy on our website with a new effective date
Notifying you via email for significant changes (if we have your email address)
Posting notices at our office location
We encourage you to review this Privacy Policy periodically.
15. Contact Us and File Complaints
For questions, concerns, or to exercise your rights under this Privacy Policy, contact:
Nova Prime Physical Therapy
Privacy Officer
13995 Metrotech Dr
Chantilly, VA 20151
Phone: (571) 774-6378
Email: admin@novaprimept.com
Filing a Complaint: If you believe your privacy rights have been violated, you may file a complaint with:
Nova Prime Physical Therapy (contact information above)
U.S. Department of Health and Human Services, Office for Civil Rights
Virginia Attorney General's Office
You will not be retaliated against for filing a complaint.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy was last reviewed and updated on March 31, 2026.
Have questions about your privacy? We're here to help.