Victorem Performance Nutrition is a registered-dietitian practice, and the health information you share with us is protected by federal law. This page explains what that means in practice — for you, and for providers who refer athletes to us.
HIPAA
Victorem Performance Nutrition is a HIPAA covered entity, and the platform your care runs on was purpose-built to meet the HIPAA Security, Privacy, and Breach Notification Rules. The required administrative, physical, and technical safeguards are built in:
- Access controls — role-based permissions ensure information is available only to those who need it for your care.
- Audit controls — every access to a client record is permanently logged.
- Integrity controls — records are protected against improper alteration, including tamper-evident electronic signatures.
- Transmission security — health information is encrypted whenever it moves.
Business Associate Agreements
Every vendor that touches health information on our behalf operates under a signed Business Associate Agreement, including Google Cloud and Google Workspace. Payments are deliberately kept free of clinical information, so no health data ever reaches our payment processor.
Your records, your rights
- Access — your client portal shows your documents and your plan whenever you want them.
- Copies — you can request a complete copy of your record at any time.
- Amendments — if something in your record is wrong, ask your dietitian and we will address it.
- Accounting of access — our permanent audit log supports an accounting of access to your record.
Retention and deletion
Clinical records are retained for at least seven years, as Texas recordkeeping requirements direct. After the required retention period, we honor deletion requests. Where a legal hold applies, it is respected.
Breach notification
In the unlikely event of a breach involving your health information, we are committed to notifying affected individuals without unreasonable delay — and in no case later than 60 days — as the HIPAA Breach Notification Rule requires.
Notice of Privacy Practices
Our Notice of Privacy Practices is the governing document for how protected health information may be used and disclosed. It is provided to every client at the start of care and is available on request.
Electronic signatures
Consents and waivers signed electronically through the platform carry a full evidence trail: verification of the signer’s identity, timestamps, a snapshot of the exact document that was signed, and a cryptographic seal that makes any later alteration detectable.
Questions
Whether you are a prospective client or a referring provider, we are glad to walk you through any of this. Reach us through the contact page on the Website.
For the technical detail behind these safeguards, see our Security page. Our Privacy Policy and Terms cover the rest of our online services.