HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. EFFECTIVE DATE: This Notice is effective as of the date of your first treatment relationship with Telegenix. OUR DUTY Telegenix Health, Inc. is required by law to maintain the privacy of your Protected Health Information ("PHI"), to provide you with notice of our legal duties and privacy practices, and to abide by the terms of this Notice currently in effect. HOW WE USE AND DISCLOSE YOUR PHI For Treatment. We use your PHI to provide medical care: physicians review your chart, pharmacies fill prescriptions, labs report test results, and the support team coordinates follow-up. Information flows only between parties involved in your direct care. For Payment. We use your PHI to bill you, your insurer if applicable, or your HSA/FSA administrator. This includes prescription records, dates of service, and itemized charges. For Health Care Operations. We use limited PHI for quality assurance, accreditation, training, internal audits, and similar operational activities, always with the minimum necessary disclosure. With Your Authorization. For any other use — including most marketing, sale of PHI, or disclosures of psychotherapy notes — we will obtain your written authorization first, and you can revoke it at any time. Required by Law. We will disclose your PHI when required by federal, state, or local law, including in response to public health reporting requirements, judicial orders, or law-enforcement investigations of specified crimes. To Avoid a Serious Threat. We may disclose PHI to prevent a serious threat to the health or safety of you or others. YOUR RIGHTS You have the right to: - Inspect and copy your PHI (with limited exceptions). We will provide records in the form you request when possible, including electronic copies of records we maintain electronically. - Request an amendment to your PHI if you believe it is inaccurate or incomplete. - Receive an accounting of certain disclosures we have made of your PHI. - Request restrictions on certain uses and disclosures. We will accommodate reasonable requests when possible. - Request confidential communications by alternative means or to alternative addresses. - Receive notification of any breach of unsecured PHI involving your records. - File a complaint without retaliation if you believe your privacy rights have been violated. TO EXERCISE YOUR RIGHTS Email privacy@telegenix.com or call 1-800-TELEGEN. We will respond within the timeframes required by HIPAA — typically 30 days for record access and 60 days for amendment requests. TO FILE A COMPLAINT Complaints may be filed with Telegenix at the contact above and with the Office for Civil Rights at the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint. CHANGES TO THIS NOTICE We reserve the right to change this Notice and to make the revised Notice effective for any PHI we have about you. We will post the current Notice on our website and provide a copy on request. PLACEHOLDER — this draft is provided for Aftershock QA and client review. Final HIPAA notice language must be confirmed by Telegenix's counsel and Privacy Officer before launch.