HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment

MDside LLC and the licensed providers in its professional network ("we," "us," or "our") are committed to protecting the privacy of your protected health information ("PHI"). We are required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and applicable state law to:

• Maintain the privacy and security of your PHI;
• Provide you with this Notice of our legal duties and privacy practices;
• Notify you following a breach of unsecured PHI; and
• Follow the terms of the Notice currently in effect.

How We May Use and Disclose Your PHI

For Treatment. We use your PHI to provide, coordinate, and manage your telehealth care — for example, sharing your intake responses and prescription with the reviewing provider and the dispensing pharmacy.

For Payment. We use and disclose PHI to bill and obtain payment for services — for example, sharing limited information with our payment processor to authorize and collect charges.

For Health Care Operations. We use PHI for quality assessment, provider review, and business operations necessary to run a safe, compliant telehealth practice.

Business Associates. We share PHI with vendors that perform services on our behalf (for example, hosting, payment processing, e-prescribing, and pharmacy fulfillment). Each is bound by a written Business Associate Agreement requiring them to safeguard your PHI.

As Required by Law. We disclose PHI when required by federal, state, or local law, including for public health activities, law enforcement under specific conditions, and judicial proceedings.

Uses and Disclosures Requiring Your Authorization

Most uses and disclosures of psychotherapy notes (where applicable), uses for marketing, and any sale of PHI require your written authorization. We do not sell your PHI. You may revoke an authorization in writing at any time.

Your Health Information Rights

You have the right to:

• Access — inspect and obtain a copy of your PHI.
• Amend — request a correction to PHI you believe is inaccurate or incomplete.
• Accounting of Disclosures — request a list of certain disclosures we have made.
• Restrictions — request limits on how we use or disclose your PHI.
• Confidential Communications — request that we contact you a certain way or at a certain location.
• Paper Copy — obtain a paper copy of this Notice at any time.
• Breach Notification — be notified if your unsecured PHI is breached.

To exercise any of these rights, contact our Privacy Officer using the information below.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.

Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as any information we receive in the future. The current Notice will always be posted on this website with its effective date.

Contact — Privacy Officer

MDside LLC Attn: Privacy Officer 401 E Jackson St, Ste 2340, Tampa, FL 33602 support@mdside.com