HIPAA Notice of Privacy Practices

Anywhere Clinic LLC and its affiliated medical groups (collectively, "Anywhere Clinic," "we," "us," or "our") are committed to protecting the privacy of your protected health information ("PHI"). PHI is information about you, including demographic data, that may identify you and that relates to your past, present, or future physical or mental health condition, the provision of health care to you, or payment for that care.

Where the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA") applies to our affiliated medical groups, we are required by law to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and follow the terms of the Notice currently in effect.

A. For Treatment

We may use and disclose your PHI to provide, coordinate, or manage your health care, including consultations with and referrals to other clinicians. For example, your psychiatric provider may share information with your therapist to coordinate your care.

B. For Payment

We may use and disclose your PHI to obtain payment for the services we provide. This may include sharing information with your health insurer, billing third parties, or verifying coverage.

C. For Health Care Operations

We may use and disclose your PHI for activities necessary to operate our practice, such as quality improvement, training, credentialing, audits, legal and compliance services, and care management.

D. Appointment Reminders & Health-Related Communications

We may contact you to remind you of an appointment or to provide information about treatment alternatives or other health-related benefits and services that may be of interest to you.

E. As Required by Law

We will disclose your PHI when required to do so by federal, state, or local law, including disclosures to public health authorities, health oversight agencies, or in response to a court order, subpoena, or other lawful process.

F. To Avert a Serious Threat to Health or Safety

We may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.

Other circumstances in which we may use or disclose your PHI without your written authorization include:

• Public health activities, such as reporting disease or adverse reactions
• Reporting suspected abuse, neglect, or domestic violence
• Health oversight activities authorized by law
• Judicial and administrative proceedings
• Law enforcement purposes as permitted by law
• Coroners, medical examiners, and funeral directors
• Organ and tissue donation, where applicable
• Research, subject to appropriate safeguards and approvals
• Workers' compensation claims as authorized by law
• Specialized government functions, including military and national security

Uses and disclosures not described in this Notice will be made only with your written authorization. You may revoke any such authorization at any time, in writing, except to the extent we have already taken action in reliance on it.

We will not use or disclose your PHI for marketing purposes, or sell your PHI, without your written authorization.

Right to Inspect and Copy

You have the right to inspect and obtain a copy of your PHI maintained in a designated record set. We may charge a reasonable, cost-based fee as permitted by law.

Right to Request Amendment

If you believe your PHI is incorrect or incomplete, you may ask us to amend it. We may deny your request under certain circumstances, but you may file a written statement of disagreement.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your PHI for purposes other than treatment, payment, or health care operations.

Right to Request Restrictions

You have the right to request a restriction on certain uses and disclosures of your PHI. We are not required to agree to your request, except in limited circumstances, such as where you have paid for a service in full out of pocket and request that information about that service not be disclosed to your health plan.

Right to Request Confidential Communications

You have the right to request that we communicate with you about medical matters in a certain way or at a certain location (for example, only by email or at a specific phone number). We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You have the right to a paper copy of this Notice at any time, even if you have agreed to receive it electronically. To request a paper copy, contact us at the address listed below.

Right to Be Notified of a Breach

You have the right to be notified following a breach of your unsecured PHI.

We maintain reasonable administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your PHI. Access to PHI is limited to workforce members and business associates who need it to perform their duties. Telehealth sessions occur over encrypted, HIPAA-aligned platforms.

Telehealth allows your provider to evaluate and treat you using interactive audio and video technology. Information transmitted during a telehealth visit may be recorded only with your explicit consent. While we take reasonable steps to safeguard your information, telecommunication technologies carry inherent risks that confidentiality may be compromised by factors outside of our control.

You have the right to refuse telehealth services and request in-person care alternatives where available, and to withdraw consent for telehealth at any time without affecting your future care.

We reserve the right to change this Notice and to make the new Notice provisions effective for all PHI we maintain. Revised notices will be posted on our website at anywhereclinic.com/hipaa and will include a new effective date.

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

• With us: Email our Compliance Officer at privacy@anywhereclinic.com. All complaints must be submitted in writing.
• With HHS: hhs.gov/hipaa/filing-a-complaint or email OCRComplaint@hhs.gov.