HIPAA Notice of Privacy Practices

1. Who This Notice Applies To

This Notice of Privacy Practices ("Notice") applies to MaxLife MD, LLC and the licensed physicians who provide telehealth consultations through our platform (collectively, "we," "our," or "us"). As a covered entity and business associate under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, we are required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice, and to abide by the terms of this Notice.

2. What Is Protected Health Information (PHI)?

Protected Health Information (PHI) is individually identifiable health information that relates to your past, present, or future physical or mental health condition; the provision of health care to you; or the past, present, or future payment for the provision of health care. PHI includes information in any form — electronic, written, or oral.

In the context of MaxLife MD's services, PHI includes information you provide during your medical intake form and physician consultation, your prescription records, and communications with our clinical team about your health.

3. How We May Use and Disclose Your PHI

The following describes the ways we may use and disclose your PHI. Not every use or disclosure in a category will be listed, but all of the ways we are permitted to use and disclose information will fall within one of the following categories.

3.1 Treatment

We may use and disclose your PHI to provide, coordinate, or manage your health care and related services. For example, we may share your health history with the licensed physician conducting your consultation, or share your prescription with the licensed compounding pharmacy that will dispense your medication.

3.2 Payment

We may use and disclose your PHI to obtain payment for services provided to you. For example, we may share information with our payment processor to bill for consultation fees or product orders.

3.3 Health Care Operations

We may use and disclose your PHI for our health care operations, including quality assessment, training, legal compliance, and business management activities necessary to operate our telehealth platform.

3.4 As Required by Law

We will disclose your PHI when required to do so by federal, state, or local law, including in response to a court order, subpoena, or government investigation.

3.5 Public Health Activities

We may disclose your PHI for public health activities, such as reporting communicable diseases to public health authorities as required by law.

3.6 Health Oversight Activities

We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, and inspections necessary for oversight of the health care system.

3.7 Serious Threat to Health or Safety

We may use or disclose your PHI when necessary to prevent a serious and imminent threat to your health or safety or the health or safety of the public or another person.

4. Uses and Disclosures Requiring Your Authorization

Other uses and disclosures of your PHI not described in this Notice will be made only with your written authorization. This includes, but is not limited to:

• Most uses and disclosures of psychotherapy notes.
• Uses and disclosures of PHI for marketing purposes.
• Sale of PHI.

You may revoke any authorization you have given us at any time, in writing. Your revocation will not affect any use or disclosure that occurred before we received your revocation.

5. Your Rights Regarding Your PHI

You have the following rights with respect to your PHI:

5.1 Right to Access

You have the right to inspect and obtain a copy of your PHI that we maintain in a designated record set. We will provide access within 30 days of your request. We may charge a reasonable cost-based fee for copies.

5.2 Right to Amend

If you believe that PHI we have about you is incorrect or incomplete, you may request an amendment. We may deny your request if the information was not created by us, is not part of the information you are permitted to inspect, or is accurate and complete.

5.3 Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your PHI. This right applies to disclosures made for purposes other than treatment, payment, or health care operations.

5.4 Right to Request Restrictions

You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree to your request, except in limited circumstances required by law.

5.5 Right to Confidential Communications

You have the right to request that we communicate with you about your PHI in a certain way or at a certain location. For example, you may request that we contact you only by email or at a specific address.

5.6 Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically. Contact us at the address below to request a copy.

6. Our Duties

We are required by law to:

• Maintain the privacy of your PHI.
• Provide you with this Notice of our legal duties and privacy practices.
• Abide by the terms of this Notice currently in effect.
• Notify you in the event of a breach of your unsecured PHI.

We reserve the right to change this Notice at any time. We reserve the right to make the revised or changed Notice effective for PHI we already have about you as well as any information we receive in the future. We will post a copy of the current Notice on our website. The Notice will contain the effective date on the first page.

7. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. To file a complaint with us, contact our Privacy Officer at the address below. We will not retaliate against you for filing a complaint.

8. Contact Our Privacy Officer

To exercise your rights, submit a complaint, or ask questions about this Notice, contact our Privacy Officer: