Notice of Privacy Practices

We may use and disclose your PHI without your written authorization for the following purposes:

Treatment: We will use and disclose your PHI to provide and coordinate your medical treatment. For example, we will share your health history with the licensed physician assigned to your case and transmit your prescription to the dispensing pharmacy.

Payment: We may use your PHI to process payment for our services. Because we are a direct-pay provider, we do not submit insurance claims; however, we may share limited billing information with payment processors.

Healthcare operations: We may use your PHI for internal operations including quality assurance, medical staff review, training, compliance auditing, and business management activities.

Required by law: We may disclose your PHI when required by federal, state, or local law, including disclosures to law enforcement, courts, public health authorities, or regulatory agencies.

Health oversight: We may disclose PHI to health oversight agencies for activities authorized by law, such as audits, investigations, and inspections.

Serious threat to health or safety: We may disclose PHI to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Judicial and administrative proceedings: We may disclose PHI in response to a court order, subpoena, or other lawful process.

The following uses and disclosures require your written authorization:

— Most uses and disclosures of psychotherapy notes

— Uses and disclosures of PHI for marketing purposes

— Sale of PHI

— Other uses and disclosures not described in this notice

You may revoke your authorization at any time in writing. The revocation will not apply to uses or disclosures already made in reliance on your prior authorization.

Right to inspect and copy: You have the right to inspect and request a copy of your PHI. We will provide access within 30 days. We may charge a reasonable cost-based fee.

Right to amend: You have the right to request an amendment to your PHI if you believe it is inaccurate or incomplete. We may deny your request under certain circumstances permitted by law.

Right to an accounting of disclosures: You have the right to request an accounting of disclosures of your PHI made by us in the past 6 years, excluding disclosures for treatment, payment, healthcare operations, and certain other activities.

Right to request restrictions: You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to all restrictions, but we will comply with any agreed-upon restrictions.

Right to confidential communications: You have the right to request that we communicate with you by alternative means or at alternative locations.

Right to a paper copy: You have the right to receive a paper copy of this NPP upon request, even if you agreed to receive it electronically.

Right to notification of breach: You have the right to receive timely notification in the event of a breach of your unsecured PHI.

Teleclinic Holdings LLC is required by law to:

— Maintain the privacy and security of your PHI

— Provide you with this NPP

— Abide by the terms of this NPP currently in effect

— Notify you following a breach of unsecured PHI as required by law

We reserve the right to change our privacy practices and this NPP. Any revised NPP will be posted on our website and will apply to PHI we already hold as well as PHI we receive in the future.

We may share PHI with our business associates — third parties that perform services on our behalf, such as compounding pharmacies, IT providers, and billing services. All business associates are contractually required to safeguard your PHI under HIPAA Business Associate Agreements.

If you believe that your privacy rights have been violated, you may file a complaint with:

TeleClinic Privacy Officer: support@tele.clinic | (917) 772-9936 | 447 Broadway, 2nd Floor #3505, New York, NY 10013

US Department of Health and Human Services, Office for Civil Rights: 200 Independence Avenue, S.W., Washington, D.C. 20201 | 1-800-368-1019 | hhs.gov/ocr

We will not retaliate against you for filing a complaint with us or with HHS.

To exercise any of your rights described in this NPP, or to ask questions about this notice, contact our Privacy Officer at Teleclinic Holdings LLC, 447 Broadway, 2nd Floor #3505, New York, NY 10013, support@tele.clinic, (917) 772-9936.