NOTICE OF PRIVACY PRACTICES

1. Our duties

We are required by law to maintain the privacy of your protected health information (PHI), to provide you with this Notice of Privacy Practices, and to follow the terms of this Notice currently in effect. We may change the terms of this Notice at any time, and the new Notice will apply to all PHI we maintain. The revised Notice will be posted on our website and in our office, and you may request a paper copy at any time.

2. How we may use and disclose your PHI

We may use and disclose your PHI for the following purposes without your written authorization, as permitted or required by law:

a. Treatment

We may use and disclose your PHI to provide, coordinate, or manage your chiropractic and functional medicine care and related services. This includes communicating with other healthcare providers (such as your primary care physician, specialty practitioners, laboratories, or imaging centers) involved in your care.

Example: We may share information about your spinal condition, lab results, or treatment plan with another provider who is treating you to help coordinate your care.

b. Payment

We may use and disclose your PHI as needed to obtain payment for services we provide to you. This includes billing you directly, working with your health plan (HSA/FSA), or using a billing service.

Examples: Providing necessary information to a collection agency if payment is not received.

c. Healthcare operations

We may use and disclose your PHI for our healthcare operations, such as quality assessment, staff training, auditing, licensing, and business management.

Examples: Reviewing records to improve the quality and effectiveness of our services. Using PHI to train students, residents, or staff under supervision.

d. Appointment reminders and communications

We may use and disclose your PHI to contact you about appointments, follow-up visits, or other services related to your care, by phone, text message, mail, or secure electronic means. You may request alternative methods of communication (see "Your rights" below).

e. Treatment alternatives and health-related benefits

We may use and disclose your PHI to inform you about treatment options, functional medicine programs, wellness services, or health-related products that may be of interest to you. You may opt out of such communications at any time.

f. Individuals involved in your care or payment

We may disclose your PHI to a family member, close friend, or other person you identify if the information is relevant to their involvement in your care or payment for your care, unless you object or we reasonably infer you do not object. In emergencies or when you are incapacitated, we may share information if, in our professional judgment, it is in your best interests.

g. As required by law

We may use or disclose your PHI when required to do so by federal, state, or local law. Examples include:

• Public health activities (such as reporting certain diseases or adverse events).
• Reporting suspected abuse, neglect, or domestic violence to authorized authorities.
• Health oversight activities (audits, inspections, or investigations).
• Responses to court orders, subpoenas, or other lawful process.
• To avert a serious threat to health or safety.
• Specialized government functions (such as military, national security, or correctional institution requests, when applicable).
• Workers' compensation or similar programs that provide benefits for work-related injuries or illness.

h. De-identified or limited data

We may use or disclose health information that has been de-identified, or limited data sets (as defined by law), for research, education, or other purposes, as permitted by applicable law and regulations.

3. Uses and disclosures requiring your written authorization

Certain uses and disclosures of your PHI require your prior written authorization. Examples include, but are not limited to:

• Most uses and disclosures for marketing purposes.
• Sale of your PHI.
• Certain research activities not otherwise permitted by law.

If you give us written authorization to use or disclose your PHI, you may revoke that authorization in writing at any time, except to the extent that we have already acted in reliance on it.

4. Your rights regarding your PHI

You have the following rights with respect to your PHI, subject to specific legal requirements and limitations. To exercise any of these rights, please contact our Privacy Officer (K. Dehlbom).

a. Right to inspect and obtain copies

You have the right to inspect and obtain a copy of PHI that we maintain about you in a designated record set, which generally includes medical and billing records. We may charge a reasonable, cost-based fee as allowed by law. In limited circumstances, we may deny your request; if we do, you may have the right to have the denial reviewed by another licensed healthcare professional.

b. Right to request an amendment

If you believe that your PHI is incorrect or incomplete, you may request an amendment in writing. We may deny your request if, for example, the information was not created by us, is not part of the records we maintain, or is already accurate and complete. If we deny your request, we will provide a written explanation, and you may submit a written statement of disagreement to be included in your record.

c. Right to an accounting of disclosures

You may request a list (an "accounting") of certain disclosures of your PHI made by us in the six years prior to your request, excluding disclosures for treatment, payment, healthcare operations, and certain other exceptions required or permitted by law. The first accounting in a 12-month period is free; we may charge a reasonable fee for additional requests.

d. Right to request restrictions

You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations, and on disclosures to individuals involved in your care or payment. We are not required to agree to all requested restrictions; however, if you pay in full out of pocket for a specific item or service, you may request that we not disclose information about that item or service to your health plan, and we must comply unless the disclosure is required by law.

e. Right to request confidential communications

You may request that we communicate with you in a specific way or at a specific location (for example, only at a particular phone number or mailing address). We will accommodate reasonable requests.

f. Right to a paper copy of this Notice

You may request a paper copy of this Notice at any time, even if you have agreed to receive it electronically. You may also access the current version on our website at https://www.riptidewellnessllc.com/.

g. Right to be notified of a breach

You have the right to receive notice following a breach of your unsecured PHI, as defined by applicable law. We will notify you of such a breach without unreasonable delay and in accordance with federal and state requirements.

5. Special protections for certain information

Some types of health information may have additional protections under federal or state law (such as information about mental health, substance use disorder treatment, HIV status, genetic information, or reproductive health). When those laws apply, we may be required to obtain your written permission before disclosing such information in ways that would otherwise be permitted.

6. Our online services and electronic communications

If you use our website, patient portal, or other online tools, we may collect and store information you provide, such as health questionnaires, appointment requests, or communications with our team. We may also use secure electronic systems and third- party service providers to store or transmit PHI in connection with your care, subject to applicable privacy and security requirements.

We take reasonable and appropriate measures to safeguard your PHI, but no electronic system is completely risk-free. We encourage you not to share sensitive information through unsecured email or messaging unless you understand and accept the associated risks.