Notice of Privacy Practices

MyPeps LLC provides technology, scheduling, payment, communication, and administrative support to the Medical Group. When MyPeps handles protected health information on behalf of the Medical Group, it does so as an authorized service provider or business associate, as applicable.

Your Rights

You have certain rights regarding your health information.

Obtain a Copy of Your Medical Record

You may ask to inspect or receive an electronic or paper copy of your medical record and other health information maintained by us.

We will provide access within the time required by law. We may charge a reasonable, cost-based fee when permitted.

In limited circumstances, we may deny access. When applicable, you may have the right to request a review of that denial.

Ask Us to Correct Your Record

You may ask us to correct health information that you believe is inaccurate or incomplete.

We may deny the request in certain circumstances, but we will provide a written explanation when required. You may have the right to submit a statement of disagreement.

Request Confidential Communications

You may ask us to contact you in a specific way or at a particular location.

For example, you may ask that we contact you only through a certain telephone number, email address, or mailing address.

We will accommodate reasonable requests as required by law.

Ask Us to Limit What We Use or Share

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

We are generally not required to agree to every request.

When you pay for a healthcare item or service completely out of pocket, you may ask us not to disclose information about that item or service to your health plan for payment or healthcare operations. We will honor that request when required by law unless disclosure is otherwise required.

Obtain a List of Certain Disclosures

You may request a list of certain disclosures of your health information made during the six years before your request.

The list generally will not include disclosures made for treatment, payment, healthcare operations, disclosures made directly to you, or other disclosures excluded by law.

Obtain a Copy of This Notice

You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.

Choose Someone to Act for You

If another individual has legal authority to act on your behalf, such as a legal guardian, healthcare agent, or person holding a valid power of attorney, that individual may exercise your rights as permitted by law.

We may require documentation confirming that authority.

File a Complaint

You may file a complaint if you believe your privacy rights have been violated.

You will not be retaliated against or denied care for filing a complaint.

Your Choices

For certain health information, you may tell us your preferences regarding how it is shared.

Family, Friends, and Others Involved in Your Care

You may tell us whether we may share relevant health information with a family member, friend, caregiver, or another person involved in your care or payment for your care.

When you cannot communicate your preference, we may share limited information when we determine that doing so is in your best interest and is permitted by law.

Disaster Relief

We may share limited information with a disaster-relief organization when necessary to assist with notification or coordination.

Marketing

We will obtain your written authorization before using or disclosing protected health information for marketing when authorization is required by law.

Sale of Health Information

We will not sell your protected health information without your written authorization when authorization is required by law.

Fundraising

If we contact you for fundraising purposes, you may tell us not to contact you again.

MyPeps and the Medical Group currently do not intend to use protected health information for fundraising.

How We May Use and Disclose Your Health Information

We may use and disclose protected health information without your written authorization for the purposes described below and as otherwise permitted or required by law.

Treatment

We may use and share your health information to provide, coordinate, and manage your medical care.

Examples include:

• Reviewing your health history;
• Conducting a telehealth appointment;
• Ordering or reviewing laboratory testing;
• Evaluating whether a peptide or other medication is medically appropriate;
• Prescribing or modifying treatment;
• Coordinating with another healthcare professional;
• Sending a prescription to a pharmacy;
• Coordinating follow-up care; and
• Communicating with laboratories or other treating Providers.

Payment

We may use and disclose health information to bill and collect payment for healthcare services.

Examples include:

• Processing payment for a consultation;
• Confirming payment status;
• Providing an itemized statement;
• Coordinating payment with a laboratory or pharmacy; and
• Conducting collection or billing activities permitted by law.

MyPeps primarily operates on a self-pay basis unless otherwise disclosed.

Healthcare Operations

We may use and disclose health information for activities necessary to operate and improve the Medical Group.

Examples include:

• Quality assessment;
• Provider credentialing;
• Training;
• Compliance reviews;
• Auditing;
• Customer support;
• Security monitoring;
• Legal services;
• Business planning;
• Reviewing treatment outcomes; and
• Improving healthcare delivery.

Business Associates

We may disclose health information to companies that provide services to us, such as MyPeps, cloud-hosting vendors, telehealth vendors, secure-messaging providers, payment processors, laboratories, pharmacies, and professional advisers.

When required, these companies must sign agreements requiring them to appropriately protect protected health information.

Pharmacies

We may disclose prescription and patient information to a licensed pharmacy to:

• Transmit a prescription;
• Verify the prescription;
• Dispense medication;
• Coordinate delivery;
• Process refills;
• Address medication questions; and
• Support patient safety.

Laboratories

We may disclose information to laboratories to:

• Place testing orders;
• Verify identity;
• Perform testing;
• Return results;
• Coordinate payment; and
• Support clinical evaluation.

Public Health and Safety

We may disclose health information for certain public-health and safety purposes, including:

• Preventing or controlling disease;
• Reporting adverse medication events;
• Reporting suspected abuse, neglect, or domestic violence;
• Preventing or reducing a serious threat to health or safety;
• Assisting with product recalls; and
• Complying with applicable public-health reporting requirements.

Legal and Government Requirements

We may disclose health information when required or permitted for:

• Court or administrative proceedings;
• Law-enforcement requests;
• Health-oversight activities;
• Workers' compensation;
• Coroner, medical examiner, or funeral-director functions;
• Organ donation;
• National-security activities; and
• Other purposes authorized by law.

Research

We may use or disclose protected health information for research only when the research is legally authorized, approved by an appropriate review process, based on your authorization, or otherwise permitted by law.

Reproductive Healthcare Information

We will not use or disclose protected health information for a purpose prohibited by applicable federal law concerning lawful reproductive healthcare.

When required, we will obtain a signed attestation from a person requesting potentially related information confirming that the information is not being requested for a prohibited purpose.

Electronic Health Information Exchange

We may use electronic systems to securely exchange health information with authorized Providers, pharmacies, laboratories, and other participants involved in your care.

You may have additional choices regarding electronic exchange depending on applicable law and the systems used.

Artificial Intelligence and Automated Tools

The MyPeps platform may provide AI-assisted features that organize or explain laboratory information.

AI-generated information does not independently constitute medical advice, diagnosis, or treatment.

Protected health information will only be processed through an outside AI provider when legally permitted and subject to appropriate privacy, security, contractual, consent, or authorization requirements.

An AI system will not independently prescribe a medication. Prescribing decisions are made by licensed healthcare Providers.

Uses Requiring Your Written Authorization

Uses or disclosures not described in this Notice will generally be made only with your written authorization.

You may revoke an authorization in writing at any time. Revocation will not affect actions already taken based on the authorization.

Our Responsibilities

We are required to:

• Maintain the privacy and security of protected health information;
• Follow the duties and privacy practices described in this Notice;
• Provide you with this Notice;
• Notify you following a breach of unsecured protected health information when required by law;
• Limit uses and disclosures to the minimum necessary amount when the minimum-necessary rule applies; and
• Notify you if we cannot agree to a requested restriction or accommodation when notice is required.

We will not use or disclose your information other than as described here unless you provide written authorization or the law otherwise permits or requires it.

Changes to This Notice

We may change this Notice and make the revised Notice effective for health information we already maintain and information we receive in the future.

The current Notice will be available through the MyPeps platform and upon request.

Questions and Complaints

To ask a question, exercise a right, request a medical record, or file a privacy complaint, contact:

Privacy Officer
Contact@mypeps.com

Self-Pay Pricing and Good Faith Estimates

MyPeps primarily operates on a self-pay basis. Prices for subscriptions, medical appointments, laboratory services, prescribing-related services, medications, and other charges will be disclosed before purchase whenever applicable.

Payment for a subscription, appointment, laboratory service, or clinical review does not guarantee that a licensed Provider will prescribe a peptide or any other medication.

If you do not have health insurance or do not intend to use insurance for your care, you may have the right to receive a Good Faith Estimate of the expected charges for scheduled healthcare services. You may also request a Good Faith Estimate before scheduling.

To request an estimate, contact contact@mypeps.com.

Acknowledgment of Receipt

By signing electronically or selecting the applicable acknowledgment, you confirm that you received or were offered this Notice of Privacy Practices.

Your acknowledgment confirms receipt only. It does not authorize uses or disclosures beyond those permitted by law and described in this Notice.