HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. Pekorahealth LLC ("Pekora Health") is committed to protecting your Protected Health Information ("PHI") in accordance with the Health Insurance Portability and Accountability Act ("HIPAA") and applicable state law.

1. Uses and Disclosures of PHI

We may use and disclose your PHI for the following purposes:

• Treatment — sharing PHI with affiliated licensed Providers and compounding pharmacies to deliver your care.
• Payment — processing membership payments and coordinating with our payment processor.
• Health Care Operations — quality improvement, care coordination, and platform administration.
• Business Associates — vendors under written BAAs who help us operate the Services, including Karpa Health, our telehealth platform provider, which hosts our intake, member portal, and clinical records.
• As required by law — including public health reporting, subpoenas and court orders.

2. Uses and Disclosures Requiring Your Authorization

Uses and disclosures of PHI other than those described above will be made only with your written authorization. You may revoke that authorization at any time in writing.

3. Your Rights

• Access — request a copy of the PHI we maintain about you.
• Amend — request corrections to your PHI.
• Accounting of Disclosures — request a list of certain disclosures we have made.
• Restriction — request restrictions on certain uses or disclosures.
• Confidential Communications — request that we communicate with you in a specific way.
• Paper Copy — request a paper copy of this notice at any time.

To exercise any of these rights, contact us at pekora@healthpeptdsus.com.

4. Our Responsibilities

• Maintain the privacy and security of your PHI.
• Notify you promptly if a breach occurs that may have compromised your PHI.
• Follow the duties and privacy practices described in this notice.
• Not use or share your information other than as described here unless you tell us we can, in writing.

5. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us at pekora@healthpeptdsus.com or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

6. Changes to This Notice

We may change the terms of this notice at any time. The new notice will be effective for all PHI we maintain. The updated notice will be posted on healthpeptdsus.com.

7. Contact

Pekorahealth LLC — Email: pekora@healthpeptdsus.com.