HIPAA Notice

Notice of Privacy Practices — Effective Date: July 23, 2026

Our Commitment to Your Privacy

Restorify Health, operated by Ream Franchise Group LLC is committed to protecting the privacy of your health information. This Notice of Privacy Practices ("Notice") describes how we may use and disclose your Protected Health Information ("PHI") and explains your rights regarding that information.

We are required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), as amended by the Health Information Technology for Economic and Clinical Health Act ("HITECH"), to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices with respect to PHI, and to abide by the terms of this Notice currently in effect.

What Is Protected Health Information (PHI)?

PHI is any information we hold that relates to your past, present, or future physical or mental health condition; the provision of health care to you; or the past, present, or future payment for the provision of health care to you — and that identifies you or could reasonably be used to identify you.

Examples of PHI we may collect and maintain include:

• Your name, address, date of birth, and contact information
• Medical history, diagnoses, and treatment records
• Lab results, hormone panels, and blood test data
• Prescription and medication information
• Billing and insurance information
• Appointment and scheduling records
• Communications between you and our clinical staff

How We May Use and Disclose Your PHI

We use and disclose PHI for the following purposes without requiring your separate written authorization, as permitted or required by HIPAA:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your health care and related services. This includes sharing PHI with physicians, nurses, lab technicians, pharmacies, and other health care providers involved in your care. For example, we may share your lab results with a referring physician or transmit a prescription to a pharmacy on your behalf.

Payment

We may use and disclose your PHI to obtain payment for health care services we provide to you. This includes verifying insurance coverage, submitting claims, billing, and collection activities. For example, we may send a bill containing PHI to your insurance carrier or a payment processor.

Health Care Operations

We may use and disclose your PHI for our internal health care operations, including quality assessment and improvement activities, case management, staff training, accreditation, licensing, credentialing, and conducting or arranging for medical reviews, audits, or legal services necessary to run our practice.

As Required by Law

We will disclose your PHI when required to do so by applicable federal, state, or local law, including court orders, warrants, subpoenas, and administrative requests.

Public Health and Safety Activities

We may disclose your PHI to public health authorities to prevent or control disease, injury, or disability; to report child abuse or neglect; to report reactions to medications or problems with products; or to notify persons who may have been exposed to a communicable disease.

Health Oversight Activities

We may disclose your PHI to health oversight agencies (such as state health departments or the U.S. Department of Health and Human Services) for activities authorized by law, including audits, investigations, inspections, and licensure proceedings.

Law Enforcement

We may disclose your PHI to law enforcement officials for purposes such as identifying or locating a suspect, reporting certain types of wounds or injuries, or complying with a court order, warrant, or other legal process.

Serious Threats to Health or Safety

We may use or disclose your PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law and ethical standards.

Research

We may use or disclose your PHI for research purposes when the research has been approved by an institutional review board and appropriate privacy protections are in place, or when the research involves only PHI of deceased individuals.

Organ and Tissue Donation

If you are an organ or tissue donor, we may disclose your PHI to organizations that handle organ procurement, transplantation, or donation as necessary to facilitate the donation and transplantation process.

Workers' Compensation

We may disclose your PHI as authorized by and to the extent necessary to comply with workers' compensation laws or other similar laws that provide benefits for work-related injuries or illnesses.

Coroners, Medical Examiners, and Funeral Directors

We may disclose PHI to a coroner or medical examiner for the purpose of identifying a deceased person, determining a cause of death, or other duties authorized by law.

Uses and Disclosures Requiring Your Authorization

For uses and disclosures of your PHI beyond those described above, we will obtain your written authorization before using or disclosing your PHI. You may revoke any authorization you provide to us at any time, in writing, except to the extent that we have already taken action in reliance on that authorization.

The following uses and disclosures require your written authorization:

• Most uses and disclosures of psychotherapy notes
• Uses and disclosures of PHI for marketing purposes
• Sales of PHI
• Any other use or disclosure not described in this Notice

How We Protect Your PHI

We implement a comprehensive set of administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of your PHI, in compliance with the HIPAA Security Rule (45 CFR Part 164, Subparts A and C):

• Administrative safeguards: Staff training on privacy and security policies, designated Privacy Officer, workforce access controls, and regular risk assessments.
• Physical safeguards: Restricted facility access, secure workstation policies, and device and media controls.
• Technical safeguards: Encrypted electronic transmission of PHI using SSL/TLS or equivalent technology, unique user authentication, automatic logoff, and audit controls on systems that contain PHI.

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. In the event of a breach of unsecured PHI, we will notify you as required by HIPAA and applicable state law.

Your Rights Regarding Your PHI

You have the following rights with respect to your PHI. To exercise any of these rights, please submit a written request to our Privacy Officer using the contact information below.

Right to Inspect and Copy

You have the right to inspect and obtain a copy of your PHI that we maintain in a designated record set, with limited exceptions. We may charge a reasonable, cost-based fee for copies. We will provide access in the form you request (including electronic format) if readily producible.

Right to Amend

You have the right to request an amendment to your PHI if you believe it is inaccurate or incomplete. We may deny your request if we did not create the information, if the information is not part of a designated record set, or if we determine the information is accurate and complete. If we deny your request, we will explain the reason in writing.

Right to an Accounting of Disclosures

You have the right to request an accounting of certain disclosures of your PHI made by us during the six years prior to your request. This right does not apply to disclosures made for treatment, payment, or health care operations, or to disclosures you authorized.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations. We are not required to agree to your request, except that we must agree to a restriction on disclosures to a health plan if you pay out-of-pocket in full for a specific item or service and the disclosure is solely for payment or operations purposes.

Right to Request Confidential Communications

You have the right to request that we communicate with you about your PHI by alternative means or at an alternative location (e.g., a different phone number or mailing address). We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically. Contact our Privacy Officer to request a copy.

Right to Be Notified of a Breach

You have the right to receive timely notification if we discover a breach of your unsecured PHI, as required by the HIPAA Breach Notification Rule (45 CFR Part 164, Subpart D).

Florida-Specific Privacy Protections

As a Florida-based clinic, we comply with Florida's health privacy laws in addition to HIPAA, including:

• Mental health records: We obtain written consent before disclosing mental health records, even for treatment, payment, or health care operations, as required by Florida law.
• HIV/AIDS-related information: Disclosure of HIV/AIDS test results or related information requires specific written consent under Florida Statute § 381.004.
• Substance abuse treatment records: Records related to substance abuse treatment are protected under both Florida law and 42 CFR Part 2 and require separate written consent for disclosure.

Changes to This Notice

We reserve the right to change the terms of this Notice and to make the new Notice effective for all PHI we maintain, including PHI we created or received before the effective date of the revised Notice. We will post a copy of the current Notice in our office and on our website. The Notice will contain the effective date on the first page. We encourage you to review this Notice periodically.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights:

U.S. Department of Health and Human Services

Office for Civil Rights

www.hhs.gov/hipaa/filing-a-complaint

Toll-free: 1-800-368-1019

You will not be retaliated against in any way for filing a complaint with us or with the Secretary of HHS.

Contact Our Privacy Officer

To exercise any of your rights, report a concern, or ask questions about this Notice or our privacy practices, please contact:

Ream Franchise Group LLC, operating as Restorify Health

Privacy Officer: Stephen Mercurio

Phone: +1 253 882 9912

Email: support@restorifyhealth.com

Address: 5140 Avenida Encinas, Carlsbad, CA 92008

Medical Disclaimer

The content of restorifyhealth.com is for informational purposes only and does not constitute professional medical advice, diagnosis, treatment, or recommendations of any kind. You should always seek the advice of a board-certified medical practitioner or other qualified health care provider with any questions or concerns regarding your individual needs and medical conditions. Visiting restorifyhealth.com does not create a physician-patient relationship.