Last Updated: November 15, 2024

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

I. Who We Are

This Notice of Privacy Practices (“Notice”) outlines the privacy practices of Apex One Wellness, its affiliates, and associated professional entities, including their physicians, healthcare practitioners, and other personnel (“we” or “us”).

II. Our Privacy Obligations

We are legally required to:

• Maintain the privacy of your health information, referred to as Protected Health Information (PHI).

• Provide you with this Notice detailing our legal duties and privacy practices concerning your PHI.

• Notify you if there is a breach of unsecured PHI.

We are obligated to follow the terms of this Notice currently in effect when using or disclosing your PHI.

III. Permissible Uses and Disclosures Without Your Written Authorization

In certain situations, we may use or disclose your PHI without obtaining your written authorization, as described below:

A. Uses and Disclosures for Treatment, Payment, and Healthcare Operations

We may use or disclose PHI (excluding "Highly Confidential Information," defined in Section IV.B):

• Treatment: To provide medical care, such as diagnosing or treating your condition. PHI may also be shared with other providers involved in your care.

• Payment: To obtain payment for services provided to you.

• Healthcare Operations: To manage our business operations, evaluate provider performance, and improve quality of care. PHI may also be shared with other providers for these purposes.

B. Disclosures to Relatives, Close Friends, and Caregivers

We may disclose your PHI to family members, friends, or others involved in your care if:

• You agree or do not object.

• We determine it is in your best interest, such as during emergencies or incapacitation.

Only information relevant to their involvement will be shared.

C. Public Health Activities

We may disclose PHI to:

• Public health authorities for disease prevention or control.

• Report abuse or neglect.

• Notify individuals exposed to communicable diseases.

• Comply with workplace illness or injury laws.

D. Victims of Abuse, Neglect, or Domestic Violence

If we believe you are a victim of abuse, neglect, or domestic violence, we may disclose your PHI to authorized government agencies.

E. Health Oversight Activities

PHI may be disclosed to agencies overseeing healthcare systems, such as Medicare or Medicaid, to ensure compliance.

F. Judicial and Administrative Proceedings

We may disclose PHI during legal proceedings in response to valid orders or subpoenas.

G. Law Enforcement

PHI may be disclosed to law enforcement as required or permitted by law.

H. Decedents

PHI may be disclosed to coroners, medical examiners, or funeral directors as authorized by law.

I. Research

We may use or disclose PHI for research purposes if an Institutional Review Board approves a waiver of authorization.

J. Health or Safety

PHI may be disclosed to prevent serious threats to public health or safety.

K. Specialized Government Functions

PHI may be shared with government entities, such as military or national security agencies, under specific circumstances.

L. Workers’ Compensation

PHI may be disclosed as necessary to comply with workers’ compensation laws.

M. As Required By Law

PHI will be disclosed when required by any applicable law.

IV. Uses and Disclosures Requiring Your Written Authorization

A. Use or Disclosure with Your Authorization

We must obtain your written authorization for:

• Marketing uses of PHI.

• Disclosures that constitute the sale of PHI.

• Other uses not outlined in this Notice.

B. Uses and Disclosures of Highly Confidential Information

Certain PHI, such as mental health, substance abuse, HIV/AIDS, and genetic testing, is classified as "Highly Confidential Information" and requires your explicit authorization unless otherwise permitted by law.

C. Revocation of Authorization

You may revoke your written authorization at any time by submitting a written request to the Privacy Officer at Apex One Wellness.

V. Your Rights Regarding Your Protected Health Information

A. Further Information and Complaints

If you believe your privacy rights have been violated, you may:

• Contact our Compliance and Privacy Officer at [email protected] or call 817-213-6205.

• File a complaint with the U.S. Department of Health and Human Services (HHS).

We will not retaliate against you for filing a complaint.

B. Right to Request Additional Restrictions

You may request restrictions on the use or disclosure of your PHI. While we are not obligated to agree to all requests, we will accommodate reasonable ones when possible.

C. Right to Receive Confidential Communications

You may request to receive communications through alternative means or at alternative locations.

D. Right to Inspect and Copy Your PHI

You may request access to inspect or obtain copies of your medical or billing records. A reasonable cost-based fee may apply.

E. Right to Request Amendments

If you believe your records are incorrect, you may request amendments.

F. Right to Receive an Accounting of Disclosures

You may request a list of certain disclosures made of your PHI over the last six years.

G. Right to Receive a Copy of this Notice

You may request a paper or electronic copy of this Notice at any time.

VI. Effective Date and Duration of This Notice

A. Effective Date

This Notice is effective as of November 15, 2024.

B. Right to Change Terms of This Notice

We may revise this Notice at any time. Updates will be posted on our website at www.apexonewellness.com/npp, and you may request a copy by contacting our Privacy Officer.

VII. Privacy Officer

For questions or concerns, you may contact:

Apex One Wellness

ATTN: Privacy Officer

Address: 1910 Fort Worth Highway, Weatherford, Texas 76086

Phone: 817-213-6205

Email: [email protected]