Notice of Privacy Practices

1. Introduction

This Notice of Privacy Practices ("Notice") explains how BringRx LLC ("BringRx," "we," "us," or "our") uses, maintains, and protects your medical information. Although BringRx is not technically a "Covered Entity" under the Health Insurance Portability and Accountability Act ("HIPAA"), BringRx has voluntarily elected to substantially comply with the privacy and security standards established by HIPAA, including the protection of your health information.

This Notice describes how we may use and disclose your protected health information ("PHI") for purposes of treatment, payment, and health care operations, as well as other circumstances permitted or required by law. It also describes your rights and the obligations we have regarding the use and disclosure of your PHI.

2. Definition of Protected Health Information

"Protected Health Information" or "PHI" is any information, including demographic data, that identifies you or can reasonably be used to identify you, and that relates to your past, present, or future physical or mental health condition, treatment, or payment for health care services. PHI may include information we receive or maintain about you through BringRx's telehealth services, coordination with clinicians, pharmacies, vendors, or any affiliated medical groups.

3. Uses and Disclosures of PHI for Treatment

BringRx may use and disclose your PHI to provide, coordinate, or manage your health care. This includes communication with clinicians, medical groups, pharmacies, laboratory providers, and other third parties involved in your care. For example, if you are referred to a specialist or if your pharmacy requires clinical information before dispensing your medication, BringRx may share your PHI to ensure safe, effective, and appropriate treatment.

4. Uses and Disclosures of PHI for Payment

BringRx may use and disclose your PHI in order to bill you or obtain payment for products or services you receive. This may include verifying your eligibility with your health plan (if applicable), confirming coverage, reviewing services for medical necessity, obtaining authorizations, and processing payments. BringRx may also disclose PHI to payment processors or financial intermediaries as needed to facilitate payment transactions.

5. Uses and Disclosures of PHI for Health Care Operations

BringRx may use and disclose your PHI to support business operations, including quality assessment, improvement activities, training of staff, auditing, legal review, fraud and abuse detection, compliance efforts, customer service activities, development and refinement of systems, and communicating with you about health-related benefits or services. These operations are necessary to ensure that BringRx continues to provide safe, efficient, and high-quality care.

6. Uses and Disclosures Permitted Without Your Authorization

BringRx may use or disclose your PHI without your authorization when permitted or required by law. These uses include: disclosures required by federal, state, or local laws; public health reporting; reporting abuse or neglect; health oversight audits; compliance with Food and Drug Administration (FDA) requirements; responding to subpoenas or court orders; cooperating with law enforcement; funeral and organ donation activities; certain research activities; reporting related to criminal conduct; national security or military activities; workers' compensation processes; correctional institution reporting; and disclosures to the U.S. Department of Health and Human Services as part of a compliance investigation.

Additional limitations may apply based on state laws governing confidentiality.

7. Uses and Disclosures That Require Your Authorization

Other uses and disclosures of your PHI will only occur with your express written authorization unless otherwise permitted by law. BringRx will not use or disclose your PHI for marketing purposes without your explicit authorization. We will not sell your PHI. BringRx does not use PHI for fundraising.

We will not use or disclose psychotherapy notes without your authorization, except where permitted by law.

You may revoke any authorization at any time in writing, except to the extent BringRx has already taken action based on your authorization.

8. Your Right to Request Restrictions

You have the right to request restrictions on the use or disclosure of your PHI. Requests must be submitted in writing, specifying the information to be restricted and the persons to whom the restriction applies.

BringRx is not required to agree to requests, except when the request is to restrict disclosure to a health plan for services paid for in full out-of-pocket.

If BringRx agrees to a restriction, we will honor it unless required by law to disclose the information.

9. Your Right to Access, Inspect, and Receive Copies of Your PHI

You have the right to request access to the PHI we maintain about you, including the right to inspect or obtain electronic or paper copies. Requests must be submitted in writing.

BringRx may charge a reasonable cost-based fee for producing and mailing copies when permitted by law.

In rare cases, BringRx may deny access to certain information; if so, you may request that the denial be reviewed.

10. Your Right to Request Confidential Communications

You may request that BringRx communicate with you in a specific way or at a specific location (e.g., using a different mailing address, phone number, or email). We accommodate all reasonable requests submitted in writing and will not require you to explain the reason for the request.

11. Your Right to Request Amendment of Your PHI

You may request an amendment of PHI you believe is incorrect or incomplete. Requests must be in writing and include the reason for the amendment.

BringRx may deny the request if the information is accurate, was not created by BringRx, or is otherwise not permitted to be amended. If denied, you may submit a statement of disagreement. BringRx may prepare a rebuttal and will provide you with a copy.

12. Your Right to an Accounting of Disclosures

You have the right to request an accounting of certain disclosures of your PHI made by BringRx, including both paper and electronic disclosures. Disclosures made for treatment, payment, or health care operations are generally excluded unless maintained in an electronic health record. BringRx will provide the accounting in accordance with applicable law.

13. Your Right to a Paper Copy of This Notice

You may request a paper copy of this Notice at any time, even if you have previously agreed to receive electronic communications. We will provide a physical copy upon request.

14. Revisions to This Notice

BringRx reserves the right to revise or update this Notice at any time. Any updated Notice will apply to all existing PHI as well as PHI created after the revision.

Updated versions of this Notice will be posted on our website at www.bringrx.com. You are entitled to review the Notice currently in effect at any time.

15. Breach Notification

If BringRx discovers a breach of your unsecured PHI, we will notify you as required by law. Notification will be provided without unreasonable delay and no later than 60 days after discovery. The notice will describe the breach, the information involved, steps you should take to protect yourself, actions BringRx is taking to investigate and mitigate harm, and contact information for questions.

16. Complaints

If you believe BringRx has violated your privacy rights, you may submit a complaint to our Privacy Officer using the contact information provided below. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.

BringRx will not retaliate against you for filing a complaint.

If you have any questions about this Notice or your rights, please contact us at https://bringrx.com/contact