HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Who We Are

This notice is provided by Halo Health Inc. and the independent licensed healthcare providers who deliver care through our telehealth platform. We are required by law to maintain the privacy of your Protected Health Information (PHI), provide you with this notice of our legal duties and privacy practices, and follow the terms of this notice currently in effect.

2. How We Use and Disclose Your Health Information

We may use and disclose your PHI for the following purposes without your written authorization:

• Treatment: To provide, coordinate, and manage your healthcare. This includes sharing information with your provider, pharmacies that compound and dispense your medications, and laboratories that process your bloodwork.
• Payment: To bill and collect payment for the services we provide. This includes verifying coverage, processing claims, and managing your account.
• Healthcare Operations: For quality assurance, credentialing, compliance audits, and operational activities necessary to run our platform.
• As Required by Law: When required by federal, state, or local law, including public health reporting, communicable disease prevention, and court orders.
• Health and Safety: To prevent or lessen a serious and imminent threat to your health or safety or the health or safety of the public.

3. Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this notice, including marketing communications, sale of your PHI, and most uses of psychotherapy notes. You may revoke your authorization at any time in writing, except to the extent we have already taken action in reliance on it.

4. Your Rights

You have the following rights regarding your health information:

• Right to Access: You may request copies of your health records. We will provide them within 30 days of your request.
• Right to Amend: You may request that we correct inaccurate or incomplete information in your health records.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI.
• Right to Request Restrictions: You may request restrictions on certain uses and disclosures of your PHI, though we are not always required to agree.
• Right to Confidential Communications: You may request that we communicate with you by alternative means or at alternative locations.
• Right to a Paper Copy: You may request a paper copy of this notice at any time.
• Right to Be Notified of a Breach: You will be notified if a breach of your unsecured PHI occurs.

5. Our Responsibilities

• We are required by law to maintain the privacy and security of your PHI.
• We will notify you promptly if a breach occurs that may have compromised your PHI.
• We will not use or share your information other than as described in this notice unless you give us written permission.
• We will not use your information for marketing purposes without your authorization.
• We will not sell your information without your authorization.

6. Filing a Complaint

If you believe your privacy rights have been violated, you may file a complaint with:

• Halo Health Inc. — Contact our Privacy Officer at privacy@tryhalo.co
• U.S. Department of Health and Human Services— Office for Civil Rights. You may file a complaint online at hhs.gov/ocr/complaints or by mail.

You will not be penalized or retaliated against for filing a complaint.

7. Changes to This Notice

We reserve the right to change this notice and to make the revised notice effective for PHI we already have as well as any information we receive in the future. The current notice will always be posted on our website at tryhalo.co/hipaa.

8. Contact Information

For questions about this notice or to exercise your rights, contact:

Halo Health Inc.
Privacy Officer
Email: privacy@tryhalo.co