ALLORI WELLNESS

NOTICE OF PRIVACY PRACTICES

Effective: October 1, 2025 | Revised: March 2026

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

I. OUR PLEDGE REGARDING YOUR HEALTH INFORMATION

Allori Wellness is committed to protecting the privacy of your health information. We create a record of the care and services you receive from us in order to provide quality care and comply with applicable legal requirements. This Notice applies to all records generated by this practice and describes how we may use and disclose your health information, your rights regarding that information, and our obligations under the law.

We are required by law to:

• Keep protected health information (PHI) that identifies you private.

• Provide you with this Notice of our legal duties and privacy practices.

• Follow the terms of the Notice currently in effect.

We may update the terms of this Notice at any time. Updated versions will be available upon request, in our office, and on our website.

II. HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

The following categories describe the ways we use and disclose health information. Not every use or disclosure in a category is listed; however, all permitted uses and disclosures fall within one of these categories. Please note that any patient information withheld may limit your outcomes and the care you receive.

For Treatment, Payment, or Health Care Operations: Federal privacy rules permit health care providers with a direct treatment relationship to use or disclose your PHI without written authorization for treatment, payment, or health care operations — including coordination with other providers, consultations, and referrals.

Lawsuits and Disputes: We may disclose health information in response to a court or administrative order, subpoena, or other lawful process, provided that reasonable efforts have been made to notify you or obtain a protective order.

III. USES AND DISCLOSURES REQUIRING YOUR AUTHORIZATION

Consultation Records: We maintain consultation records, and any use or disclosure of such records requires your written Authorization, unless the use or disclosure is:

• For use in your treatment.

• For training or supervising wellness consultants to improve service quality.

• For use in defending ourselves in legal proceedings you initiate.

• For use by the Secretary of Health and Human Services to investigate HIPAA compliance.

• Required by law, and limited to what the law requires.

• Required for certain health oversight activities.

• Required by a coroner performing duties authorized by law.

• Required to help avert a serious threat to the health and safety of others.

Marketing and Sale of PHI: We will not use or disclose your PHI for marketing purposes or sell your PHI in the course of business.

IV. USES AND DISCLOSURES NOT REQUIRING YOUR AUTHORIZATION

Subject to applicable legal limitations, we may use and disclose your PHI without authorization for the following purposes:

• When required by state or federal law.

• For public health activities, including reporting suspected abuse or preventing serious threats to health or safety.

• For health oversight activities, including audits and investigations.

• For judicial and administrative proceedings in response to a court or administrative order.

• For law enforcement purposes, including reporting crimes on our premises.

• To coroners or medical examiners performing duties authorized by law.

• For research purposes, subject to applicable legal requirements.

• For workers' compensation purposes, as required by law.

• For appointment reminders and information about treatment alternatives or health-related services we offer.

V. DISCLOSURES REQUIRING YOUR OPPORTUNITY TO OBJECT

Disclosures to Family, Friends, or Others: We may share your PHI with a family member, friend, or other person involved in your care or payment for your care, unless you object. In emergencies, consent may be obtained retroactively.

VI. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

Right to Request Limits on Use and Disclosure: You may request that we limit how we use or disclose your PHI for treatment, payment, or health care operations. We are not required to agree, but will consider all reasonable requests.

Right to Request Restrictions for Out-of-Pocket Expenses: If you have paid for a service entirely out of pocket, you may request that we not disclose related PHI to health plans for payment or operations purposes.

Right to Choose How We Contact You: You may request that we contact you in a specific manner or at a specific address, and we will honor all reasonable requests.

Right to See and Obtain Copies of Your PHI: You may request an electronic or paper copy of your records. We will provide your record or a summary within 30 days of a written request. A reasonable, cost-based fee may apply.

Right to a List of Disclosures: You may request an accounting of disclosures made for purposes other than treatment, payment, or operations. We will respond within 60 days. The list covers the prior six years. The first request each year is free; additional requests may incur a reasonable fee.

Right to Correct or Update Your PHI: If you believe your PHI is inaccurate or incomplete, you may request a correction. We may deny the request but will explain our reasoning in writing within 60 days.

Right to a Copy of This Notice: You may request a paper or electronic copy of this Notice at any time, even if you have previously agreed to receive it electronically.