Notice of Privacy Practices

Effective date: 18 February 2025

NOTICE OF PRIVACY PRACTICES FOR VIRA HEALTH (IL), PLLC AND OTHER VIRA HEALTH ENTITIES WHO PARTICIPATE TOGETHER IN AN ORGANIZED HEALTH CARE ARRANGEMENT

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) provides standards for how medical information should be used and disclosed by healthcare providers, health plans, and other covered entities. Vira Health (IL), PLLC (An Illinois Professional Corporation) and other Vira Health medical entities, along with any independent contracted affiliates (collectively known as “Vira Health Medical”, “we”, “our” or “us”) is a health care provider that both directly delivers health care services through its employees, including licensed health care providers, to deliver health care services.

Please note that by requesting telehealth consultations on the website (the “Site”), you accept the practices described in this Notice of Privacy Practices. If you do not agree to this Notice, please do not use any telehealth consultation services.

Our uses and disclosures?

Vira Health Medical will typically use or share your health information in the following ways:

• • Treat you and run our organization. We can use your health information to provide you with the service and manage your treatment. We can share it with other professionals you are treating you, such as when you are referred to another health professional for further treatment. We may also use your health information to review and improve the quality of care we provide. By using our services, you hereby explicitly consent to the sharing of information like your name, age, gender, health information, insurer information.

• • Appointment reminders. We may use and disclose medical information to contact and remind you about appointments.

• • Bill for our services. We use and share your health information to bill and get payment from you or from insurers as the case may be.

• • Confirm your eligibility to our services. We use and share your health information to confirm eligibility for our services and for insurance coverage.

• • Help with public health and safety issues. We can share health information about you for certain situations such as preventing disease, helping with product recalls, reporting adverse reactions to medications,  reporting suspected abuse, neglect, or domestic violence; preventing or reducing a serious threat to anyone’s health or safety.

• • Comply with the law. We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if they want to see that we are complying with federal privacy law.

• • Worker’s compensation, law enforcement and government requests. We can use or share health information about you:

• • For workers’ compensation claims

• • For law enforcement purposes or with a law enforcement official

• • With health oversight agencies for activities authorized by law

• • For special government functions such as military, national security, and presidential protective services

• • Respond to lawsuits and legal actions. We can share health information about you in response to a court or administrative order, or in response to a subpoena.

Your choices regarding your protected health information

For certain health information, you can share your choices about what we share. If you have a clear preference for how we share your information in the situations described below, do let us know:

• • share your information with your family, close friends, or others involved in your care

• • share your information in a disaster relief situation.

If you are not able to tell us your preference, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.

We will never share your information unless you give us written permission or unless permitted by law, for the following purposes:

• • marketing

• • sale of your information.

You can contact us at privacy@vira.health.

Your rights regarding your protected health information

You have certain rights regarding protected health information that we maintain about you, including rights to:

• • Get an electronic or paper copy of your medical record. You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. To request a copy of your records, contact us at: privacy@vira.health.

We will provide a copy or a summary of your health information, usually within 30 days of your request.

• • Ask us to correct your medical and other records. You can ask us to correct health or other information about you that you think is incorrect or incomplete. To request that we correct your records , contact us at: privacy@vira.health. After verification we will let you know if it is possible to correct your records.

• • Request confidential communications. You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. After verification we will let you know if it is possible to do.

• • Ask us to limit what we use or share. You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request, and we may say “no” if it would affect your care. If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say “yes” unless a law requires us to share that information.

• • Get a list of those with whom we’ve shared information. You can ask for a list (accounting) of the times we’ve shared your health information for 6 years prior to the date you ask, who we shared it with, and why. We will include all disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.

• • Get a copy of this privacy notice. You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.

• • Choose someone to act for you. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority and can act for you before we take any action.

• • File a complaint if you feel your rights are violated. You can complain if you feel we have violated your rights by contacting us at privacy@vira.health.

You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.

We will not retaliate against you for filing a complaint.

Vira Health Medical’s responsibilities

We are required by law to maintain the privacy and security of your protected health information.

We will let you know promptly if a breach occurs that may have compromised the privacy or security of

your information.

We must follow the duties and privacy practices described in this notice and give you a copy of it.

We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Contact us @privacy@vira.health if you change your mind.

Changes to this Notice of Privacy Practices

Vira Health Medical reserves the right to update this Notice of Privacy Practices from time to time. Please visit this page periodically to be aware of any changes.

The policies indicated in this Notice will remain effective, even if you are no longer using our Site or services.

Scope of this Notice of Privacy Practices

At times, Vira Health Medical may work with a third party contracted provider to deliver services to you. To the extent that there is a conflict between Vira Health Medical’s Notice of Privacy Practices and that of a third party contracted provider regarding how your health information will be handled, the Notice of Privacy Practices that is more restrictive regarding the use, access and disclosure of your health information will apply.