HIPAA Privacy Practices

Email: concierge@sozarahealth.com

2) Our Duties

We are required by law to:

• Maintain the privacy of your PHI
• Provide you with this Notice of our legal duties and privacy practices
• Follow the terms of this Notice currently in effect

3) How we may use and disclose your PHI (without your written authorization)

HIPAA allows us to use and disclose your PHI for certain purposes without your written authorization, including:

A. Treatment

We may use and disclose PHI to provide, coordinate, or manage your care and related services. This includes sharing PHI with other healthcare providers involved in your care.

B. Payment

We may use and disclose PHI to bill and collect payment for services, including disclosures to health plans or other payors as permitted.

C. Health CARE operations

We may use and disclose PHI for operations such as quality assessment and improvement activities, training, accreditation, licensing, auditing, business planning, and general administrative activities.

D. Appointment reminders and communications

We may contact you to remind you of appointments or provide information about your care, services, or scheduling.

E. Individuals involved in your care

We may disclose PHI to a family member, friend, or other person involved in your care or payment for your care, unless you object, and as permitted by law.

F. Business associates

We may share PHI with third-party “business associates” that perform functions on our behalf (such as billing, scheduling, IT support). Business associates are required by law to safeguard PHI.

Consent to Business Associate Agreements. By submitting any personal health information through this website — including but not limited to responses on our Digital Health Assessment, Intake Forms, Contact Forms, appointment requests, secure messages, or file uploads — you acknowledge and consent that SOZARA Health and Longevity may transmit and store that information through third-party service providers who process protected health information on our behalf. You further acknowledge that each such provider is bound to SOZARA by a written Business Associate Agreement (“BAA”) as required by 45 C.F.R. §§ 164.502(e) and 164.504(e) of the HIPAA Privacy Rule, requiring the provider to safeguard your PHI and to use or disclose it only as permitted by the BAA and applicable law. A current list of categories of business associates (for example, our secure hosting and messaging platforms, our electronic health record vendor, our lab and pharmacy partners, and our appointment and payment processors) is available on request from our Privacy Officer at concierge@sozarahealth.com.

G. As required by law

We may disclose PHI when required to do so by federal, state, or local law.

H. Public HEALTH and safety

We may disclose PHI for certain public health activities, reporting, and to prevent or lessen a serious threat to health or safety, as permitted by law.

I. Health oversight activities

We may disclose PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.

J. Lawsuits and disputes

We may disclose PHI in response to a court order or lawful process, as permitted by law.

K. Law ENFORCEMENT

We may disclose PHI to law enforcement officials as permitted by law (for example, in response to a lawful order or to report certain crimes).

L. Coroners/MEDICAL examiners and funeral directors

We may disclose PHI to coroners or medical examiners for identification purposes or determining cause of death, and to funeral directors as necessary.

M. National security and intelligence activities

We may disclose PHI to authorized federal officials for lawful national security and intelligence activities.

N. Inmates and correctional institutions

If you are an inmate, we may disclose PHI to correctional institutions or law enforcement officials as permitted by law.

4) Uses and disclosures that require your written authorization

We will obtain your written authorization for uses and disclosures not described in this Notice unless an exception applies.

5) Your RIGHTS regarding your PHI

You have the right to:

A. Inspect and copy

You may request to inspect or obtain a copy of PHI we maintain about you. Requests must be in writing. We may charge a reasonable, cost-based fee as permitted by law.

B. Request an amendment

If you believe your PHI is incorrect or incomplete, you may request an amendment in writing, including the reason for the request. We may deny your request in certain circumstances.

C. Request an accounting of disclosures

You may request a list (“accounting”) of certain disclosures of your PHI made by us. Requests must be in writing and may specify a time period.

D. Request confidential communications

You may request that we communicate with you in a certain way or at a certain location (for example, only at work or only by mail). Requests must be in writing.

E. Request RESTRICTIONS

You may request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations. We are not required to agree to all requests.

F. Receive a paper copy

You have the right to a paper copy of this Notice, even if you have agreed to receive it electronically.

G. Breach notification

You have the right to be notified if a breach of your unsecured PHI occurs, as required by law.

6) Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services.

• To file a complaint with us: Email concierge@sozarahealth.com or request a mailing address.
• To file a complaint with HHS: Office for Civil Rights (OCR). You may submit a complaint through OCR channels.

You will not be penalized for filing a complaint.

7) Changes to this Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as any PHI we receive in the future. The current Notice will be available at our facility and on our website.

8) Availability

This Notice is posted at sozarahealth.com under the “HIPAA” link in the footer and is available upon request in paper form.