Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Enneagon Health, A Professional Medical Corporation (“Enneagon Health,” “we,” “us”) is required by law to protect the privacy of your protected health information (“PHI”), to give you this notice of our legal duties and privacy practices, to notify you if a breach of your unsecured PHI occurs, and to follow the terms of the notice currently in effect.

How we may use and disclose your health information

Treatment

We may use and share your information with other physicians, hospitals, laboratories and professionals who are involved in your care — for example, sharing imaging or pathology results with a referring physician or a hospital where you have surgery.

Payment

We may use and share your information to bill and collect payment from you, your health plan or others — for example, giving your insurer information about a procedure so it will pay for it.

Health care operations

We may use and share your information to run our practice, improve your care and contact you when necessary — for example, quality review, training, appointment reminders, and work with business associates who perform services for us under written agreements that require them to protect your information.

Other uses and disclosures permitted or required by law

We may share your information without your written authorization when permitted or required by law, including: to comply with state and federal law; for public health activities (such as reporting disease, injury, product problems or suspected abuse or neglect); for health oversight activities; in response to a court or administrative order or other lawful process; for limited law enforcement purposes; with coroners, medical examiners and funeral directors; for organ and tissue donation; for certain research approved under privacy safeguards; to prevent a serious threat to health or safety; for specialized government functions such as military, veterans and national security purposes; and for workers’ compensation claims.

Family members and others involved in your care

Unless you object, we may share information relevant to your care or payment with a family member, friend or other person you identify, or in a disaster-relief situation. If you are unable to tell us your preference, we may share information if we believe it is in your best interest.

Uses that require your written authorization

We will not use or share your information for marketing, sell your information, or share psychotherapy notes without your written authorization. Other uses and disclosures not described in this notice will be made only with your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already relied on it.

California law may give certain information extra protection — for example, mental health records, HIV test results, genetic test results, and substance use disorder treatment records — and we will follow those stricter requirements where they apply.

Your rights

• Get a copy of your medical record. You may ask to see or get an electronic or paper copy of your medical and billing records. We may charge a reasonable, cost-based fee.
• Ask us to correct your record. You may ask us to amend information you believe is incorrect or incomplete. We may say “no,” but we will tell you why in writing.
• Request confidential communications. You may ask us to contact you in a specific way (for example, a particular phone number) or at a different address. We will agree to reasonable requests.
• Ask us to limit what we use or share. You may ask us not to use or share certain information. We are not required to agree, except that if you pay for a service in full out of pocket, you may ask us not to share that information with your health plan, and we will agree unless the law requires us to share it.
• Get a list of those with whom we have shared information. You may ask for an accounting of certain disclosures we made in the six years before your request.
• Get a copy of this notice. You may ask for a paper copy of this notice at any time.
• Choose someone to act for you. If you have given someone medical power of attorney, or someone is your legal guardian, that person can exercise your rights.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, DC 20201; 1-877-696-6775; www.hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.

Changes to this notice

We may change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on request, in our offices and on our website.

Contact

Privacy Officer, Enneagon Health, A Professional Medical Corporation
Phone: (424) 529-6755

Effective date: October 5, 2026