Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

MD Healthcare Clinic Corporation (“MD Healthcare Clinic,” “we,” “our,” or “us”) is committed to protecting the privacy and security of your health information. This Notice of Privacy Practices explains how we may use and disclose your protected health information (“PHI”), your rights regarding your health information, and our responsibilities under applicable federal and state privacy laws.

Your Rights

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities.

Obtain a Copy of Your Medical Record
You may ask to see or receive an electronic or paper copy of your medical record and other health information we maintain about you.

We will generally provide a copy or summary within the time required by applicable law. We may charge a reasonable, cost-based fee where permitted by law.

Ask Us to Correct Your Medical Record
You may ask us to correct health information that you believe is incorrect or incomplete.

We may deny your request in certain circumstances permitted by law. If we deny your request, we will provide an explanation.

Request Confidential Communications
You may ask us to contact you in a specific way, such as at a particular telephone number, or to send communications to a different address.

We will accommodate reasonable requests as required by law.

Ask Us to Limit What We Use or Share
You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

We are not required to agree to every request.

However, if you pay for a healthcare service or item completely out of pocket, you may ask us not to disclose information regarding that service or item to your health plan for payment or healthcare operations. We will honor the request when required by law unless disclosure is otherwise required by law.

Receive an Accounting of Certain Disclosures
You may request a list of certain disclosures of your health information made during the applicable period before your request.

The accounting will not include certain disclosures, such as many disclosures made for treatment, payment, healthcare operations, or disclosures you specifically authorized.

Receive a Copy of This Notice
You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

Choose Someone to Act for You
If you have given someone medical power of attorney, or if someone is your legal guardian or otherwise legally authorized to act on your behalf, that person may exercise your rights and make choices regarding your health information as permitted by law.

We may verify that the individual has the appropriate authority before taking action.

File a Complaint
If you believe your privacy rights have been violated, you may file a complaint directly with MD Healthcare Clinic Corporation by contacting our Privacy Officer.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

We will not retaliate against you for filing a complaint.

Your Choices

For certain health information, you may tell us your preferences regarding what we share.

Where applicable, you may tell us your preferences concerning:

• Sharing information with family members, friends, caregivers, or others involved in your care;
• Sharing information in a disaster-relief situation;
• Certain communications regarding our services; and
• Other uses and disclosures for which your authorization or choice is required.

If you are unable to tell us your preference—for example, if you are unconscious or experiencing an emergency—we may share information when we reasonably believe it is in your best interest and when permitted by law.

For certain uses and disclosures, including uses of your information for certain marketing purposes or the sale of your information, we will obtain your written authorization when required by law.

You may revoke an authorization in writing at any time, except to the extent that we have already acted in reliance upon it.

How We May Use and Disclose Your Health Information

We may use or disclose your health information for purposes permitted or required by law, including the following:

Treatment
We may use and disclose your health information to provide, coordinate, and manage your healthcare.

For example, we may share information with physicians, nurses, specialists, pharmacies, laboratories, home health providers, hospitals, or other healthcare professionals involved in your care.

Payment
We may use and disclose your health information to bill and obtain payment from health plans or other entities responsible for payment.

For example, we may provide information to your health insurance company to determine eligibility, obtain authorization, process a claim, or receive payment for services.

Healthcare Operations
We may use and disclose your information to operate our practice and improve the quality of care we provide.

This may include quality assessment, care coordination, staff training, credentialing, compliance activities, auditing, business planning, and other administrative activities.

Business Associates
We may share health information with third-party service providers that perform services on our behalf and require access to PHI.

When required by law, these business associates are contractually required to appropriately safeguard your health information.

Public Health and Safety
We may disclose health information for certain public health and safety activities permitted or required by law, including:

• Preventing or controlling disease;
• Reporting suspected abuse, neglect, or domestic violence;
• Reporting adverse reactions to medications or medical products;
• Preventing or reducing a serious threat to health or safety; and
• Complying with public health reporting requirements.

Complying With the Law
We may disclose your health information when required by federal, state, or local law.

Health Oversight Activities
We may disclose information to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, licensing, and disciplinary proceedings.

Workers' Compensation
We may disclose health information as permitted or required for workers' compensation programs and similar programs.

Law Enforcement and Other Government Requests
We may disclose health information for certain law enforcement purposes or government functions when permitted or required by law.

Lawsuits and Legal Proceedings
We may disclose health information in response to a valid court or administrative order, subpoena, discovery request, or other lawful process, subject to applicable legal protections.

Medical Examiners, Coroners, and Funeral Directors
We may disclose health information to coroners, medical examiners, and funeral directors when permitted or required by law.

Organ and Tissue Donation
We may disclose health information to organizations involved in organ, eye, or tissue donation and transplantation when applicable.

Research
We may use or disclose health information for research when the research meets applicable legal requirements.

Substance Use Disorder Records

To the extent MD Healthcare Clinic Corporation creates, receives, maintains, or transmits substance use disorder patient records protected by 42 CFR Part 2, additional federal confidentiality protections may apply. Such information will be used and disclosed in accordance with applicable federal law. Protected Part 2 records generally may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against a patient without the patient's written consent or an appropriate court order and subpoena as required by applicable law.

Our Responsibilities

MD Healthcare Clinic Corporation is required by law to:

• Maintain the privacy and security of your protected health information;
• Follow the duties and privacy practices described in the Notice currently in effect;
• Provide you with a copy of this Notice;
• Notify you as required by law if a breach occurs that may have compromised the privacy or security of your information; and
• Comply with applicable federal and state privacy requirements.

We will not use or disclose your health information other than as described in this Notice unless you authorize us to do so in writing or another use or disclosure is permitted or required by law.

If you provide written authorization, you may revoke that authorization in writing at any time, subject to applicable legal limitations.

Electronic Communications and Telehealth

MD Healthcare Clinic Corporation may provide healthcare services or communicate with patients through electronic systems, including patient portals, electronic health records, telephone communications, telehealth platforms, and other technologies.

We take reasonable and appropriate safeguards to protect health information transmitted or maintained electronically in accordance with applicable privacy and security requirements.

Changes to This Notice

We reserve the right to change the terms of this Notice and our privacy practices as permitted by law. Changes may apply to health information we already maintain as well as information we receive in the future.

When we make a material change to this Notice, the revised Notice will be available upon request, at our office, and on our website.

Questions or Complaints

If you have questions about this Notice, would like additional information regarding your privacy rights, or wish to file a privacy complaint, please contact:

You may also file a complaint with the:

MD Healthcare Clinic Corporation will not retaliate against you for exercising your privacy rights or filing a complaint.

Effective Date: August 13, 2026