Notice of Privacy Practices

Our Commitment to Your Privacy

Clinical services through rikuhealth.com are provided by a licensed Professional Corporation ("the Practice"), which is the HIPAA-covered entity. Riku Health MSO, LLC provides administrative and technology support under a Business Associate Agreement with the Practice. This Notice of Privacy Practices applies to the Practice and its clinical operations.

This Notice describes how the Practice may use and disclose your Protected Health Information (PHI) to carry out treatment, payment, and health care operations, and for other permitted purposes. It also describes your rights regarding your PHI.

The Practice is required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state law to maintain the privacy of your PHI, provide you with this Notice, and follow the terms of the Notice currently in effect.

Uses and Disclosures of Your Health Information

We may use and disclose your PHI without your written authorization for the following purposes:

Treatment: We may use or disclose your PHI to provide, coordinate, or manage your healthcare. For example, we may share your information with other healthcare providers involved in your care.

Payment: We may use or disclose your PHI to obtain payment for services we provide to you, including billing your insurance company.

Health Care Operations: We may use or disclose your PHI for internal operations such as quality assessment, training, and improving our services.

As Required by Law: We will disclose your PHI when required to do so by federal, state, or local law, such as reporting certain communicable diseases or responding to court orders.

Public Health Activities: We may disclose PHI to public health authorities for activities such as disease prevention or control.

Serious Threat to Health or Safety: We may disclose your PHI if we believe, in good faith, that it is necessary to prevent or lessen a serious and imminent threat to your health or safety or the health or safety of others.

Uses and Disclosures Requiring Your Authorization

Other uses and disclosures of your PHI not described in this Notice will be made only with your written authorization. This includes, but is not limited to:

• Most uses and disclosures of psychotherapy notes. • Uses and disclosures for marketing purposes. • Sale of your PHI.

You may revoke an authorization in writing at any time, except to the extent that we have already taken action in reliance on the authorization.

Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI:

Right to Access: You have the right to inspect and obtain a copy of your PHI maintained in a designated record set. We may charge a reasonable cost-based fee for copies.

Right to Request Amendments: You may request that we amend PHI that you believe is inaccurate or incomplete. We may deny your request under certain circumstances.

Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your PHI.

Right to Request Restrictions: You may request restrictions on uses and disclosures of your PHI. We are not required to agree to such restrictions except as required by law.

Right to Request Confidential Communications: You may request that we communicate with you in a particular way or at a certain location. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice: You have the right to a paper copy of this Notice upon request, even if you agreed to receive it electronically.

Right to Notification of Breach: You have the right to be notified in the event of a breach of your unsecured PHI.

To exercise any of these rights, please contact us at hello@rikuhealth.com.

Our Duties

We are required by law to maintain the privacy of your PHI and to provide you with this Notice. We are required to abide by the terms of the Notice currently in effect. We reserve the right to change our privacy practices and the terms of this Notice at any time. Any changes will apply to PHI we already maintain about you as well as PHI we receive in the future. We will make the revised Notice available upon request.

How to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights.

To file a complaint with us, contact:

Riku Health MSO, LLC, Privacy Officer Email: hello@rikuhealth.com

To file a complaint with HHS: U.S. Department of Health and Human Services Office for Civil Rights 200 Independence Avenue, S.W. Washington, D.C. 20201 Toll-free: 1-877-696-6775 Website: hhs.gov/ocr/privacy

You will not be penalized for filing a complaint.

Contact Us

If you have questions about this Notice or about your privacy rights, please contact us at:

Riku Health MSO, LLC Email: hello@rikuhealth.com