HIPAA Notice of Privacy Practices

This Notice describes how medical information about you may be used and disclosed and how you can get access to this information.

Please review it carefully.

1. Our Responsibilities

VantaRx, LLC ("VantaRx," "we," "us," or "our") is committed to protecting the privacy of your Protected Health Information ("PHI") as required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and applicable state laws.

We are required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this Notice of our legal duties and privacy practices
• Follow the terms of this Notice currently in effect
• Notify you following a breach of unsecured PHI, as required by law

2. How We May Use and Disclose Your Health Information

We may use and disclose your PHI for the following purposes without your written authorization:

Treatment

We may use or disclose PHI to healthcare providers involved in your care, including physicians, clinicians, pharmacies, and other authorized providers, to support telehealth services, prescriptions, and treatment coordination.

Payment

We may use or disclose PHI for billing, payment processing, and related activities, including communications with pharmacies, insurers, or third-party payers, as applicable.

Healthcare Operations

We may use or disclose PHI for healthcare operations such as:

• Quality assessment and improvement
• Care coordination
• Compliance, audits, and legal obligations
• Business management and administrative activities

3. Business Associates

VantaRx may share PHI with third-party service providers ("Business Associates") that perform services on our behalf, such as technology vendors, telehealth platforms, pharmacy fulfillment partners, or billing services.

All Business Associates are required by law and contract to safeguard your PHI.

4. Uses and Disclosures Required or Permitted by Law

We may disclose PHI without your authorization when required or permitted by law, including:

• Public health activities
• Health oversight activities
• Judicial or administrative proceedings
• Law enforcement purposes
• To prevent or lessen a serious and imminent threat to health or safety

5. Uses and Disclosures Requiring Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice, including:

• Marketing activities not otherwise permitted by law
• Sale of PHI, if applicable

You may revoke an authorization at any time in writing, except to the extent we have already relied on it.

6. Your Rights Regarding Your Health Information

You have the following rights regarding your PHI:

Right to Access

You may request to inspect or obtain a copy of your PHI, subject to certain legal limitations.

Right to Amend

You may request correction of PHI you believe is inaccurate or incomplete.

Right to an Accounting of Disclosures

You may request a list of certain disclosures of your PHI.

Right to Request Restrictions

You may request restrictions on certain uses or disclosures of your PHI. We are not required to agree to all requests.

Right to Request Confidential Communications

You may request communications in a specific manner or at a specific location.

Right to a Paper Copy

You may request a paper copy of this Notice at any time, even if you have agreed to receive it electronically.

7. Changes to This Notice

We reserve the right to change this Notice and make the revised Notice effective for all PHI we maintain. Any updated Notice will be posted on our Website and available upon request.

8. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services (HHS). You will not be retaliated against for filing a complaint.

9. Contact Information

If you have questions about this Notice or our privacy practices, contact: