NOTICE OF PRIVACY PRACTICES (HIPAA) Last Updated: February 5th 2026 This Notice of Privacy Practices (“Notice”) describes how Medical Weight Loss Solutions, LLC (“we,” “us,” or “our”) may use and disclose your Protected Health Information (“PHI”), and how you can get access to this information. Please review it carefully. PHI is information that identifies you and relates to your past, present, or future physical or mental health condition, the healthcare services you receive, or payment for those services. 1) Our Responsibilities We are required by law to: Maintain the privacy and security of your PHI Provide you with this Notice of our legal duties and privacy practices Follow the terms of the Notice currently in effect Notify you if a breach occurs that may have compromised the privacy or security of your PHI 2) How We May Use and Disclose Your PHI (Without Your Written Authorization) The following categories describe ways we may use and disclose PHI. Not every use or disclosure is listed, but all uses and disclosures fall within one of these categories. A) For Treatment We may use and disclose your PHI to provide, coordinate, or manage your care and related services. Examples: Sharing information with providers involved in your care Coordinating prescriptions, treatment plans, and follow-up care Referring you to another provider when appropriate B) For Payment We may use and disclose your PHI to obtain payment for services provided. Examples: Billing for services Verifying benefits or coverage (when applicable) Processing payments or collections C) For Healthcare Operations We may use and disclose your PHI for clinic operations necessary to run our practice and ensure quality care. Examples: Quality assessment and improvement activities Staff training and credentialing Audits, compliance, and business planning 3) Other Permitted Uses and Disclosures (Without Authorization) A) Appointment Reminders and Communication We may contact you to remind you about appointments or provide information about your treatment. We may contact you by phone, voicemail, text message, email, or mail using the contact information you provide. B) Individuals Involved in Your Care We may share your PHI with a family member, friend, or other person involved in your care or payment for your care, unless you object. If you are not present or are unable to agree or object, we may use professional judgment to determine whether sharing information is in your best interest. C) Business Associates We may disclose PHI to third parties that perform services for us (called “Business Associates”), such as billing services, electronic record systems, secure communications platforms, analytics providers, or other vendors. Business Associates are required by law to protect PHI and use it only as permitted. D) As Required by Law We may use or disclose PHI when required to do so by federal, state, or local law. E) Public Health and Safety We may disclose PHI for public health activities, such as: Reporting diseases, adverse reactions, or product problems Reporting suspected abuse, neglect, or domestic violence (as permitted or required by law) Preventing or reducing a serious threat to health or safety F) Health Oversight Activities We may disclose PHI to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure actions. G) Legal Proceedings We may disclose PHI in response to a court order, subpoena, discovery request, or other lawful process, as permitted by law. H) Law Enforcement We may disclose PHI for law enforcement purposes when required or permitted by law, such as in response to a warrant, summons, or similar legal process. I) Coroners, Medical Examiners, and Funeral Directors We may disclose PHI to coroners, medical examiners, and funeral directors as necessary to carry out their duties. J) Organ and Tissue Donation We may disclose PHI to organizations involved in organ, eye, or tissue donation and transplantation. K) Workers’ Compensation We may disclose PHI as authorized and necessary to comply with laws relating to workers’ compensation or similar programs. L) Research We may use or disclose PHI for research purposes only as permitted by law and subject to required protections. M) Military, National Security, and Protective Services We may disclose PHI for specialized government functions, including military and veterans’ activities, national security and intelligence activities, and protective services for the President or other authorized persons. N) Inmates If you are an inmate of a correctional institution, we may disclose PHI to the correctional institution or law enforcement official as permitted by law. 4) Uses and Disclosures That Require Your Written Authorization We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice, unless otherwise permitted or required by law. In most cases, we must obtain your written authorization for: Marketing purposes (certain communications) Sale of PHI (we do not sell PHI) Certain disclosures of psychotherapy notes (if applicable) You may revoke an authorization at any time in writing. Revocation will not apply to actions already taken based on your authorization. 5) Your Rights Regarding Your PHI You have the following rights regarding your PHI: A) Right to Get a Copy of This Notice You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically. B) Right to Inspect and Get a Copy of Your PHI You may request to inspect or receive a copy of your medical records and other PHI we have about you. We may charge a reasonable, cost-based fee as permitted by law. C) Right to Request an Amendment If you believe information in your record is incorrect or incomplete, you may request an amendment. We may deny your request in certain cases, but we will provide a written explanation. D) Right to Request Restrictions You may request restrictions on how we use or disclose your PHI for treatment, payment, or operations. We are not required to agree to all restrictions, but if we do agree, we will follow the restriction. E) Right to Request Confidential Communications You may request that we communicate with you in a specific way (for example, only by mail or only at a specific phone number). We will accommodate reasonable requests. F) Right to Get an Accounting of Disclosures You may request a list (accounting) of certain disclosures of your PHI made within the past six (6) years, excluding disclosures for treatment, payment, operations, and certain other exceptions. G) Right to Get a Copy of Your Records in an Electronic Format If your PHI is maintained electronically, you may request an electronic copy, or that we send it to a person or entity you choose, as permitted by law. H) Right to Choose Someone to Act for You If you have given someone medical power of attorney, or if someone is your legal guardian, that person can exercise your rights and make choices about your PHI. We will verify the person’s authority before taking action. I) Right to File a Complaint You may file a complaint if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint. You may file a complaint with: Medical Weight Loss Solutions, LLC (contact information below), and/or The U.S. Department of Health and Human Services (HHS), Office for Civil Rights 6) Our Right to Change This Notice We reserve the right to change this Notice at any time. Any changes will apply to all PHI we maintain. The updated Notice will be available upon request and posted on our website. 7) Questions and Contact Information If you have questions about this Notice, want to exercise your rights, or want to file a complaint, contact: Medical Weight Loss Solutions, LLC 665 N Colony Rd, J, Wallingford, CT 06492 Phone: 203-269-8000 Email: kym@medweightlosssolutions.com