PRIVACY POLICY & HIPAA NOTICE

Website Privacy Policy: This covers how we collect and use information when you visit our website, fill out forms, schedule appointments, or interact with our digital platforms. It includes details about cookies, analytics, marketing, and general website usage.

HIPAA Notice of Privacy Practices: This covers how we use and disclose your Protected Health Information (PHI) in connection with providing medical care and treatment services. This notice is required by federal law and explains your rights regarding your medical records and health information.

When you use our website or services, we may collect:

Personal Information: Name, email address, phone number, date of birth, mailing address, and payment information you provide when creating an account or scheduling an appointment.

Technical Information: IP address, browser type, device information, operating system, and website usage data collected through cookies and analytics tools.

Health Information: Medical history, symptoms, medications, allergies, and other health-related information you provide during registration or consultations.

We use the information we collect to:

• Schedule and facilitate virtual medical appointments
• Provide telehealth services and communicate with healthcare providers
• Process payments and manage billing
• Send appointment reminders and service updates
• Improve our website, services, and user experience
• Respond to your questions and support requests
• Comply with legal obligations and regulatory requirements
• Analyze website traffic and usage patterns

Our website may use cookies, web beacons, pixels, analytics tools, and similar technologies to:

• Understand website traffic and visitor behavior
• Improve website performance and user experience
• Measure general campaign effectiveness and outreach performance
• Enhance site functionality and personalization

Healthcare-Specific Limitations: DoCare Health Online does not use website tracking technologies to intentionally disclose Protected Health Information for advertising purposes without appropriate authorization or legal basis. To protect your privacy, you should avoid submitting sensitive medical information through general website contact forms or public-facing pages. Secure healthcare services, patient intake, and medical consultations are conducted through dedicated secure platforms with appropriate safeguards.

Advertising and Analytics Disclosures: Some third-party analytics or advertising-related tools integrated into our website may collect limited technical data such as IP address, device type, browser type, operating system, referral pages, and interactions with public website pages (such as pages visited and time spent on the site). These tools are intended to help us evaluate website traffic, understand how visitors find our site, and assess the performance of our outreach efforts. Secure patient portals, appointment scheduling systems, intake forms, and healthcare-service interactions may be governed by separate technical safeguards and third-party platform terms as described in the Third-Party Platforms section of this policy.

Your Cookie Choices: You can control and manage cookies through your web browser settings. Most browsers allow you to view, delete, or block cookies. Please note that if you disable or refuse cookies, some features of our website may not function properly or may be unavailable. For more information about managing cookies, consult your browser's help documentation.

We work with trusted third-party service providers to operate our platform and deliver services, including:

• Appointment Scheduling and Patient Portal: Functions such as appointment scheduling, patient portal access, telehealth video consultations, and related healthcare services may be facilitated by third-party platforms including Optimantra or similar service providers. When you use these services, you may be directed to their platforms where additional terms of use and privacy practices may apply.
• Payment Processors: To securely process credit card and payment transactions
• Pharmacy Partners: To send prescriptions to your preferred local pharmacy
• Cloud Storage Providers: To securely store and manage your information
• Analytics Services: To understand website usage and improve our platform
• Email and Communication Tools: To send appointment confirmations and updates

All service providers are required to maintain strict confidentiality and comply with applicable privacy laws. We do not sell, rent, or share your personal information with third parties for their marketing purposes. When using third-party platforms, please review their respective privacy policies and terms of service.

We take data security seriously and have implemented administrative, technical, and physical safeguards designed to help protect your information, including:

• Technical Safeguards: Encryption of data in transit and at rest, secure socket layer (SSL) technology, firewalls, and intrusion detection systems
• Physical Safeguards: Secure servers with restricted physical access and environmental controls
• Administrative Safeguards: Access controls limiting who can view your information, regular security audits, staff training on privacy and security practices, and business associate agreements with service providers

While we implement these measures designed to help protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security. We encourage you to use strong passwords, enable two-factor authentication when available, and protect your account credentials.

You have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate or incomplete information
• Request deletion of your information, subject to legal requirements
• Opt out of marketing communications at any time
• Disable cookies through your browser settings

To exercise these rights, please contact us using the information provided at the end of this document.

Effective Date: March 14, 2026

Last Updated: March 14, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

DoCare Health Online, PLLC is required by federal law to maintain the privacy of your Protected Health Information (PHI) and to provide you with this notice of our legal duties and privacy practices regarding your health information. We are required to follow the terms of this notice currently in effect.

We are required by federal law to:

• Maintain the privacy and security of your Protected Health Information
• Provide you with this notice of our privacy practices
• Follow the terms of the notice currently in effect
• Notify you if we are unable to agree to a requested restriction
• Notify you in the event of a breach of your unsecured PHI

DoCare Health Online may use and disclose your Protected Health Information for the following purposes:

For Treatment: We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes consultations with physicians, nurses, and other healthcare professionals involved in your care, as well as prescriptions and referrals. For example, we may share your medical history with a consulting specialist or send prescription information to your pharmacy.

For Payment: We may use and disclose your PHI to bill and collect payment for treatment and services. This includes working with payment processors, billing services, and verifying coverage with insurance companies if applicable.

For Healthcare Operations: We may use and disclose your PHI for our healthcare operations, which include quality assessment and improvement activities, reviewing the competence or qualifications of healthcare professionals, conducting training programs, accreditation activities, and general business management functions.

As Required by Law: We may use and disclose your PHI when required by federal, state, or local law. This includes reporting to public health authorities for disease prevention, responding to court orders or subpoenas, reporting suspected abuse or neglect, cooperating with law enforcement when legally required, and complying with workers' compensation laws.

Other Permitted Uses: We may also use and disclose your PHI as otherwise permitted by applicable law, such as for research purposes (with appropriate safeguards), to avert a serious threat to health or safety, for specialized government functions, or in limited circumstances involving coroners, medical examiners, and funeral directors.

Uses and Disclosures Requiring Your Authorization: Other uses and disclosures not described in this notice will be made only with your written authorization. You may revoke your authorization at any time in writing, except to the extent we have already taken action based on your authorization.

Certain uses and disclosures of your Protected Health Information require your written authorization before we may proceed. These include:

• Psychotherapy Notes: Most uses and disclosures of psychotherapy notes (if we maintain such notes) require your written authorization, except for certain treatment, payment, or healthcare operations purposes as permitted by law.
• Marketing Communications: We will not use or disclose your PHI for marketing purposes without your written authorization. This does not include communications about treatment alternatives or health-related products and services that are part of your care.
• Sale of Protected Health Information: We will not sell your PHI without your written authorization as defined by HIPAA regulations.
• Other Purposes: Any other use or disclosure of your PHI not described in this notice will only be made with your written authorization.

Right to Revoke Authorization: You have the right to revoke your authorization at any time by submitting a written notice to our Privacy Officer. The revocation will not affect any actions we took before receiving your revocation, but we will not make any further uses or disclosures based on that authorization.

You have the following rights regarding your Protected Health Information:

• Right to Request Access to Records: You have the right to inspect and obtain copies of your medical records and billing information. We will respond to your request within 30 days. We may charge a reasonable, cost-based fee for copying, postage, and summary preparation if requested.
• Right to Request Amendments: If you believe your health information is incorrect or incomplete, you may request that we amend it. We will respond within 60 days and may deny your request in certain circumstances, but you may submit a statement of disagreement.
• Right to Request Restrictions: You may ask us to limit how we use or disclose your PHI for treatment, payment, or healthcare operations, or to limit disclosures to family members or others involved in your care. We will consider your request but are not legally required to agree to all restrictions, except in certain circumstances involving disclosure to a health plan.
• Right to Request Confidential Communications: You may request that we communicate with you about your health matters in a specific way or at a specific location (for example, by sending communications to a different address). We will accommodate reasonable requests.
• Right to Receive an Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your PHI within the past six years (or such shorter period as you request), excluding disclosures for treatment, payment, healthcare operations, and certain other disclosures.
• Right to a Paper or Electronic Copy of This Notice: You have the right to receive a paper or electronic copy of this HIPAA Notice of Privacy Practices at any time by contacting us.

To exercise any of these rights, please submit a written request to our Privacy Officer using the contact information at the end of this document.

If you believe your privacy rights have been violated or you have concerns about our privacy practices, you have the right to file a complaint. You will not be retaliated against in any way for filing a complaint.

To file a complaint with DoCare Health Online: Contact our Privacy Officer using the contact information provided at the end of this document. Please include your name, contact information, and a description of your concern.

To file a complaint with the federal government: You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by:

• Visiting: www.hhs.gov/ocr/privacy/hipaa/complaints/
• Calling: 1-877-696-6775
• Writing to: U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201

There is no penalty or retaliation for filing a complaint. Your access to care and services will not be affected.

Services Subject to Applicable Law: All services offered by DoCare Health Online are provided subject to applicable federal and state laws and regulations. Telehealth and medical services are only provided where legally permitted.

Provider Licensure: Our healthcare providers are licensed professionals who are authorized to practice in the states where they provide services. Services are only provided where providers hold appropriate licensure as required by law. Patients are responsible for ensuring they are located in a state where our providers are licensed when receiving services.

State-Specific Requirements: We adhere to state-specific requirements regarding informed consent, establishment of patient-provider relationships, prescribing practices, and telehealth standards of care.

Website Content Disclaimer: The content on this website is for general informational purposes only and does not constitute medical advice. It is not intended to be a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified healthcare provider with questions about a medical condition.

Emergency Care: Our telehealth services are not appropriate for medical emergencies. If you are experiencing a medical emergency, call 911 or go to the nearest emergency room immediately. Do not use our telehealth services for emergency or life-threatening conditions. Our services are designed for non-emergency medical consultations and care.

Not a Complete Care Solution: Telehealth services have limitations and may not be appropriate for all conditions. Your healthcare provider will determine whether telehealth is suitable for your specific medical needs.

All medical professionals providing care through DoCare Health Online, including physicians, nurse practitioners, and physician assistants, hold active professional licenses in their respective states and are credentialed to provide telehealth services.

Verification of Licensure: Patients may verify the licensure status and public professional information of any healthcare provider by contacting the appropriate official state licensing authority in the state where the provider is licensed. State licensing boards maintain public records of licensed professionals.

For questions about provider credentials or to request information about the providers caring for you, please contact us directly using the information at the end of this document. We maintain professional liability insurance and follow applicable standards of care for telemedicine practice.

We reserve the right to update this Privacy Policy and HIPAA Notice of Privacy Practices as needed to reflect changes in our practices, services, technologies, or legal requirements.

Notification of Changes: Material changes to this policy will be reflected by an updated "Effective Date" and "Last Updated" date at the top of this document. For significant changes that may affect your rights or how we handle your information, we will provide additional notice through email, a prominent notice on our website, or other appropriate means.

HIPAA Notice Changes: We reserve the right to change the terms of our HIPAA Notice of Privacy Practices and to make the new provisions effective for all Protected Health Information we maintain, including information created or received before the change. If we make material changes to our HIPAA notice, we will post the revised notice on our website and make copies available upon request.

Continued use of our services after changes indicates your acceptance of the updated terms. We encourage you to review this policy periodically for any updates.