NOTICE OF PRIVACY PRACTICES

Effective date: May 18, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices ("Notice") is provided by Regener8 Health & Wellness, LLC ("Regener8," "we," "our," "us") in compliance with the federal Health Insurance Portability and Accountability Act ("HIPAA") and applicable Florida law. It applies to all Protected Health Information ("PHI") created or received by us in the course of providing healthcare services.

Attorney review required. This is a starting draft based on the standard HIPAA NPP template. A Florida-licensed healthcare attorney should review and adapt the Florida-specific sections (mental health, HIV, sexually transmitted infections, substance use, minors) before publishing.

Our pledge

We are committed to protecting the privacy of your PHI. We are required by law to:

• Maintain the privacy of PHI.

• Provide you with this Notice of our legal duties and privacy practices regarding PHI.

• Notify you following a breach of unsecured PHI.

• Abide by the terms of the Notice currently in effect.

How we may use and disclose PHI

We may use and disclose your PHI without your written authorization for the following purposes:

Treatment

To provide, coordinate, or manage your healthcare. For example, sharing your information with the licensed clinician treating you, with a partner laboratory processing your blood work, or with a partner pharmacy filling a prescription.

Payment

To bill and obtain payment for services. For example, sending information to your insurance company for claims processing, or to our payment processor (Stax) for transaction handling.

Healthcare operations

To run our practice. Examples: quality reviews, training, credentialing, customer service, business management, audits, accreditation, and care-coordination activities.

As required by law

When federal, state, or local law requires the use or disclosure.

Public health and safety

To public-health authorities; for reporting suspected abuse, neglect, or domestic violence; to the FDA for adverse-event reports; to prevent or control disease; or in cases involving a serious threat to health or safety.

Health oversight, judicial proceedings, law enforcement

To agencies authorized by law to conduct audits, investigations, inspections, or licensure activities; in response to a court order, subpoena, warrant, summons, or similar process; for limited law-enforcement purposes.

Coroners, medical examiners, funeral directors, organ donation

For identification, cause of death, or to carry out duties authorized by law.

Workers' compensation

As authorized by, and to the extent necessary to comply with, workers' compensation laws.

Research

For research purposes if an Institutional Review Board has approved the protocol and waived authorization, or if we receive your authorization.

Military, national security, inmates

As required by military command authorities or for protective services for the President.

Uses and disclosures that require your written authorization

We will obtain your written authorization for:

• Marketing communications that involve PHI (with limited exceptions for face-to-face communications and promotional gifts of nominal value).

• Sale of PHI (we do not sell PHI).

• Most uses or disclosures of psychotherapy notes, where applicable.

• Any other use or disclosure not described in this Notice.

You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

Special protections under Florida law

Certain categories of information receive heightened protection under federal or Florida law and may require your specific authorization before disclosure, including:

• HIV / AIDS test results and treatment records.

• Mental-health records.

• Substance-use disorder records (42 CFR Part 2).

• Genetic testing information.

• Records of sexually transmitted infections.

• Records of minors regarding certain reproductive, mental-health, or substance-use services as protected by Florida law.

Your rights regarding PHI

You have the right to:

Inspect and copy

Request to inspect and obtain a copy of your medical and billing records, in paper or electronic form. We may charge a reasonable cost-based fee for copies. Some narrow exceptions apply (e.g., psychotherapy notes).

Amend

Request that we amend your record if you believe it is incorrect or incomplete. We may deny your request if the information was not created by us, is not part of the records we maintain, is not part of the records you would be permitted to inspect, or is accurate and complete.

Accounting of disclosures

Request a list of certain disclosures we made of your PHI. The list does not include disclosures for treatment, payment, healthcare operations, or those you authorized.

Restrictions

Request that we restrict how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree, except that we will agree to a request not to disclose PHI to a health plan if the disclosure is for payment or healthcare operations and you have paid for the service in full out of pocket.

Confidential communications

Request that we communicate with you about medical matters in a specific way or at a specific location (for example, only by mail to a specific address). We will accommodate reasonable requests.

Paper copy of this Notice

Request a paper copy of this Notice at any time, even if you have agreed to receive it electronically.

Notification of breach

Be notified if a breach occurs that may have compromised the privacy or security of your PHI.

How to exercise your rights

Submit requests in writing to:

Regener8 Privacy Officer
2901 NW Commerce Park Drive, Suite 1
Boynton Beach, FL 33426
Email: privacy@regener8now.com

We will respond to your request within the time frames required by HIPAA and Florida law.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer above, or with the U.S. Department of Health & Human Services Office for Civil Rights:

• Online: https://www.hhs.gov/ocr/

• Mail: 200 Independence Avenue, S.W., Washington, D.C. 20201

• Phone: 1-877-696-6775

You will not be retaliated against for filing a complaint.

Changes to this Notice

We may revise this Notice. The revised Notice will apply to all PHI we maintain. The most current version will be posted at regener8now.com and provided in the patient portal. We will provide a copy upon request.

Acknowledgment

You will be asked to acknowledge receipt of this Notice when you complete your intake. If you decline or are unable to acknowledge, we will document our good-faith effort and continue to provide care.