Notice of Privacy Practices

This Notice applies to medical services provided by the following professional medical entities (“We,” “Us,” or “Our”):

• HLTH Lab Medical LLC
• Doctors Office & Walk-In Clinic CA, Inc.
• Doctors Office CT PLLC

These entities provide medical care and are covered entities under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Ozara (HLTH LAB Inc.) provides administrative and technology support services and may act as a Business Associate to these professional entities where applicable.

We are required by law to:

• Maintain the privacy of your protected health information (PHI)
• Provide you with this Notice of our legal duties and privacy practices
• Follow the terms of this Notice currently in effect
• Notify you if a breach of unsecured PHI occurs

We may use and disclose your PHI for the following purposes:

1. Treatment

We may use your PHI to provide medical care and services.

Examples:

• Sharing information with clinicians involved in your care
• Reviewing laboratory or diagnostic results
• Consulting with other healthcare providers

Telehealth and secure messaging may be used in providing care.

2. Payment

We may use and disclose PHI to obtain payment for services provided.

Examples:

• Billing your insurance company
• Verifying eligibility
• Collecting copayments or outstanding balances

3. Healthcare Operations

We may use PHI for operational purposes, including:

• Quality improvement
• Training
• Compliance monitoring
• Credentialing
• Risk management

Administrative and technical support may be provided by HLTH LAB Inc. under appropriate agreements.

4. Appointment Reminders & Communications

We may contact you to:

• Remind you of appointments
• Provide information about treatment options
• Communicate about care coordination

Communications may occur via phone, email, text, or secure messaging unless you request restrictions.

5. As Required by Law

We may disclose PHI:

• To comply with federal or state law
• In response to court orders or subpoenas
• For public health reporting
• To report abuse, neglect, or domestic violence

6. Public Health & Safety

We may disclose PHI for:

• Disease prevention
• Public health investigations
• Threats to health or safety

7. Law Enforcement

We may disclose PHI to law enforcement officials as permitted by law.

8. Health Oversight Activities

We may disclose PHI to health oversight agencies for audits, investigations, inspections, or licensure actions.

9. Business Associates

We may share PHI with third-party service providers (“Business Associates”) who assist with:

• Technology services
• Billing
• Data storage
• Administrative functions

Business Associates are contractually required to safeguard PHI.

We will obtain your written authorization for:

• Marketing communications not related to treatment
• Sale of PHI
• Uses not otherwise described in this Notice

You may revoke authorization at any time in writing.

You have the right to:

1. Access

Request a copy of your medical records.

We may charge a reasonable, cost-based fee for copies.

2. Amendment

Request correction of inaccurate or incomplete information.

3. Accounting of Disclosures

Request a list of certain disclosures of your PHI.

4. Request Restrictions

Request limits on certain uses or disclosures.

We are not required to agree to all requested restrictions.

5. Confidential Communications

Request communication in a specific manner (e.g., alternative address or phone number).

6. Paper Copy of This Notice

You may request a paper copy at any time.

Certain categories of information may receive additional protections under federal or state law, including:

• Mental health records
• HIV/AIDS information
• Substance use disorder treatment records

We will comply with applicable laws governing these categories.

If you receive telehealth services:

• Communications are conducted through secure systems
• Reasonable safeguards are used to protect confidentiality
• No system can guarantee absolute security

AI tools may assist in documentation and intake but do not independently make clinical decisions.

We reserve the right to change this Notice.

Revised Notices will apply to all PHI we maintain and will be posted with a new effective date.

If you believe your privacy rights have been violated, you may file a complaint with:

• The applicable professional medical entity providing your care
• frontdesk@ozara.com

You may also file a complaint with:

You will not be retaliated against for filing a complaint.

For questions about this Notice or to exercise your rights, contact: