HIPAA Notice of Privacy Practices

This Notice of Privacy Practices ("Notice") describes how protected health information ("PHI") about you may be used and disclosed, and how you can access this information. Please review it carefully. This Notice applies to the HIPAA-compliant telehealth services facilitated through the CÉLURE platform by VITAÓNÉ LABS, LLC and the independent licensed healthcare providers who use the Platform to deliver clinical care. "Protected Health Information" means information that identifies you and relates to your past, present, or future physical or mental health condition, the provision of health care to you, or payment for health care.

Your PHI may be used and disclosed for the following purposes without requiring your separate written authorization: Treatment: Your PHI may be used by your CÉLURE provider to provide, coordinate, and manage your health care and related services. This includes sharing information with other healthcare professionals involved in your care. Payment: Your PHI may be used to determine coverage, process billing, and obtain reimbursement for services provided to you. Healthcare Operations: Your PHI may be used for operational activities such as quality assessment, provider review, training, and administrative functions required to operate our telehealth platform. As Required by Law: We may disclose your PHI when required to do so by federal, state, or local law. Public Health Activities: We may disclose PHI to public health authorities as required or permitted by law for activities such as disease reporting and vital statistics. Health Oversight: We may disclose PHI to government health oversight agencies for authorized activities such as audits, investigations, and licensure. Judicial Proceedings: We may disclose PHI in the course of judicial or administrative proceedings in response to a court order or subpoena. Law Enforcement: We may disclose PHI to law enforcement as required by law or in response to a valid legal process. Serious Threats to Health or Safety: We may disclose PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Other uses and disclosures of your PHI will be made only with your written authorization, including: — Most uses and disclosures of psychotherapy notes — Uses and disclosures of PHI for marketing purposes — Disclosures that constitute a sale of PHI — Other uses not described in this Notice You have the right to revoke a written authorization at any time by contacting us in writing. Revocation will not affect disclosures already made in reliance on your prior authorization.

You have the following rights regarding your protected health information: Right to Access: You have the right to inspect and obtain a copy of your PHI maintained in a designated record set. We may charge a reasonable fee for copies. Right to Amend: You have the right to request that we amend your PHI if you believe it is inaccurate or incomplete. We may deny your request under certain circumstances. Right to an Accounting of Disclosures: You have the right to request an accounting of certain disclosures of your PHI made by us in the six years prior to your request. Right to Request Restrictions: You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to all requests, but we will accommodate reasonable requests where feasible. Right to Request Confidential Communications: You have the right to request that we communicate with you about health matters in a certain way or at a certain location. Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this Notice at any time. Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

We are required by law to: — Maintain the privacy of your PHI — Provide you with this Notice of our legal duties and privacy practices — Notify you following a breach of unsecured PHI — Abide by the terms of this Notice We reserve the right to change our privacy practices and the terms of this Notice at any time, provided such changes are permitted by applicable law. When we make a material change to this Notice, we will make the revised Notice available on our Platform.

VITAÓNÉ LABS and our telehealth partners implement administrative, physical, and technical safeguards to protect your PHI, including: — Encryption of PHI in transit and at rest — Role-based access controls limiting PHI access to authorized personnel — Business Associate Agreements with all vendors who may access PHI — Regular security assessments and workforce training — Audit logs of PHI access and disclosures All clinical intake, health records, and provider communications are handled exclusively through our HIPAA-compliant telehealth partner platform, not through this website or general marketing systems.

For questions about this Notice or to exercise your rights, contact us at: VITAÓNÉ LABS, LLC — Privacy Officer Email: Info@vitaonelabs.com To file a complaint with the federal government: U.S. Department of Health and Human Services Office for Civil Rights 200 Independence Avenue, S.W. Washington, D.C. 20201 Hotline: 1-877-696-6775 Website: hhs.gov/ocr/privacy