HIPAA PRIVACY STATEMENT

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: January 3, 2026

This Notice of Privacy Practices (“Notice”) describes how RAVE Clinics (“we,” “us,” “our”) may use and disclose your Protected Health Information (“PHI”) and your rights regarding your PHI. We are required by law to maintain the privacy of your PHI and to provide you with this Notice.

1) Contact / Privacy Officer

RAVE Clinics – Privacy Contact

8155 Piney River Ave, Suite 230

Littleton, CO 80125

Phone: (720) 689-9744

Email: info@raveclinics.com

2) Our duties

We are required by law to:

• Maintain the privacy of your PHI

• Provide you with this Notice of our legal duties and privacy practices

• Follow the terms of this Notice currently in effect

3) How we may use and disclose your PHI (without your written authorization)

HIPAA allows us to use and disclose your PHI for certain purposes without your written authorization, including:

A. Treatment

We may use and disclose PHI to provide, coordinate, or manage your care and related services. This includes sharing PHI with other healthcare providers involved in your care.

B. Payment

We may use and disclose PHI to bill and collect payment for services, including disclosures to health plans or other payors as permitted.

C. Health care operations

We may use and disclose PHI for operations such as quality assessment and improvement activities, training, accreditation, licensing, auditing, business planning, and general administrative activities.

D. Appointment reminders and communications

We may contact you to remind you of appointments or provide information about your care, services, or scheduling.

E. Individuals involved in your care

We may disclose PHI to a family member, friend, or other person involved in your care or payment for your care, unless you object, and as permitted by law.

F. Business associates

We may share PHI with third-party “business associates” that perform functions on our behalf (such as billing, scheduling, IT support). Business associates are required by law to safeguard PHI.

G. As required by law

We may disclose PHI when required to do so by federal, state, or local law.

H. Public health and safety

We may disclose PHI for certain public health activities, reporting, and to prevent or lessen a serious threat to health or safety, as permitted by law.

I. Health oversight activities

We may disclose PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.

J. Lawsuits and disputes

We may disclose PHI in response to a court order or lawful process, as permitted by law.

K. Law enforcement

We may disclose PHI to law enforcement officials as permitted by law (for example, in response to a lawful order or to report certain crimes).

L. Coroners/medical examiners and funeral directors

We may disclose PHI to coroners or medical examiners for identification purposes or determining cause of death, and to funeral directors as necessary.

M. National security and intelligence activities

We may disclose PHI to authorized federal officials for lawful national security and intelligence activities.

N. Inmates and correctional institutions

If you are an inmate, we may disclose PHI to correctional institutions or law enforcement officials as permitted by law.

4) Uses and disclosures that require your written authorization

We will obtain your written authorization for uses and disclosures not described in this Notice unless an exception applies.

5) Your rights regarding your PHI

You have the right to:

A. Inspect and copy

You may request to inspect or obtain a copy of PHI we maintain about you. Requests must be in writing. We may charge a reasonable, cost-based fee as permitted by law.

B. Request an amendment

If you believe your PHI is incorrect or incomplete, you may request an amendment in writing, including the reason for the request. We may deny your request in certain circumstances.

C. Request an accounting of disclosures

You may request a list (“accounting”) of certain disclosures of your PHI made by us. Requests must be in writing and may specify a time period.

D. Request confidential communications

You may request that we communicate with you in a certain way or at a certain location (for example, only at work or only by mail). Requests must be in writing.

E. Request restrictions

You may request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations. We are not required to agree to all requests.

F. Receive a paper copy

You have the right to a paper copy of this Notice, even if you have agreed to receive it electronically.

G. Breach notification

You have the right to be notified if a breach of your unsecured PHI occurs, as required by law.

6) Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services.

• To file a complaint with us: Email info@raveclinics.com or write to our address above.

• To file a complaint with HHS: Office for Civil Rights (OCR). You may submit a complaint through OCR channels.

You will not be penalized for filing a complaint.

7) Changes to this Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as any PHI we receive in the future. The current Notice will be available at our facility and on our Website.

8) Availability

This Notice is posted at https://raveclinics.com/hipaa-privacy-statement/ and is available upon request in paper form at the clinic.