Notice of Privacy Practices

Effective date: April 7, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Better Health Now ("we," "us," or "our") is committed to protecting the privacy of your protected health information ("PHI"). This Notice of Privacy Practices describes how we may use and disclose your PHI and explains your rights under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and applicable state laws.

We are required by law to maintain the privacy of your PHI, provide you with this notice of our legal duties and privacy practices, and follow the terms of the notice currently in effect.

Your Rights Regarding Your Protected Health Information

You have the following rights with respect to your PHI. To exercise any of these rights, please submit a written request to our Privacy Officer using the contact information at the end of this notice.

Right to Access

You have the right to inspect and obtain a copy of your PHI that we maintain in our records, including medical records, billing records, and other records used to make decisions about your care. We may charge a reasonable fee for copying and mailing costs. In certain limited circumstances, we may deny your request. If we deny your request, we will explain the reason in writing, and you may request a review of the denial.

Right to Amend

If you believe that information in your records is incorrect or incomplete, you have the right to request that we amend it. Your request must be in writing and must include the reason for the amendment. We may deny your request in certain circumstances, such as if the information was not created by us, is not part of the records we maintain, or is accurate and complete. If we deny the request, we will provide you with a written explanation.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your PHI. This accounting does not include disclosures made for treatment, payment, or healthcare operations, or disclosures you authorized in writing. Your request must specify a time period, which may not exceed six years prior to the date of the request. The first accounting in any 12-month period is provided free of charge. We may charge a reasonable fee for additional requests within the same period.

Right to Request Restrictions

You have the right to request that we limit the use or disclosure of your PHI for treatment, payment, or healthcare operations. You may also request restrictions on disclosures to individuals involved in your care or in payment for your care. We are not required to agree to your request, except that we must agree to a restriction on disclosure to a health plan if the disclosure is for payment or healthcare operations and pertains to a service for which you paid out of pocket in full.

Right to Confidential Communications

You have the right to request that we communicate with you about health matters through a specific method or at a specific location. For example, you may request that we contact you only by email or only at a particular phone number. We will accommodate reasonable requests.

Right to a Copy of This Notice

You have the right to obtain a paper copy of this Notice of Privacy Practices at any time, even if you have previously agreed to receive the notice electronically. You may request a copy by contacting our Privacy Officer.

How We May Use and Disclose Your Protected Health Information

The following describes the ways we may use and disclose your PHI without your written authorization:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes sharing information with the licensed physicians who review your intake forms and develop your treatment plans, with the fulfillment partner that routes your prescription, and with the licensed pharmacy that compounds and dispenses it. Where you ordered through a partner-branded storefront, or where a clinic or practice placed the order on your behalf, that partner or practice also receives information about your order so they can support you.

Payment

We may use and disclose your PHI as necessary to process payments for the services and treatments you receive. This includes providing information to payment processors to complete your transactions and, if applicable, providing documentation to support insurance or HSA/FSA reimbursement claims you may submit.

Healthcare Operations

We may use and disclose your PHI for our internal healthcare operations. This includes quality assessment, care coordination, staff training, and activities necessary to run our practice and provide the best possible care to our patients.

Uses and Disclosures Requiring Your Written Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this notice. Situations that require your written authorization include:

• Marketing communications (unless the communication is face-to-face or involves promotional gifts of nominal value).
• Sale of your PHI.
• Most uses and disclosures of psychotherapy notes, if applicable.
• Any other use or disclosure not described in this notice.

If you provide authorization for a specific use or disclosure, you may revoke that authorization at any time in writing. Your revocation will not affect any actions we took in reliance on your authorization before we received your revocation.

Uses and Disclosures That Do Not Require Your Authorization

In addition to treatment, payment, and healthcare operations, we may use or disclose your PHI without your authorization in the following circumstances:

• As required by law. We will disclose your PHI when required to do so by federal, state, or local law.
• Public health activities. We may disclose your PHI to public health authorities for purposes such as preventing or controlling disease, reporting adverse reactions to medications, and notifying individuals of product recalls.
• Health oversight activities. We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure actions.
• Judicial and administrative proceedings. We may disclose your PHI in response to a court order or, in certain circumstances, in response to a subpoena or discovery request.
• Law enforcement. We may disclose your PHI to law enforcement officials under limited circumstances, such as in response to a court order, warrant, or grand jury subpoena.
• To avert a serious threat. We may use or disclose your PHI when we believe in good faith that it is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
• Coroners and funeral directors. We may disclose PHI to a coroner, medical examiner, or funeral director as necessary to carry out their duties.
• Workers' compensation. We may disclose your PHI as authorized by and to the extent necessary to comply with workers' compensation or similar programs.

Our Responsibilities

• We are required by law to maintain the privacy and security of your PHI.
• We will provide you with this notice of our legal duties and privacy practices with respect to your PHI.
• We will abide by the terms of this notice currently in effect.
• We will notify you promptly if a breach occurs that may have compromised the privacy or security of your PHI.
• We will not use or disclose your PHI for marketing purposes or sell your PHI without your written authorization.

Breach Notification

In the event of a breach of your unsecured PHI, we will notify you as required by law. The notification will include a description of the breach, the types of information involved, the steps you should take to protect yourself, what we are doing to investigate and mitigate the breach, and contact information for further questions.

Changes to This Notice

We reserve the right to change the terms of this notice at any time. Any changes will apply to PHI we already hold as well as any PHI we create or receive in the future. The revised notice will be posted on our website and will be available upon request. The effective date of the current notice is listed at the top of this page.

How to File a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint. You will not be penalized or retaliated against for filing a complaint.

Complaint to Better Health Now

You may file a complaint directly with our Privacy Officer using the contact information below. We will investigate your complaint and respond within 30 days.

Complaint to the U.S. Department of Health and Human Services

You also have the right to file a complaint with the Secretary of the U.S. Department of Health and Human Services (HHS), Office for Civil Rights:

U.S. Department of Health and Human Services

Office for Civil Rights

200 Independence Avenue, S.W.

Washington, D.C. 20201

Phone: (877) 696-6775

Website: hhs.gov/ocr/privacy/hipaa/complaints

Contact Information

For questions about this notice or to exercise any of the rights described above, please contact our Privacy Officer:

Privacy Officer, Better Health Now

Email: hello@betterhealthnow.com

Phone: (888) 996-1327

This Notice of Privacy Practices is provided for informational purposes and should be reviewed by a qualified healthcare attorney to ensure compliance with all applicable federal and state regulations. It is not intended as legal advice.