HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Your rights

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.

• Get a copy of your medical record. Ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will provide a copy or a summary, usually within 30 days of your request. We may charge a reasonable, cost-based fee.
• Ask us to correct your record. Ask us to correct health information you think is incorrect or incomplete. We may say no, but we will tell you why in writing within 60 days.
• Request confidential communications. Ask us to contact you in a specific way (for example, a certain phone number or email) or to send mail to a different address. We will say yes to all reasonable requests.
• Ask us to limit what we use or share. You can ask us not to use or share certain health information for treatment, payment or our operations. We are not required to agree, and we may say no if it would affect your care. If you pay for a service or item out of pocket in full, you can ask us not to share that information with your health insurer, and we will say yes unless a law requires us to share it.
• Get a list of those we have shared information with. Ask for a list (accounting) of the times we have shared your health information for six years prior to the date you ask, who we shared it with, and why. We will include all disclosures except those for treatment, payment and health care operations, and certain others (such as any you asked us to make). We provide one list a year free and charge a reasonable, cost-based fee for more within 12 months.
• Get a copy of this notice. Ask for a paper copy of this notice at any time, even if you agreed to receive it electronically.
• Choose someone to act for you. If you have given someone medical power of attorney or someone is your legal guardian, that person can exercise your rights. We will make sure the person has this authority before we take any action.
• File a complaint if you feel your rights are violated. Contact our Privacy Officer using the information at the end of this notice. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. We will not retaliate against you for filing a complaint.

Your choices

For certain health information, you can tell us your choices about what we share. Tell us what you want us to do, and we will follow your instructions.

You have both the right and choice to tell us to:

• Share information with your family, close friends or others involved in your care.
• Share information in a disaster relief situation.

If you are not able to tell us your preference, for example if you are unconscious, we may share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.

We never share your information in these cases unless you give us written permission:

• Marketing purposes.
• Sale of your information.
• Most sharing of psychotherapy notes.

We do not use your information for fundraising.

Our uses and disclosures

Treat you. We use your health information and share it with other professionals who are treating you. Examples: our nurse practitioners and nurse use your intake, labs and visit notes to plan your care. We send prescriptions to the pharmacy that fills them, such as Strive Pharmacy. We send lab orders to the lab that draws your blood.

Run our organization. We use and share your health information to run our practice, improve your care and contact you when necessary. Examples: scheduling, appointment and refill reminders by text or email, quality reviews, staff training, and compliance audits.

Bill for your services. We use your information to bill and get payment for services. Regenerize is a cash-pay practice and does not bill health insurance.

Business associates. Companies that help us operate, such as our electronic health record, secure email, and cloud storage providers, may receive your information to do that work. They must sign agreements to protect it.

Other ways we are allowed or required to share your information, usually in ways that contribute to the public good, such as public health and research. We must meet many conditions in the law before we can share your information for these purposes:

• Public health and safety: preventing disease, helping with product recalls, reporting adverse reactions to medications, reporting suspected abuse, neglect or domestic violence, and preventing or reducing a serious threat to anyone’s health or safety.
• Research: under strict legal conditions.
• Comply with the law: including with the Department of Health and Human Services when it wants to see that we are complying with federal privacy law, and with state prescription drug monitoring programs when we prescribe controlled substances such as testosterone.
• Organ and tissue donation requests.
• Medical examiners or funeral directors when an individual dies.
• Workers’ compensation, law enforcement and other government requests: for workers’ compensation claims, for law enforcement purposes or with a law enforcement official, with health oversight agencies such as state licensing boards, and for special government functions such as military, national security and presidential protective services.
• Lawsuits and legal actions: in response to a court or administrative order, or in response to a subpoena.

Substance use disorder treatment records

If we receive records about you that are protected by federal law at 42 CFR Part 2 (records from certain substance use disorder treatment programs), those records have extra protections. We will not use or share them, or testimony about their content, in any civil, criminal, administrative or legislative proceeding against you unless you give specific written consent or a court orders it after giving you notice and a chance to be heard, as the law requires. If you have given a single consent for treatment, payment and operations, we may use and redisclose those records as HIPAA allows, except as limited above.

State law

Some states where our patients live give more protection than HIPAA to certain information, such as HIV and other sexually transmitted infection results, mental health records, genetic test results, and reproductive health information. When a state law gives you more protection or greater access rights, we follow that law.

Our responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

For more information, see www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html.

Changes to the terms of this notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on request, at our office, and on our website.

Contact and effective date

Regenerize, PLLC, Attn: Privacy Officer Radley Peterson, 819 Hwy 2, Suite 103, Sandpoint, ID 83864 · [email protected] · 209.677.7747

This notice is effective October 18, 2026.