Notice of Privacy Practices

Effective date: February 14, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices ("Notice") applies to the healthcare providers in the Elevated Health RX affiliated medical group network ("Medical Group," "we," "us," or "our") who provide telehealth evaluations, diagnoses, and treatment for erectile dysfunction and related men's health conditions through the Elevated Health RX platform. Our providers may prescribe compounded medications, including PDE5 inhibitors such as Sildenafil and Tadalafil, dispensed by FDA-regulated 503A outsourcing pharmacies.

1. About This Notice

We are required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations to maintain the privacy of your Protected Health Information ("PHI"), to provide you with this Notice of our legal duties and privacy practices with respect to PHI, and to notify you following a breach of unsecured PHI.

PHI is information that identifies you and relates to your past, present, or future physical or mental health condition, the provision of healthcare to you, or the past, present, or future payment for the provision of healthcare to you. This includes, but is not limited to, your medical history, health questionnaire responses, telehealth consultation records, prescriptions (including prescriptions for compounded Sildenafil, Tadalafil, and combination formulations), treatment plans, lab results, and any other clinical documentation created during your care.

2. Our Duties

We are required by law to:

We reserve the right to change the terms of this Notice and to make the new Notice provisions effective for all PHI that we maintain, including PHI created or received prior to the date of the change. If we make a material change to this Notice, we will post the revised Notice on the Elevated Health RX website and make it available to you upon request.

3. Uses and Disclosures of PHI for Treatment, Payment, and Healthcare Operations

We may use and disclose your PHI without your written authorization for the following purposes:

3.1 Treatment

We may use and disclose your PHI to provide, coordinate, and manage your healthcare and related services. This includes sharing your PHI among our network of licensed U.S. healthcare providers who are involved in your care through the Elevated Health RX platform. For example:

3.2 Payment

We may use and disclose your PHI as necessary to obtain payment for healthcare services provided to you. For example:

3.3 Healthcare Operations

We may use and disclose your PHI for our healthcare operations, which are activities necessary to run our medical practice and ensure that all patients receive quality care. For example:

4. Uses and Disclosures That Require Your Authorization

Except as described in this Notice, we will not use or disclose your PHI without your prior written authorization. The following uses and disclosures require your written authorization:

You may revoke your authorization at any time by submitting a written request to us at the contact information listed in Section 9 of this Notice. Please note that revocation will not affect any uses or disclosures made in reliance on your authorization before we received your written revocation.

5. Uses and Disclosures That Do Not Require Your Authorization

In addition to treatment, payment, and healthcare operations, we may use or disclose your PHI without your authorization in the following circumstances:

5.1 As Required by Law

We may use or disclose your PHI when required to do so by federal, state, or local law. The use or disclosure will be made in compliance with the law and limited to the relevant requirements of the law.

5.2 Public Health Activities

We may disclose your PHI to public health authorities for purposes such as preventing or controlling disease, injury, or disability; reporting adverse events related to medications (including adverse reactions to compounded PDE5 inhibitors); reporting product defects or problems; enabling product recalls; and reporting a person who may have been exposed to a disease or may be at risk of contracting or spreading a disease.

5.3 Health Oversight Activities

We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, civil administrative or criminal investigations, inspections, licensure or disciplinary actions, and other proceedings necessary for the government to monitor the healthcare system, government benefit programs, and compliance with civil rights laws. This includes oversight activities conducted by state medical boards, pharmacy boards, and the FDA.

5.4 Judicial and Administrative Proceedings

We may disclose your PHI in the course of a judicial or administrative proceeding in response to a court order, subpoena, discovery request, or other lawful process. Where required by law, we will make reasonable efforts to notify you or obtain a protective order before disclosing your PHI.

5.5 Law Enforcement Purposes

We may disclose your PHI to a law enforcement official for law enforcement purposes, including: in response to a court order, warrant, or subpoena; to identify or locate a suspect, fugitive, material witness, or missing person; about a crime victim under certain limited circumstances; about a death we believe may be the result of criminal conduct; about criminal conduct at our facilities; and in emergency circumstances to report a crime, the location of the crime or victims, or the identity, description, or location of the person who committed the crime.

5.6 Research

Under certain circumstances, we may use and disclose your PHI for research purposes, provided that the research has been approved by an institutional review board or privacy board that has reviewed the research proposal and established protocols to ensure the privacy of your PHI. In most cases, we will de-identify your information before using it for research.

5.7 To Avert a Serious Threat to Health or Safety

We may use and disclose your PHI when necessary to prevent or lessen a serious and imminent threat to your health or safety or the health or safety of the public or another person. Any disclosure will be made to a person reasonably able to prevent or lessen the threat.

5.8 Specialized Government Functions

We may disclose your PHI to authorized federal officials for intelligence, counterintelligence, national security, and other specialized government functions as required by law. If you are a member of the Armed Forces, we may disclose your PHI as required by military command authorities.

5.9 Workers' Compensation

We may disclose your PHI as authorized by and to the extent necessary to comply with laws relating to workers' compensation or other similar programs.

5.10 Coroners, Medical Examiners, and Funeral Directors

We may disclose your PHI to a coroner, medical examiner, or funeral director as necessary to carry out their duties.

5.11 Organ and Tissue Donation

If you are an organ donor, we may disclose your PHI to organizations that handle organ procurement or organ, eye, or tissue transplantation, or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.

5.12 Inmates

If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may disclose your PHI to the correctional institution or law enforcement official as necessary for the institution to provide you with healthcare, to protect your health and safety or the health and safety of others, or for the safety and security of the correctional institution.

6. Your Rights Regarding Your PHI

You have the following rights with respect to your PHI. To exercise any of these rights, please submit a written request to us at the contact information listed in Section 9.

6.1 Right to Inspect and Copy

You have the right to inspect and obtain a copy of your PHI contained in a designated record set, which includes medical and billing records maintained by or for us. Your request must be in writing. We may charge a reasonable fee for the cost of copying, mailing, or other supplies associated with your request. In certain limited circumstances, we may deny your request to inspect and copy your PHI. If we deny your request, you may request a review of the denial by contacting us.

If your records are maintained electronically, you have the right to request that we provide your PHI in an electronic format. You may also direct us to transmit a copy of your PHI directly to another person you designate, provided the request is in writing, signed by you, and clearly identifies the designated person and where to send the PHI.

6.2 Right to Amend

You have the right to request that we amend your PHI if you believe it is inaccurate or incomplete. Your request must be in writing and must include the reason for the amendment. We may deny your request if: we did not create the information (unless the entity that created the information is no longer available); the information is not part of the designated record set; the information is not available for inspection (for example, psychotherapy notes); or the information is accurate and complete. If we deny your request, we will provide you with a written explanation.

6.3 Right to an Accounting of Disclosures

You have the right to request an accounting of certain disclosures of your PHI that we have made. This accounting will not include disclosures made for treatment, payment, or healthcare operations; disclosures made to you or authorized by you; disclosures made for national security or intelligence purposes; disclosures to correctional institutions or law enforcement officials; or disclosures that occurred more than six (6) years before the date of your request. Your request must be in writing and state the time period for the accounting (which may not exceed six years). The first accounting within a 12-month period will be provided at no charge. We may charge a reasonable fee for subsequent requests within the same period, and we will notify you of the cost in advance.

6.4 Right to Request Restrictions

You have the right to request that we restrict certain uses and disclosures of your PHI for treatment, payment, or healthcare operations. You also have the right to request that we restrict disclosures of your PHI to family members, friends, or others involved in your care or payment. We are not required to agree to your request, except in one situation: if you pay for a service or healthcare item out of pocket in full and you request that we not disclose your PHI related to that service to a health plan for purposes of payment or healthcare operations, we must honor that request.

6.5 Right to Request Confidential Communications

You have the right to request that we communicate with you about your healthcare in a certain way or at a certain location. For example, you may request that we only contact you by email at a specific email address or by mail at a specific mailing address. Your request must be in writing and must specify how or where you wish to be contacted. We will accommodate reasonable requests.

6.6 Right to Receive a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have previously agreed to receive this Notice electronically. To obtain a paper copy, please contact us at the information listed in Section 9.

7. Changes to This Notice

We reserve the right to change the terms of this Notice at any time. Any changes will apply to all PHI we already maintain, as well as any PHI we create or receive in the future. We will post the revised Notice on the Elevated Health RX website with a new effective date. You may obtain a copy of the current Notice at any time by visiting our website or by contacting us at the information listed in Section 9.

8. Complaints

If you believe your privacy rights have been violated, you have the right to file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights.

8.1 Filing a Complaint With Us

To file a complaint with us, please contact our Privacy Officer at the address, email, or phone number listed in Section 9. We will investigate your complaint and respond to you in a timely manner.

8.2 Filing a Complaint With HHS

To file a complaint with the U.S. Department of Health and Human Services, you may:

You will not be retaliated against for filing a complaint. We will not penalize you, refuse to treat you, or take any other adverse action against you for filing a complaint with us or with the U.S. Department of Health and Human Services.

9. Contact Information

For questions about this Notice, to exercise any of your rights described above, or to file a complaint, please contact our Privacy Officer:

You may also contact the Elevated Health RX general support team at support@elevatedhealthrx.com for assistance navigating your privacy rights or obtaining copies of this Notice.