HIPAA Notice of Privacy Practices

Effective Date: September 7, 2025

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Infusion, LLC ("we," "us," or "our") is committed to protecting the privacy of your protected health information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and other applicable laws. This Notice of Privacy Practices explains how we may use and disclose your PHI, your rights regarding your PHI, and our obligations to protect it.

1. What is Protected Health Information (PHI)?

PHI is any individually identifiable health information we maintain about you, including medical, billing, and demographic information, that is created or received by Infusion, LLC in the course of providing infusion and specialty pharmacy services, such as IV therapy, hemophilia treatment, oncology support, and nutrition services.

2. How We May Use and Disclose Your PHI

We may use or disclose your PHI for the following purposes, as permitted or required by law:

a. Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare. For example, we may share your PHI with your prescribing physician or other healthcare providers involved in your care.

b. Payment

We may use and disclose your PHI to bill and collect payment for services provided. For example, we may share your PHI with your insurance company to process claims or verify coverage.

c. Healthcare Operations

We may use and disclose your PHI for our business operations, such as quality assurance, staff training, or compliance with legal requirements. For example, we may use PHI to evaluate the performance of our services.

d. Disclosures Required by Law

We may disclose your PHI when required by federal, state, or local law, such as reporting to public health authorities or responding to a court order.

e. Other Permitted Uses and Disclosures

We may use or disclose your PHI without your authorization in certain situations, including:

• To business associates who perform services on our behalf (e.g., billing or IT services), provided they agree to safeguard your PHI.
• To notify or locate a family member or representative involved in your care, unless you object.
• For public health activities, such as disease reporting or safety monitoring.
• To report suspected abuse, neglect, or domestic violence.
• For research purposes, if approved by an Institutional Review Board and safeguards are in place.

3. Uses and Disclosures Requiring Your Authorization

We will not use or disclose your PHI for purposes other than those described above without your written authorization. For example, we need your authorization to:

• Use or disclose your PHI for marketing purposes (except for face-to-face communications or promotional gifts of nominal value).
• Sell your PHI.
• Disclose psychotherapy notes, if applicable.

You may revoke an authorization in writing at any time, except to the extent that we have already relied on it.

4. Your Rights Regarding Your PHI

You have the following rights regarding your PHI:

a. Right to Inspect and Copy

You may request access to inspect or obtain a copy of your PHI in our records, such as medical or billing records. Requests must be in writing, and we may charge a reasonable fee for copying or mailing. In certain cases, we may deny access, but you may request a review of the denial.

b. Right to Amend

If you believe your PHI is incorrect or incomplete, you may request an amendment in writing. We may deny the request if the information is accurate or was not created by us, but you may submit a statement of disagreement.

c. Right to an Accounting of Disclosures

You may request a list of certain disclosures of your PHI made by us in the past six years. The first request in a 12-month period is free; additional requests may incur a fee.

d. Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations, or to certain individuals (e.g., family members). We are not required to agree to your request, except for disclosures to health plans for payment or operations if you have paid for services out-of-pocket in full.

e. Right to Request Confidential Communications

You may request that we communicate with you about your PHI in a specific way or at a specific location (e.g., by phone or at an alternate address). We will accommodate reasonable requests.

f. Right to a Paper Copy of This Notice

You may request a paper copy of this Notice at any time, even if you have agreed to receive it electronically.

5. Our Responsibilities

We are required by law to:

• Maintain the privacy and security of your PHI.
• Notify you promptly if a breach of your unsecured PHI occurs.
• Abide by the terms of this Notice currently in effect.
• Notify you of any changes to this Notice by posting the updated version on our Website.

6. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. To file a complaint with us, contact our Privacy Officer at the address below. We will not retaliate against you for filing a complaint.

7. Contact Us

For questions about this Notice, to exercise your rights, or to file a complaint, please contact:

Infusion, LLC Privacy Officer
1909 E Central, Wichita, KS
Phone: +1 (316) 123-4567
Email: chase@homeinfusionspecialists.com

You may also contact the U.S. Department of Health and Human Services at:
Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Website: www.hhs.gov/ocr

8. Changes to This Notice

We reserve the right to revise this Notice at any time. Any changes will be effective for all PHI we maintain. The updated Notice will be posted on our Website and available at our facilities.

By using our services or Website, you acknowledge that you have received and understand this Notice of Privacy Practices.