Notice of Privacy Practices

Our commitment

DonoMed LLC is required by law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to notify you if a breach of your unsecured PHI occurs. We are required to follow the terms of the notice currently in effect.

PHI means information that identifies you and relates to your health, your care, or payment for your care.

How we may use and disclose your information without your authorization

• Treatment. To provide, coordinate, and manage your care. For example, we send your prescription and relevant clinical information to the pharmacy that fills it, and we may share information with a laboratory or another clinician involved in your care.
• Payment. To obtain payment for services, including processing your card payment through our payment processor.
• Health care operations. Quality review, provider evaluation, licensing, training, and business management.
• Appointment reminders and treatment alternatives. To contact you about appointments, refills, lab results, or treatment options. Tell us if you prefer we not do this by a particular method.
• Business associates. To vendors who perform services for us and who are bound by written agreement to protect your information — for example our electronic health record, our intake platform, and our secure messaging provider.
• As required by law. When federal, state, or local law requires disclosure.
• Public health and safety. To report disease, injury, births and deaths, adverse events and product problems to the FDA, suspected abuse or neglect, or to prevent a serious and imminent threat to health or safety.
• Health oversight, judicial, and law enforcement. To agencies authorized to audit or investigate, in response to a valid court order or subpoena, and to law enforcement in the limited circumstances the law permits.
• Workers' compensation, military, and national security. As authorized by law.
• Coroners, medical examiners, and organ donation. As permitted by law.
• Research. Only where an institutional review board has approved the use and applicable privacy protections are in place.
• People involved in your care. To a family member or other person you identify, limited to information relevant to that person's involvement, unless you object.

Uses that always require your written authorization

We will not use or disclose your information for marketing, will not sell your information, and will not disclose psychotherapy notes, without your written authorization. Any other use not described in this notice also requires your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted on it.

We do not use your protected health information for advertising, and we do not sell it.

Your rights

• Inspect and copy. You may request access to your records, including an electronic copy. We will respond within 30 days. We may charge a reasonable, cost-based fee for copies.
• Amend. You may request that we correct information you believe is incorrect or incomplete. We may deny the request, and if we do we will explain why in writing and you may submit a statement of disagreement.
• Accounting of disclosures. You may request a list of certain disclosures we have made, generally for the six years before your request.
• Request restrictions. You may ask us to limit how we use or disclose your information. We are not required to agree, except that we must agree to withhold information from a health plan when you have paid for that service in full out of pocket. Because DonoMed does not bill insurance, this applies to all of your care with us.
• Confidential communications. You may ask us to contact you at a specific phone number or address. We will accommodate reasonable requests.
• Paper copy. You may request a paper copy of this notice at any time, even if you agreed to receive it electronically.
• Breach notification. You will be notified if a breach of your unsecured protected health information occurs.
• Choose someone to act for you. A person with legal authority to act on your behalf may exercise these rights.

To exercise any of these rights, contact our Privacy Officer below.

Complaints

If you believe your privacy rights have been violated, you may complain to us, to the U.S. Department of Health and Human Services, or both. We will not retaliate against you in any way for filing a complaint.

To DonoMed: Christopher Dono, PA-C, Privacy Officer — Compliance@DonoMed.com · (813) 733-8356 · DonoMed LLC, 610 E Zack St, Ste 110-2348, Tampa, FL 33602.

To HHS: Office for Civil Rights, U.S. Department of Health and Human Services, 200 Independence Avenue SW, Washington, D.C. 20201 · 1-877-696-6775 · hhs.gov/ocr/privacy/hipaa/complaints.

Changes to this notice

We may change this notice at any time, and the change may apply to information we already hold. The current notice is always posted on this page with its effective date, and a paper copy is available on request.

Effective date

This notice is effective August 19, 2026.