Notice of Privacy Practices

Issued by: [AFFILIATED MEDICAL GROUP, P.C.] (the "Medical Group") Effective Date: June 18, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment

The Medical Group is committed to protecting the privacy of your protected health information ("PHI"). We are required by law to maintain the privacy of your PHI, to give you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect.

How We May Use and Disclose Your PHI Without Your Authorization

• Treatment: to provide, coordinate, and manage your care, including sharing PHI with providers, the dispensing pharmacy, and laboratories involved in your treatment.
• Payment: to bill and obtain payment for services, including verifying coverage and processing payment through our service partners.
• Health Care Operations: for quality assessment, provider review, and administrative activities necessary to run the practice.
• Business Associates: we may share PHI with business associates (including [LEGAL ENTITY] as our management/technology partner and [COMPOUNDING PHARMACY PARTNER]) who perform services on our behalf and are contractually obligated to protect your PHI under a Business Associate Agreement.
• As Required by Law: including for public health, health oversight, law enforcement in limited circumstances, to avert a serious threat to health or safety, and similar legally permitted purposes.

Uses and Disclosures That Require Your Authorization

Most uses and disclosures not described above will be made only with your written authorization, including most uses for marketing and any sale of PHI. You may revoke an authorization in writing at any time, except to the extent we have already acted on it.

Your Rights Regarding Your PHI

• Access and copies of your medical and billing records.
• Amendment of PHI you believe is inaccurate or incomplete.
• Accounting of disclosures we have made, with certain exceptions.
• Request restrictions on certain uses and disclosures.
• Confidential communications by alternative means or at alternative locations.
• Paper copy of this Notice on request, even if you agreed to receive it electronically.
• Notification following a breach of unsecured PHI.

To exercise any of these rights, contact our Privacy Officer below.

Telehealth and Electronic Communications

Because care is provided via telehealth, your PHI is transmitted and stored electronically using reasonable safeguards. Electronic communication carries inherent risks, which are further described in the Telehealth Informed Consent.

Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as information we receive in the future. The current Notice will be posted at CruxBody.com with its effective date.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with the Medical Group's Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.

Contact — Privacy Officer

[PRIVACY OFFICER NAME/TITLE], [AFFILIATED MEDICAL GROUP, P.C.], 7901 4th St N, STE 300, St Petersburg, FL 33702, support@cruxbody.com.