HIPAA NOTICE OF PRIVACY PRACTICES

Wellspring Medical
Effective Date: November 24-2025

This Notice of Privacy Practices ("Notice") describes how Wellspring Medical ("we," "our," "us") may use and disclose your Protected Health Information ("PHI"), and your rights regarding your health information under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

PLEASE READ THIS NOTICE CAREFULLY.

1. Our Responsibilities

Wellspring Medical is required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this Notice
• Follow the terms of this Notice currently in effect
• Notify you promptly if a breach occurs that may compromise the privacy of your information

We take patient confidentiality seriously and follow all HIPAA regulations for electronic and paper records.

2. How We Use and Disclose Your PHI

We may use or disclose your health information for the following purposes:

2.1 Treatment

We use your PHI to:

• Diagnose hormone conditions
• Order and review lab tests (IGF-1, testosterone, hormone panels)
• Provide medical consultations (telemedicine)
• Prescribe HGH, testosterone, or peptide medications
• Coordinate treatment and care with licensed physicians, medical staff, and partner pharmacies

Example: A physician reviews your lab results to determine your hormone therapy dosage.

2.2 Payment

We may use and disclose PHI to:

• Process payments
• Verify insurance or billing information (if applicable)
• Work with payment processors
• Confirm services provided

Example: We send necessary information to a payment processor to complete a transaction.

2.3 Healthcare Operations

We use PHI to support business operations such as:

• Quality assessments
• Training of staff
• Audits and compliance reviews
• Improving medical services

Example: Reviewing anonymized case data to improve clinical results.

3. Other Permitted Uses and Disclosures

We may use or disclose your health information:

• When Required by Law
  To comply with federal, state, or local healthcare regulations.
• For Public Health and Safety
  Reporting adverse events, preventing disease, responding to FDA requirements.
• For Law Enforcement or Legal Proceedings
  Such as responding to subpoenas or court orders.
• To Prevent Serious Threats
  If necessary to reduce a risk of serious harm to health or safety.
• For Health Oversight Activities
  Audits, investigations, or inspections by health authorities.

4. Uses and Disclosures Requiring Your Authorization

We will NOT use or share your PHI for:

• Marketing purposes
• Selling your information
• Non-health-related communications
• Any purpose unrelated to treatment, payment, or healthcare operations

Unless you give us written authorization.
You may revoke this authorization at any time.

5. Your HIPAA Rights

You have the following rights regarding your health information:

5.1 Right to Access Your Records

You may request:

• Medical records
• Lab results
• Treatment history

We must provide access within a reasonable timeframe.

5.2 Right to Request Corrections

If you believe your information is incorrect or incomplete, you may request changes.

5.3 Right to Request Restrictions

You may ask us to limit how your information is used or shared.
We are not required to agree, except for requests regarding certain payment-related disclosures.

5.4 Right to Confidential Communications

You may request communication through:

• Alternate phone numbers
• Secure email
• Alternate mailing addresses

5.5 Right to an Accounting of Disclosures

You may request a list of PHI disclosures made for reasons other than treatment, payment, or operations.

5.6 Right to a Paper or Digital Copy of This Notice

You may request a printed or electronic version at any time.

5.7 Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with:
Wellspring Medical Privacy Officer
or
U.S. Department of Health & Human Services (HHS)
We will not retaliate against you for filing a complaint.

6. Data Security Measures

Wellspring Medical uses strict security protocols, including:

• Encrypted electronic records
• Secure telemedicine platforms
• HIPAA-compliant storage systems
• Access limited to authorized personnel
• Secure pharmacy communication
• Regular audits and risk assessments

Your PHI is protected throughout the treatment process.

7. Telemedicine Privacy Notice

Because Wellspring Medical provides hormone therapy through online platforms, PHI may be used through:

• Secure video consultations
• Encrypted messaging
• Online intake forms
• Digital lab results
• EMR systems

We follow all HIPAA rules applicable to telemedicine services.

8. Changes to This Notice

We may update this Notice at any time.
Revisions will be posted on our website with the updated effective date.

9. Contact Us

For questions about this Notice or your privacy rights, contact:

Wellspring Medical – Privacy Officer
Email: info@wellspringmedical.com
Phone: +1 (954) 500-5050
Address: 2800 West State Rd 84, Suite 115, Fort Lauderdale, FL 33312
Website: www.wellspringmedical.com