HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice applies to the medical professional entities providing services under the IV ACTIVE name in Pennsylvania, Delaware, and New Jersey (collectively, "IV ACTIVE," "we," or "us"), and describes our legal duties and privacy practices regarding your protected health information ("medical information").

1. Our Obligations

We are required by law to maintain the privacy of your medical information, to provide you with this Notice describing our legal duties and privacy practices, and to follow the terms of the Notice currently in effect.

2. How We May Use and Disclose Your Medical Information

• Treatment. To provide, coordinate, or manage your care, including sharing information with the nurses and staff involved in your visit.
• Payment. To bill and collect payment for services provided to you.
• Health Care Operations. For quality assessment, staff training, and other activities needed to operate our practice.
• Appointment Reminders. To contact you about upcoming or past appointments.
• As Required by Law. When disclosure is required by federal, state, or local law.
• Business Associates. Vendors who help us operate (for example, billing or scheduling) may receive limited medical information under a written agreement requiring them to protect it.

3. Other Uses Require Your Authorization

Any use or disclosure not described above requires your written authorization, which you may revoke at any time in writing.

4. Your Rights

You have the right to:

• Inspect and obtain a copy of your medical information;
• Request an amendment to your medical information;
• Receive an accounting of certain disclosures;
• Request restrictions on certain uses or disclosures of your medical information;
• Request confidential communications;
• Receive a paper copy of this Notice; and
• Be notified in the event of a breach involving your unsecured medical information.

5. Changes to This Notice

We may revise this Notice from time to time. The current version will always be posted on our website.

Privacy Officer

Our designated Privacy Officer is Grig Hakobyan, who can be reached at grig@upmed.ai or (814) 919-9611 with any questions about this Notice or our privacy practices, or by mail at 929 S. High Street, West Chester, PA 19382.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us at contact@iv-active.com, or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

Effective date: September 17, 2026