Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Your information. Your rights. Our responsibilities.

Yooth Wellness is a concierge wellness and longevity practice. We care for patients in Florida and New York, mostly by telehealth. You pay us directly. We do not bill health insurance.

Your health information is personal. This notice explains how we use it, when we share it, and the choices and rights you have. In this notice, "we" and "us" mean Yooth Wellness and our team. "Your provider" means the licensed clinician who cares for you at Yooth.

If you have a question about this notice, contact our Privacy Officer. You will find the details at the end.

Your rights

When it comes to your health information, you have these rights. To use any of them, send a request to our Privacy Officer. You can also send a message in your patient portal.

Get a copy of your health record

• You can ask to see or get a copy of your health record and other health information we have about you. You can ask for a paper copy or an electronic copy.
• Many of your records, like lab results and your plan, are already in your patient portal.
• We will give you a copy or a summary, usually within 30 days of your request. If you live in New York and ask in writing to look at your record, we will give you a chance to see it within 10 days.
• We may charge a reasonable fee based on our cost. New York patients will not pay more than 75 cents a page for paper copies. We will not deny you access just because you cannot pay.

Ask us to correct your health record

• You can ask us to correct health information that you think is wrong or missing.
• We may say "no," but we will tell you why in writing within 60 days.

Ask us to contact you in a certain way

• You can ask us to reach you in a specific way, like a certain email address or phone number, or to send mail to a different address.
• We will say "yes" to all reasonable requests.

Ask us to limit what we use or share

• You can ask us not to use or share certain health information for treatment, payment or our operations. We do not have to agree. We may say "no" if it could affect your care. If we agree, we may still share the information if you need emergency treatment.
• If you pay for a service or item in full yourself, you can ask us not to share information about it with your health plan for payment or our operations. We will say "yes" unless a law requires us to share it. Yooth does not bill health insurance, so we do not share your information with a health plan to get paid. This right still protects you. For example, it applies if you later ask us to send something to your plan.

Get a list of who we shared your information with

• You can ask for a list (called an "accounting") of the times we shared your health information in the 6 years before your request. It will show who we shared it with and why.
• The list will not include sharing for treatment, payment or our operations. It will also leave out some other sharing, like sharing you asked us to do.
• We will give you one list a year for free. If you ask for another list within 12 months, we may charge a reasonable fee based on our cost.

Get a copy of this notice

• You can ask for a paper copy of this notice at any time, even if you agreed to get it electronically. We will send it to you promptly.
• This notice is also on our website and in your patient portal.

Choose someone to act for you

• If someone is your legal personal representative, like a health care agent or a legal guardian, that person can use your rights and make choices about your health information.
• We will check that the person has this authority before we act.

File a complaint if you think your rights were violated

• You can complain to us. Contact our Privacy Officer using the details at the end of this notice.
• You can also complain to the U.S. Department of Health and Human Services, Office for Civil Rights. Send a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, call 1-877-696-6775, or visit www.hhs.gov/hipaa/filing-a-complaint.
• We will never retaliate against you for filing a complaint.

Your choices

For some health information, you can tell us what you want us to share.

You can tell us whether to share information with:

• Family, close friends or others involved in your care or in paying for your care
• Disaster relief groups, if there is an emergency

If you are not able to tell us your choice, for example if you are unconscious, we may share your information if we believe it is in your best interest. We may also share it when needed to lessen a serious and imminent threat to health or safety.

We never share your information for these purposes unless you give us written permission:

• Marketing
• Sale of your information

What Yooth does not do. We do not sell your health information. We do not use it for marketing. We do not fundraise. We do not keep psychotherapy notes. If that ever changes, we will update this notice first and ask for your written permission where the law requires it.

Reminders about your visits, labs, plan and payments are part of your care. They are not marketing.

Our uses and disclosures

How we usually use or share your health information

To treat you
We use your health information and share it with others who are part of your care.

• Example: Your provider reviews your intake and lab results, then sends your prescription to a licensed pharmacy that fills it and ships it to you.
• Example: We send your lab order to an outside lab partner. In New York, a trained phlebotomist may come to your home to draw your blood. The lab sends your results back to us.
• Example: Your provider talks with you on a secure video visit and writes notes in your record.

To run our practice
We use and share your health information to run Yooth, improve your care and contact you when needed.

• Example: We use your information to manage your plan, keep your patient portal working and send reminders by email about your visits, labs and next steps.
• Example: We review records to check the quality and safety of our care.

To get paid for your care
We use your health information to bill you and collect payment. You pay us directly. We do not bill health insurance.

• Example: We use a payment company, Stripe, to process your card and to send invoices, receipts and payment reminders by email. We share only what is needed for the payment. These invoices and emails do not name your medicines.
• Example: If you ask, we can give you an itemized receipt that you can send to your own insurer or health savings account.

Companies that work for us
Some outside companies help us run Yooth, such as our patient portal and video visit services. When a company like this handles your health information for us, it must sign a contract to protect it, as federal law requires. It may use your information only to do its work for us.

Other ways we may use or share your health information

The law allows or requires us to share your information in other ways. These are usually for the public good, like public health and safety. We must meet many conditions in the law before we can share for these reasons. Florida and New York law add more limits, which are described in the next section.

Help with public health and safety
We can share health information about you in certain situations, like:

• Preventing or controlling disease
• Helping with product recalls
• Reporting bad reactions to medicines
• Reporting suspected abuse, neglect or domestic violence
• Preventing or lessening a serious threat to anyone's health or safety

Do research
We can use or share your information for health research, but only when the law's privacy rules for research are met. Yooth does not do research with patient information today.

Follow the law
We will share information about you if state or federal law requires it. This includes the U.S. Department of Health and Human Services if it wants to see that we are following federal privacy law.

Respond to organ and tissue donation requests
We can share health information about you with organ procurement organizations.

Work with a medical examiner or funeral director
We can share health information with a coroner, medical examiner or funeral director when a person dies.

Handle workers' compensation, law enforcement and other government requests
We can use or share health information about you:

• For workers' compensation claims
• For law enforcement purposes or with a law enforcement official
• With health oversight agencies for activities allowed by law, like audits and licensing
• For special government functions, like military, national security and presidential protective services

Respond to lawsuits and legal actions
We can share health information about you in response to a court or administrative order, or in response to a subpoena. For Florida patients, the law also requires proper notice to you before your records are shared under a subpoena.

Substance use disorder records
Yooth is not a substance use disorder treatment program. If we ever receive substance use disorder treatment records about you that are protected by federal law (42 CFR Part 2), we will not use or share them in a civil, criminal, administrative or legislative investigation or proceeding against you unless you give written consent, or a court orders it after you get notice and a chance to be heard. A court order must come with a subpoena or other legal requirement before the records are used or shared.

Your written permission

For any use or sharing not described in this notice, we will ask for your written permission first. If you give permission, you can change your mind at any time. Tell us in writing. Taking back your permission will not undo sharing we already did while we had it.

Extra protections under Florida and New York law

Federal law sets a floor. Florida and New York law give some information more protection. When a state law is stricter, we follow it.

Florida patients

• Your medical records. We will not share your records, or talk about your condition, with anyone other than you, your legal representative, or the health care professionals involved in your care, unless you give written permission. Florida law allows a few exceptions, such as a subpoena with proper notice to you, research where you cannot be identified, poison control, and reports of abuse, neglect or exploitation to the Florida Department of Children and Families.
• HIV test results. We keep HIV test results confidential. We share them only with you, people you name in a written release, and others Florida law allows.
• Genetic (DNA) tests. We order a DNA test only with your express consent. The results belong to you. We will not share them without your express consent.
• Mental health records. Florida law gives extra protection to some mental health records and to what you tell a mental health professional. We will not share mental health information without your written permission unless it is for your treatment or another law requires it.

New York patients

• HIV related information. We will not share HIV related information about you unless you sign a special HIV release form, or New York law allows it, for example with health care providers who need it to treat you.
• Genetic test results. We order a genetic test only with your written informed consent. We will not share the results with anyone you have not named in writing.
• Mental health information. We will not share your mental health information without your written permission unless it is for your treatment or another law requires it.
• Looking at your record. If you ask in writing to look at your record, we will let you see it within 10 days. Paper copies cost no more than 75 cents a page.

Our responsibilities

• We are required by law to keep your protected health information private and secure.
• We are required by law to give you this notice of our legal duties and privacy practices.
• We will tell you promptly if a breach happens that may have put your health information at risk. The law requires this.
• We must follow the duties and privacy practices in this notice and give you a copy of it.
• We will not use or share your information in ways not described here unless you tell us in writing that we can. You can change your mind at any time. Let us know in writing.

For more information, visit www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html.

Changes to this notice

We can change the terms of this notice. The changes will apply to all the information we have about you, including information we had before the change. If we make an important change, we will post the new notice on our website and in your patient portal, and it will be available on request. The new notice will show its effective date at the top.

How to reach us

Privacy Officer: Sofia Gadelov, FNP-BC
Email: privacy@yoothwell.com
Phone: 305-707-7827
Practice: Image By Sofia, Inc, doing business as Yooth Wellness Inc

Please do not email health details you do not want to send by email. You can always use the secure messages in your patient portal instead.

This notice is effective October 6, 2026.