HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment

StrikerRx is committed to protecting the privacy and security of Protected Health Information ("PHI") as required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), the HITECH Act, and applicable state laws. LumifyMD, our technology provider, operates the Group Order Portal under a Business Associate Agreement and assists StrikerRx in providing pharmacy services.

Uses & Disclosures of PHI

We may use or disclose PHI for the following purposes:

• Treatment — to dispense medications and coordinate with prescribers and other healthcare providers.
• Payment — to bill for products and services and obtain reimbursement.
• Healthcare operations — including quality assessment, training, accreditation, and business management.
• As required by law — including reporting to regulators, public health authorities, and law enforcement.
• With your authorization — for any purpose not described above.

Patient Rights

• Right to request access to and a copy of PHI we maintain.
• Right to request amendment of PHI you believe is inaccurate.
• Right to an accounting of certain disclosures.
• Right to request restrictions on certain uses and disclosures.
• Right to request confidential communications by alternative means or location.
• Right to receive notification of a breach of unsecured PHI.
• Right to a paper copy of this Notice on request.

Our Responsibilities

• We are required by law to maintain the privacy and security of PHI.
• We will notify affected individuals of breaches of unsecured PHI as required by law.
• We must abide by the terms of this Notice currently in effect.

Provider Responsibilities

Healthcare providers and their authorized staff using the Portal are responsible for ensuring that any PHI they upload (including patient lists) is collected, transmitted, and disclosed in accordance with HIPAA and applicable state law, and that appropriate patient authorizations or other lawful bases for disclosure exist.

Changes

We reserve the right to revise this Notice. The revised Notice will apply to all PHI we maintain. The effective date is shown above.

Complaints & Contact

To exercise your rights or file a privacy complaint, contact our Privacy Officer at nicholas@lumifymd.com. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.