THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: August 17, 2026

This notice applies to Aura Wellness, a Florida telehealth practice, and to all care you receive from us. It explains what we do with your protected health information — PHI — which is information that identifies you and relates to your health, your care, or payment for your care.

How We May Use and Disclose Your Health Information

We may use and disclose your PHI without your written authorization for the following purposes.

Treatment

To provide and coordinate your care. For example, we send prescriptions to a licensed compounding pharmacy, order and review your lab work, and share relevant history with another clinician involved in your care.

Payment

To obtain payment for services. For example, we confirm eligibility, bill you or your payment provider, and document what was provided.

Health Care Operations

To run the practice. For example, quality assessment, reviewing clinician performance, training, licensing, and general business management.

Other Permitted or Required Uses

• Appointment reminders and follow-up about your treatment or care.
• As required by law, including federal, state, and local reporting requirements.
• Public health activities, such as reporting disease, adverse drug events, or product problems to the FDA.
• Abuse, neglect, or domestic violence reporting to authorities permitted by law to receive it.
• Health oversight activities such as audits, investigations, licensure, and inspections.
• Judicial and administrative proceedings, in response to a court order, subpoena, or other lawful process.
• Law enforcement, under the specific circumstances HIPAA allows.
• Serious threat to health or safety, to prevent or lessen a serious and imminent threat.
• Coroners, medical examiners, and funeral directors, as permitted by law.
• Workers’ compensation, as authorized by law.
• Specialized government functions, including military, national security, and protective services.
• Business associates who perform services for us, under a written agreement requiring them to protect your information.

Uses That Require Your Written Authorization

The following always require your prior written authorization:

• Most uses and disclosures of psychotherapy notes.
• Use or disclosure of your PHI for marketing purposes.
• Any sale of your PHI.
• Any other use or disclosure not described in this notice.

You may revoke an authorization in writing at any time. Revoking it stops future uses and disclosures, but does not undo anything we already did while the authorization was in effect.

Your Choices

Unless you object, we may share relevant information with a family member, friend, or other person you involve in your care or payment for your care. If you are not present or are unable to agree or object, we will use our professional judgment and share only what is directly relevant to that person’s involvement.

Your Rights Regarding Your Health Information

• Inspect and copy. You may see and get a copy of your health and billing records. Submit a written request; we respond within 30 days and may charge a reasonable, cost-based fee for copies.
• Request an amendment. If you believe your record is wrong or incomplete, you may ask us in writing to amend it and give your reason. We respond within 60 days. If we deny it, you may file a statement of disagreement, which we will include in your record.
• Accounting of disclosures. You may request a list of certain disclosures we made, other than those for treatment, payment, or health care operations, for up to six years. The first request in any 12-month period is free.
• Request restrictions. You may ask us to limit how we use or disclose your PHI. We do not have to agree to every request. We must agree to withhold information from a health plan when you have paid for that service in full out of pocket.
• Confidential communications. You may ask us to contact you in a specific way or at a specific location. We will accommodate reasonable requests and will not ask you why.
• Paper copy of this notice. You may request a paper copy at any time, even if you agreed to receive it electronically.
• Breach notification. You will be notified if a breach occurs that compromises the privacy or security of your information.

To exercise any of these rights, contact our Privacy Officer using the details at the bottom of this notice.

Our Responsibilities

Aura Wellness is required by law to:

• Maintain the privacy and security of your protected health information.
• Give you this notice of our legal duties and privacy practices regarding your PHI.
• Notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
• Follow the terms of the notice currently in effect.

We may not use or disclose your information other than as described in this notice unless you tell us we may, in writing. If you tell us we may and then change your mind, you may revoke that permission in writing at any time.

Changes to This Notice

We may change this notice at any time. Any change applies to all information we already hold about you as well as information we receive in the future. The current notice is always posted at theaurawellness.com/notice-of-privacy-practices, with its effective date at the top. You may request a paper copy of the current notice at any time.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us, with the federal government, or with both. We will not retaliate against you for filing a complaint, and it will not affect your care.

With Aura Wellness: contact our Privacy Officer below, describing what happened and when. We will investigate and respond in writing.

With the federal government: U.S. Department of Health and Human Services, Office for Civil Rights.

• Online: OCR Complaint Portal
• By mail: U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Room 509F, HHH Building, Washington, D.C. 20201
• By phone: 1-800-368-1019 (TDD 1-800-537-7697)

A complaint to OCR must generally be filed within 180 days of when you knew the problem occurred.

Contact

Nasser Al-Hafi, Privacy Officer
Aura Wellness — Tampa, Florida
Email: nasser@theaurawellness.com
Phone: 1-813-755-4461

See also our Privacy Policy, which additionally describes what our website collects.