Florida Privacy Notice (in addition to the Privacy Policy)

This Florida Privacy Notice (“Notice”) is in addition to, and incorporated into, the Privacy Policy of Wellevate Healthand its owners and affiliates (collectively, “we,” “us,” or “our”) and applies to personal information that we collect online or offline from Florida residents (“consumers” or “you” or “your”).

Information We Collect

We have collected the following categories of personal information from consumers within the last twelve (12) months:

Use of Personal Information

We use this personal information for one or more of the following business purposes:

• To provide our products and services, such as to process drug claims and fulfill orders.

• To provide patient care and customer service (e.g., respond to inquiries and requests, verify your identity, maintain your account).

• To analyze use of our products and services and to customize and improve them.

• For marketing (e.g., email alerts about products or services offered by us and/or third parties that may be of interest to you).

• To maintain the security of our products, services, and systems (e.g., detecting security breaches or fraudulent activity).

• To keep our website and other services functioning properly (e.g., debugging and fixing errors).

• To comply with our legal obligations.

• To protect our rights, property, and safety or the rights, property, and safety of others.

We do not sell your personal information.

Sharing of Personal Information

We may share personal information we collect with third parties for a business purpose, such as pharmacies (to fill your prescription), marketing partners, advertising networks, clients that sponsor discount cards, and service providers that help us operate or provide our services (including but not limited to data storage companies and internet service providers). When we share personal information with our service providers, we require that they protect the information and use/disclose it only to provide their services to us and for limited business purposes (e.g., detect security breaches and comply with legal obligations).

In the past twelve (12) months, we have shared the following categories of personal information for a business purpose with the following categories of third parties:

Your Rights and Choices

This section describes your privacy rights and explains how to exercise them.

Right to Know
Subject to certain exceptions, you have the right to know the following about the personal information we collected about you over the past 12 months:

• The categories of personal information;

• The categories of sources of the personal information;

• The business or commercial purpose for collecting that personal information;

• The categories of personal information shared for a business purpose; and

• The categories of third parties with whom the personal information is shared.

Right to Delete
You have the right to request that we delete the personal information that we collected from you, subject to certain exceptions.

Right to Opt-Out of the Sale of Personal Information
We do not sell personal information. If our practices change, we will update this Notice and provide opt-out instructions.

How to Exercise Your Rights
Submit a request to info@wellevatehealth.co or mail us at the address below (see Contact Information).

---

HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

When this Notice of Privacy Practices (“Notice”) refers to “we” or “us,” it is referring to Wellevate Health and all pharmacists who provide health care services and the employees of our pharmacy. We are required by law to maintain the privacy of your protected health information (“PHI”), to follow the terms of the Notice currently in effect, to give you this Notice setting forth our legal duties and privacy practices concerning your PHI, and to notify affected individuals following a breach of unsecured PHI. This Notice describes how we may use and disclose your PHI. Additionally, this Notice explains the rights you have with respect to your PHI, and certain obligations we must abide by in accordance with the law. We reserve the right to amend this Notice. If we make any material revisions, we will post a copy of the revised Notice in the pharmacy, on our website, and will offer you a copy of the revised Notice.

I. USE AND DISCLOSURE OF YOUR PHI

We will use and disclose your PHI for treatment, payment, and health care operations. We may also use your PHI for other purposes that are permitted and/or required by law and pursuant to your written authorization. Any other uses not described in this Notice will only be made with your explicit written authorization, which you may revoke at any time by providing us written notice.

A. Treatment – We may use and disclose your PHI in order to provide you with prescription and supply services. We may disclose your PHI to other pharmacists, pharmacy technicians, and health care providers involved in your care. You will receive an individual notice and have the opportunity to opt out of any subsidized treatment communications.

B. Payment – We will use and disclose your PHI in order to obtain payment for the health care services we provide to you. We may also disclose your PHI to receive prior approval from your health plan or to determine if your health plan will cover a certain prescription or service.

C. Health Care Operations – We may use and disclose your PHI in connection with the management of our pharmacy, including quality assessment and improvement, internal compliance audits, and performance evaluations, as well as general administrative activities.

D. Prescription Refill Reminders, Treatment Alternatives, or Health-Related Benefits – We may use and disclose your PHI to contact you about prescription refills, treatment options or alternatives, or health-related benefits/services that may be of interest to you.

E. Family Members, Relatives, or Close Friends – Unless you object, we may disclose your PHI to family members, relatives, close personal friends, or others identified by you as involved in your care or payment for your care. If you are not present to agree or object, we may use professional judgment to determine whether the disclosure is in your best interest and disclose only information relevant to involvement in your care or payment.

F. Other Permitted and Required Uses and Disclosures – We may use or disclose your PHI without authorization and without an opportunity to agree or object as permitted by law, including:

• As required by law;

• To public health authorities and, in coordination, foreign government agencies for public health activities;

• To health oversight agencies for authorized oversight activities;

• For judicial or administrative proceedings (e.g., in response to a subpoena or court order with appropriate safeguards);

• To law enforcement for specific purposes (e.g., reporting certain injuries, complying with legal process, identifying a suspect/fugitive/missing person, reporting a crime);

• To coroners/medical examiners;

• To funeral directors;

• To organ procurement organizations for donation/transplantation purposes;

• For research with required approvals/assurances;

• To avert a serious threat to health or safety;

• For military/veterans activities;

• For national security and intelligence activities;

• For protection of the President and authorized persons;

• To a correctional institution or law enforcement custodian if you are an inmate or under custody;

• To comply with workers’ compensation or similar programs.

II. YOUR RIGHTS AS OUR PATIENT

A. Request Restrictions – You may request restrictions/limitations on our use and/or disclosure of your PHI (we are not required to agree, except for restrictions on disclosures to a health plan when you pay in full out-of-pocket). If we agree, we may still disclose PHI to you, as required/permitted by law, or in emergencies.

B. Confidential Communications – You may request to receive communications by alternative means or at alternative locations, and we will accommodate reasonable requests. Submit requests in writing to the Privacy Officer.

C. Access – You have the right to access, inspect, and obtain a copy of your PHI, including electronic PHI (subject to HIPAA exceptions). We will respond in a timely manner and may charge a reasonable, cost-based fee. In certain circumstances, we may deny access with a written explanation and review rights where applicable.

D. Accounting of Disclosures – You may request an accounting of disclosures for up to six (6) years (or a shorter period you specify). One request per year is free; additional requests may incur a reasonable, cost-based fee.

E. Amendments – If you believe your PHI is incorrect or incomplete, you may request an amendment in writing. We may deny requests in certain cases (e.g., not created by us, already accurate/complete). You may submit a statement of disagreement; our rebuttal, your request, our denial, and your statement will be included in future disclosures as applicable.

F. Paper Copy – You may obtain a paper copy of this Notice at any time, even if you received it electronically.

G. Fundraising – You have the right to opt out of fundraising communications. Your PHI will not be sold or used for fundraising without your prior authorization.

III. ADDITIONAL INFORMATION / QUESTIONS OR COMPLAINTS

Contact (Privacy Officer):
Wellevate Health
Attn: Privacy Officer / Regulatory Compliance
7901 4th St. N STE 300
St. Petersburg, FL 33702
Email: info@wellevatehealth.co

If you believe your privacy rights have been violated, you may file a complaint—without retaliation—with our Privacy Officer at the address above, or with:

Secretary of the Department of Health and Human Services
200 Independence Avenue SW
Washington, D.C. 20201