Telehealth Consent & Medical Groups Notice of Privacy Practices

INFORMED CONSENT REGARDING USE OF TELEHEALTH

BY CLICKING “I AGREE,” CHECKING A RELATED BOX TO SIGNIFY YOUR ACCEPTANCE, USING ANY OTHER ACCEPTANCE PROTOCOL PRESENTED THROUGH THE SERVICE OR OTHERWISE AFFIRMATIVELY ACCEPTING THIS CONSENT, YOU ACKNOWLEDGE THAT YOU HAVE READ, ACCEPTED, AND AGREED TO BE BOUND BY THIS CONSENT. IF YOU DO NOT AGREE TO THIS CONSENT, DO NOT CREATE AN ACCOUNT OR USE THE SERVICE. YOU HEREBY GRANT AGENCY AUTHORITY TO ANY PARTY WHO CLICKS ON THE “I AGREE” BUTTON OR OTHERWISE INDICATES ACCEPTANCE TO THIS CONSENT ON YOUR BEHALF.

IF YOU ARE EXPERIENCING A LIFE-THREATENING SITUATION SUCH AS CONTEMPLATING SUICIDE, CALL 911 OR THE 988 SUICIDE & CRISIS LIFELINE AT 988.

PURPOSE

The purpose of this consent form (“Consent”) is to provide you with information about telehealth and to obtain your informed consent to the use of telehealth in the delivery of healthcare and/or mental health services to you by Startvim, LLC and any affiliated physicians, physician assistants, nurse practitioners, and/or mental health professionals (“Providers”) using the online platforms owned and operated by SummaUp, LLC and/or its subsidiaries (the “Service”). In this Consent, the terms “you” and “yours” refer to the person using the Service, or in the case of a use of the Service by or on behalf of an individual minor between the ages of thirteen (13) and twenty one (21) or higher age of majority under applicable state law, “you” and “yours” refer to and include (i) the parent or legal guardian who provides consent to the use of the Service by such minor or uses the Service on behalf of such minor, and (ii) the minor for whom consent is being provided or on whose behalf the Service is being utilized.

USE OF TELEHEALTH

Telehealth involves the delivery of healthcare and/or mental health services using electronic communications, information technology or other means between a healthcare or mental health Providers and a patient who are not in the same physical location. Telehealth may be used for diagnosis, treatment, follow-up and/or patient education, and may include, but is not limited to, one or more of the following: electronic transmission of medical records, photo images, personal health information or other data between a patient and a Providers; interactions between a patient and Providers via audio, video and/or data communications (such as messaging or email communications); use of output data from medical devices, sound and video files. Alternative methods of care may be available to you, such as in-person services, and you may choose an alternative at any time. Always discuss alternative options with your Providers.

The electronic systems used in the Services will incorporate network and software security protocols to protect the privacy and security of health information and imaging data, and will include measures to safeguard the data to ensure its integrity against intentional or unintentional corruption.

AVAILABILITY

Certain of our Services are currently only available to individuals located in certain states.

ELIGIBILITY

In order to qualify to use the Services, the following must be true:
You are age 21 years or over or are accompanied by your parent/guardian.
You are located in a State Where We Operate.
You agree to be legally bound by and comply with these Terms of Use. You understand and agree that satisfying the above requirements does not guarantee that you will receive Services. In addition to the above requirements, Providers and certain affiliated professional entities reserve the right to change or include new requirements as deemed appropriate in their sole discretion without providing prior notice to you.

ANTICIPATED BENEFITS

The use of telehealth may have the following possible benefits: making it easier and more efficient for you to access medical care or other services and treatment for the conditions treated by your Providers(s); allowing you to obtain medical care or other services and treatment by Providers(s) at times that are convenient for you; and enabling you to interact with Providers(s) without the necessity of an in-office appointment. Participation in mental health services may reduce stress and anxiety, decrease negative thoughts, improve relationships, and increase comfort in different settings.

YOUR RELATIONSHIP WITH SUMMAUP

SummaUp does not provide any medical services, including via the Sites and Services. Rather, SummaUp provides a technology platform for you to access a health care Providers employed or contracted with Providers physicians or similar affiliated professional entities and obtain access to additional information, which you may or may not choose to utilize in planning your health care and wellness. The health and wellness resources made available through our Services are not a substitute for direct in-person health care services in all cases. The decision to focus on diagnosis, treatment recommendations, or both, rests with you and the health care Providers. You understand that by coordinating and in certain cases consulting with StartVim or affiliate health care Providers through the Services, you are not entering into a Providers-patient relationship with SummaUp itself.

By accepting the Terms of Use, you agree and consent to Providers, Providers affiliates, or health care Providers sending you disclosures, notices, messages, reports, and other communications. It is your responsibility to monitor these communications. You acknowledge and agree that you will not hold us or any Providers affiliate liable for any loss, injury, or claim of any kind resulting from your failure to read these communications or for your failure to comply with any treatment recommendations contained in these communications.

CONSULTATIVE SERVICE

In some cases, a Providers physician or affiliated health care Providers may use the Services to provide advice or treatment to you. A health care Providers consulting with you through the Services may not have the benefit of information that would be obtained by examining you in person and observing your physical condition, in each instance. Therefore, the health care Providers may not be aware of facts or information that may affect his or her opinion regarding a potential diagnosis or treatment recommendation. To reduce the risk to you of this limitation, Providers strongly encourages you to provide all relevant information and discuss any and all diagnosis and treatment options with a health care Providers. Moreover, a health care Providers utilizing Providers may be limited by state law in prescribing certain medications to you without first conducting an in-person physical examination. By deciding to engage the Services, you acknowledge and agree that you are aware of these limitations and agree to assume the risk of these limitations. Furthermore, you agree and accept that:

• any diagnosis you may receive is limited and, in some cases, provisional;
• the health care services are not intended, in all cases, to replace a full medical evaluation or in-person visit with a health care Providers;
• a health care Providers acting through the Services may not have important information that is usually obtained through a “hands-on” physical examination; and
• the absence of a physical examination may affect the health care Providers’s ability to diagnose any potential condition, disease or injury.

POTENTIAL RISKS

While the use of telehealth in the delivery of care can provide potential benefits for you, there are also potential risks associated with the use of telehealth and other technology. These risks include, but may not be limited to the following: the quality, accuracy or effectiveness of the services you receive from your Providers could be limited; technology, including the Service, may contain bugs or other errors, including ones which may limit functionality, produce erroneous results, render part or all of such technology, including the Service, unavailable or inoperable, produce incorrect records, transmissions, data or content, or cause records, transmissions, data or content to be corrupted or lost; failures of technology may also impact your Providers(s) ability to correctly diagnose or treat your condition; the inability of your Providers(s) to conduct certain tests or assess vital signs in-person may in some cases prevent the Providers(s) from providing a diagnosis or treatment or from identifying the need for emergency medical care or treatment for you; your Providers(s) may not able to provide treatment for your particular condition and you may be required to seek alternative healthcare or emergency care services; mental health services may result in feeling worse as therapy progresses; delays in medical evaluation/treatment could occur due to unavailability of your Providers(s) or deficiencies or failures of the technology or electronic equipment used; the electronic systems or other security protocols or safeguards used could fail, causing a breach of privacy of your medical or other information; data stored and communicated electronically, for example, through email communications, may be more susceptible to unintended disclosure of protected health information to third parties; given regulatory requirements in certain jurisdictions, your Providers(s) diagnosis and/or treatment options, especially pertaining to certain prescriptions, may be limited; a lack of access to all of your medical records may result in adverse drug interactions or allergic reactions or other judgment errors.

LIFE THREATENING AND OTHER EMERGENCY SITUATIONS; FOLLOW-UP CARE If you are experiencing a life-threatening situation such as contemplating suicide, call 911 or the 988 Suicide and Crisis Lifeline at 988.

If the situation is an emergency, call 911. In some situations, telehealth is not an appropriate method of care. If you require immediate or urgent care, you must seek care at an emergency room facility or other Providers equipped to deliver urgent or emergent care. Providers may not respond promptly to communications you submit through the Service. If you are not experiencing an emergency or do not require immediate or urgent care, you can communicate with Providers through the secure message service in the Service

DATA PRIVACY AND PROTECTION

The electronic systems used in the Service will incorporate network and software security protocols to protect the privacy and security of your information and will include measures to safeguard data against intentional or unintentional corruption. Personal information that identifies you or contains protected health information will not be disclosed to any third party without your consent, except as authorized by law for the purposes of consultation, treatment, payment/billing, certain administrative purposes, and as required by law to disclose to other persons and agencies certain information obtained during the provision of mental health services (e.g., danger to self or others; mandatory reporting of child, elder, or vulnerable adult abuse) or as otherwise set forth in your Providers's Notice of Privacy Practices. Use of the Service may include email communications to and from you that may include your protected health information. You understand that SummaUp does not and cannot guarantee the security or privacy of the services you use to receive communications, including for example your email service Providers.

LABORATORY PRODUCTS AND SERVICES

Certain healthcare services provided to you by Providers via the Service may require that you complete an at-home diagnostic test. These diagnostic tests are provided by third-party laboratories, and neither SummaUp Health, Inc. and its subsidiaries (collectively, “SummaUp”), nor your Providers(s) can guarantee the accuracy or reliability of these tests. These laboratory tests can provide false negative, false positive, or inconclusive results that could impact your Providers(s) ability to correctly diagnose or treat your medical conditions. A failure or defect of these tests could also impact your Providers(s) ability to correctly diagnose or treat your medical conditions.

OPEN PAYMENTS NOTICE

For informational purposes only, a link to the federal Centers for Medicare and Medicaid Services Open Payments web page is provided here. The federal Physician Payments Sunshine Act requires that detailed information about payment and other payments of value worth over ten dollars ($10) from manufacturers of drugs, medical device, and biologics to physicians and teaching hospitals be made available to the public. The Open Payments database is a federal tool used to search payments made by drug and device companies to physicians and teaching hospitals. It can be found at https://openpaymentsdata.cms.gov.

TERMINATION

The Terms of Use will remain in full force and effect as long as you continue to access or use the Sites or Services. You may terminate the Terms of Use at any time by discontinuing use of the Sites. Your permission to use the Sites automatically terminates if you violate these Terms of Use.

Providers may terminate or suspend any of the rights granted by these Terms of Use and your access to and use of the Sites or Services with or without prior notice, for any reason, and at any time. The following provisions survive the expiration or termination of these Terms of Use for any reason whatsoever: Disclaimer of Warranties; Limitation of Liability; Indemnification; Governing Law, Dispute Resolution, Venue, Severability of Provisions; No Waiver; and Assignment.

After such termination, Providers will have no further obligation to provide the Services, except to the extent an affiliated professional entity is obligated to provide you access to your health records or is required to provide you with continuing care under applicable legal, ethical and professional obligations to you.

DISCLAIMER OF WARRANTIES

YOU EXPRESSLY AGREE THAT USE OF THE SITES IS AT YOUR SOLE RISK. YOU ACKNOWLEDGE AND AGREE THAT THE SITES AND ANY SERVICES ARE PROVIDED THROUGH THE SITES ON AN “AS IS” AND “AS AVAILABLE” BASIS. PROVIDERS AND ITS AFFILIATES, INCLUDING WITHOUT LIMITATION ALL AFFILIATED PROFESSIONALS, PROFESSIONAL ENTITIES, AND THEIR RESPECTIVE OFFICERS, DIRECTORS, MANAGERS,

PARTNERS, MEMBERS, EMPLOYEES, AND AGENTS (COLLECTIVELY “RELATED PERSONS”) MAKE NO REPRESENTATIONS OR WARRANTIES AND EXPRESSLY DISCLAIM ANY AND ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, WITH RESPECT TO THE SITES AND SERVICES INCLUDING, BUT NOT LIMITED TO, ANY REPRESENTATIONS OR WARRANTIES WITH RESPECT TO FITNESS FOR A PARTICULAR USE OR PURPOSE, NONINFRINGEMENT, TITLE, AVAILABILITY, SECURITY, OPERABILITY, CONDITION, QUIET ENJOYMENT, VALUE, ACCURACY OF DATA, FREEDOM FROM VIRUSES OR MALWARE, COMPLETENESS, TIMELINESS, FUNCTIONALITY, RELIABILITY, SEQUENCING OR SPEED OF DELIVERY OR SYSTEM INTEGRATION. WE MAKE NO WARRANTIES OR REPRESENTATIONS THAT YOUR USE OF THE SITES OR SERVICES WILL NOT INFRINGE THE RIGHTS OF THIRD PARTIES.

TO THE FULLEST EXTENT OF APPLICABLE LAW, NEITHER Providers NOR ITS RELATED PERSONS WILL BE LIABLE FOR ANY LOSS OR DAMAGE CAUSED BY YOUR RELIANCE ON INFORMATION OBTAINED THROUGH THE SITES. IT IS YOUR RESPONSIBILITY TO EVALUATE THE ACCURACY, COMPLETENESS, TIMELINESS, RELIABILITY OR USEFULNESS OF THE SITES. FURTHERMORE, Providers DOES NOT GUARANTEE THAT THE SITES WILL BE UNINTERRUPTED, OR FREE FROM ERROR, DEFECT, LOSS, DELAY IN OPERATION, CORRUPTION, CYBER ATTACK, VIRUSES, INTERFERENCE, HACKING, MALWARE, OR OTHER SECURITY INTRUSION, AND PROVIDERS DISCLAIMS ANY LIABILITY RELATING THERETO.

YOU UNDERSTAND AND AGREE THAT ANY CONTENT, MATERIAL AND/OR INFORMATION OBTAINED THROUGH THE USE OF THE SITES ARE USED AT YOUR SOLE RISK AND THAT YOU WILL BE SOLELY RESPONSIBLE FOR ANY DAMAGE TO YOUR COMPUTER OR MOBILE PHONE OR LOSS OF DATA THAT RESULTS FROM THE DOWNLOAD OF SUCH CONTENT, MATERIAL AND/OR INFORMATION.

LIMITATION OF LIABILITY

YOU UNDERSTAND THAT TO THE EXTENT PERMITTED UNDER APPLICABLE LAW AND EXCEPT AS SET FORTH IN THIS SECTION, IN NO EVENT WILL Providers, ITS RELATED PERSONS OR ENTITIES OR LICENSORS BE LIABLE TO YOU OR TO ANY PARTY FOR ANY CLAIMS, LIABILITIES, LOSSES, COSTS OR DAMAGES UNDER ANY LEGAL OR EQUITABLE THEORY, WHETHER IN TORT (INCLUDING NEGLIGENCE), CONTRACT, WARRANTY, OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES, OR FOR ANY DAMAGES FOR PERSONAL OR BODILY INJURY OR EMOTIONAL DISTRESS, INCLUDING DEATH, ARISING OUT OF OR IN CONNECTION WITH ANY ACCESS, USE OF (OR INABILITY TO USE) THE SITES OR ANY SERVICES PROVIDED THROUGH THE SITES, OR OTHER INTANGIBLE LOSSES ARISING OUT OF OR RELATED TO YOUR USE OF THE SITES. THIS IS TRUE EVEN IF PROVIDERS OR RELATED

PERSONS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES OR LOSSES.

To the extent that we may not, as a matter of applicable law, disclaim any implied warranty or limit liabilities, the scope and duration of such warranty and the extent of our liability will be the minimum permitted under such applicable law.

INDEMNIFICATION

You agree to indemnify, defend, and hold harmless Providers, its affiliates (including without limitation all affiliated professionals and professional entities), subsidiaries, and their directors, officers, employees, contractors, licensors, representatives, proprietors, partners, shareholders, servants, principals, agents, assigns, and attorneys harmless from and against any and all third-party suits, actions, claims, proceedings, damages, settlements, judgments, injuries, liabilities, obligations, losses, risks, costs, and expenses (including, without limitation, reasonable attorneys’ fees, litigation expenses, and accounting fees), relating to or arising from, or alleged to arise from, your use of materials or features available on the Site.

PAYMENT

You agree to pay all fees due for services requested. You will see a prompt for your payment details, such as your credit card information and any promotional codes you may have. By entering your payment information and submitting your request, you authorize us, our affiliates, or our third-party payment processors to charge the amount due.

GOVERNING LAW; DISPUTE RESOLUTION; ARBITRATION; VENUE; SEVERABILITY OF PROVISIONS

PLEASE READ THIS SECTION CAREFULLY BECAUSE IT REQUIRES YOU AND Providers TO RESOLVE ALL DISPUTES BETWEEN US AND LIMITS THE MANNER IN WHICH YOU CAN SEEK RELIEF FROM Providers.

These Terms of Use and your use of the Sites shall be governed by the laws of the State of Arkansas, without giving effect to the principles of conflict of laws. Any dispute arising under or relating in any way to these Terms of Use will be resolved exclusively in Pulaski County, Arkansas. The parties agree that the Supreme Court of the State of Arkansas located in Pulaski County, Arkansas shall have exclusive personal jurisdiction, subject matter jurisdiction, and venue for any such claim.

All parts of these Terms of Use apply to the maximum extent permitted by law. Providers and you both agree that if we cannot enforce a part of this contract

as written, then that part will be replaced with terms that most closely match the intent of the part we cannot enforce, to the extent permitted by law.The invalidity of part of these Terms of Use will not affect the validity and enforceability of the remaining provisions. The section headings are for convenience only and do not have any force or effect.

NO WAIVER

No waiver by Providers of any term or condition set forth in these Terms of Use shall be deemed a further or continuing waiver of such term or condition or a waiver of any other term or condition, and any failure by Providers to assert a right or provision under these Terms of Use shall not constitute a waiver of such right or provision.

REMEDIES

You agree that any violation, or threatened violation, by you of these Terms of Use constitutes an unlawful and unfair business practice that will cause us irreparable and unquantifiable harm. You also agree that monetary damages would be inadequate for such harm and consent to our obtaining any injunctive or equitable relief that we deem necessary or appropriate. These remedies are in addition to any other remedies we may have at law or in equity.

ASSIGNMENT

You may not assign any of your rights under this agreement, and any such attempt will be null and void.

DIGITAL MILLENNIUM COPYRIGHT ACT

Providers reserves the right to remove any content or any other material or information available on or through our Sites, at any time, for any reason. Providers otherwise complies with the provisions of the Digital Millennium Copyright Act (“DMCA”) applicable to Internet service providers (17 U.S.C. § 512, as amended), and responds to clear notices of alleged copyright infringement. This Section describes the procedure that should be followed to file a notification of alleged copyright infringement with Providers

Notification of Claimed Copyright Infringement. If you have objections to copyrighted content or material made available on or through our Sites, you may submit a notification to our Designated Agent at the following address: help@startsumma.com

Any notification to Providers under 17 U.S.C. § 512(c) alleging copyright infringement must include the following information:

An electronic or physical signature of the person authorized to act on behalf of the owner of the exclusive right being infringed;

An identification of the copyrighted work or other intellectual property that you claim has been infringed or, if multiple copyrighted works are covered by a single notification, a representative list of such works;

An identification of the content or material that you claim is infringing and where it is located on our Sites;

Information sufficient for Providers to contact you, such as your address, telephone number, and/or email address;

A statement by you that you have a good-faith belief that the use of the content or material of which you are complaining is not authorized by the copyright owner, its agent, or the law; and

A signed statement by you that the above information in your notice is accurate and that, under penalty of perjury, you are the copyright owner or authorized to act on the copyright owner’s behalf.

YOUR ACKNOWLEDGMENTS

By clicking “I Agree”, checking a related box to signify your acceptance, using any other acceptance protocol presented through the Service or otherwise affirmatively accepting this consent, you are agreeing and providing your consent with respect to the following:

Healthcare and mental health services provided to you by Providers via the Service will be provided by telehealth. In some cases, your treating Providers may be a nurse practitioner or physician assistant and not a physician, and you agree to be treated by non-physician Providers, if applicable, by using the Service. Your treating Providers for therapy services will be a mental health professional, such as a licensed counselor. Certain technology, including the Service, may be used while still in a beta testing and development phase, and before such technology is a final and finished product. Technology used to deliver care, including the Service, may contain bugs or other errors, including ones which may limit functionality, produce erroneous results, render part or all of such technology unavailable or inoperable, produce incorrect records, transmissions, data or content, or cause records, transmissions, data or content to be corrupted or lost, any or all of which could limit or otherwise impact the quality, accuracy and/or effectiveness of the medical care or other services that you receive from your Providers(s). Certain diagnostic testing services, including laboratory products and services offered through the Service, may contain defects, including ones which may limit functionality or produce erroneous results, any or all of which could limit or otherwise impact the quality, accuracy and/or effectiveness of the medical care or other services that you receive from your Providers(s). The delivery of healthcare services via telehealth is an evolving field and the use of telehealth or other technology in your medical care and treatment from Providers(s) may include uses of technology different from those described in this Consent or not specifically described in this Consent. No potential benefits from the use of telehealth or other technology or specific results can be guaranteed, including any laboratory testing results or related diagnosis or treatment by your Providers(s). Your condition may not be cured or improved, and in some cases, may get worse. There are limitations in the provision of medical care or other services and treatment via telehealth and technology, including the Service, and you may not be able to receive diagnosis and/or treatment through telehealth for every condition for which you seek diagnosis and/or treatment. There are potential risks to the use of telehealth and other technology, including but not limited to the risks described in this Consent. You have the opportunity to discuss the use of telehealth, including the Service, with your Providers(s), including the benefits and risks of such use and the alternatives to the use of telehealth. You understand that there will be no recording of any online treatment sessions by your Providers(s) or you. Your Providers(s) will assess your medical condition and, in their sole discretion, may determine it is medically appropriate to diagnose and/or treat your condition via telehealth and whether you maintain sufficient knowledge and skills in the use of technology appropriate to diagnosing and/or treating your condition via telehealth. By continuing to use the Service, you concur with your Providers’s medical assessment and agree to receive a diagnosis and/or treatment via telehealth technology. You have the right to withdraw your consent to the use of telehealth in the course of your care, without prejudice to any future care or treatment and without risking the loss or withdrawal of any health benefits to which your entitled, but you understand that the Providers who utilize the Service do not offer in-person treatment. Any withdrawal of your consent will be effective upon receipt of written notice to your Providers, except that such withdrawal will not have any effect on any action taken by SummaUp or your Providers(s) in reliance on this Consent before it received your written notice of withdrawal. Any withdrawal of your consent will not affect any other provision of this Consent, and you will continue to be bound by this Consent. You understand that the use of the Service involves electronic communication to and from you of your personal medical information in connection with the provision of telehealth services, including through email. You understand that it is your duty to provide SummaUp and your Providers(s) truthful, accurate and complete information, including all relevant information regarding care that you may have received or may be receiving from healthcare and/or mental health Providers including emergency contact information for your local healthcare and/or mental health Providers. You understand that each of your Providers(s) will assess your medical condition and, in their sole discretion, may determine it is medically appropriate to diagnose and/or treat your condition using telehealth technology, including the Service. By continuing to use the Service, you concur with your Providers’s medical assessment and agree to receive a diagnosis and/or treatment via telehealth technology. You understand that each of your Providers(s) may determine in their sole discretion that your condition is not suitable for diagnosis and/or treatment using telehealth technology, including the Service, and that you may need to seek care and treatment from a specialist or other healthcare or mental health Providers, outside of such telehealth technology. SummaUp, has a commercial relationship with StartVim, LLC. SummaUp, has a financial relationship with the entity that employs or contracts with your Providers. You are free to obtain your medical examination from another healthcare Providers that is not associated with SummaUp. SummaUp, will use its pharmacy partners to fulfill your order directly to your door. You are free to obtain your prescription from any pharmacy of your choice by contacting our support team. Prescriptions may be filled by and transferred between any pharmacy partners on your behalf. You must pay the full amount of the costs associated with use of the Service, including any prescription you may receive, and you will not attempt to submit a claim to Medicare, any other federal payor, or any state or private insurer.

Medical Groups Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices (the “Notice”) tells you about the ways we may use and disclose your protected health information (“medical information”) and your rights and our obligations regarding the use and disclosure of your medical information. “We” refers to, and this Notice applies to StartVim, LLC and Headway Homes P.A., including, respectively, their providers and employees (“Medical Groups”).

OUR OBLIGATIONS

We maintain the privacy of your medical information and notify affected individuals following a breach of unsecured medical information, in each case to the extent required by state and federal law. We provide you this Notice explaining our legal duties and privacy practices with respect to medical information about you.

HOW WE MAY USE AND DISCLOSE MEDICAL INFORMATION ABOUT YOU

The following categories describe the different ways that we typically use and disclose medical information, the purposes for such uses and disclosures, and the reasons for such uses and disclosures. As noted below, we may contact you via different methods that you may approve, such as via text message, email, or through your SummaUp account. In most instances, your initial communication with the applicable Medical Group will be through an interaction with the Medical Group through the SummaUp website or app.

Specifically speaking, the applicable Medical Group may communicate with you in the following specific ways and for the following specific purposes:

Type & Purpose

Email communications; To obtain information from you necessary to provide services to you, communicate with you about your diagnosis and treatment and provide you with information on special offers and deals

Texts; To obtain information from you necessary to provide services to you and communicate with you about your diagnosis and treatment

Customer Service Emails, texts, or app notifications; To provide you with updates on problems with orders, late shipments, and other questions applicable to your provider visit(s)

Tracking emails; To notify you when prescriptions have been shipped, will arrive, and other confirmations

Order information; To provide information on content of orders (additional products or samples)

Referral programs; To provide you with information on benefits you may receive if you refer another patient to the Medical Group. Additionally, the applicable Medical Group may use and disclose your medical information for the following reasons. These categories are intended to be general descriptions only, and not a list of every instance in which we may use or disclose your medical information. Please understand that for these categories, the law generally does not require us to get your authorization in order for us to use or disclose your medical information.

For Treatment. We may use and disclose medical information about you to provide you with health care treatment and related services, including coordinating and managing your health care. We may disclose medical information about you to physicians, nurses, other health care providers and personnel who are providing or involved in providing health care to you (both within and outside of the applicable Medical Group(s)). For example, should your care require referral to a pharmacy for the provision of prescription drugs, we may provide that pharmacy with your medical information in order to aid the pharmacist in his or her treatment of you.

For Payment. We may use and disclose medical information about you so that we or may bill and collect from you, or a third party for the health care services we provide. This may also include the disclosure of medical information. If, however, you pay for an item or service in full, out of pocket and request that we not disclose to your health plan the medical information solely relating to that item or service, as described more fully in Section IV of this Notice, we will follow that restriction on disclosure unless otherwise required by law.

For Health Care Operations. We may use and disclose medical information about you for our health care operations. These uses and disclosures are necessary to operate and manage our practice and to promote quality care. For example, we may need to use or disclose your medical information in order to assess the quality of care you receive or to conduct certain cost management, business management, administrative, or quality improvement activities or to provide information to our insurance carriers.

Health Information Exchanges: We may share your medical information through secure electronic means both to and from other health care providers who are treating you. If you do not wish to participate in the Health Information Exchanges, you must contact us in writing to object by emailing help@startsumma.com.

Quality Assurance and Utilization Review. We may need to use or disclose your medical information for our internal processes to assess and facilitate the provision of quality care to our patients. We may need to use or disclose your medical information to perform a review of the services we provide in order to evaluate whether that the appropriate level of services is received, depending on condition and diagnosis.

Credentialing and Peer Review. We may need to use or disclose your medical information in order for us to review the credentials, qualifications and actions of our health care providers.

Treatment Alternatives: We may use and disclose your health information to manage and coordinate your healthcare and inform you of treatment alternatives and other health related benefits that may be of interest to you. This may include telling you about treatments, services, products and/or other healthcare providers. For example, if you are diagnosed with diabetes, we may tell you about nutritional and other counseling services that may be of interest to you.

Appointment Reminders and Information about Health Related Benefits and Services. We may use and disclose medical information, in order to contact you (including, for example, contacting you by phone and leaving a message on an answering machine) to provide appointment reminders and other information. We may use and disclose medical information to tell you about health-related benefits or services that we believe may be of interest to you. See also the specific types of communications noted above.

Vendors. There are some services (such as billing or legal services) that may be provided to or on behalf of the Medical Groups through contracts with third parties, such as SummaUp, LLC., and its subsidiaries. When these services are contracted, we may disclose your medical information to our vendor so that they can perform the job we have asked them to do. To protect your medical information, however, we require the business associate to appropriately safeguard your information.

Individuals Involved in Your Care or Payment for Your Care. We may disclose medical information about you to a friend or family member who is involved in your health care, as well as to someone who helps pay for your care, but we will do so only as allowed by state or federal law (with an opportunity for you to agree or object when required under the law), or in accordance with your prior authorization.

As Required by Law. We will disclose medical information about you when required to do so by federal, state, or local law or regulations.

Other. Subject to applicable legal requirements, and where appropriate for your medical care or required by law, we may also use your medical information (i) to avert an imminent threat of injury to health or safety, (ii) for organ donation purposes, for research, (iii) to appropriate military authorities if you are in the armed forces, (iv) for workers’ compensation programs, (v) for public health activities, (vi) for health oversight activities, (vii) for other legal matters, (viii) for law enforcement purposes, (ix) to coroners and medical examiners, or (x) for marketing or fundraising purposes

Electronic Disclosures of Medical Information. Under the law of certain states, we are required to provide notice to you if your medical information is subject to electronic disclosure. This Notice serves as general notice that we may disclose your medical information electronically for treatment, payment, or health care operations or as otherwise authorized or required by state or federal law.

OTHER USES OF MEDICAL INFORMATION

Authorizations. There are times we may need or want to use or disclose your medical information for reasons other than those listed above, but to do so we will need your prior authorization. Other than expressly provided herein, any other uses or disclosures of your medical information will require your specific written authorization.

Psychotherapy Notes, Marketing and Sale of Medical Information. Most uses and disclosures of “psychotherapy notes,” uses and disclosures of medical information for marketing purposes, and disclosures that constitute a “sale of medical information” under applicable state and federal law require your authorization. The Medical Groups do not anticipate that they will or sell medical information or use or disclose any psychotherapy notes created by a Provider in the course of providing you mental health therapy except by your Provider to provide you with ongoing mental health care.

Right to Revoke Authorization. If you provide us with written authorization to use or disclose your medical information for such other purposes, you may revoke that authorization in writing at any time. If you revoke your authorization, we will no longer use or disclose your medical information for the reasons covered by your written authorization. You understand that we are unable to take back any uses or disclosures we have already made in reliance upon your authorization, and that we are required to retain our records of the care that we provided to you.

YOUR RIGHTS REGARDING MEDICAL INFORMATION ABOUT YOU

Certain laws and regulations provide you with certain rights regarding the medical information we have about you. The following is a summary of those rights.

Right to Inspect and Copy. Under most circumstances, you have the right to inspect and/or copy your medical information that we maintain in our possession in a designated record set, which generally includes your medical and billing records. To inspect or copy your medical information, you must submit your request to do so in writing to the applicable Medical Group at help@startsumma.com. If you request a copy of your information, we may charge a fee for the costs of copying, mailing, or certain supplies associated with your request. The fee we may charge will be the amount allowed by state law. If your requested medical information is maintained in an electronic format (e.g., as part of an electronic medical record, electronic billing record, or other group of records maintained by the applicable Medical Group that is used to make decisions about you) and you request an electronic copy of this information, then we will provide you with the requested medical information in the electronic form and format requested, if it is readily producible in that form and format. If it is not readily producible in the requested electronic form and format, we will provide access in a readable electronic form and format as agreed to by the applicable Medical Group and you. In certain very limited circumstances allowed by law, we may deny your request to review or copy your medical information. We will give you any such denial in writing. If you are denied access to medical information, you may request that the denial be reviewed. Another licensed health care professional chosen by the applicable Medical Group will review your request and the denial. The person conducting the review will not be the person who denied your request. We will abide by the outcome of the review.

Right to Amend. If you feel the medical information, we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by the applicable Medical Group. To request an amendment, your request must be in writing and submitted to help@startsumma.com. In your request, you must provide a reason as to why you want this amendment. If we accept your request, we will notify you of that in writing. We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that (i) was not created by us (unless you provide a reasonable basis for asserting that the person or organization that created the information is no longer available to act on the requested amendment), (ii) is not part of the information kept by the applicable Medical Group, (iii) is not part of the information which you would be permitted to inspect and copy, or (iv) is accurate and complete. If we deny your request, we will notify you of that denial in writing.

Right to an Accounting of Disclosures. You have the right to request an "accounting of disclosures" of your medical information. This is a list of the disclosures we have made for up to six years prior to the date of your request of your medical information, but may not include disclosures for Treatment, Payment, or Health Care Operations (as described in this Notice) or disclosures made pursuant to your specific authorization (as described in this Notice), or certain other disclosures. To request a list of accounting, you must submit your request in writing to help@startsumma.com. Your request must state a time period, which may not be longer than six years. Your request should indicate in what form you want the list (for example, on paper or electronically). The first list you request within a twelve-month period will be free. For additional lists, we may charge you a reasonable fee for the costs of providing the list. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.

Right to Request Restrictions. You have the right to request a restriction or limitation on the medical information we use or disclose about you for Treatment, Payment, or Health Care Operations. You also have the right to request a restriction or limitation on the medical information we disclose about you to someone who is involved in your care or the payment for your care, like a family member or friend.

Except as specifically described below in this Notice, we are not required to agree to your request for a restriction or limitation. If we do agree, we will comply with your request unless the information is needed to provide emergency treatment. In addition, there are certain situations where we won’t be able to agree to your request, such as when we are required by law to use or disclose your medical information. To request restrictions, you must make your request in writing to help@startsumma.com. In your request, you must specifically tell us what information you want to limit, whether you want us to limit our use, disclosure, or both, and to whom you want the limits to apply. As stated above, in most instances we do not have to agree to your request for restrictions on disclosures that are otherwise allowed. However, if you pay or another person (other than a health plan) pays on your behalf for an item or service in full, out of pocket, and you request that we not disclose the medical information relating solely to that item or service to a health plan for the purposes of payment or health care operations, then we will be obligated to abide by that request for restriction unless the disclosure is otherwise required by law. You should be aware that such restrictions may have unintended consequences, particularly if other providers need to know that information (such as a pharmacy filling a prescription). It will be your obligation to notify any such other providers of this restriction.

Right to Request Confidential Communications. You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you can ask that we only contact you through a personal email address and not at work or, conversely, only at work and not a personal email address. To request such confidential communications, you must make your request in writing to help@startsumma.com. We will not ask the reason for your request, and we will use our best efforts to accommodate all reasonable requests, but there are some requests with which we will not be able comply. Your request must specify how and where you wish to be contacted.

Right to an Email or Paper Copy of This Notice. You have the right to a paper copy of this Notice. You may ask us to give you a copy of this Notice at any time. To obtain a copy of this Notice, you must make your request in writing to help@startsumma.com.

Right to Breach Notification. In certain instances, we may be obligated to notify you (and potentially other parties) if we become aware that your medical information has been improperly disclosed or otherwise subject to a “breach” as defined in and/or required by applicable law.

CHANGES TO THIS NOTICE

We reserve the right to change this Notice at any time, along with our privacy policies and practices. We reserve the right to make the revised or changed Notice effective for medical information we already have about you as well, as any information we receive in the future. We will post a copy of the current notice, along with an announcement that changes have been made, as applicable, on our website and in any physical office in which the Medical Groups practice medicine. When changes have been made to the Notice, you may obtain a revised copy by writing to help@startsumma.com.

COMPLAINTS

If you believe that your privacy rights as described in this Notice have been violated, you may file a complaint with the applicable Medical Group at help@startsumma.com.