Notice of Privacy Practices

This Notice of Privacy Practices explains how health information about you is handled in connection with the virtual care services accessible through Bahari Medical. Please read it carefully.

Bahari Medical is an authorized referral partner of National Telehealth and Leg Up RX. Bahari Medical does not collect, store, or process your protected health information (PHI). All clinical care, medical records, and patient health data are handled exclusively by our partner platforms, which are responsible for their own HIPAA-compliant privacy practices.

Effective Date: 2025

When you enroll in a care plan or access telehealth services through a Bahari Medical referral link, your health information is collected and managed by the partner platform you are directed to. That platform may use your information to:

• Provide and coordinate your medical care
• Process prescriptions when medically appropriate
• Communicate with other treating healthcare providers
• Fulfill legal and regulatory obligations
• Support billing and payment processes

Your health information will not be sold, rented, or used for marketing without your authorization as required by applicable law.

Under the Health Insurance Portability and Accountability Act (HIPAA), you have the following rights with respect to your protected health information:

• Right to Access: You may request access to your health records.
• Right to Amend: You may request corrections to inaccurate or incomplete health information.
• Right to Restrict: You may request restrictions on certain uses or disclosures of your information.
• Right to an Accounting: You may request a list of disclosures of your health information.
• Right to Confidential Communications: You may request that communications about your health be made in a particular way or to a particular location.
• Right to a Paper Copy: You may request a paper copy of this notice at any time.
• Right to File a Complaint: You may file a complaint if you believe your privacy rights have been violated, without fear of retaliation.

To exercise your HIPAA rights related to your clinical care, contact the partner platform directly. That platform's privacy contact information will be provided in their own Notice of Privacy Practices, accessible at the point of enrollment.

For general inquiries about Bahari Medical's privacy practices, you may contact us at:

Bahari Medical
Email: dlayne@baharimedical.com

If you believe your privacy rights have been violated, you may file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights:

Office for Civil Rights — HHS
Website: www.hhs.gov/ocr/privacy/hipaa/complaints

You will not be penalized or retaliated against for filing a complaint.

Bahari Medical reserves the right to update this Notice of Privacy Practices at any time. Changes will be posted on this page with an updated effective date.