Notice of Privacy Practices

Effective date: February 21, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

NoWaveWorries, Inc. ("NoWaveWorries") is committed to protecting the privacy of your health information. We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations to maintain the privacy of your Protected Health Information (PHI), to provide you with notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect.

What Is Protected Health Information (PHI)?

PHI is individually identifiable health information that relates to your past, present, or future physical or mental health condition, the provision of health care to you, or the past, present, or future payment for health care. This includes information you provide during the medical screening process, physician notes, prescription details, and related records.

How We May Use and Disclose Your PHI

We may use and disclose your PHI for the following purposes without your written authorization:

  • Treatment: To provide, coordinate, and manage your health care. For example, sharing your screening responses with the reviewing physician to make prescribing decisions.
  • Payment: To obtain payment for health care services provided to you. For example, processing your payment through our billing system.
  • Health Care Operations: To support the business activities of our practice, including quality assessment, compliance, and administrative functions.
  • As Required by Law: When required by federal, state, or local law, including public health reporting, law enforcement requests with proper legal process, and judicial or administrative proceedings.
  • Business Associates: To third-party service providers who perform functions on our behalf and require access to PHI (e.g., pharmacy partners, cloud hosting providers). These entities are contractually bound to protect your information under HIPAA Business Associate Agreements.

Uses and Disclosures Requiring Your Authorization

We will not use or disclose your PHI for purposes other than those described above without your written authorization. Uses and disclosures not described in this Notice will be made only with your written permission. You may revoke your authorization at any time in writing, except to the extent that we have already taken action in reliance on your authorization.

Your Rights Regarding Your PHI

You have the following rights with respect to your PHI:

  • Right to Access: You may request access to your PHI that we maintain. We will provide a copy within 30 days of your request.
  • Right to Amend: You may request that we amend your PHI if you believe it is incorrect or incomplete. We may deny the request in certain circumstances.
  • Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI that we have made.
  • Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI. We are not required to agree to all requests but will consider them carefully.
  • Right to Confidential Communications: You may request that we communicate with you about health matters through a specific method or at a specific location.
  • Right to a Copy of This Notice: You may request a paper copy of this Notice at any time.
  • Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

Our Duties

  • We are required by law to maintain the privacy and security of your PHI.
  • We are required to provide you with this Notice of our legal duties and privacy practices.
  • We are required to notify you in the event of a breach of your unsecured PHI.
  • We must follow the duties and practices described in this Notice.

Changes to This Notice

We reserve the right to change the terms of this Notice and to make the new provisions effective for all PHI that we maintain. If we make a material change, we will post the revised Notice on our website and update the effective date.

Contact Information

For questions about this Notice, to exercise your rights, or to file a complaint, please contact:

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, by visiting www.hhs.gov/ocr or calling 1-877-696-6775.