HIPAA Notice of Privacy Practices

Healthcare services available through the Medura platform may be provided by independent healthcare providers, affiliated medical groups, pharmacies, laboratories, and other healthcare entities.

Certain healthcare providers and affiliated entities may be Covered Entities under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and may provide their own Notice of Privacy Practices.

When acting as a Business Associate or service provider to a Covered Entity, Medura may receive, create, maintain, or transmit PHI on behalf of that Covered Entity in accordance with applicable law and contractual obligations.

We may use and disclose PHI to provide, coordinate, or manage healthcare services and related activities, including communication with healthcare providers, pharmacies, laboratories, specialists, and others involved in your care.

We may use and disclose PHI to obtain payment for healthcare services and products provided to you, including billing, payment processing, eligibility verification, collection activities, and related administrative functions.

We may use and disclose PHI for healthcare operations, including: quality assessment and improvement activities, care coordination and case management, credentialing and provider review, compliance activities, audits and investigations, business planning and administration, and legal and risk management activities.

We may disclose PHI when required by federal, state, or local law.

We may disclose PHI to public health authorities for activities such as disease prevention, public health investigations, reporting adverse events, and other activities authorized by law.

We may disclose PHI to health oversight agencies for audits, inspections, investigations, licensure activities, and other oversight functions authorized by law.

We may disclose PHI in response to court orders, subpoenas, discovery requests, administrative proceedings, or other lawful processes.

We may disclose PHI when permitted or required by law enforcement purposes.

We may use or disclose PHI for research purposes when authorized by law and subject to appropriate privacy protections.

If applicable, PHI may be disclosed to organizations involved in organ procurement, transplantation, or donation.

We may disclose PHI as authorized by laws relating to workers' compensation or similar programs.

We may disclose PHI to authorized military authorities or government officials when required by law.

If you are an inmate or in lawful custody, PHI may be disclosed to correctional institutions or law enforcement officials as permitted by law.

Certain uses and disclosures require your written authorization unless otherwise permitted by law, including most uses of psychotherapy notes, certain marketing communications, and sale of PHI where authorization is required. You may revoke an authorization at any time in writing, except to the extent action has already been taken in reliance upon the authorization.

You may request access to or copies of PHI maintained about you, subject to limited exceptions permitted by law.

You may request that PHI be amended if you believe it is inaccurate or incomplete.

You may request an accounting of certain disclosures made during the applicable legal period.

You may request restrictions on certain uses or disclosures of PHI. We are not required to agree to all requested restrictions except where required by law.

You may request that communications be sent through alternative means or to alternative locations.

You may obtain a paper or electronic copy of this Notice at any time.

You have the right to be notified if unsecured PHI is compromised in a manner requiring notification under applicable law.

By using the Medura platform, you acknowledge that certain communications may occur electronically through secure portals, email, text messaging, telehealth systems, or other electronic means. While reasonable safeguards are utilized, no electronic transmission system can be guaranteed to be completely secure.

If unsecured PHI is compromised in a manner requiring notification under applicable law, affected individuals will be notified in accordance with HIPAA, state law, and other applicable legal requirements.

We reserve the right to change this Notice at any time. Any revised Notice may apply to PHI already maintained by us as well as information received in the future. The most current version of this Notice will be available through the Medura platform and at MeduraHealth.com.

If you believe your privacy rights have been violated, you may file a complaint with Medura or with the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

Privacy Officer, STR Enterprise LLC, 7345 S. Durango Dr. #107-337, Las Vegas, NV 89113, Email: support@medurahealth.com, Phone: (702) 718-5578, Website: MeduraHealth.com