Effective Date: January 1, 2026

Your Information. Your Rights. Our Responsibilities.

THIS NOTICE DESCRIBES HOW MEDICAL AND HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice describes the privacy practices of Sundry Care, LLC for protected health information (“PHI”) that is subject to the Health Insurance Portability and Accountability Act (“HIPAA”).

Your Rights

When HIPAA applies to your information, you have certain rights concerning your health information.

Get a Copy of Your Information

You may ask to inspect or obtain an electronic or paper copy of health information we maintain about you as permitted by law.

We will generally provide a copy or summary within the period required by law. A reasonable, cost-based fee may apply where permitted.

Ask Us to Correct Your Information

If you believe health information we maintain about you is incorrect or incomplete, you may ask us to correct it.

We may deny the request in certain circumstances permitted by law, but we will explain the reason in writing.

Request Confidential Communications

You may ask us to communicate with you in a particular way or at a particular location.

We will accommodate reasonable requests as required by law.

Ask Us to Limit What We Use or Share

You may ask us not to use or disclose certain health information for treatment, payment, or operations.

We are not required to agree to every request unless the law requires us to do so.

Receive an Accounting of Certain Disclosures

You may request a list of certain disclosures of your health information made during the period provided by law.

The accounting will not include certain disclosures excluded by law, including many disclosures made for treatment, payment, or healthcare operations.

Get a Copy of This Notice

You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.

Choose Someone to Act for You

If another person has legal authority to act for you, such as a healthcare agent, guardian, attorney-in-fact, or other legally authorized representative, that person may exercise applicable privacy rights on your behalf.

We may verify that person's authority before acting on a request.

File a Complaint

You may contact Sundry Care if you believe your privacy rights have been violated.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

Sundry Care will not retaliate against you for filing a privacy complaint or exercising a privacy right.

Your Choices

For certain health information, you may tell us your preferences concerning what we share.

Depending on the circumstances, this may include sharing information with:

• Family members

• Friends

• Caregivers

• Other persons involved in your care or payment for care

• Persons assisting during an emergency or disaster

When you are unable to communicate your preference, we may use professional judgment and applicable law to determine whether a disclosure is in your best interest.

Certain uses or disclosures require written authorization. When authorization is required, you may generally revoke that authorization in writing, except to the extent action has already been taken in reliance upon it.

We will not sell PHI or use PHI for marketing in circumstances requiring authorization without first obtaining the authorization required by law.

How We May Use and Share Your Health Information

Providing and Coordinating Services

We may use or disclose information as permitted to provide, coordinate, or support services.

For example, with appropriate authority we may communicate relevant information to another provider involved in your care or to personnel providing services to you.

Payment

We may use or disclose information as permitted to bill for services, process payment, document services, or assist with authorized reimbursement documentation.

Healthcare and Business Operations

We may use or disclose information as permitted to operate our organization and improve service quality.

This may include quality assurance, staff supervision, training, compliance, auditing, legal services, insurance activities, and other permitted operational purposes.

Persons Involved in Your Care

When permitted by law or authorized by you, we may share relevant information with family members, authorized representatives, caregivers, or others involved in your care.

Business Associates

Where HIPAA permits, we may share PHI with organizations that perform services on our behalf and require access to that information.

When required, these organizations must enter into agreements requiring appropriate protection of PHI.

When Required by Law

We may disclose information when required or permitted by applicable federal, state, or local law.

This may include circumstances involving:

• Suspected abuse, neglect, or exploitation

• Certain public health activities

• Health oversight activities

• Judicial or administrative proceedings

• Law-enforcement requests permitted by law

• Workers' compensation

• Serious threats to health or safety

• Other legally required disclosures

Where state law provides stronger privacy protections than HIPAA, we will follow the more protective applicable requirement.

Our Responsibilities

We are committed to maintaining the privacy and security of PHI as required by applicable law.

When HIPAA applies:

• We will maintain required privacy and security protections.

• We will notify affected individuals following a breach when notification is legally required.

• We will follow the privacy practices described in the current version of this Notice.

• We will provide a copy of this Notice upon request.

• We will not use or disclose PHI except as permitted by law, described in this Notice, or authorized by you.

• We will honor applicable restrictions and rights required by law.

Changes to This Notice

We may change the terms of this Notice as permitted by law.

Changes may apply to information we already maintain as well as information we receive in the future.

The current Notice will be available upon request and posted on our website when required.

Questions or Complaints

To ask a question, exercise a privacy right, or submit a privacy complaint, contact:

Privacy Officer
Sundry Care, LLC
3 Allied Drive, Suite 303
Dedham, MA 02026

Email: team@sundrycare.com
Phone: 617-249-3047

You may also submit a complaint to the U.S. Department of Health and Human Services Office for Civil Rights.

Sundry Care will not retaliate against you for filing a complaint.