Notice of Privacy Practices

Effective date: May 11, 2026

Our Commitment to Your Privacy

Mountain Sun Medical is required by law to maintain the privacy of your Protected Health Information ("PHI"), provide you with this Notice of our legal duties and privacy practices, notify you following a breach of unsecured PHI, and abide by the terms of this Notice currently in effect.

How We May Use and Disclose Your Health Information

For Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. For example, we may share your PHI with other healthcare providers involved in your care, such as specialists, laboratories, or pharmacies.

For Payment

We may use and disclose your PHI so that the treatment and services you receive may be billed to and payment may be collected from you, an insurance company, or a third party.

For Health Care Operations

We may use and disclose your PHI for our healthcare operations, including quality assessment, employee review, training, licensing, and conducting or arranging for other business activities.

Appointment Reminders and Health-Related Benefits

We may contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you.

Required by Law

We will disclose your PHI when required to do so by federal, state, or local law.

Public Health Activities

We may disclose your PHI for public health activities, including preventing or controlling disease, reporting child abuse or neglect, or reporting to the FDA.

Other Permitted or Required Disclosures

We may also use or disclose your PHI for: health oversight activities; judicial and administrative proceedings; law enforcement; coroners, medical examiners, and funeral directors; organ and tissue donation; research that meets all privacy law requirements; serious threats to health or safety; specialized government functions; workers' compensation; and as otherwise permitted or required by law.

Uses and Disclosures That Require Your Written Authorization

Other uses and disclosures of your PHI not described in this Notice will be made only with your written authorization. This includes most uses and disclosures of psychotherapy notes, uses and disclosures of PHI for marketing purposes, and disclosures that constitute a sale of PHI. You may revoke an authorization in writing at any time, except to the extent that we have already acted in reliance on it.

Your Rights Regarding Your Health Information

• Right to Inspect and Copy: You have the right to inspect and obtain a copy of your PHI in our designated record set, subject to limited exceptions. We may charge a reasonable, cost-based fee for copies.
• Right to Amend: You may request that we amend PHI we maintain about you if you believe it is incorrect or incomplete. We may deny your request under certain circumstances.
• Right to an Accounting of Disclosures: You have the right to receive a list of certain disclosures we have made of your PHI.
• Right to Request Restrictions: You have the right to request a restriction on certain uses and disclosures of your PHI. We are not required to agree to your request, except that we must agree to a request to restrict disclosure of PHI to a health plan for payment or healthcare operations if you have paid for the service out-of-pocket in full.
• Right to Request Confidential Communications: You have the right to request that we communicate with you about your PHI by alternative means or at alternative locations.
• Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically.
• Right to Be Notified of a Breach: You have the right to be notified following a breach of unsecured PHI.

Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have about you, as well as any PHI we receive in the future. We will post a copy of the current Notice on our website. The effective date is shown at the top.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

Contact Information

To file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights, visit hhs.gov/ocr/privacy/hipaa/complaints/ .