Notice of Privacy Practices

Effective date: October 25, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who this notice covers

MyTeleHealthPoint is an Ohio virtual-care service operated by MyTeleHealthPoint LLC ("the practice"). This notice describes our practices concerning medical information created or received in providing care through MyTeleHealthPoint. It is not a joint notice for Mednaro, independent pharmacies, laboratories, or unrelated healthcare providers. Additional laws can provide greater protection than this notice describes.

How we use and share medical information

Treatment: We use and share information to evaluate and treat you, document care, send appropriate prescriptions, arrange laboratory tests, receive results, coordinate referrals, and communicate with healthcare professionals involved in your care. For example, we may send a prescription to the pharmacy you choose.

Payment: We use information to explain charges, verify patient payments, provide receipts, issue refunds, and resolve billing concerns. We are a cash-pay consultation service and do not submit claims for our consultations to health insurance. Your pharmacy or laboratory may have separate insurance and payment policies.

Healthcare operations: We may use information for staff oversight, quality improvement, security, auditing, professional review, legal compliance, and practice administration. Vendors handling protected information for us are assessed for appropriate contractual and security safeguards.

Other disclosures permitted or required by law: Subject to applicable conditions, we may disclose information for public-health reporting (including reportable infections), suspected abuse or neglect, health oversight, medication/product safety, certain judicial or administrative proceedings, law enforcement, coroners or medical examiners, organ donation, workers' compensation, legally authorized research, and prevention of a serious threat to health or safety. A subpoena or outside request does not automatically override applicable confidentiality protections.

Family, caregivers, and others you identify: When legally permitted, we may share relevant information with those involved in your care or payment based on your preferences and applicable professional judgment. Special protections apply to some minor and sensitive-service records.

When your authorization is required: We obtain written authorization for uses or disclosures requiring it, including certain marketing involving protected health information, sale of protected health information, and most disclosures of separately maintained psychotherapy notes. Other uses or disclosures not described here generally require your written authorization. You may revoke authorization in writing, except to the extent we have already acted in reliance on it. If we conduct fundraising communications subject to HIPAA, you may opt out.

Sensitive records

Ohio and federal law may provide additional protection for HIV information, certain mental-health records, confidential care involving minors, and substance-use-disorder records. Records protected under 42 CFR Part 2, if created or received by the practice, are subject to special rules. Such records or testimony about them generally may not be used or disclosed in proceedings against you without the specific consent or qualifying court-order and compulsory-process protections required by law. Receiving protected Part 2 records does not mean MyTeleHealthPoint operates a Part 2 treatment program. We apply more protective rules when they govern a record.

Your information rights

• Access: You may request an electronic or paper copy of your records, subject to identity verification and lawful exceptions. When HIPAA applies, we generally respond within 30 days and explain any permitted extension or lawful copying fee.
• Amendment: You may request correction of an inaccurate or incomplete record. If a request is denied, we explain the reason and applicable disagreement process; the HIPAA response period is generally 60 days, subject to a permitted extension.
• Confidential contact: You may request that we contact you by a reasonable alternative method or at a different location. Tell us if a message, call, mailed notice, or proxy account could compromise your privacy.
• Restrictions: You may request restrictions on certain uses or disclosures. We may not be required to agree, except where law mandates a restriction. If you pay in full for a service and make a qualifying HIPAA request that we not disclose it to your health plan for payment or healthcare operations, we honor that request unless disclosure is required by law.
• Accounting: You may request an accounting of certain disclosures, generally for the preceding six years when HIPAA applies. Statutory exceptions and limits apply.
• Representative and paper notice: A verified legally authorized representative may exercise applicable rights, subject to service-specific confidentiality protections. You may request a paper copy of this notice.

Our responsibilities

We are required by applicable law to protect medical information, provide required notice of our privacy duties, follow the notice currently in effect, and notify affected persons of reportable breaches of unsecured protected information. We may revise this notice and apply the revised terms to information we maintain as the law permits. The current notice, with its effective date, will be available on our website and on request. Information lawfully disclosed to some recipients may be redisclosed under their applicable legal rules.

Privacy questions and complaints

Privacy contact: Privacy Officer, MyTeleHealthPoint LLC. Submit a privacy inquiry through the secure patient channel at https://spruce.care/mytelehealthpoint or the website administrative contact form to request a private follow-up. Telephone: (216) 438-0004. If you cannot use electronic communication, request telephone assistance. Do not send medical records through public reviews or ordinary website forms.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at https://www.hhs.gov/hipaa/filing-a-complaint/index.html, where applicable. We do not retaliate against anyone for exercising privacy rights or filing a complaint.

OWNER-APPROVED: Olumide B. Ogunwumi, PA-C | October 25, 2026 · Version October 25, 2026