Notice of Privacy Practices

This Notice of Privacy Practices describes how your medical information (Protected Health Information, or “PHI”) may be used and disclosed, and how you can access this information. Please review it carefully.

1. Our Commitment to Your Privacy

pepta and its healthcare provider partners are required by law to maintain the privacy of your Protected Health Information, provide you with this Notice of our legal duties and privacy practices, and follow the terms of this Notice currently in effect.

2. What Is Protected Health Information (PHI)?

PHI is information that identifies you and relates to your past, present, or future physical or mental health condition, healthcare services you receive, or payment for healthcare services. This includes information collected through your health intake form, telehealth consultations, prescription records, and related communications.

3. How We May Use and Disclose Your PHI

For Treatment: We share your PHI with the licensed physicians who review your intake and prescribe your protocol, and with the compounding pharmacies that prepare your medications.

For Payment: We use your PHI to process payments, manage subscriptions, and coordinate billing with payment processors.

For Healthcare Operations: We may use your PHI for quality improvement, training, auditing, and other operational purposes necessary to run our services.

As Required by Law: We may disclose your PHI when required by federal, state, or local law, including for public health activities, reporting abuse or neglect, health oversight activities, judicial or administrative proceedings, law enforcement purposes, and to avert a serious threat to health or safety.

With Your Authorization: Other uses and disclosures of your PHI not described in this Notice will be made only with your written authorization. You may revoke your authorization at any time by contacting us in writing.

4. Your Rights Regarding Your PHI

Right to Access: You have the right to inspect and obtain a copy of your PHI maintained by us. To request access, contact privacy@pepta.com. We may charge a reasonable fee for copies.

Right to Amend: You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. We may deny the request in certain circumstances as permitted by law.

Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your PHI. This does not include disclosures for treatment, payment, or healthcare operations.

Right to Request Restrictions: You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, except in limited circumstances.

Right to Confidential Communications: You have the right to request that we communicate with you about health matters in a certain way or at a certain location (e.g., only by email to a specific address).

Right to a Paper Copy: You have the right to obtain a paper copy of this Notice upon request.

5. Our Responsibilities

• We are required by law to maintain the privacy and security of your PHI.
• We will notify you promptly if a breach occurs that may have compromised the privacy or security of your PHI.
• We will not use or share your PHI other than as described in this Notice unless you give us written permission.
• We will not use your PHI for marketing purposes or sell your PHI without your written authorization.

6. Minimum Necessary Standard

When using or disclosing your PHI, or when requesting PHI from another entity, we will make reasonable efforts to limit the information to the minimum necessary to accomplish the intended purpose.

7. Business Associates

We may share your PHI with third-party service providers (“Business Associates”) who perform services on our behalf. All Business Associates are required to sign agreements that protect the confidentiality and security of your PHI. Our Business Associates include healthcare providers, compounding pharmacies, cloud hosting services, and payment processors.

8. Changes to This Notice

We reserve the right to change this Notice and make the new provisions effective for all PHI we maintain. If we make material changes, we will post the revised Notice on our website and notify you by email.

9. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us at privacy@pepta.com or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

10. Contact

Privacy Officer: privacy@pepta.com
General Support: support@pepta.com