NOTICE OF HIPPA PRIVACY PRACTICES

1. Our Commitment to Privacy

We understand the importance of protecting your personal and health-related information.

When healthcare services are provided through licensed healthcare professionals using the Petesaa platform, those professionals may create and maintain records containing information about your health, symptoms, evaluations, treatment recommendations, and related services.

This information may be protected under HIPAA and other applicable privacy laws.

2. Protected Health Information (PHI)

Protected Health Information ("PHI") may include:

• Name and date of birth
• Contact information
• Assessment responses
• Mental health information
• Telehealth consultation records
• Provider evaluations
• ESA or PSD recommendations
• Medical records generated by healthcare professionals

3. How Protected Health Information May Be Used and Disclosed

Treatment

Healthcare professionals may use and share PHI to:

• Conduct evaluations
• Provide healthcare services
• Develop treatment recommendations
• Determine eligibility for ESA or PSD documentation

Payment

PHI may be used as necessary to:

• Process payments
• Verify transactions
• Administer billing-related activities

Healthcare Operations

PHI may be used for:

• Quality improvement
• Provider credentialing
• Compliance activities
• Training and operational support
• Internal administrative functions

4. Other Permitted Uses and Disclosures

PHI may be disclosed when permitted or required by law, including:

• Court orders and subpoenas
• Public health requirements
• Law enforcement requests
• Government audits and investigations
• Reporting abuse, neglect, or threats to safety
• Compliance with legal obligations

5. Uses Requiring Authorization

Except as permitted by law, your written authorization may be required before PHI is used or disclosed for purposes not described in this Notice.

You may revoke an authorization at any time, subject to legal limitations.

6. Your Privacy Rights

Subject to applicable law, you may have the right to:

Access Records

Request access to certain health records maintained by healthcare providers.

Request Corrections

Request correction of inaccurate or incomplete information.

Request Restrictions

Ask for limitations on certain uses or disclosures.

Request Confidential Communications

Request communications through alternative methods or locations.

Receive an Accounting of Disclosures

Request a list of certain disclosures made regarding your PHI.

Obtain a Copy of This Notice

Request a paper or electronic copy of this Notice at any time.

7. Security of Information

Reasonable administrative, technical, and physical safeguards are used to protect information against unauthorized access, disclosure, alteration, or destruction.

Despite these protections, no method of electronic transmission or storage can be guaranteed completely secure.

8. Telehealth Services

Some services offered through Petesaa may involve telehealth consultations.

By using telehealth services, you acknowledge that:

• Electronic communications may involve inherent security risks;
• Technology interruptions may occur;
• Healthcare professionals will use reasonable safeguards to protect privacy.

9. Breach Notification

If a breach involving unsecured protected health information occurs and notification is required by law, affected individuals will be notified in accordance with applicable legal requirements.

10. Complaints

If you believe your privacy rights have been violated, you may submit a complaint without fear of retaliation.

Complaints may be submitted to:

legal@petesaa.com

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.

11. Important Notice Regarding Petesaa

Petesaa operates as a technology platform that facilitates access to independent licensed healthcare professionals.

Not all information submitted through the platform may constitute Protected Health Information under HIPAA.

Healthcare providers using the platform remain responsible for complying with their professional and legal obligations regarding patient privacy and confidentiality.

12. Changes to This Notice

We reserve the right to update this Notice of Privacy Practices at any time.

Updated versions will be posted on our website with a revised effective date.

Continued use of the services after updates are posted constitutes acceptance of the revised Notice.