Privacy Policy

---

AnnualRx Notice of Privacy Practices

Effective Date: July 27th, 2026

YOUR RIGHTS. OUR RESPONSIBILITIES. THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION.

Please review it carefully.

AnnualRx is committed to protecting the privacy and security of your protected health information ("PHI"). This Notice describes how we may use and disclose your PHI, your rights regarding your PHI, and our legal obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Who We Are

AnnualRx provides healthcare services through licensed healthcare professionals, including online and telehealth services where permitted by law. During the course of providing care, we create and maintain records that contain your protected health information.

How We May Use and Disclose Your Health Information

We may use and disclose your PHI without your written authorization for the following purposes:

Treatment

We may use your information to provide, coordinate, and manage your healthcare, including communicating with healthcare providers, pharmacies, laboratories, and specialists involved in your care.

Payment

We may use or disclose your information to bill and collect payment from you, your insurance company, or other responsible parties.

Healthcare Operations

We may use your information to improve the quality of our services, conduct quality assessments, train staff, perform audits, comply with accreditation requirements, and operate our practice.

Appointment Reminders and Communications

We may contact you regarding appointments, prescription refills, follow-up care, treatment recommendations, or healthcare-related benefits and services.

Business Associates

We may share information with trusted vendors who perform services on our behalf, such as electronic health record providers, payment processors, telehealth platform providers, cloud hosting providers, laboratories, and pharmacies. These organizations are required by law and contract to safeguard your information.

As Required by Law

We may disclose your PHI when required by federal, state, or local law.

Public Health and Safety

We may disclose information to public health authorities, report communicable diseases, adverse drug events, abuse or neglect, or to prevent a serious threat to health or safety when permitted by law.

Law Enforcement and Legal Proceedings

We may disclose information in response to court orders, subpoenas, warrants, or other lawful legal processes.

Research

In certain circumstances, your information may be used for research if appropriate legal protections are in place.

Organ Donation, Coroners, and Medical Examiners

We may disclose information as authorized by law.

Workers' Compensation

We may disclose information for workers' compensation or similar programs.

Uses That Require Your Written Authorization

Except as described above, we will obtain your written authorization before using or disclosing your PHI for:

• Marketing communications where authorization is required by law
• Sale of your protected health information
• Most uses and disclosures of psychotherapy notes (if applicable)
• Other uses requiring authorization under HIPAA

You may revoke your authorization at any time in writing, except to the extent we have already relied on it.

Your Rights

You have the right to:

Access Your Records

Request copies of your medical records and billing records.

Request Corrections

Request that we amend information you believe is incorrect or incomplete.

Receive an Accounting of Disclosures

Request a list of certain disclosures we have made of your PHI.

Request Restrictions

Ask us to limit certain uses or disclosures of your information. While we will consider your request, we are not always required to agree.

Request Confidential Communications

Ask us to contact you in a specific way or at a specific location.

Receive a Paper or Electronic Copy

You may request a copy of this Notice at any time.

Our Responsibilities

AnnualRx is required by law to:

• Maintain the privacy and security of your protected health information.
• Provide you with this Notice of Privacy Practices.
• Follow the terms of this Notice currently in effect.
• Notify you if a breach occurs that may have compromised the privacy or security of your information.
• Comply with applicable federal and state privacy laws.

Telehealth Services

If you receive services through our telehealth platform:

• Communications are conducted using secure technologies designed to protect your privacy.
• We encourage you to participate in telehealth visits from a private location and use secure internet connections whenever possible.
• Telehealth encounters become part of your medical record.

Website and Electronic Communications

When you visit our website, certain technical information may be collected through cookies or similar technologies. Our website Privacy Policy explains how website data is collected and managed. Protected health information submitted through secure patient portals, intake forms, or telehealth services is handled in accordance with HIPAA and this Notice.

Questions or Complaints

If you believe your privacy rights have been violated or have questions about this Notice, please contact:

AnnualRx Privacy Officer
780 E. Market St. Suite 2, Cadiz, Ohio 43907
Phone: 740-320-4008
Email: sales@annualrx.info

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. Filing a complaint will not affect the quality of care you receive.

Changes to This Notice

We reserve the right to change this Notice at any time. Updated versions will be posted on our website and will apply to all protected health information maintained by AnnualRx. The revised Notice will include a new effective date.