HIPAA Notice

This HIPAA Notice (“Notice”) explains how certain health and medical information may be handled when you use portions of the AMO Nutrients Services that support healthcare, telehealth, prescription, wellness, laboratory, or pharmacy-related services provided by licensed healthcare professionals or partner pharmacies (“Providers”).

This Notice applies only to portions of the Services where health or medical information is collected in connection with healthcare-related services.

For non-healthcare portions of the website and Services, the AMO Nutrients Privacy Policy applies.

This Notice is incorporated into and forms part of the AMO Nutrients Terms & Conditions.

When you use portions of the Services involving:

• Telehealth consultations
• Medical intake forms
• Prescription services
• Wellness treatment programs
• Laboratory services
• Pharmacy fulfillment
• Provider communications

AMO Nutrients (“AMO,” “we,” “us,” or “our”) may collect, receive, maintain, or transmit protected health information (“PHI”) on behalf of independent healthcare Providers.

In these situations:

• Providers are responsible for medical care and treatment decisions
• Providers control medical records
• Providers act as the HIPAA Covered Entity
• AMO may act as a HIPAA Business Associate supporting operational, technology, administrative, communication, or fulfillment services

When AMO acts as a Business Associate under HIPAA:

• We may use or disclose PHI only as permitted by applicable law and agreements with Providers
• We implement reasonable administrative, physical, and technical safeguards designed to protect PHI
• We may not use PHI for unauthorized independent purposes
• We may disclose PHI when required by law or permitted under HIPAA
• We require subcontractors and service providers handling PHI to maintain appropriate safeguards
• We may report certain security incidents or breaches as required by law

AMO does not make independent medical treatment decisions unless specifically operating through licensed medical personnel where legally permitted.

Your healthcare Provider may provide a separate Notice of Privacy Practices (“NPP”) describing:

• How your PHI may be used or disclosed
• Your HIPAA rights
• The Provider’s legal responsibilities

The Provider’s Notice of Privacy Practices governs medical treatment-related uses and disclosures of PHI.

Depending on applicable law and the Provider relationship, you may have rights to:

• Access copies of your medical records
• Request corrections or amendments
• Request restrictions on certain disclosures
• Request confidential communications
• Receive an accounting of certain disclosures

Requests involving medical records or PHI should generally be directed to the applicable healthcare Provider.

AMO may cooperate with Providers to help process lawful requests.

AMO uses reasonable safeguards intended to help protect PHI, including:

• Secure systems and encryption where appropriate
• Access controls and authentication procedures
• HIPAA-compliant technology vendors where applicable
• Internal privacy and security policies
• Workforce confidentiality obligations

However, no method of electronic transmission or storage is completely secure, and absolute security cannot be guaranteed.

This HIPAA Notice does not apply to:

• General website browsing information
• Marketing or advertising activity
• Public website pages
• De-identified information
• Information not connected to healthcare services

Such information is governed by the AMO Nutrients Privacy Policy.

AMO or Providers may disclose PHI where permitted or required by law, including:

• Treatment purposes
• Payment and healthcare operations
• Public health activities
• Law enforcement requests
• Court orders or legal process
• Preventing serious threats to health or safety
• Regulatory compliance obligations

PHI and healthcare-related records may be retained in accordance with:

• HIPAA requirements
• State medical record retention laws
• Provider obligations
• Pharmacy or laboratory regulations
• Fraud prevention and legal compliance requirements

We may update this HIPAA Notice from time to time. Updated versions will be posted with a revised “Last Updated” date.

Continued use of the Services after updates become effective constitutes acknowledgment of the revised Notice.