Notice of Privacy Practices for Nurtured Soul Wellness, LLC

Effective Date: 09/17/2025

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION

PLEASE REVIEW IT CAREFULLY.

We are committed to protecting the privacy of your Protected Health Information ("PHI"). We are required by law to maintain the privacy of your PHI and to provide you with this Notice of our legal duties and privacy practices. We are required to abide by the terms of this Notice, which may be updated from time to time as allowed by law.

Many of our clients are navigating medical treatment, oncology care, chronic conditions, and personal or trauma histories. Our intention is to explain how your information may be used and shared in a way that is clear, respectful and supportive.

1. How We May Use and Disclose Your PHI

We may use and disclose your PHI without your authorization for the following routine purposes:

Treatment

We may use and disclose your PHI to provide, coordinate, and manage your care and services at Nurtured Soul Wellness. This may include sharing information with other healthcare providers involved in your care (for example, your oncologist or dermatologist, or primary care provider) so that the esthetic and electrolysis services you receive here are as safe and appropriate as possible.

Example: We may consult with your medical team to better understand how your cancer treatments, medications, or other health conditions may be affecting your skin or hair before providing services.

Payment

We may use and disclose your PHI as needed to bill and collect payment for the services we provide. This may include sharing limited information with a third parties that help process payments (such as credit card processors or billing services).

Healthcare Operations

We may use and disclose your PHI to support our day-to-day operations and quality of care. This can include quality assessment and improvement activities, staff training, business planning, and internal record-keeping. We use PHI in these ways to review our services, monitor safety, and evaluate how well we are meeting our clients' needs.

In all of these situations, we make reasonable efforts to limit the PHI we use or disclose to the minimum necessary for the intended purpose.

2. Disclosures That Do Not Require Your Authorization

In addition to the uses and disclosures described above, we may also share your PHI without your authorization when permitted or required by law. These situations may include:

Public Health Activities

We may disclose your PHI to public health authorities for purposes such as preventing or controlling disease, reporting adverse events, or other public health matters.

Legal Proceedings

We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process. We may also disclose PHI to law enforcement officials when required or permitted by law (for example, to respond to a warrant or certain types of investigations).

Required By Law

We will disclose your PHI when required to do so by federal, state, or local law.

In each of these cases, we will disclose only the PHI that is necessary and will follow the legal requirements that apply.

3. Uses and Disclosures Requiring Your Authorization

Any use or disclosure of your PHI for purposes other than those described in Sections 1 and 2 will require written authorization.

Examples of situations that may require your authorization include:

• Certain types of marketing communications

• Some disclosures of PHI to third parties that are not related to treatment, payment, or healthcare operations.

If you provide written authorization for us to use or disclose your PHI, you may revoke that authorization at any time by submitting a written request. Revoking your authorization will not affect any use or disclosure that has already occurred based on prior permission.

4. Your Rights Regarding Your PHI

You have several important rights related to your PHI. To exercise any of these rights, please contact us using the information provided at the end of this Notice.

Right to Access

You have the right to inspect and obtain a copy of your PHI that we maintain in a designated record set, with certain limited exceptions. We may charge a reasonable fee to cover the cost of copying, mailing, or other supplies.

Right to Request Restrictions

You have the right to request a restriction or limitation on how we use or disclose your PHI for treatment, payment or healthcare operations. While we are not required to agree to all requested restrictions, we will consider your request carefully. In some cases (for example, certain disclosures to a health plan when you have paid out of pocket in full), we may be required to honor your restriction request.

Right to Confidential Communications

You have the right to request that we communicate with you about your PHI in a certain way or at a certain location (for example, only at a particular phone number, mailing address, or via email). We will accommodate reasonable requests, especially when they relate to your safety or privacy.

Right to Amend PHI

If you feel that your PHI is incorrect or incomplete, you may ask us to amend it. We may deny your request for an amendment under certain circumstances.

Right to an Accounting of Disclosures

You have the right to request a list ("accounting") of certain disclosures of your PHI made by us during a specified time period, excluding disclosures for treatment, payment, healthcare operations and other disclosures that are not required to be included.

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you agreed to receive it electronically. You may request a copy in person or by contacting us using the information at the end of this Notice.

5. Our Responsibilities

We take our responsibilities to protect your PHI seriously. We are required by law to:

• Maintain the privacy of your PHI

• Provide you with this Notice of our legal duties and privacy practices with respect to your PHI

• Abide by the terms of the Notice that are currently in effect

• Notify you if we are unable to agree to a requested restriction

• Accommodate reasonable requests for confidential communications

• Notify you, as required by law, if there is a breach of unsecured PHI that may have affected you

We reserve the right to change our privacy practices and this Notice at any time as allowed by law. If we make a significant change, the updated Notice will be posted on our website and available in the studio. The new terms will apply to all PHI we maintain at that time, including PHI created or received before the change.

6. How to Exercise Your Rights

If you would like to exercise any of the rights described in this Notice, have questions about how your PHI is used and protected, or wish to file a privacy complaint, please contact:

Flossy Puth, LE, Owner

Nurtured Soul Wellness

621 E. Campbell Ave. Ste. 10A

Campbell, CA 95008

341-233-4851

support@nurturedsoulwellness.com

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information above, or with the Secretary of the U.S. Department of Health and Human Services.

We will not retaliate against you in any way for filing a privacy complaint or for raising concerns about your PHI.

Nurtured Soul Wellness

621 E. Campbell Ave. Ste. 10A

Campbell, CA 95008

341-233-4851

www.nurturedsoulwellness.com