No Limits medical Privacy Practices

NOTICE OF PRIVACY PRACTICES

No Limits Medical, LLC

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: October 29, 2026

1. Our Duties

No Limits Medical, LLC ("No Limits Medical," "we," "us," or "our") is required by law to maintain the privacy of your protected health information, provide you this Notice, follow its terms, and notify you after a breach of unsecured PHI. "Protected health information" or "PHI" means information that identifies you and relates to your health, your care, or payment for your care.

We comply with the Health Insurance Portability and Accountability Act of 1996 and the HITECH Act and their regulations (together, "HIPAA"), and with applicable state law. Where state law gives your health information more protection than HIPAA, we follow the stricter law. We must follow the terms of the Notice currently in effect.

2. How We May Use and Share Your Health Information

A. Treatment

We use and share your PHI to provide, coordinate, and manage your care. For example, we share information with laboratories (such as Quest Diagnostics) to order and review your labs, with pharmacies to fill your prescriptions, and with other health care providers you are referred to or ask us to coordinate with. Registered nurses on our team use your information to provide coaching and care coordination.

B. Payment

No Limits Medical is a cash-pay practice. We do not bill or submit claims to health insurance. We use your information for payment only to process the payments you authorize (such as appointment fees, membership fees, and medication invoices), to send receipts, invoices, and Good Faith Estimates, and to manage your account. Because you pay for your care in full out of pocket, you have the right to require that we not share information about that care with a health plan for payment or health care operations (see Section 5).

C. Health Care Operations

We may use and share your PHI to run our practice and improve care, for example for quality review, training, licensing and compliance activities, legal and accounting services, and maintaining our health record and telehealth systems. When a company performs services for us that involve your PHI (a "business associate," such as our health record, communications, or administrative service providers, including Circle P Holdings, LLC), HIPAA requires a written agreement that obligates the company to protect your information and use it only for the services it performs for us.

D. Appointment Reminders and Care Communications

We may contact you by phone, text, email, or secure message with appointment reminders, lab and refill notices, and information about your treatment.

E. People Involved in Your Care

With your agreement, or if you do not object when given the chance, we may share information with a family member, friend, or other person you identify who is involved in your care or payment for your care. If you are unable to agree or object (for example, in an emergency), we may share information if we believe it is in your best interest.

3. Other Uses and Disclosures Allowed or Required by Law

We may use or share your PHI without your written authorization in the following situations, as permitted or required by HIPAA and state law:

- As required by law: when federal, state, or local law requires it.

- Public health and safety: to prevent or control disease, report adverse reactions to medications or product problems to the FDA, or report suspected abuse, neglect, or domestic violence to authorities as required by law.

- Serious threat to health or safety: to prevent or lessen a serious and imminent threat to you, another person, or the public.

- Health oversight: to agencies such as state boards of nursing or medicine and the U.S. Department of Health and Human Services for audits, inspections, investigations, and licensure.

- Lawsuits and legal proceedings: in response to a court or administrative order, or in response to a subpoena or other lawful request when the requirements of HIPAA and state law are met.

- Law enforcement: for certain law enforcement purposes permitted by law, such as responding to a court order or warrant.

- Coroners, medical examiners, and funeral directors: as needed to carry out their duties.

- Organ and tissue donation: to organizations that handle organ, eye, or tissue donation.

- Research: for research approved under HIPAA's privacy safeguards. We do not currently conduct research using patient information.

- Workers' compensation: as authorized by workers' compensation laws.

- Specialized government functions: for military, national security, and protective services, and to correctional institutions, as permitted by law.

Sensitive information. Some kinds of health information, such as certain mental health, HIV/AIDS, genetic, and substance use disorder treatment records, may have extra protection under federal or state law. If we receive substance use disorder treatment records protected by 42 C.F.R. Part 2, we will use and share them only as that law allows, and they will not be used against you in a civil, criminal, administrative, or legislative proceeding without your written consent or a court order that meets Part 2's requirements.

4. Uses That Require Your Written Authorization

We will not do the following without your written authorization:

- Marketing: use or share your PHI for marketing.

- Sale of PHI: sell your PHI. We do not sell PHI.

- Psychotherapy notes: use or share psychotherapy notes, except as HIPAA allows.

- Any other use or disclosure not described in this Notice.

We do not use PHI for fundraising. You may revoke an authorization at any time in writing (for example, by email to info@nolimitsmedical.com), except to the extent we have already acted on it.

5. Your Rights

You have the following rights regarding your PHI. To use any of them, contact our Privacy Officer (Section 8).

- Get a copy of your health record. You can ask to see or get a paper or electronic copy of your medical and billing records. We will respond within 30 days and may charge a reasonable, cost-based fee.

- Ask us to correct your record. You can ask us to correct information you think is incorrect or incomplete. We may say "no," but we will tell you why in writing within 60 days, and you may submit a statement of disagreement.

- Request confidential communications. You can ask us to contact you in a specific way (for example, a certain phone number or email) or at a different address. We will say "yes" to all reasonable requests.

- Ask us to limit what we use or share. You can ask us not to use or share certain information for treatment, payment, or operations. We are not required to agree, except as follows: if you pay for a service in full out of pocket, you can ask us not to share information about that service with a health plan for payment or operations, and we will say "yes" unless the law requires us to share it.

- Get a list of those with whom we've shared information. You can ask for a list (accounting) of the times we've shared your PHI for six years before your request, who we shared it with, and why. It will include all disclosures except those for treatment, payment, and health care operations and certain others (such as ones you asked us to make). We will provide one list a year free and may charge a reasonable, cost-based fee for additional lists within 12 months.

- Get a copy of this Notice. You can ask for a paper copy of this Notice at any time, even if you agreed to receive it electronically.

- Choose someone to act for you. If you have given someone medical power of attorney or someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will confirm the person's authority before we act.

- Be notified of a breach. We will notify you if a breach occurs that may have compromised the privacy or security of your unsecured PHI.

6. Breach Notification

If a breach of your unsecured PHI occurs, we will notify you without unreasonable delay and no later than 60 days after we discover it, or sooner if state law requires. The notice will describe what happened, the information involved, steps you can take to protect yourself, what we are doing, and how to contact us.

7. Changes to This Notice

We can change the terms of this Notice, and the changes will apply to all information we have about you. The new Notice will be available on request, on our website at nolimitsmedical.com/nlm-privacy-practices, and in our office.

8. Questions and Complaints

If you have questions about this Notice or believe your privacy rights have been violated, contact our Privacy Officer:

Privacy Officer: Brittany Perslin, PhD, APRN

No Limits Medical, LLC

8051 N. Tamiami Trail, Suite E6

Sarasota, FL 34243

Text/Phone: 844-891-8541

Fax: 866-521-2036

Email: info@nolimitsmedical.com

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting https://www.hhs.gov/ocr/complaints

We will not retaliate against you for filing a complaint.

© 2026 No Limits Medical, LLC. All rights reserved.