THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: Aug. 17, 2026

OUR COMMITMENT TO YOUR PRIVACY

Atlas Orthogonal ("the Practice," "we," "us," or "our") is dedicated to maintaining the privacy of your protected health information ("PHI"). PHI includes information about your health condition, chiropractic examination findings, x-rays and diagnostic imaging, treatment history, and payment information that could reasonably be used to identify you. In the course of providing chiropractic care, we create and maintain records of the care and services we provide to you. This Notice applies to all records generated by our practice, whether created by our staff or by other health care providers who may be involved in your care.

We are required by law to maintain the privacy of your PHI, to provide you with this Notice describing our legal duties and privacy practices with respect to your PHI, to abide by the terms of the Notice currently in effect, and to notify you if we are unable to agree to a requested restriction on the use or disclosure of your PHI.

HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

The following categories describe the ways we may use and disclose your PHI. Not every use or disclosure in a category is listed; however, all permitted uses and disclosures fall within one of these categories.

For Treatment

We may use and disclose your PHI to provide, coordinate, or manage your chiropractic care. For example, we may share information with another health care provider to whom we refer you, or a provider may share information with us regarding your care.

For Payment

We may use and disclose your PHI to bill and collect payment for the treatment and services you receive from us, including sharing information with your health insurance company, health plan, or other third-party payer to obtain payment for services rendered.

For Health Care Operations

We may use and disclose your PHI for our business operations, such as quality assessment and improvement activities, staff and student training, licensing, credentialing, business planning, and general administrative and legal activities.

Other Permitted or Required Uses and Disclosures

- Appointment Reminders and Health-Related Information: We may contact you by phone, mail, text, or email to remind you of appointments or to tell you about treatment alternatives or other health-related benefits and services that may be of interest to you.

- Individuals Involved in Your Care: We may share relevant PHI with a family member, friend, or other person you identify who is involved in your care or the payment for your care, unless you object.

- As Required by Law: We will disclose PHI when required to do so by federal, state, or local law.

- Public Health and Safety Activities: We may disclose PHI for public health purposes, such as reporting disease, injury, or vital events, or to prevent or control disease.

- Health Oversight Activities: We may disclose PHI to a health oversight agency for activities authorized by law, such as audits, investigations, and licensure actions.

- Judicial and Administrative Proceedings: We may disclose PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.

- Law Enforcement: We may release PHI if asked to do so by a law enforcement official, under certain limited circumstances required or permitted by law.

- To Avert a Serious Threat to Health or Safety: We may disclose PHI when necessary to prevent a serious threat to your health or safety, or the health or safety of the public or another person.

- Workers' Compensation: We may disclose PHI to comply with workers' compensation laws and similar programs that provide benefits for work-related injuries.

- Business Associates: We may disclose PHI to trusted third-party "business associates" (for example, our billing service or electronic health record vendor) who perform functions on our behalf, subject to a written agreement requiring them to safeguard your information.

- Research: Under certain circumstances, and subject to specific safeguards, we may use or disclose PHI for research purposes.

- Marketing and Sale of PHI: Other than the health-related communications described above, we will not use or disclose your PHI for marketing purposes or sell your PHI without your prior written authorization.

Any use or disclosure of your PHI not described in this Notice will be made only with your written authorization. You may revoke that authorization in writing at any time, except to the extent we have already relied on it.

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

- Right to Inspect and Copy: You have the right to inspect and obtain a copy of your PHI that we maintain, with limited exceptions. Requests must be made in writing to our Privacy Officer.

- Right to Amend: If you believe information in your record is incorrect or incomplete, you may request that we amend it. We may deny the request under certain circumstances, and will provide our reasons for denial in writing.

- Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your PHI, other than those made for treatment, payment, health care operations, or certain other excepted purposes.

- Right to Request Restrictions: You have the right to request a restriction on the PHI we use or disclose about you for treatment, payment, or health care operations. We are not required to agree to the restriction, except where you have paid for a service out of pocket in full and request that we not disclose that information to your health plan.

- Right to Request Confidential Communications: You have the right to request that we communicate with you about your health matters in a certain way or at a certain location (for example, only at a specific phone number or address).

- Right to a Paper Copy of This Notice: You have the right to obtain a paper copy of this Notice at any time, even if you agreed to receive it electronically.

- Right to Choose Someone to Act on Your Behalf: If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your rights and make choices about your PHI.

- Right to Be Notified of a Breach: You have the right to be notified in the event we (or a business associate) discover a breach of your unsecured PHI.

OUR RESPONSIBILITIES

- We are required by law to maintain the privacy and security of your PHI.

- We will let you know promptly if a breach occurs that may have compromised the privacy or security of your PHI.

- We must follow the duties and privacy practices described in this Notice and give you a copy of it.

- We will not use or share your PHI other than as described here unless you tell us, in writing, that we can. If you tell us we can, you may change your mind at any time by notifying us in writing.

CHANGES TO THIS NOTICE

We reserve the right to change this Notice at any time. We reserve the right to make the revised or changed Notice effective for PHI we already have about you, as well as any information we receive in the future. We will post a copy of the current Notice on our website and make copies available upon request. The current Notice will state the effective date at the top of the page.

ADDITIONAL PROTECTIONS UNDER HAWAII LAW

In addition to the federal protections described above, Hawaii law may provide additional privacy protections for certain categories of health information, including genetic information (Hawaii Revised Statutes Chapter 323B) and notification requirements in the event of a security breach involving personal information (Hawaii Revised Statutes Chapter 487N). Where Hawaii law provides greater privacy protection than federal law, we will follow the more protective standard.

COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be penalized or retaliated against in any way for filing a complaint.

To file a complaint with our Practice, contact:

Privacy Officer: Kevin Perrino, DC

75-170 Hualalai Rd, Ste B104, Kailua Kona, HI 96740

Phone: 808-331-1454

Email: info@hancoh.com

To file a complaint with the U.S. Department of Health and Human Services:

Office for Civil Rights, U.S. Department of Health and Human Services

200 Independence Avenue, S.W., Washington, D.C. 20201

Phone: (800) 368-1019 | Website: www.hhs.gov/ocr/privacy/hipaa/complaints

CONTACT INFORMATION

If you have questions about this Notice or would like additional information about our privacy practices, please contact:

Kevin Perrino, DC

75-170 Hualalai Rd, Ste B104, Kailua Kona, HI 96740

Phone: 808-331-1454

Email: info@hancoh.com