Notice of Privacy Practices

We and the licensed providers and pharmacies who care for you are required by law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, to follow the terms of the notice currently in effect, and to notify you if a breach of your unsecured PHI occurs.

We may use and disclose your PHI to provide, coordinate or manage your care, for example sharing your intake with a licensed provider and sending a prescription to a pharmacy.

We may use and disclose your PHI to bill and collect payment for services you receive, for example confirming your plan and processing a payment you authorize.

We may use and disclose your PHI for operations such as quality review, training, compliance, auditing, customer support and business planning, shared only as needed.

We may use or disclose PHI without your authorization where the law requires or permits, including public health activities, reporting abuse or neglect, health oversight, legal proceedings, law enforcement, preventing a serious threat to health or safety, workers' compensation and specialized government functions. We may share PHI with business associates who agree in writing to protect it.

We will not use or disclose your PHI for marketing, sell your PHI, or use or disclose psychotherapy notes without your written authorization. Other uses not described in this notice will be made only with your written authorization, which you may revoke in writing at any time, except to the extent we have already acted on it.

• Access: inspect and get a copy of your health records, including an electronic copy.
• Amend: ask us to correct health information you think is incorrect or incomplete.
• Restrict: ask us to limit certain uses or disclosures, including disclosures to a health plan for services you paid for in full.
• Confidential communications: ask us to contact you in a specific way or at a specific address.
• Accounting of disclosures: get a list of certain disclosures we made in the six years before your request.
• Paper copy: get a paper copy of this notice at any time, even if you agreed to receive it electronically.
• Choose someone to act for you, such as a legal guardian or medical power of attorney.

To use any of these rights, email support@whitelotusrx.com.

If you believe your privacy rights have been violated, you may complain to us at support@whitelotusrx.com and to the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.

We may change this notice, and the change will apply to all information we hold. The new notice will be posted on this page.

This notice is effective October 9, 2026.

Questions about this policy may be sent to: