Notice of Privacy Practices (PHI/HIPAA)

Enhanced Metabolics LLC

Effective Date: January 12, 2026

Last Updated: January 12, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Who This Notice Applies To

This Notice of Privacy Practices (“Notice”) applies to Enhanced Metabolics LLC (“Enhanced Metabolics,” “we,” “us,” or “our”) and describes how we may use and disclose your Protected Health Information (“PHI”) and how you can exercise your rights regarding PHI.

PHI is information about your health condition, healthcare services, or payment for healthcare that can reasonably identify you (for example, your name, contact information, appointment details, medical history, symptoms, diagnoses, prescriptions, lab results, or payment information for healthcare services).

We are required by law to maintain the privacy and security of your PHI, to provide you with this Notice, and to follow the terms of the Notice currently in effect.

We will not use or share your PHI other than as described in this Notice unless you tell us we may do so in writing.

2. Our Legal Duties

We are required by law to:

• Maintain the privacy and security of your PHI;

• Provide you with this Notice of our legal duties and privacy practices; and

• Follow the terms of the Notice currently in effect.

We will notify you following a breach of unsecured PHI as required by law.

3. How We May Use and Disclose PHI Without Your Written Authorization

HIPAA allows us to use and disclose PHI for certain purposes without your written authorization, including:

A) Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services.

Example: sharing information with clinicians involved in your care or with other providers you are referred to.

B) Payment

We may use and disclose your PHI to obtain payment for healthcare services.

Example: billing for services, processing payment, or related collections activities.

C) Healthcare Operations

We may use and disclose your PHI for our healthcare operations—activities necessary to run our practice and improve quality.

Example: quality assessment and improvement, training, accreditation, compliance, auditing, licensing, and internal administrative activities.

D) Appointment Reminders, Treatment Alternatives, and Health-Related Services

We may use and disclose PHI to contact you with appointment reminders. We may also communicate with you about treatment options or alternatives, and health-related services that may be of interest to you.

E) Individuals Involved in Your Care

We may share PHI with a family member, friend, or others you identify who are involved in your care or payment for your care, to the extent permitted by law and consistent with your preferences (or as allowed in an emergency).

F) Business Associates and Service Providers

We may disclose PHI to vendors that perform services for us and that may need access to PHI to do their work (for example, scheduling/portal tools, IT support, secure communications, billing support). Where required by HIPAA, we enter into Business Associate Agreements to safeguard PHI.

Scheduling/Portal Tools: Our website may link you to scheduling and/or patient portal tools (for example, OptiMantra) for appointments and intake. Information you submit through those tools may include PHI.

G) As Required by Law

We may disclose PHI when required by federal, state, or local law.

H) Public Health and Safety

We may disclose PHI for public health activities (for example, reporting diseases), preventing or reducing a serious threat to health or safety, or reporting adverse events as required.

I) Health Oversight Activities

We may disclose PHI to oversight agencies for activities authorized by law (for example, audits, inspections, investigations, licensure actions).

J) Law Enforcement and Legal Proceedings

We may disclose PHI in response to valid legal processes such as a court order, subpoena, or other lawful request, consistent with HIPAA.

K) Coroners, Medical Examiners, and Funeral Directors

We may disclose PHI as necessary for these functions.

L) Workers’ Compensation

We may disclose PHI as authorized by workers’ compensation laws.

M) Other Uses/Disclosures Permitted or Required by Law

In certain circumstances, HIPAA permits or requires disclosures such as for organ and tissue donation, certain research activities (subject to legal requirements), specialized government functions (such as military and national security), and for correctional institutions or law enforcement custodial situations, as permitted by law.

4. Uses and Disclosures That Usually Require Your Written Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes such as:

• Marketing (where required by HIPAA);

• Sale of PHI; and

• Most uses and disclosures of psychotherapy notes (if applicable).

You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

5. Your Rights Regarding PHI

You have the following rights under HIPAA (with limited exceptions):

A) Right to Inspect and Get a Copy

You can request access to or a copy of PHI we maintain about you. We may charge a reasonable, cost-based fee as allowed by law.

B) Right to Request an Amendment

You can ask us to amend PHI you believe is incorrect or incomplete. We may deny your request in certain cases, but we will provide a written explanation.

C) Right to an Accounting of Disclosures

You can request a list (“accounting”) of certain disclosures of your PHI made by us during the prior six (6) years, excluding disclosures for treatment, payment, healthcare operations, and certain other exceptions.

D) Right to Request Restrictions

You can request restrictions on certain uses/disclosures of your PHI. We are not required to agree to all requested restrictions, but if we agree, we will follow the restriction (except in emergencies).

If you pay out-of-pocket in full for a service, you may request that we not share PHI about that service with a health plan for payment or operations (if applicable).

E) Right to Request Confidential Communications

You can request that we contact you in a specific way (for example, phone vs email) or at a specific location. We will accommodate reasonable requests.

F) Right to Get a Paper Copy of This Notice

You can request a paper copy of this Notice at any time, even if you agreed to receive it electronically.

G) Right to Choose Someone to Act for You

If you have a legal guardian, power of attorney for healthcare, or other authorized personal representative, that person can exercise your rights and make choices about your PHI, as permitted by law.

6. How to Exercise Your Rights or Ask Questions

To request any of the rights above or ask questions about this Notice, contact:

Privacy Contact: Angelina Miranda, Member & Manager

Phone: (928) 365-0365

Email: info@enhancedmetabolics.com

Mailing Address: 4539 N 22nd St #8118, Phoenix, AZ 85016, United States

Contact Page: https://www.enhancedmetabolics.com/contact

We may ask you to submit requests in writing and/or verify your identity.

7. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information above.

You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). We will not retaliate against you for filing a complaint.

OCR Complaint Portal: https://ocrportal.hhs.gov/

OCR Toll-Free: 1-800-368-1019 | TDD: 1-800-537-7697

8. Website, Tracking Technologies, and Communications

A) Website Is Primarily Informational

Our public website is intended to provide general information. Please do not submit sensitive medical information through general website contact forms or unsecured communications.

B) Scheduling/Intake via Linked Tools

If you choose to schedule or complete intake, you may be directed to our scheduling/portal tools (for example, OptiMantra). Information submitted there may include PHI and is governed by HIPAA and our privacy and security practices, as well as the platform provider’s practices.

C) Analytics and Advertising Tools (Informational Pages)

On our public, informational website pages, we use website analytics and advertising tools (such as Google Analytics/Google tags and Meta Pixel) to understand website performance and deliver advertising. These tools may collect information such as device identifiers, cookie data, and information about your interactions with our website. We do not intend for these tools to receive PHI, and we avoid placing these tools on pages intended for submitting PHI (such as patient portal, scheduling, or intake pages hosted by our scheduling/portal provider). If you proceed to scheduling or intake, you will be taken to the scheduling/portal provider’s environment.

D) Email/Text/Phone Communications

We may communicate with you by phone, email, or text regarding appointments, care coordination, and related matters. If you prefer a specific method of communication, please request confidential communications as described above.

9. Changes to This Notice

We may change this Notice from time to time. The updated Notice will apply to PHI we already have as well as PHI we receive in the future. We will post the current Notice on our website and make it available upon request.