Notice of Privacy Practices

Effective Date: February 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

Vionti Health and its affiliated healthcare providers are committed to protecting the privacy of your health information. This Notice of Privacy Practices ("Notice") describes how we may use and disclose your protected health information ("PHI") and your rights regarding your health information.

Privacy Officer

Vionti Health has designated a Privacy Officer who is responsible for ensuring compliance with this Notice and all applicable HIPAA privacy requirements. To contact our Privacy Officer:

Email: support@viontihealth.com
Phone: (844) 357-3601

How We May Use and Disclose Your Health Information

For Treatment

We may use and disclose your health information to provide, coordinate, or manage your healthcare and related services. This includes consultations with healthcare providers, referrals, and communications with pharmacies.

For Payment

We may use and disclose your health information to obtain payment for services provided to you. This may include communications with your insurance company or other payment sources.

For Healthcare Operations

We may use and disclose your health information for our healthcare operations, including quality assessment, employee training, licensing, and other administrative activities.

As Required by Law

We may use or disclose your health information when required by federal, state, or local law.

With Your Authorization

Other uses and disclosures of your health information will be made only with your written authorization. You may revoke your authorization at any time.

Public Health Activities

We may disclose your PHI for public health activities, including reporting disease or injury, reporting to the FDA regarding product safety or defects, and reporting workplace-related illness or injury to employers as required by law.

Abuse, Neglect, or Domestic Violence

We may disclose your PHI to a government authority if we reasonably believe you are a victim of abuse, neglect, or domestic violence, as authorized or required by law.

Health Oversight Activities

We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure actions.

Judicial and Administrative Proceedings

We may disclose your PHI in response to a court order, subpoena, or other lawful process in the course of judicial or administrative proceedings.

Law Enforcement

We may disclose your PHI to law enforcement officials as required by law, to identify or locate a suspect or missing person, or to report information about a crime victim under certain circumstances.

Coroners, Funeral Directors, and Organ Donation

We may disclose your PHI to coroners, medical examiners, or funeral directors as necessary for them to carry out their duties, and to organ procurement organizations for organ or tissue donation purposes.

Research

We may use or disclose your PHI for research purposes when the research has been approved by an Institutional Review Board (IRB) or Privacy Board that has reviewed the research protocol and established safeguards for the privacy of your information.

Serious Threats to Health or Safety

We may use or disclose your PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Military and Veterans

If you are a member of the armed forces, we may disclose your PHI as required by military command authorities, or to the Department of Veterans Affairs to determine your eligibility for benefits.

Workers' Compensation

We may disclose your PHI as authorized by and to the extent necessary to comply with workers' compensation laws or similar programs.

Business Associates

Some services are provided to us by business associates, including pharmacies, payment processors, and technology vendors. All business associates are required to sign Business Associate Agreements (BAAs) and are contractually obligated to protect your PHI in accordance with HIPAA requirements.

Minimum Necessary Standard

When using or disclosing your PHI, or when requesting PHI from another covered entity, we will make reasonable efforts to limit the information to the minimum amount necessary to accomplish the intended purpose of the use, disclosure, or request.

Your Rights Regarding Your Health Information

  • Right to Access: You have the right to inspect and obtain a copy of your health information.
  • Right to Amend: You have the right to request amendments to your health information if you believe it is incorrect or incomplete.
  • Right to an Accounting: You have the right to receive a list of certain disclosures we have made of your health information.
  • Right to Request Restrictions: You have the right to request restrictions on how we use or disclose your health information.
  • Right to Confidential Communications: You have the right to request that we communicate with you in a specific way or at a specific location.
  • Right to a Paper Copy: You have the right to obtain a paper copy of this Notice upon request.
  • Right to Receive Breach Notification: You have the right to be notified if a breach occurs that compromises the privacy or security of your unsecured protected health information.

Breach Notification

In the event of a breach of your unsecured protected health information, we will notify you as required by the HITECH Act. The notification will include a description of the breach, the types of information involved, the steps you should take to protect yourself, what we are doing to investigate and mitigate the breach, and contact information for you to ask questions or obtain additional information.

Our Responsibilities

  • We are required by law to maintain the privacy and security of your protected health information.
  • We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
  • We must follow the duties and privacy practices described in this Notice.
  • We will not use or share your information other than as described here unless you tell us we can in writing.

Changes to This Notice

We reserve the right to change this Notice and to make the revised or changed Notice effective for health information we already have about you as well as any information we receive in the future.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer at support@viontihealth.com or (844) 357-3601. You may also file a complaint with the Secretary of the Department of Health and Human Services at:

Secretary of the Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
hhs.gov/ocr/privacy

Complaints must be filed within 180 days of when you knew or should have known of the act or omission. We will not retaliate against you for filing a complaint.

Contact Information

To exercise any of your rights or for questions about this Notice, please contact us at:

Email: support@viontihealth.com
Phone: (844) 357-3601