NOTICE OF PRIVACY PRACTICES

Effective Date: January 1, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, HOW YOU CAN GET ACCESS TO THIS INFORMATION, AND YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION. PLEASE REVIEW IT CAREFULLY.

Nellie Gail Urgent Care is committed to protecting the privacy and confidentiality of your health information. We are required by law to maintain the privacy and security of your Protected Health Information ("PHI"), provide you with this Notice of our legal duties and privacy practices, and notify you following certain breaches of unsecured PHI.

We are required to follow the terms of the Notice of Privacy Practices currently in effect.

This Notice applies to Nellie Gail Urgent Care and its physicians, healthcare professionals, employees, staff members, contractors, and other individuals or entities involved in providing or supporting your care as permitted by law.

Our Locations

Nellie Gail Urgent Care – Laguna Hills
27001 Moulton Parkway, Suite A-102
Laguna Hills, CA 92656
Phone: (949) 600-1907

Nellie Gail Urgent Care – Orange
315 South Tustin Street
Orange, CA 92866
Phone: (714) 422-3056

How We May Use and Disclose Your Health Information

HIPAA and other applicable laws permit us to use or disclose your health information for certain purposes without obtaining a separate written authorization from you.

Treatment

We may use and disclose your health information to provide, coordinate, or manage your medical care.

For example, we may share relevant information with physicians, specialists, pharmacies, laboratories, imaging facilities, hospitals, or other healthcare providers involved in your treatment.

Payment

We may use and disclose your health information to obtain payment for healthcare services provided to you.

For example, we may provide information to your health insurance company or health plan so that it can determine eligibility, process claims, authorize services, or make payment.

Healthcare Operations

We may use and disclose your health information for activities necessary to operate our medical practice and improve patient care.

These activities may include:

• Quality assessment and improvement
• Employee training and evaluation
• Medical record review
• Compliance activities
• Business planning and administration
• Credentialing and licensing
• Auditing and legal services
• Patient service and care coordination

Appointment Reminders and Care-Related Communications

We may use your contact information to communicate with you regarding appointments, test results, follow-up care, prescriptions, referrals, billing, or other matters related to your healthcare.

Depending upon the contact information and permissions you provide, these communications may occur by telephone, voicemail, email, text message, patient portal, or other reasonable methods.

Please understand that ordinary email and text messaging may have privacy and security limitations.

Treatment Alternatives and Health-Related Services

We may contact you with information about treatment alternatives, follow-up services, health-related benefits, or other healthcare services that may be relevant to your care, as permitted by law.

Business Associates

We may disclose PHI to third-party service providers, known under HIPAA as "business associates," that perform services on our behalf involving health information.

Examples may include billing companies, information technology providers, electronic health record providers, laboratories, consultants, document storage providers, or other healthcare support services.

When required by HIPAA, our business associates must appropriately safeguard your PHI.

Individuals Involved in Your Care

Unless you object, or unless otherwise restricted by law, we may disclose information relevant to your care to a family member, friend, caregiver, personal representative, or another person you identify as being involved in your healthcare or payment for your care.

When you are unable to express your preferences, we may disclose information when we determine, using professional judgment, that doing so is in your best interest and is permitted by law.

As Required by Law

We may use or disclose your health information when required to do so by federal, state, or local law.

Public Health Activities

We may disclose health information for authorized public health purposes, including:

• Preventing or controlling disease, injury, or disability
• Reporting certain communicable diseases
• Reporting adverse reactions to medications or medical products
• Reporting product defects or recalls
• Reporting births or deaths when required by law
• Other activities authorized by public health laws

Abuse, Neglect, or Domestic Violence

We may disclose health information to appropriate government authorities when we reasonably believe a patient may be a victim of abuse, neglect, or domestic violence, when authorized or required by law.

Health Oversight Activities

We may disclose health information to authorized health oversight agencies for activities such as audits, investigations, inspections, licensing actions, and other activities necessary for oversight of the healthcare system.

Judicial and Administrative Proceedings

We may disclose health information in response to certain court or administrative orders, subpoenas, discovery requests, or other lawful processes, subject to applicable legal requirements.

Law Enforcement

We may disclose health information to law enforcement officials when permitted or required by law, including in response to certain legal processes or for other specifically authorized law enforcement purposes.

Serious Threat to Health or Safety

We may use or disclose health information when we believe in good faith that disclosure is necessary to prevent or reduce a serious and imminent threat to the health or safety of an individual or the public, consistent with applicable law and ethical standards.

Workers' Compensation

We may disclose health information as authorized or required by workers' compensation laws or similar programs.

Coroners, Medical Examiners, and Funeral Directors

We may disclose health information to coroners, medical examiners, or funeral directors when authorized by law.

Organ and Tissue Donation

When applicable, we may disclose health information to organizations involved in organ, eye, or tissue donation and transplantation as permitted by law.

Specialized Government Functions

We may disclose health information for certain authorized government functions, including military activities, national security activities, protective services, correctional institutions, and other functions permitted by law.

Uses and Disclosures Requiring Your Written Authorization

Certain uses and disclosures of your PHI require your written authorization unless otherwise permitted or required by law.

Examples may include certain uses or disclosures involving:

• Psychotherapy notes, when applicable
• Marketing purposes
• The sale of PHI
• Other uses or disclosures not otherwise permitted by HIPAA or applicable law

If you provide written authorization, you generally have the right to revoke that authorization in writing at any time. Your revocation will not affect actions we already took in reliance on your authorization.

We will not sell your PHI or use it for marketing in a manner requiring authorization without obtaining the appropriate authorization from you.

Your Rights Regarding Your Health Information

You have important rights concerning your health information.

Right to Inspect and Obtain a Copy

You have the right to inspect and obtain a copy of PHI maintained in a designated record set, subject to certain exceptions.

If your medical information is maintained electronically and you request an electronic copy, we will provide access in the electronic form and format requested if it is readily producible, or in another mutually agreeable format as required by law.

We may charge a reasonable, cost-based fee when permitted by law.

In certain limited circumstances, we may deny access to some information. If access is denied, you may have the right to have that decision reviewed.

Right to Request an Amendment

If you believe that information in your medical record is incorrect or incomplete, you may request that we amend the information.

Your request should explain why you believe an amendment is appropriate.

We may deny your request under circumstances permitted by law. If we deny the request, we will provide you with information about your rights regarding that decision.

Right to an Accounting of Disclosures

You may request a list, or "accounting," of certain disclosures we have made of your PHI.

The accounting generally does not include disclosures made for treatment, payment, or healthcare operations or certain other disclosures excluded by law.

Right to Request Restrictions

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

We are generally not required to agree to your request.

However, if you pay for a healthcare item or service entirely out of pocket and request that we not disclose information about that item or service to your health plan for payment or healthcare operations, we will honor that request when required by law, unless disclosure is otherwise required by law.

Right to Request Confidential Communications

You may request that we communicate with you about medical matters in a specific way or at a specific location.

For example, you may request that we contact you only at a particular telephone number or mailing address.

We will accommodate reasonable requests as required by law.

Right to Receive a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

You may request a copy from our staff at either Nellie Gail Urgent Care location.

Our Responsibilities

Nellie Gail Urgent Care is required by law to:

• Maintain the privacy and security of your PHI.
• Provide you with this Notice describing our legal duties and privacy practices.
• Follow the terms of the Notice currently in effect.
• Notify affected individuals following a breach of unsecured PHI when notification is required by law.
• Respect your rights regarding your PHI as required by applicable law.

We take reasonable administrative, technical, and physical measures to protect health information against unauthorized access, use, or disclosure.

California Privacy Protections

Nellie Gail Urgent Care operates in California and complies with applicable federal and California laws governing the confidentiality of medical information.

California law may provide additional privacy protections for certain categories of health information. When California law provides greater privacy protection or patient rights than federal law, we will comply with the applicable California requirements.

Certain categories of information may be subject to additional protections, including information concerning behavioral or mental health treatment, substance use disorder treatment, HIV/AIDS and other communicable diseases, reproductive health services, genetic information, and other specially protected medical information.

We will obtain authorization or consent for the use or disclosure of such information when required by applicable law.

Reproductive Healthcare Privacy

Federal law provides additional protections regarding certain reproductive healthcare information.

We will not use or disclose PHI for purposes prohibited by applicable federal law, including certain activities intended to investigate or impose liability on an individual or healthcare provider for seeking, obtaining, providing, or facilitating lawful reproductive healthcare.

When required by law, we may require an appropriate attestation before disclosing PHI potentially related to reproductive healthcare for certain purposes.

Electronic Health Information

We may maintain and exchange health information electronically to facilitate treatment, payment, healthcare operations, care coordination, prescriptions, laboratory services, patient portal services, and other lawful healthcare activities.

We implement reasonable safeguards designed to protect electronic PHI. However, no electronic communication or information system can be guaranteed to be completely secure.

You may contact us if you have questions regarding how your health information is communicated electronically.

Personal Representatives and Minors

A legally authorized personal representative may exercise certain privacy rights on behalf of a patient as permitted by law.

Special rules may apply to the medical information of minors. In some circumstances, California or federal law may allow a minor to consent to particular healthcare services and may provide the minor with specific confidentiality rights regarding those services.

We will handle medical information concerning minors and personal representatives in accordance with applicable law.

Changes to This Notice

We reserve the right to change this Notice and our privacy practices as permitted by law.

Any revised Notice may apply to PHI we already maintain as well as information we receive in the future.

When we make a material change to this Notice, we will make the revised Notice available at our facilities and through our website as required by law.

The effective date of the current Notice will appear at the top of this document.

Questions or Complaints

If you have questions about this Notice or believe your privacy rights have been violated, you may contact Nellie Gail Urgent Care.

Nellie Gail Urgent Care – Laguna Hills
27001 Moulton Parkway, Suite A-102
Laguna Hills, CA 92656
Phone: (949) 600-1907

Nellie Gail Urgent Care – Orange
315 South Tustin Street
Orange, CA 92866
Phone: (714) 422-3056

You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights.

You will not be retaliated against or denied treatment for filing a privacy complaint.

Acknowledgment of Receipt

Patients may be asked to acknowledge receipt of Nellie Gail Urgent Care's Notice of Privacy Practices. Your acknowledgment indicates that you were provided access to the Notice; it does not mean that you agree to any particular use or disclosure of your health information.

If we are unable to obtain your written acknowledgment, we may document our good-faith efforts to provide you with the Notice as required by law.

Nellie Gail Urgent Care
Laguna Hills: (949) 600-1907
Orange: (714) 422-3056

Effective Date: August 18, 2026