NOTICE OF PRIVACY PRACTICES & WEBSITE PRIVACY POLICY

Effective Date: August 30, 2026

Practice Name: Latitude DPC

Location: Harker Heights, Texas

Part 1: HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Legal Duty

Latitude DPC is required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this notice of our legal duties and privacy practices, and to notify you following a breach of unsecured PHI. We are required to abide by the terms of this Notice currently in effect.

How We May Use and Disclose Your Health Information

We use and disclose your PHI for treatment, payment, and healthcare operations:

• Treatment: We may use your PHI to provide, coordinate, or manage your healthcare services. This includes sharing information with specialists, clinical laboratories, or pharmacies involved in your care.

• Payment: As a Direct Primary Care practice, we do not bill health insurance for medical services. However, we may use your information to process membership payments, cash-pay visit fees, or to provide you with itemized receipts if requested.

• Healthcare Operations: We may use or disclose your PHI to support daily business operations, quality assessment, administrative activities, and compliance audits.

• Telehealth Services: When providing virtual care, we utilize secure, HIPAA-compliant platforms to protect your audio, video, and text communication.

Permitted & Required Disclosures Without Authorization

We may disclose PHI without your written authorization in limited circumstances:

• As Required by Law: State or federal mandates, court orders, or subpoenas.

• Public Health & Safety: To prevent or control disease, report abuse or neglect, or avert a serious threat to public health or safety.

• Emergency Care: If emergency medical attention is needed.

Your Individual Rights

You have the following rights regarding your health information:

• Right to Inspect and Copy: You may request access to view or receive a copy of your medical records and billing history.

• Right to Request Restrictions: You may request restrictions on how your PHI is used or shared. (While we consider all requests, we are not legally required to agree to every restriction).

• Right to Confidential Communications: You may request that we contact you at a specific phone number, email address, or mailing address.

• Right to Amend: You may request an amendment to your medical record if you believe the information is incorrect or incomplete.

• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI outside of treatment, payment, or operations.

Part 2: Website Privacy & Data Collection

This section outlines how information collected on this website is used.

Information We Collect

• Voluntary Information: When you fill out contact forms, request information, or schedule appointments on our website, we may collect personal details such as your name, email address, phone number, and reason for inquiry.

• Automatically Collected Data: Like most websites, our web server and analytics providers (e.g., Squarespace Analytics) automatically collect basic technical data such as your IP address, browser type, device type, and pages visited.

Use of Information

• Website inquiries are used strictly to communicate with you, schedule appointments, or address your questions.

• We do not sell, rent, or trade your personal contact information or browsing data to third-party marketers.

Third-Party Services & Links

Our site may integrate or link to external software (such as patient portals, electronic health record platforms like Atlas.md, payment processors, or scheduling engines). These third-party services operate under their own privacy policies and HIPAA compliance standards. We encourage you to review their policies when utilizing those tools.

Part 3: Medical & Emergency Disclaimer

• Not Emergency Services: This website and our electronic messaging systems are for routine clinical inquiries and appointment scheduling only. If you are experiencing a medical emergency, call 911 or go to the nearest emergency room immediately.

• No Doctor-Patient Relationship: Simply submitting a form or viewing content on this website does not establish a formal clinician-patient relationship. A formal relationship is established only after completing enrollment and intake agreements.

Contact & Complaints

If you have questions about this privacy notice, wish to exercise your privacy rights, or believe your privacy rights have been violated, you may contact our Privacy Officer:

Latitude DPC — Privacy Officer

Email: joby@latitude-dpc.com

Location: Harker Heights, TX

You also have the right to file a formal complaint with the Secretary of the U.S. Department of Health and Human Services (HHS). You will not be penalized or retaliated against for filing a complaint.