Notice of Privacy Practices

This Notice of Privacy Practices ("Notice") describes the privacy practices of iScript.care (Cantobiz, Inc.) and its affiliates, including contracted affiliated professional entities, their physicians, healthcare practitioners, and other personnel ("we" or "us").

We are required by law to maintain the privacy of your health information ("Protected Health Information" or "PHI") and to provide you with this Notice of our legal duties and privacy practices with respect to your PHI. We are obligated to notify you following a breach of unsecured PHI. When we use or disclose your PHI, we are required to abide by the terms of this Notice.

We do not need authorization for the following uses and disclosures: Treatment. We may use and disclose your PHI to provide treatment, diagnose and treat your injury or illness, and coordinate care among healthcare providers involved in your treatment. Payment. We may use and disclose your PHI to obtain payment for services provided to you, including billing and reimbursement activities. Healthcare Operations. We may use and disclose your PHI for internal administration, quality improvement, training, competence evaluation, and fraud/abuse detection. Disclosure to Relatives and Caregivers. We may disclose PHI to a family member, close friend, or caregiver when you are present and agree, or when we reasonably infer you would not object. Public Health Activities. Including disease reporting, adverse event reporting, child abuse, and workplace injury reporting. Legal and Government Purposes. Including responses to court orders, law enforcement requests, health oversight activities, coroners, and national security requirements. As Required By Law. We may disclose PHI when required by applicable law.

We must obtain your written authorization for uses and disclosures of PHI for marketing purposes and disclosures that constitute the sale of PHI. Highly Confidential Information. Federal and state law requires special privacy protections for certain highly confidential information, including information about mental health, alcohol/drug abuse, HIV/AIDS, sexually transmitted diseases, genetic testing, child abuse, domestic violence, and sexual assault. We must have your authorization to disclose such information except as permitted by law. Revoking Authorization. You may withdraw your authorization at any time by delivering a written statement to our Privacy Officer. Revocation does not apply to actions already taken in reliance on the authorization.

Right to Request Restrictions. You may request restrictions on the uses and disclosures of your PHI for treatment, payment, and healthcare operations purposes. Right to Receive Confidential Communications. You may request that we communicate with you at a specific address or phone number. Right to Inspect and Copy Your PHI. You have the right to inspect and obtain a copy of your PHI maintained in our records. We may charge a reasonable cost-based fee for copies. Right to Amend Your PHI. You may request amendments to your PHI. We may deny your request if we determine the information is accurate and complete. Right to an Accounting of Disclosures. You may request a list of disclosures we have made of your PHI, excluding certain routine disclosures. Right to a Paper Copy of This Notice. You may request a paper copy of this Notice at any time. Right to File a Complaint. If you believe we have violated your privacy rights, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have about you as well as any information we receive in the future. We will post the current Notice on our website and make copies available upon request.