notice of privacy practices

Effective March 2026

privacy contact information

If you have any questions about this notice or about our privacy practices, please contact:

our pledge regarding your health information

We understand that your health information is personal, and we are committed to protecting it. We create a record of the care and services you receive at our practice. We need this record to provide you with quality care and to comply with certain legal requirements. This notice applies to all of the records of your care generated by The Dose Collective.

This notice will tell you about the ways in which we may use and disclose health information about you. We also describe your rights and certain obligations we have regarding the use and disclosure of health information.

We are required by law to:

• Maintain the privacy and security of your protected health information (PHI)
• Provide you with notice of our legal duties and privacy practices with respect to health information about you
• Follow the terms of the notice that is currently in effect
• Notify you if a breach occurs that may have compromised the privacy or security of your information

how we may use and disclose your health information

The following categories describe different ways that we may use and disclose health information. Not every use or disclosure in a category will be listed. However, all of the ways we are permitted to use and disclose information will fall within one of the categories.

For Treatment

We may use health information about you to provide you with medical treatment or services. We may disclose health information about you to doctors, nurses, or other health care providers who are involved in your care. For example, we may share your health information with your medical director, a specialist to whom we refer you, or a pharmacy that fills your prescriptions.

For Payment

We may use and disclose health information about you so that the treatment and services you receive may be billed to and payment may be collected from you, an insurance company, or a third party. For example, we may need to share information about a treatment you received at The Dose Collective so your health plan will pay us or reimburse you for the treatment.

For Health Care Operations

We may use and disclose health information about you for our health care operations. These uses and disclosures are necessary to run our practice and make sure all of our patients receive quality care. For example, we may use health information to review our treatment and services and to evaluate the performance of our staff in caring for you.

Appointment Reminders

We may use and disclose health information to contact you as a reminder that you have an appointment for treatment or services at The Dose Collective.

Treatment Alternatives and Health-Related Benefits

We may use and disclose health information to tell you about or recommend possible treatment options or health-related benefits and services that may be of interest to you.

other permitted uses and disclosures

We may use or disclose your health information without your authorization in the following situations:

As Required by Law

We will disclose health information about you when required to do so by federal, state, or local law.

Public Health Activities

We may disclose health information about you for public health activities, including to prevent or control disease, injury, or disability; to report adverse reactions to medications or products; or to notify appropriate authorities if we believe a patient has been the victim of abuse, neglect, or domestic violence.

Health Oversight Activities

We may disclose health information to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure.

Judicial and Administrative Proceedings

If you are involved in a lawsuit or a dispute, we may disclose health information about you in response to a court or administrative order or in response to a subpoena, discovery request, or other lawful process.

Law Enforcement

We may release health information if asked to do so by a law enforcement official in response to a court order, subpoena, warrant, summons, or similar process, or under other limited circumstances as permitted by law.

Coroners, Medical Examiners, and Funeral Directors

We may release health information to a coroner, medical examiner, or funeral director so that they may carry out their duties.

Workers' Compensation

We may release health information about you for workers' compensation or similar programs that provide benefits for work-related injuries or illness.

Serious Threats to Health or Safety

We may use and disclose health information about you when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.

Military and Veterans

If you are a member of the armed forces, we may release health information about you as required by military command authorities.

National Security and Intelligence Activities

We may release health information about you to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.

Inmates

If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release health information about you to the correctional institution or law enforcement official as authorized by law.

Department of Health and Human Services

We will share information about you if the Department of Health and Human Services requests it to verify that we are complying with applicable federal privacy law.

special protections for substance use disorder records

Some of the health information we maintain may relate to substance use disorder (SUD) diagnosis, treatment, or referral for treatment. This information may be subject to additional federal confidentiality protections under 42 CFR Part 2, which provides greater privacy protections than HIPAA for certain records.

When these additional protections apply, we may be more limited in how we use or disclose this information, even for treatment, payment, or health care operations, unless you provide written consent or another legal exception applies.

We will not share substance use disorder patient records, subject to 42 CFR Part 2, for the purpose of investigations or legal proceedings against you without: (1) your written consent, or (2) a court order and a subpoena.

If you have questions about whether any of your records are subject to these additional protections, please contact our Privacy Official using the information at the top of this notice.

uses and disclosures requiring your written authorization

Other uses and disclosures of health information not covered by this notice or the laws that apply to us will be made only with your written authorization. If you provide us with written authorization to use or disclose health information about you, you may revoke that authorization, in writing, at any time. If you revoke your authorization, we will no longer use or disclose health information about you for the reasons covered by your written authorization. You understand that we are unable to take back any disclosures we have already made with your authorization, and that we are required to retain our records of the care that we provided to you.

We will not use or disclose your health information for marketing purposes or sell your health information without your written authorization.

your rights regarding your health information

You have the following rights regarding health information we maintain about you:

Right to Access and Obtain Copies

You have the right to inspect and obtain a copy of health information that may be used to make decisions about your care. This includes medical and billing records. To inspect or obtain copies of your health information, you must submit your request in writing to our Privacy Official. We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee for the cost of copying, mailing, or other supplies associated with your request.

Right to Request Amendment

If you feel that health information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for The Dose Collective. To request an amendment, your request must be made in writing and submitted to our Privacy Official. You must provide a reason that supports your request. We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. We may also deny your request if you ask us to amend information that was not created by us, is not part of the health information kept by or for our practice, is not part of the information which you would be permitted to inspect and copy, or is accurate and complete.

Right to an Accounting of Disclosures

You have the right to request an accounting of disclosures. This is a list of the disclosures we made of health information about you other than our own uses for treatment, payment, and health care operations, and other specified exceptions. To request this list, you must submit your request in writing to our Privacy Official. Your request must state a time period, which may not be longer than six years. We will provide one accounting per year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.

Right to Request Restrictions

You have the right to request a restriction or limitation on the health information we use or disclose about you for treatment, payment, or health care operations. You also have the right to request a limit on the health information we disclose about you to someone who is involved in your care or the payment for your care. We are not required to agree to your request in most circumstances. If we do agree, we will comply with your request unless the information is needed to provide you emergency treatment. However, we are required to agree to a request to restrict disclosures of health information to a health plan for payment or health care operations purposes if you have paid for the service or item in full, out of pocket.

Right to Request Confidential Communications

You have the right to request that we communicate with you about health matters in a certain way or at a certain location. For example, you can ask that we only contact you at work or by mail. To request confidential communications, you must make your request in writing to our Privacy Official. We will accommodate all reasonable requests.

Right to a Paper Copy of This Notice

You have the right to a paper copy of this notice. You may ask us to give you a copy of this notice at any time. Even if you have agreed to receive this notice electronically, you are still entitled to a paper copy.

changes to this notice

We reserve the right to change this notice. We reserve the right to make the revised or changed notice effective for health information we already have about you as well as any information we receive in the future. We will post a copy of the current notice in our office and on our website at thedosecollective.com. The notice will contain the effective date on the first page.

complaints

If you believe your privacy rights have been violated, you may file a complaint with our practice or with the U.S. Department of Health and Human Services Office for Civil Rights. You will not be penalized or retaliated against for filing a complaint.

additional state law protections

Idaho state law may provide additional protections for certain types of health information, including but not limited to HIV/AIDS information, mental health records, and genetic information. Where Idaho law provides greater privacy protections than federal law, we will comply with the more protective standard.

This Notice of Privacy Practices was last updated March 2026.