Notice of Privacy Practices

1. Entity covered by this notice

The covered healthcare entity responsible for this notice is Chubby No More Inc. Chubby No More Inc. employs licensed clinicians who provide medical services directly to members, and Chubby No More Inc. is a HIPAA covered entity acting as a healthcare provider. The independent licensed pharmacies that dispense medication under our clinicians' prescriptions maintain their own privacy notices for the dispensing activities they perform.

2. Your rights

• Get an electronic or paper copy of your medical record.
• Ask us to correct your medical record.
• Request confidential communications by a specific method or at a specific address.
• Ask us to limit what we use or share, though we are not required to agree in all cases.
• Get a list of those with whom we have shared your information.
• Get a copy of this privacy notice.
• Choose someone to act for you, such as a personal representative or healthcare agent.
• File a complaint if you believe your privacy rights have been violated.

To exercise any of these rights, send a written request to our Privacy Officer, Greg Henson, at privacy@chubbynomore.com or at 20200 West Dixie Highway, Suite 902, Aventura, FL 33180. We will respond to your request within the timeframes required by law.

3. Permitted uses and disclosures

We may use and share your health information for treatment, payment, and healthcare operations, and for other purposes permitted or required by law, as described below.

4. Treatment

We may use your health information and share it with other professionals who are treating you, including for prescribing, dispensing coordination with the pharmacies we contract with, and follow-up care.

5. Payment

We may use and share your health information to bill and obtain payment for the services you receive, including from you or a payer where applicable.

6. Healthcare operations

We may use and share your health information to run our practice, improve care quality, conduct training and review, and contact you about your care.

7. Public health and other required disclosures

• Public health and safety activities, including reporting adverse reactions to medications.
• Health oversight agencies for audits, investigations, and licensure activities.
• Compliance with law, including required reporting and responses to lawful process.
• Workers' compensation, law enforcement, and other government requests as permitted.
• Organ procurement, coroners, medical examiners, and funeral directors as permitted.
• Research, only where permitted by law and applicable approvals.

8. Your choices

For certain uses and disclosures, you can tell us your preference, including sharing with family or friends involved in your care, disaster relief notification, and inclusion in any directory. We never share psychotherapy notes, marketing information, or sell your information without your written authorization, except as permitted by law.

9. Our responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will let you know promptly if a breach occurs that may have compromised your information.
• We must follow the duties and privacy practices described in this notice and give you a copy.
• We will not use or share your information other than as described here unless you tell us we can in writing, and you may change your mind at any time.

10. Breach notification

If a breach of unsecured protected health information occurs, we notify affected individuals, and where required, the U.S. Department of Health and Human Services and the media, as required by law. Our Privacy Officer, Greg Henson, directs our breach-response process.

11. Complaints

You may complain to us using the contact information below, or to the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

12. Privacy official

• Privacy official: Greg Henson, Privacy Officer
• Provider address: 20200 West Dixie Highway, Suite 902, Aventura, FL 33180
• Provider telephone: (908) 842-3447
• Provider privacy email: privacy@chubbynomore.com

13. Effective date

Effective date of this notice: August 18, 2026.

14. Changes to this notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request and on our website.

15. Acknowledgment of receipt

You may be asked to acknowledge receipt of this notice. Acknowledgment does not waive any privacy right. This notice was reviewed and approved by the Chubby No More Medical Director as part of our clinical review process, with a next scheduled clinical review date of February 18, 2027.