Notice of Privacy Practices

PRIME Medical Group PLLC Effective Date: May 27, 2026 Last Updated: May 27, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

PRIME Medical Group PLLC ("PRIME," "we," "us," or "our") is committed to protecting the privacy of your health information. We are required by law to:

Maintain the privacy of your protected health information (PHI)
Provide you with this Notice of our legal duties and privacy practices
Follow the terms of the Notice currently in effect
Notify you in the event of a breach of your unsecured PHI

This Notice applies to all records of your care created or maintained by PRIME Medical Group PLLC, including records from our Chicago, IL location, our Tampa Bay (St. Petersburg), FL location, and all telehealth services provided nationwide.

1. How We May Use and Disclose Your Health Information

The following describes the ways we may use and disclose your protected health information. Not every use or disclosure will be listed, but all of the ways we are permitted to use and disclose information will fall within one of the following categories.

A. Treatment

We may use and disclose your PHI to provide, coordinate, or manage your medical care. For example:

Sharing your lab results with your treating physician
Coordinating care with LabCorp for laboratory testing
Sending prescriptions to licensed compounding pharmacies
Communicating with specialists involved in your care
Sharing relevant health information with telehealth providers

B. Payment

We may use and disclose your PHI to obtain payment for services provided. For example:

Billing you or your insurance company for services rendered
Processing HSA/FSA transactions
Submitting documentation to support insurance reimbursement claims
Collecting outstanding balances

C. Healthcare Operations

We may use and disclose your PHI for our healthcare operations. For example:

Quality assessment and improvement activities
Training and supervision of medical staff
Conducting audits and compliance reviews
Business planning and management
Accreditation and licensing activities

D. Appointment Reminders

We may use your PHI to contact you with appointment reminders via phone, text message, or email. You may request that we use a specific contact method or number.

E. Treatment Alternatives

We may use your PHI to inform you about treatment alternatives or health-related benefits and services that may be of interest to you.

F. Business Associates

We may share your PHI with third-party business associates who perform services on our behalf, including:

HIPAA Vault (HIPAA-compliant hosting)
OptiMantra (practice management and scheduling)
LabCorp (laboratory testing)
Licensed compounding pharmacies
Billing and payment processing services

All business associates are required to sign Business Associate Agreements (BAAs) and protect your PHI in accordance with HIPAA.

2. Special Situations — Uses and Disclosures Without Authorization

A. As Required by Law

We will disclose your PHI when required to do so by federal, state, or local law, including:

Court orders and judicial proceedings
Administrative orders and regulatory requirements
Law enforcement purposes as required by law

B. Public Health Activities

We may disclose your PHI for public health activities, including:

Reporting communicable diseases to public health authorities
Reporting reactions to medications to the FDA
Notifying persons who may have been exposed to a communicable disease
Reporting to employers regarding work-related illness or injury as permitted by law

C. Health Oversight Activities

We may disclose your PHI to health oversight agencies for activities authorized by law, such as:

Audits and investigations
Inspections and licensure activities
Civil, administrative, and criminal proceedings

D. Serious Threats to Health or Safety

We may use or disclose your PHI to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law and ethical standards.

E. Military & Veterans

If you are a member of the armed forces, we may release your PHI as required by military command authorities or the Department of Veterans Affairs.

F. Workers' Compensation

We may disclose your PHI to the extent authorized by and to the extent necessary to comply with workers' compensation laws.

G. Coroners, Medical Examiners & Funeral Directors

We may release your PHI to a coroner, medical examiner, or funeral director as authorized by law.

H. Research

We may use or disclose your PHI for research purposes when approved by an institutional review board that has established protocols to protect the privacy of your information.

3. Uses and Disclosures Requiring Your Authorization

A. Marketing

We will not use or disclose your PHI for marketing purposes without your written authorization, except as permitted by law.

B. Sale of PHI

We will not sell your PHI without your written authorization. PRIME Medical Group PLLC does not sell patient information.

C. Psychotherapy Notes

We will not use or disclose psychotherapy notes without your written authorization, except as permitted by law.

D. Other Uses

Any use or disclosure of your PHI not described in this Notice will be made only with your written authorization. You have the right to revoke your authorization in writing at any time, except to the extent we have already relied on it.

4. Your Rights Regarding Your Health Information

A. Right to Inspect and Copy

You have the right to inspect and obtain a copy of your PHI that is contained in a designated record set, including your medical records. To request access:

Submit a written request to our Privacy Officer
We will respond within 30 days of receiving your request
We may charge a reasonable fee for copies

We may deny your request in limited circumstances. If we deny your request, you may request a review of the denial.

B. Right to Request Amendment

If you believe that your PHI is incorrect or incomplete, you may request an amendment. To request an amendment:

Submit a written request to our Privacy Officer explaining why the information is incorrect
We will respond within 60 days
We may deny your request if the information was not created by us, is not part of our records, or is accurate and complete

C. Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your PHI. This right applies to disclosures made for purposes other than treatment, payment, and healthcare operations. To request an accounting:

Submit a written request specifying the time period (up to 6 years prior to the date of the request)
We will respond within 60 days

D. Right to Request Restrictions

You have the right to request restrictions on how we use and disclose your PHI for treatment, payment, and healthcare operations. You also have the right to request that we restrict disclosures to family members or others involved in your care.

Important: We are required to comply with your request to restrict disclosure of your PHI to a health plan if the disclosure is for payment or healthcare operations and you have paid for the service in full out-of-pocket.

To request a restriction, submit a written request to our Privacy Officer.

E. Right to Request Confidential Communications

You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you may ask that we contact you only at a specific phone number or email address. We will accommodate all reasonable requests.

F. Right to a Paper Copy of This Notice

You have the right to a paper copy of this Notice at any time, even if you agreed to receive it electronically. To obtain a paper copy, contact us at (888) 717-7463 or info@primemedicalhrt.com.

G. Right to Be Notified of a Breach

You have the right to be notified in the event of a breach of your unsecured PHI. We will notify you without unreasonable delay and within 60 days of discovering the breach, as required by the HIPAA Breach Notification Rule.

5. Telehealth Privacy Rights

As a patient receiving telehealth services from PRIME Medical Group PLLC:

All telehealth communications are conducted through HIPAA-compliant platforms
Your telehealth records are subject to the same privacy protections as in-person visit records
You have the right to request that telehealth services not be used for your care
Telehealth services are subject to applicable state laws in the state where you are located at the time of service
You have the right to receive a copy of your telehealth consultation notes

6. Our Duties

We are required by law to:

Maintain the privacy of your PHI
Provide you with notice of our legal duties and privacy practices
Abide by the terms of the Notice currently in effect
Not use or disclose your PHI except as described in this Notice or as otherwise required or permitted by law
Notify you following a breach of your unsecured PHI

We reserve the right to change our privacy practices and to make the new practices effective for all PHI we maintain. If we make a material change to our privacy practices, we will revise this Notice and make the new Notice available upon request.

7. Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

PRIME Medical Group PLLC Privacy Officer

Mail: 6547 N. Northwest Hwy Chicago, IL 60631

Phone: (888) 717-7463 Fax: (312) 429-1851 Email: info@primemedicalhrt.com

U.S. Department of Health & Human Services

Office for Civil Rights 200 Independence Avenue, S.W. Washington, D.C. 20201 Phone: 1-877-696-6775 Website: www.hhs.gov/ocr/privacy/hipaa/complaints

You will not be penalized or retaliated against for filing a complaint.

8. Effective Date & Updates

This Notice of Privacy Practices is effective as of May 27, 2026. We reserve the right to change the terms of this Notice at any time. Changes will apply to all PHI we maintain. The most current version of this Notice will always be available:

On our website at primemedicalhrt.com/hipaa-notice
At our Chicago, IL location
At our Tampa Bay, FL location
By request via phone or email

9. Contact Our Privacy Officer

For questions, requests, or concerns regarding this Notice or your privacy rights, contact our Privacy Officer:

PRIME Medical Group PLLC Attn: Privacy Officer 6547 N. Northwest Hwy Chicago, IL 60631

Tampa Bay Location: 8424 4th Street N, Suite F St. Petersburg, FL 33702

Phone: (888) 717-7463 Fax: (312) 429-1851 Email: info@primemedicalhrt.com Website: primemedicalhrt.com

Business Hours: Monday–Friday, 9AM–5PM CST Medical services by appointment only.

This Notice of Privacy Practices was prepared for PRIME Medical Group PLLC in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act. This document should be reviewed by a qualified healthcare attorney licensed in Illinois and Florida to ensure full compliance with all applicable federal and state privacy laws prior to publication.