HIPAA Notice of Privacy Practices

01Our commitment

BioHealthcare Group Inc is required by law to keep your protected health information ("health information") private, to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect. We will tell you promptly if a breach occurs that may have put your health information at risk.

02How we use and share your health information

• Treatment: to process your tests, share results with the physician reviewing your order and support your care.
• Payment: to bill and collect payment for your services, including providing receipts for HSA or FSA claims.
• Healthcare operations: to run our services, check quality, train staff and keep our systems secure.
• Business associates: to share information with partners, such as laboratories and secure hosting providers, who help us and are bound by contract to protect it.

03Other uses the law allows or requires

We may share your health information without your written permission where the law requires or allows it, for example:

• for public health and safety, such as reporting certain diseases;
• to health oversight agencies for audits and inspections;
• in response to a court order or lawful request;
• to law enforcement, or to prevent a serious threat to health or safety; and
• for workers' compensation, as the law permits.

04Uses that need your written permission

We will ask for your written authorization before we use or share your health information for marketing, for research that identifies you, or for any purpose not described in this notice. We never sell your health information. You can withdraw your authorization in writing at any time, except where we have already acted on it.

05Your rights

• Get a copy of your health information, usually within 30 days. We may charge a reasonable, cost-based fee.
• Ask us to correct information you believe is wrong or incomplete.
• Request confidential communications, for example by contacting you at a different email or phone number.
• Ask us to limit what we use or share. We consider every request, and we will always agree not to share information with your health insurer about a service you have paid for in full yourself, unless the law requires us to share it.
• Get a list of the times we have shared your information, for six years before your request.
• Get a paper copy of this notice at any time.
• Choose someone to act for you, such as a legal guardian or someone with power of attorney.

06Complaints

If you feel your rights have been affected, you can complain to us using the contact details below, or to the US Department of Health and Human Services Office for Civil Rights at hhs.gov/hipaa/filing-a-complaint. We will never take action against you for making a complaint.

07Changes to this notice

We can change this notice, and the changes will apply to all information we hold about you. The current notice is always available on this page and on request.

08Privacy Officer

Email our Privacy Officer at kv@biohealthcare.group.

Effective date: 17 October 2026.