Notice of Privacy Practices

Attending Medical Group, PLLC
Effective date: August 7, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice is provided by Attending Medical Group, PLLC (the "Practice"), the physician-owned professional entity that provides medical care through the Attending platform. It applies to your protected health information ("PHI") — information that identifies you and relates to your health, the care we provide, or payment for that care. The Practice is required by law to maintain the privacy of your PHI, to give you this Notice of our legal duties and privacy practices, and to abide by the terms of the Notice currently in effect.

How we may use and disclose your health information

For treatment. We use your PHI to provide your medical care and to coordinate it — for example, your clinician reviewing your history before a visit, sending your prescription to your pharmacy, ordering laboratory tests, or consulting with a supervising or covering clinician within the Practice.

For payment. We use your PHI to bill and collect payment for services — for example, processing your membership charge or verifying a payment method. If you choose to seek reimbursement from an insurer for services or medications, we may provide documentation you request.

For health care operations. We use your PHI to run the Practice — quality review, clinical supervision and chart review required by state law, credentialing, compliance, and improving our services. Our management services company, Attending Health, LLC, performs administrative functions for the Practice under a written business associate agreement that requires it to safeguard your PHI.

Business associates. We share PHI with vendors that perform services for us — such as our electronic health record platform, e-prescribing service, and payment processor — only under written agreements requiring them to protect it.

Other uses permitted or required by law without your authorization: as required by federal, state, or local law; for public health activities (such as adverse-event reporting to the FDA); to report suspected abuse or neglect as required by law; for health oversight activities (such as audits by licensing boards); in judicial and administrative proceedings in response to lawful process; to law enforcement in limited circumstances; to avert a serious and imminent threat to health or safety; for workers' compensation; and to coroners, medical examiners, or funeral directors as permitted by law.

Uses requiring your written authorization. We will not use or disclose your PHI for the following purposes without your written authorization, which you may revoke at any time in writing: marketing (we do not use your PHI for marketing); sale of PHI (we do not and will not sell your PHI); most uses and disclosures of psychotherapy notes (we do not maintain psychotherapy notes); and any other purpose not described in this Notice. If you revoke an authorization, the revocation applies going forward, not to disclosures already made.

A specific commitment on tracking technologies. We do not permit advertising pixels, analytics trackers, or session-recording tools on the patient platform where your PHI lives, and we do not disclose to advertising platforms the fact that any identified individual is or was a patient.

Your rights

• Access. You may inspect and obtain a copy of your medical record, in electronic form if you prefer, generally within 30 days of your request. We may charge a reasonable, cost-based fee for copies.
• Amendment. You may request that we amend PHI you believe is incorrect or incomplete. We may deny the request in certain circumstances; if we do, you may submit a written statement of disagreement.
• Accounting of disclosures. You may request a list of certain disclosures of your PHI made in the six years before your request (excluding disclosures for treatment, payment, operations, and those you authorized).
• Restrictions. You may request restrictions on how we use or disclose your PHI. We are not required to agree to most requested restrictions, but we must agree not to disclose PHI to your health plan for services you have paid for in full out of pocket, if you request it. Because the Practice is a direct-pay practice, this right applies to essentially all of our services on your request.
• Confidential communications. You may ask us to contact you in a specific way or at a specific location (for example, only by email, or not at a particular phone number), and we will accommodate reasonable requests.
• Paper copy. You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
• Breach notification. We will notify you as required by law if a breach occurs involving your unsecured PHI.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with the Practice's Privacy Officer at privacy@myattending.com or 7751 Belfort Parkway, Ste 200, Jacksonville, FL 32256, or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue S.W., Washington, D.C. 20201, or through www.hhs.gov/ocr. We will not retaliate against you for filing a complaint.

Changes to this Notice

We may change this Notice and make the new terms effective for all PHI we maintain. The current Notice will always be posted on the patient platform and at myattending.com, with its effective date.

Contact

Privacy Officer
Attending Medical Group, PLLC
7751 Belfort Parkway, Ste 200, Jacksonville, FL 32256
privacy@myattending.com · (904) 906-3443