HIPAA Notice of Privacy Practices

Effective Date: February 22, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

Azoth Medical is committed to protecting your Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations.

How We May Use and Disclose Your Health Information

Treatment

We may use your PHI to provide, coordinate, or manage your healthcare and any related services. This includes sharing information with your prescribing physician, reviewing physicians (peer review), and lab personnel involved in fulfilling your protocol.

Healthcare Operations

We may use PHI for quality assessment, peer review activities (using de-identified or pseudonymized data where possible), training, and accreditation purposes.

As Required by Law

We may disclose your PHI when required to do so by federal, state, or local law, such as in response to a court order or law enforcement request.

Your Rights Regarding Your Health Information

  • Right to Access: You have the right to inspect and copy your PHI maintained on this Platform.
  • Right to Amend: You may request that we correct PHI you believe is inaccurate or incomplete.
  • Right to an Accounting: You may request a list of disclosures of your PHI made in the prior 6 years.
  • Right to Restrict: You may request restrictions on how we use and disclose your PHI for treatment, payment, or healthcare operations.
  • Right to Confidential Communications: You may request that we communicate with you about your health in a specific way or location.
  • Right to a Paper Copy: You have the right to receive a paper copy of this notice.

Our Safeguards

We maintain administrative, technical, and physical safeguards to protect your PHI, including:

  • AES-256 encryption of all PHI at rest
  • TLS encryption for all data in transit
  • Role-based access control (only your assigned provider sees your record)
  • Complete audit logging of all PHI access
  • Business Associate Agreements with all third-party data processors

Changes to This Notice

We reserve the right to change this notice and our privacy practices. We will post any revised notice on this Platform and make it available to you upon request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us at privacy@azoth.is or with the U.S. Department of Health and Human Services, Office for Civil Rights:

www.hhs.gov/hipaa/filing-a-complaint

We will not retaliate against you for filing a complaint.

Contact Our Privacy Officer

Privacy Officer: Azoth Medical
Email: privacy@azoth.is