NOTICE OF PRIVACY PRACTICES

Last Updated: April 6, 2026

This Notice describes how medical information about you may be used and disclosed, and how you can access this information. Please review it carefully.

Our Commitment to Your Privacy

BatonCare is dedicated to protecting the privacy and confidentiality of your health information. We are required by the Health Insurance Portability and Accountability Act (HIPAA) to maintain the privacy of your Protected Health Information (PHI) maintained in your medical and billing records, provide you with this Notice, and follow the practices described here.

BatonCare provides non‑clinical care‑coordination and support services. BatonCare does not deliver medical care, medical advice, diagnosis, or treatment, and no physician‑patient or provider‑patient relationship will exist between BatonCare and the Member.

BatonCare also complies with the federal confidentiality rules for substance use disorder (“SUD”) information under 42 C.F.R. Part 2, where
applicable. BatonCare is not a Part 2 program, but may receive SUD information from your healthcare providers as a lawful holder. With your authorization, BatonCare may receive, use, and disclose your health information—including information protected under HIPAA and, if applicable, Part 2—for purposes of treatment, payment, and healthcare operations (“TPO”) in connection with our non‑clinical, administrative coordination services. Information protected by Part 2 will only be redisclosed by BatonCare with your written authorization or as otherwise permitted by 42 C.F.R. Part 2.

How We May Use and Disclose Health Information

We may use and disclose your PHI without your written authorization to perform the non‑clinical, administrative care‑coordination services described in your Subscription Agreement, including:

Coordination With Your Healthcare Providers: To coordinate communications and administrative tasks with your healthcare providers in a non‑clinical capacity. For example, we may share information with physicians, nurses, or specialists involved in your care.
Insurance Navigation: To help you understand your insurance benefits in a non‑clinical, administrative capacity. We do not bill insurance or submit claims.
Healthcare Operations: For qualityimprovement, compliance, training, and administrative purposes. For example, we may use PHI to operate, mainta in, and improve our non‑clinical coordination services and the BatonCare Portal.
Appointment Reminders and Service Information: To remind you of appointments and share information about non‑clinical coordination services available through BatonCare.
Individuals Involved in Your Care: With your consent or, in some situations, without your objection, we may share information with family, friends, or caregivers involved in your care or payment in a non‑clinical, administrative capacity.
Research: Under certain conditions, PHI may be used for approved research projects. In other situations, we will obtain your consent or authorization before sharing your PHI for a research study.

If any of the health information we receive or maintain is protected under the federal confidentiality rules for substance use disorder (“SUD”)
information at 42 C.F.R. Part 2, BatonCare will only redisclose such information with your written authorization or as otherwise permitted by 42
C.F.R. Part 2.

Special Situations

We may also disclose PHI in the following circumstances:

As Required by Law: When mandated by federal, state, or local law.
To Prevent Serious Threats: To avert a serious threat to health or safety.
Business Associates: To companies that require PHI to provide services on our behalf (e.g., billing). All business associates are contractually obligated to protect your information.
Data Breach Notification: To provide legally required notices of unauthorized access, use, or disclosure.
Organ and Tissue Donation: If required by law, to facilitate organ donation and transplantation processes.
Military and Veterans: As required by military command authorities.
Workers’ Compensation: For benefits related to work-related injuries or illness.
Public Health Activities: For reporting disease, injury, births, deaths, child abuse, or product recalls.
Health Oversight Activities: For audits, investigations, inspections, and licensure activities by agencies who monitor the health care system and compliance with laws.
Victims of Abuse or Neglect: To government authorities when required or authorized by law.
De-Identification. We may use or disclose PHI to create information that does not identify you and cannot reasonably be used to identify you. This process, known as “de-identification,” involves removing or altering certain identifiers in accordance with applicable law (including the standards set forth under the Health Insurance Portability and Accountability Act (HIPAA)). Once your information has been de-identified, it is no longer considered PHI and may be used or disclosed for purposes such as research, analytics, or other lawful activities without further notice to you.

Your Rights

You have the following rights regarding your PHI:

Access to Electronic Records: You may request electronic copies of your PHI or direct us to send them to another person.
Inspect and Copy: You may review and obtain copies of your medical and billing records.
Amend: You may request corrections to your PHI if you believe it is inaccurate, but we may deny your request if we disagree.
Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI.
Request Restrictions: You may ask us to limit how we use or disclose your PHI, but we are not required to agree except if you ask us not to share PHI with your health plan about an item or service for which you pay us in full out of pocket.
Confidential Communication: You may request that we contact you in a specific way (e.g., at work or by mail).
Paper Copy: You may request a paper copy of this Notice at any time.
Additional Rights for Information Protected Under 42 C.F.R. Part 2: If any of your health information is protected by the federal confidentiality rules for substance use disorder (“SUD”) information under 42 C.F.R. Part 2, you have additional rights. You have the right to provide or withhold written consent before BatonCare receives, uses, or discloses SUD information, except where permitted by law. You may revoke your consent at any time in writing, except to the extent BatonCare has already relied on it. You may also request restrictions on disclosures of SUD information to the extent permitted under Part 2. Information protected by Part 2 may not be redisclosed by BatonCare or by any recipient unless allowed by law.

Our Responsibilities

We are required by law to maintain the privacy and security of your PHI.
We will notify you promptly if a breach occurs that may compromise your information.
We must follow the terms of this Notice and cannot use or disclose your PHI in ways not covered here without your written authorization.

Changes to This Notice

We reserve the right to change this Notice and make the new Notice apply to PHI we already have as well as any information we receive in the future. Updated versions will be posted in our offices and on our website.

Contact Information

If you have questions or wish to exercise your rights, please contact:

Privacy Contact
BatonCare, LLC

980 North Federal Highway,

Suite 110 #1068

Boca Raton, FL 33432

Phone (561)303-0007

support@batoncare.com

If you believe your privacy rights have been violated, you may file a complaint with BatonCare or with the U.S. Department of Health and Human
Services, Office for Civil Rights. You will not be penalized for filing a complaint.