Notice of Privacy Practices

Effective date: October 22, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice applies to LPRG IP LLC, doing business as Attune Wellness Med Spa, including our Stamford and Greenwich locations and our virtual care program. It also applies to our providers and staff.

Our duties

We are required by law to:

• Maintain the privacy and security of your protected health information (“health information”)
• Give you this Notice of our legal duties and privacy practices
• Follow the terms of the Notice currently in effect
• Notify you if a breach of your unsecured health information occurs, as required by law

How we use and share your health information

Treatment, payment, and operations

• Treatment. We use and share your information with providers involved in your care. For example, your nurse practitioner may share lab results with Dr. Jimenez, our Medical Director, or send a prescription to a pharmacy that will prepare and ship your medication.
• Payment. We use your information to bill and collect payment for services, including processing deposits and recurring program payments.
• Health care operations. We use your information to run our practice, improve care, train staff, and contact you about your care and appointments. For example, we may send appointment reminders and follow-up messages by text, email, or phone.
• Business associates. We share information with vendors who perform services for us, such as scheduling, telehealth, laboratory, messaging, and billing providers. Each signs an agreement requiring them to protect your information.

Your choices

You can tell us whether we may share information with a family member, friend, or other person involved in your care or payment. If you are not able to tell us, we may share information if we believe it is in your best interest.

Other uses and disclosures permitted or required by law

We may share your information without your written authorization:

• When required by federal, state, or local law
• For public health activities, such as reporting adverse reactions to medications or preventing disease
• To report suspected abuse, neglect, or domestic violence to government authorities
• For health oversight activities, such as audits, investigations, and licensure
• In response to a court or administrative order, subpoena, or other lawful process, subject to the Connecticut protections described below
• For law enforcement purposes, as permitted by law
• To coroners, medical examiners, and funeral directors
• For organ and tissue donation requests
• For research, under conditions that protect your privacy
• To prevent a serious threat to health or safety
• For specialized government functions, such as military or national security
• For workers’ compensation claims

Connecticut protections

Connecticut law gives some of your information extra protection, and we follow it where it is stricter than federal law.

Legal proceedings. In a civil, probate, legislative, or administrative proceeding, we will not share information you gave us or that we learned by examining you unless you consent. Limited exceptions apply, such as where Connecticut law or court rules require it, to defend a claim against us, for a Department of Public Health complaint investigation, or to report suspected abuse.

Reproductive and gender-affirming health care. In those proceedings, we will not share information about reproductive or gender-affirming health care services you received without your written consent, except as Connecticut law allows. You have the right to withhold that consent.

HIV-related information. We share HIV-related information only as Connecticut law specifically permits, such as with your written release, with providers who need it to treat you, or as public health law requires.

Uses that require your written permission

We will not use or share your health information for the following without your written authorization:

• Marketing. We will not use your health information to market products or services to you, beyond the exceptions the law allows, without your permission.
• Sale of health information. We will not sell your health information without your written authorization, except as permitted by law.
• Testimonials and photos. We will not use your name, photos, before-and-after images, or treatment details in testimonials, social media, or advertising without your written permission.
• Psychotherapy notes, if any exist.

Any other use not described in this Notice requires your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted on it.

Your rights

• Get a copy of your records. You can ask to see or get a paper or electronic copy of your medical and billing records. We will respond within 30 days (with the possibility of a one-time 30-day extension if we notify you in writing) and may charge a reasonable, cost-based fee.
• Ask us to correct your records. If you believe information is incorrect or incomplete, you can ask us to correct it. We may say no, but will explain why in writing within 60 days.
• Request confidential communications. You can ask us to contact you in a specific way, such as a particular phone number or address. We will agree to reasonable requests.
• Ask us to limit what we use or share. You can ask us not to use or share certain information. We are not required to agree, except that if you pay for a service in full out of pocket, you can ask us not to share that information with your health insurer, and we will agree unless the law requires otherwise.
• Get a list of disclosures. You can ask for a list of times we shared your information in the six years before your request, other than for treatment, payment, operations, and certain other disclosures. We provide one list per year free of charge.
• Get a copy of this Notice. You can ask for a paper copy at any time, even if you agreed to receive it electronically.
• Choose someone to act for you. If you have given someone medical power of attorney or have a legal guardian, that person can exercise your rights.

To exercise any of these rights, contact our Privacy Officer using the information below.

Changes to this Notice

We can change the terms of this Notice, and the changes will apply to all information we have about you. The revised Notice will include a new effective date and will be available on request, in our offices, and on our website.

Complaints

If you believe your privacy rights have been violated, you can file a complaint with our Privacy Officer, with the U.S. Department of Health and Human Services Office for Civil Rights at 200 Independence Avenue, S.W., Washington, D.C. 20201, by calling 1-877-696-6775, or online at www.hhs.gov/hipaa/filing-a-complaint/, or with the Connecticut Attorney General’s Office. We will not retaliate against you for filing a complaint.

Contact our Privacy Officer

Kevin Joyce, HIPAA Privacy Officer
LPRG IP LLC, doing business as Attune Wellness Med Spa
19 W Elm Street, Greenwich, CT 06830
(203) 973-7829
kevin@attunemedspa.com

See also our Website Privacy Policy.