THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: June 2026

May Pharmacy is required by law to maintain the privacy of your Protected Health Information (PHI) and to provide you with notice of our legal duties and privacy practices with respect to PHI.

1. Uses and Disclosures of PHI for Treatment, Payment, and Health Care Operations

We may use and disclose your PHI without your written authorization for the following purposes:

• For Treatment: We may use and disclose your PHI to provide, coordinate, or manage your health care and any related services. For example, we may disclose PHI to your family doctor, pediatrician, or specialist who prescribes a medication to ensure clarity in your treatment.

• For Payment: We may use and disclose your PHI so that the pharmacy services and medications you receive may be billed to and payment may be collected from you, an insurance company, or a third-party payer (such as Medicare Part D).

• For Health Care Operations: We may use and disclose your PHI to support the business activities of the pharmacy. These activities include, but are not limited to, quality assessment, employee review activities, and conducting medication therapy management (MTM).

2. Permitted and Required Uses and Disclosures That May Be Made Without Your Authorization

We may use or disclose your PHI in the following situations without your authorization:

• Required By Law: As required by federal, state, or local law.

• Public Health Risks: For public health activities, such as preventing or controlling disease or reporting adverse medication reactions to the FDA.

• Law Enforcement & Legal Proceedings: In response to a court order, subpoena, warrant, summons, or similar process.

• To Avert a Serious Threat to Health or Safety: When necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.

3. Uses and Disclosures of PHI Based Upon Your Written Authorization

Other uses and disclosures of your PHI will be made only with your written authorization, unless otherwise permitted or required by law as described below. You may revoke this authorization at any time, in writing, except to the extent that we have taken an action in reliance on the use or disclosure indicated in the authorization.

4. Your Rights Regarding Your PHI

You have the following rights regarding the PHI we maintain about you:

• Right to Inspect and Copy: You have the right to inspect and receive a copy of your PHI that is contained in a designated record set for as long as we maintain the PHI.

• Right to Request Restrictions: You have the right to request a restriction or limitation on the PHI we use or disclose about you for treatment, payment, or health care operations. We are not required to agree to your request, except if the disclosure is to a health plan for purposes of payment or health care operations and is not otherwise required by law, and the PHI pertains solely to a health care item or service for which you have paid us out-of-pocket in full.

• Right to Request Confidential Communications: You have the right to request that we communicate with you about medical matters in a certain way or at a certain location (for example, calling you only at a specific number).

• Right to Request an Amendment: If you feel that PHI we have about you is incorrect or incomplete, you may ask us to amend the information.

• Right to an Accounting of Disclosures: You have the right to request an "accounting of disclosures" representing a list of certain non-routine disclosures we have made of your PHI.

5. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. All complaints must be submitted in writing. We will not retaliate against you for filing a complaint.

6. Contact Information

For further information about this notice or to exercise your privacy rights, please contact our Privacy Officer:

• Phone: (714) 893-2697

• Email: Contact Us

• Address: 14571 Magnolia St, Ste 104, Westminster CA 92683