Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: July 4, 2026

Body Good, LLC (“Body Good,” “we,” “us,” or “our”) is required by law to protect the privacy of your health information, to give you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect. This Notice applies to the protected health information (“PHI”) we create and maintain as your telehealth provider.

“Body Good” refers to Body Good, LLC, the medical practice and HIPAA covered entity that provides clinical care. Administrative, technology, and management services are provided to the practice by Body Good Studio LLC, a management services organization, under a written business associate agreement.

How we may use and disclose your health information

For treatment. We use and share your PHI to provide and coordinate your care — for example, our clinicians review your intake information, labs, and history to determine whether a GLP-1 or other treatment is appropriate, write prescriptions, and send them to a pharmacy that fills your medication.

For payment. We use and share your PHI to obtain payment for services — for example, to process your payment through our payment processor, to check insurance eligibility or coverage when you request it, and to bill for services or products.

For health care operations. We use and share your PHI to run our practice — for example, quality review, training and supervising our clinicians and staff, customer support, and improving our services.

Business associates. We may share PHI with vendors who perform services for us (for example, pharmacies, laboratories, messaging and IT providers). We require each of them to protect your PHI under a written business associate agreement.

Appointment, refill, and service communications. We may contact you by phone, text message (SMS), email, or through your patient portal with treatment reminders, refill and shipping updates, lab results, and other information about your care. Message and data rates may apply; you can opt out of text marketing by replying STOP. You may ask us to communicate with you in a specific way or at a specific location (see “Your rights”).

Other uses and disclosures permitted or required by law. We may use or disclose your PHI without your authorization when required or permitted by law, including: when required by federal, state, or local law; for public health activities (such as reporting adverse drug events to the FDA); for health oversight; in judicial or administrative proceedings; to law enforcement as permitted by law; to avert a serious threat to health or safety; for workers’ compensation; and to coroners, medical examiners, or as otherwise required.

Uses and disclosures that require your written authorization

The following uses and disclosures will be made only with your written authorization, which you may revoke at any time in writing (the revocation does not affect actions already taken in reliance on it):

• Most uses and disclosures for marketing purposes;
• Disclosures that constitute a sale of PHI;
• Most uses and disclosures of psychotherapy notes (if any are ever maintained);
• Any other use or disclosure not described in this Notice.

We do not sell your PHI, and we do not use or disclose PHI for marketing that involves PHI without your authorization. General marketing emails and texts you opt into are governed by our Privacy Policy.

Your rights regarding your health information

You have the right to:

• Access — inspect and obtain a copy of your PHI, including an electronic copy, usually within 30 days.
• Amend — request a correction to PHI you believe is incorrect or incomplete.
• Accounting of disclosures — receive a list of certain disclosures we have made.
• Request restrictions — ask us to limit how we use or share your PHI. We will say yes if you pay out of pocket in full for a specific item or service and ask us not to share that information with your health plan, except where required by law.
• Confidential communications — ask us to contact you by a specific means or at a specific location.
• Paper copy — receive a paper copy of this Notice, even if you agreed to receive it electronically.
• Breach notification — be notified if a breach affects the privacy of your unsecured PHI.
• Revoke authorization — withdraw any authorization you previously gave, in writing.

To exercise any of these rights, contact our Privacy Official below.

Our duties

We are required by law to maintain the privacy and security of your PHI, to notify you following a breach of unsecured PHI, to follow the terms of the Notice currently in effect, and to obtain your authorization for uses and disclosures not described here. We reserve the right to change this Notice and to make the new terms effective for all PHI we maintain. If we make a material change, we will post the revised Notice on our website and update the effective date.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, D.C. 20201; 1-877-696-6775; hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.

Contact — Privacy Official

Privacy Officer
Body Good, LLC
290 NW 165th St M-500, Miami, Florida 33169
Email: support@bodygoodstudio.com
Phone: 305-422-9921