POLICY

HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. ‐ Please review it carefully. This Notice of Privacy Practices is NOT an authorization.

Your Rights When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.

Get an electronic or paper copy of your medical record. ‐ You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. Ask us how to do this. We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost‐based fee

Ask us to correct your medical record ‐ You can ask us to correct health information about you that you think is incorrect or incomplete. Ask us how to do this. We may say "no" to your request, but we'll tell you why in writing within 60 days.

Request confidential communications ‐ You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will say "yes" to all reasonable requests.

Ask us to limit what we use or share ‐ You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request, and we may say "no" if it would affect your care. If you pay for a service or health care item out‐of‐pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say "yes" unless a law requires us to share that information.

Get a list of those with whom we've shared information ‐ You can ask for a list (accounting) of the times we've shared your health information for six years prior to the date you ask, who we shared it with, and why. We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We'll provide one accounting a year for free but will charge a reasonable, cost‐based fee if you ask for another one within 12 months.

Get a copy of this privacy notice ‐ You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.

Choose someone to act for you ‐ If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority and can act for you before we take any action.

File a complaint if you feel your rights are violated ‐ You can complain if you feel we have violated your rights by contacting us using the information on page 1. You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1‐ 877‐696‐6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. We will not retaliate against you for filing a complaint.

Your Choices For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.

In these cases, you have both the right and choice to tell us to: Share information with your family, close friends, or others involved in your care; Share information in a disaster relief situation; Include your information in a hospital directory; Contact you for fundraising efforts.

**If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety. **

In these cases, we never share your information unless you give us written permission: Marketing purposes; Sale of your information; Most sharing of psychotherapy notes.

Our Uses and Disclosures – How do we typically use or share your health information? We typically use or share your health information in the following ways:

Treat you ‐ We can use your health information and share it with other professionals who are treating you. Example: A doctor treating you for an injury asks another doctor about your overall health condition.

Run our organization ‐ We can use and share your health information to run our practice, improve your care,

and contact you when necessary. Example: We use health information about you to manage your treatment and services.

Bill for your services ‐ We can use and share your health information to bill and get payment from health plans or other entities. Example: We give information about you to your health insurance plan so it will pay for your services.

We are allowed or required to share your information in other ways – usually in ways that contribute to the public good, such as public health, and research. We must meet any conditions in the law before we can share your information for these purposes. For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html.

Do research – We can use or share your information for health research.

Comply with the Law – we will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.

Organ & tissue donation request – We can share health information about you with organ procurement organizations.

Address workers compensation, law enforcement and other government requests – We can use or share information about you: for Workers Compensation Claims; For Law Enforcement purposes or with a law enforcement official; with health oversight agencies for activities authorized by law; for special government functions such as military, national security and presidential protective services.

Respond to lawsuits and legal actions – We can share health information about you in response to a court or administrative order or in response to a subpoena.

Our Responsibilities – We are required by law to maintain the privacy and security of, and provide individuals with, this notice of our legal duties and privacy practices with respect to your protected health information. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information. We must follow the duties and privacy practices described in this notice and give you a copy of it. We will not use or share your information other than as described her unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumer/noticepp.html.

CRISP Health Information Exchange

Rehab 2 Perform has chosen to participate in the Chesapeake Regional Information System for our Patients (“CRISP”), a regional health information exchange (“HIEs”) serving Maryland. CRISP is also affiliated with and shares data with other HIEs, including those, in Alaska, Connecticut, D.C., Maryland, and West Virginia. As permitted by law, your health information will be shared with this exchange in order to provide faster access, better coordination of care and assist providers and public health officials in making more informed decisions. You may “opt-out” and disable access to your health information available through CRISP by calling 1-877-952-7477 or completing and submitting an Opt- Out form to CRISP by mail, fax or through their website at www.crisphealth.org. Public health reporting and Controlled Dangerous Substances information, as part of the Maryland Prescription Drug Monitoring Program (“PDMP”), will still be available to providers.

Changes to the terms of this notice – We can change the terms of this, and the changes will apply to all information we have for you. The new notice will be available upon request, in our office and here on our website. This notice of privacy applies but is not limited to the following organizations: Aetna, BlueCross BlueShield (CareFirst), Cigna/ASH, Medicare, United HealthCare, Tricare.

Rehab 2 Perform, LLC Headquarters location: 20501 Seneca Meadows Pkwy, Ste. 100 Germantown, MD 20876

If you have any questions in reference to this form, please ask to speak with our HIPAA Compliance Officer in person or by phone: Gyn Stackhouse, Director of Administrative Operations/HIPAA Compliance Officer Office 301‐798‐4838 or email HR@Rehab2Perform.com

PRIVACY POLICY

Introduction

At Rehab 2 Perform (the “Company” or “We”), we respect your privacy and are committed to protecting it through our compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide when you visit this website (our “Website”) and our practices for collecting, using, maintaining, protecting and disclosing that information.

This policy applies to information we collect:

On this Website.

In e-mail, text and other electronic messages between you and this Website.

Through mobile and desktop applications you download from this Website, which provide dedicated non-browser-based interaction between you and this Website.

When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.

It does not apply to information collected by:

us offline or through any other means, including on any other website operated by Company or any third party (including our affiliates and subsidiaries); or

any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or on the Website.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you agree to this privacy policy. This policy may change from time to time. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children Under the Age of 13

Our Website is not intended for children under 13 years of age. No one under age 13 may provide any personal information to or on the Website. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website or on or through any of its features/register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website or provide any information about yourself to us, including your name, address, telephone number, e-mail address or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us via our contact us link.

Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Website, including information:

by which you may be personally identified, such as name, postal address, e-mail address, telephone number or ANY OTHER INFORMATION THE WEBSITE COLLECTS THAT IS DEFINED AS PERSONAL OR PERSONALLY IDENTIFIABLE INFORMATION UNDER AN APPLICABLE LAW (“personal information”);

that is about you but individually does not identify you, and/or

about your internet connection, the equipment you use to access our Website and usage details.

We collect this information:

Directly from you when you provide it to us.

Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses and information collected through cookies, web beacons and other tracking technologies.

From third parties, for example, our business partners.

Information You Provide to Us.

The information we collect on or through our Website may include:

Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website, subscribing to our service, posting material or requesting further services. We may also ask you for information when you report a problem with our Website.

Records and copies of your correspondence (including e-mail addresses), if you contact us.

Your responses to surveys that we might ask you to complete for research purposes.

Details of transactions you carry out through our Website and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website.

Your search queries on the Website.

You also may provide information to be published or displayed (hereinafter, “posted”) on public areas of the Website, or transmitted to other users of the Website or third parties (collectively, “User Contributions”). Your User Contributions are posted on and transmitted to others at your own risk. Although we limit access to certain pages/you may set certain privacy settings for such information by logging into your account profile, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Website with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.

Information We Collect Through Automatic Data Collection Technologies.

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions and patterns, including:

Details of your visits to our Website, including traffic data, location data, and other communication data and the resources that you access and use on the Website.

Information about your computer and internet connection, including your IP address, operating system and browser type.

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). The information we collect automatically is statistical data and does not include personal information, but we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

Estimate our audience size and usage patterns.

Store information about your preferences, allowing us to customize our Website according to your individual interests.

Speed up your searches.

Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.

Flash Cookies. Certain features of our Website may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from and on our Website. Flash cookies are not managed by the same browser settings as are used for browser cookies.

Web Beacons. Pages of our the Website may contain small electronic files known as web beacons (also referred to as clear gifs. pixel tags and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an e-mail and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

We do not collect personal Information automatically, but we may tie this information to personal information about you that we collect from other sources or you provide to us.

Third-party Use of Cookies and Other Tracking Technologies.

Some content or applications, including advertisements, on the Website are served by third-parties, including advertisers, ad networks and servers, content providers and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our website. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

To present our Website and its contents to you.

To provide you with information, products or services that you request from us.

To provide you with information about our services

To provide you with notices about your account/subscription, including expiration and renewal notices.

To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.

To notify you about changes to our Website or any products or services we offer or provide though it.

To allow you to participate in interactive features on our Website.

In any other way we may describe when you provide the information.

To fulfill any purpose for which you provide it.

For any other purpose with your consent.

We may use the information we have collected from you to enable us to display advertisements to our advertisers’ target audiences. Even though we do not disclose your personal information for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

To our subsidiaries and affiliates.

To contractors, service providers and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.

To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by the Company about our Website users is among the assets transferred.

To third parties to market their products or services to you if you have consented to these disclosures. We contractually require these third parties to keep personal information confidential and use it only for the purposes for which we disclose it to them.

To fulfill the purpose for which you provide it. For example, if you give us an e-mail address to use the “e-mail a friend” feature of our Website, we will transmit the contents of that e-mail and your e-mail address to the recipients.

For any other purpose disclosed by us when you provide the information.

With your consent.

We may also disclose your personal information:

To comply with any court order, law or legal process, including to respond to any government or regulatory request.

To enforce or apply our terms of use and other agreements, including for billing and collection purposes.

If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website.

Accessing and Correcting Your Information

You may send us an e-mail via our contact link to request access to, correct or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

If you delete your User Contributions from the Website, copies of your User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Website users. Proper access and use of information provided on the Website, including User Contributions, is governed by our terms of use.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you by e-mail to the e-mail address specified in your account and/or through a notice on the Website home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable e-mail address for you, and for periodically visiting our Website and this privacy policy to check for any changes.

Analytics

We may use third-party Service providers to monitor and analyze the use of our Service.

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

EmoryDay

Their Privacy Policy can be viewed at https://www.emoryday.com/privacy-policy

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact via our Contact Us link.

Thank You for Visiting the Website.

Effective and updated 6/19/2023

EMOTIONAL SUPPORT & SERVICE ANIMAL POLICY

Except as set forth below, the Company, Rehab 2 Perform, prohibits any patient, guest, or other invitee from bringing his or her pet into the Company’s place of business. Included in this no pet policy are “emotional support animals.” The Company, consistent with the law, defines an “emotional support animal” as an animal that provides an individual with a generalized sense of well-being, safety, or comfort, but is not otherwise trained to perform specific tasks or duties on behalf of the individual. If an individual brings an animal into the Company’s place of business that is a pet or falls within the above definition of “emotional support animal,” the Company reserves the right to request the individual remove the animal from its premises. If the Company requests that an individual remove his or her animal from its place of business, it will still offer its services to the individual in the absence of the animal.

The owner and/or handler of an animal that is brought into the Company’s place of business, regardless of whether the animal is a pet or an emotional support animal, is liable for any and all damages that are caused by the animal while on the Company’s premises.

Notwithstanding the above, the Company will allow any patient, guest, or other invitee with a qualifying disability under the Americans with Disabilities Act, who requires the use of a service animal, to bring his or her service animal into the Company’s place of business, except as otherwise stated in this policy. “Service animal,” consistent with the law and for purposes of this policy means a guide dog, signal dog, or other animal that is individually trained to do work or perform tasks for the benefit of an individual with a disability.

Unless it is apparent that the animal is a service animal, the Company reserves the right to make the following two inquiries regarding an animal that is brought into its place of business:

(1) Is the animal required because of a disability?

(2) What work or task has the animal been trained to perform?

The Company also reserves the right to request that an individual with a disability remove his or her service animal from the Company’s place of business in the following two circumstances:

(1) The service animal is out of control and the animal’s handler does not take effective action to control it; or

(2) The service animal is not housebroken.

In the event that another patient, guest or invitee is either allergic to a service animal or has a phobia of such service animal, the Company will do its best to accommodate the needs of both parties up to and including assigning the parties to different locations within its offices.

If the Company requests that an individual with a disability remove his or her service animal from its place of business, it will still offer its services to the individual with a disability in the absence of the service animal.

The Company will allow a service animal trainer accompanied by an animal being trained or raised as a service animal into its place of business but reserves the right to exclude the animal if allowing its presence would create a clear danger of a disturbance or physical harm to an individual at its facilities.

The owner and/or handler of a service animal that is brought into the Company’s place of business is liable for any and all damages that are caused by the service animal while on its premises.