Notice of Privacy Practices

Effective Date: July 15, 2026

Our Commitment to Your Privacy

Vanguard Physicians Concierge PLLC (“Vanguard,” “we,” “us,” or “our”) is required by law to maintain the privacy of your protected health information (“PHI”), to provide you with this Notice describing our legal duties and privacy practices, and to notify affected individuals following a breach of unsecured PHI. We are required to abide by the terms of this Notice while it is in effect.

How We May Use and Disclose Your Health Information

Treatment. We may use and disclose your PHI to provide, coordinate, or manage your care and related services, including sharing information with other physicians, specialists, laboratories, imaging centers, or pharmacies involved in your care.

Payment. We may use and disclose your PHI to bill and collect payment for services, including communicating with your HSA administrator or other payment sources as applicable.

Health Care Operations. We may use and disclose your PHI for activities such as quality assessment, staff training, compliance, and practice management.

Other Permitted or Required Uses and Disclosures Without Your Authorization, subject to conditions set by law:

• As required by law, including reporting as required by state or federal statute.
• For public health activities, such as reporting disease, injury, birth, or death, or to prevent or control disease.
• To report suspected abuse, neglect, or domestic violence to the appropriate authority.
• For health oversight activities, such as audits, investigations, and inspections by the Texas Medical Board or HHS.
• For judicial and administrative proceedings, in response to a court order, subpoena, or other lawful process.
• For law enforcement purposes, under specific and limited circumstances required by law.
• To coroners, medical examiners, or funeral directors as necessary.
• For organ, eye, or tissue donation purposes.
• To avert a serious threat to health or safety, consistent with applicable law.
• For workers’ compensation purposes, as authorized by law.

Uses and Disclosures That Require Your Written Authorization

Except as described above, we will not use or disclose your PHI without your written authorization. This includes:

• Most uses and disclosures of psychotherapy notes (if applicable).
• Uses and disclosures of your PHI for marketing purposes.
• Disclosures that constitute a sale of your PHI.
• Any other use or disclosure not described in this Notice.

You may revoke a written authorization at any time, except to the extent we have already relied on it.

Special Protections for Substance Use Disorder Records

If you receive treatment related to a substance use disorder that is subject to federal confidentiality protections under 42 U.S.C. § 290dd-2 and its implementing regulations at 42 C.F.R. Part 2, those records receive heightened protection beyond standard HIPAA safeguards:

• We generally may not use or disclose records identifying you as having sought or received substance use disorder treatment without your specific written consent, except in narrow circumstances defined by law (such as a medical emergency or a qualifying court order issued after notice and a hearing).
• These records generally may not be used against you in any civil, criminal, administrative, or legislative proceeding without your written consent or a qualifying court order.
• Once your information has been disclosed with your consent, the recipient may be permitted to redisclose it, and it may no longer be protected by this Notice or by Part 2’s confidentiality rules.
• We do not use substance use disorder treatment records for fundraising purposes.

Your Rights Regarding Your Health Information

Right to Request Restrictions. You may ask us not to use or disclose certain PHI for treatment, payment, or health care operations. We are not required to agree, except that we must agree to a restriction on disclosure to a health plan for payment or operations purposes if the PHI relates solely to a service you paid for out of pocket in full.

Right to Confidential Communications. You may ask us to communicate with you in a specific way or at a specific location. At your request, we may communicate with you by email, text message, or other electronic means. While we take reasonable steps to protect your information, electronic communications may involve some privacy and security risks.

Right to Inspect and Copy. You may ask to inspect and obtain a copy of your PHI, generally within 30 days of a written request. We may charge a reasonable, cost-based fee.

Right to Amend. You may ask us to amend your PHI if you believe it is incorrect or incomplete. We may deny the request under certain circumstances, and you have the right to submit a statement of disagreement.

Right to an Accounting of Disclosures. You may request a list of certain disclosures we have made of your PHI, generally covering the six years prior to your request, excluding disclosures for treatment, payment, operations, and certain other categories excluded by law.

Right to a Paper Copy. You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.

Right to Choose Someone to Act for You. If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your rights and make choices about your health information.

Right to File a Complaint. If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights, at 200 Independence Avenue, S.W., Washington, D.C. 20201, by calling 1-877-696-6775, or online at www.hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.

Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as any PHI we receive in the future. The current Notice is available upon request and, if we maintain a website, will be posted there.

Contact Information / Privacy Officer

Questions, requests, or complaints regarding this Notice or your health information should be directed to:

Privacy Officer, Vanguard Physicians Concierge PLLC

3201 Dallas Parkway Suite 200, PMB A1003
Frisco, TX 75034
(214) 433-1867
contact@vanguardconciergepllc.com