PRIVACY POLICY AND NOTICE OF PRIVACY PRACTICES

Effective Date: April 10, 2026

Everstrong Men’s Health / Everstrong Medical Corporation (“we,” “us,” “our,” or the “Practice”) is committed to protecting the privacy of your personal information and your Protected Health Information (“PHI”). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website (everstrongmenshealth.la), use our services, or communicate with us. It also serves as our Notice of Privacy Practices required under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

By using our website or services, you acknowledge that you have read and understand this Privacy Policy.

Part A: Website Privacy Policy

1. Information We Collect

We may collect the following categories of information:

Personal Identifiers: Name, email address, phone number, and mailing address, collected when you submit a contact form, book an appointment, or communicate with us.

Health-Related Information: Information you voluntarily provide through intake forms, appointment booking, or the message field on our contact page. Please note that information submitted through our website contact form is not encrypted to HIPAA standards. Do not submit sensitive medical information through the contact form. Use our patient portal or contact us by phone for health-related communications.

Usage Data: We may collect non-identifying information about how you interact with our website, such as pages visited, time spent on pages, and referring URLs.

2. How We Use Your Information

We use the information we collect to respond to your inquiries and schedule appointments; to provide and coordinate your medical care; to process payments and manage your membership; to comply with legal and regulatory obligations; and to improve our website and services.

3. How We Share Your Information

We do not sell your personal information. We may share information with our third-party service providers who assist in operating our practice (for example, our appointment scheduling platform, Hint Health), but only to the extent necessary to provide services and subject to appropriate agreements. We may also disclose information when required by law, regulation, or legal process.

4. Third-Party Services

Our website uses the following third-party services:

Hint Health (appointment booking): When you book an appointment through our scheduling system, your information is collected and processed by Hint Health pursuant to their privacy policy. We maintain a Business Associate Agreement with Hint Health as required by HIPAA.

Google Fonts: Our website loads fonts from Google’s servers. Google may collect your IP address in connection with this service.

5. Cookies and Tracking

Our website does not use cookies or similar tracking technologies.

6. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”), including the right to know what personal information we collect and how it is used; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; and the right to non-discrimination for exercising your privacy rights. Note that HIPAA-covered health information is exempt from the CCPA/CPRA. To exercise your California privacy rights regarding non-health information, contact us at info@everstrongmenshealth.la or (909) 840-0500.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security of information transmitted through our website.

8. Children’s Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when the policy was last revised. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

Part B: HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Duty to Protect Your Health Information

We are required by law to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, notify you in the event of a breach of your unsecured PHI, and abide by the terms of the Notice currently in effect.

How We May Use and Disclose Your Health Information

We may use and disclose your PHI for the following purposes without your written authorization:

Treatment: We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. For example, we may share your information with a consulting physician, laboratory, pharmacy, or other healthcare provider involved in your care.

Payment: We may use and disclose your PHI to bill and collect payment for the services we provide. This may include contacting your insurance company (if applicable), preparing billing statements, or sharing information with a collections agency.

Healthcare Operations: We may use and disclose your PHI for our internal operations, such as quality improvement, staff training, compliance activities, and business management.

As Required by Law: We will disclose your PHI when required to do so by federal, state, or local law.

Public Health Activities: We may disclose your PHI to public health authorities for purposes such as preventing or controlling disease, injury, or disability; reporting adverse events related to medications or medical devices; and reporting suspected abuse or neglect.

Health Oversight Activities: We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure actions.

Judicial and Administrative Proceedings: We may disclose your PHI in the course of a judicial or administrative proceeding in response to a court order, subpoena, or other lawful process.

Law Enforcement: We may disclose your PHI to law enforcement officials for certain law enforcement purposes, including in response to a court order or to report certain types of wounds or injuries.

Coroners, Medical Examiners, and Funeral Directors: We may disclose your PHI to a coroner, medical examiner, or funeral director as authorized by law.

Organ and Tissue Donation: If you are an organ or tissue donor, we may disclose your PHI to the relevant procurement organization.

Research: Under certain circumstances, we may use or disclose your PHI for research purposes, subject to approval by an institutional review board or privacy board.

To Avert a Serious Threat: We may use or disclose your PHI if we believe in good faith that disclosure is necessary to prevent a serious and imminent threat to your health or safety or the health or safety of others.

Workers’ Compensation: We may disclose your PHI as authorized by workers’ compensation laws.

Uses and Disclosures Requiring Your Written Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice, including marketing purposes (except for face-to-face communications and promotional gifts of nominal value), sale of your PHI, and most uses of psychotherapy notes (if applicable). You may revoke your authorization in writing at any time, except to the extent we have already acted in reliance on it.

Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI:

Right to Access: You have the right to inspect and obtain a copy of your PHI maintained in our records. We may charge a reasonable fee for copying costs. To request access, submit a written request to our Privacy Officer at the address below.

Right to Amend: You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. We may deny your request in certain circumstances, but we will provide a written explanation if we do.

Right to an Accounting of Disclosures: You have the right to request a list of disclosures of your PHI that we have made for purposes other than treatment, payment, or healthcare operations.

Right to Request Restrictions: You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, except that we must agree to a restriction on disclosure to a health plan if the disclosure is for payment or healthcare operations and pertains to a service for which you have paid in full out of pocket.

Right to Request Confidential Communications: You have the right to request that we communicate with you about your PHI in a certain way or at a certain location (for example, by mail only or at a specific phone number).

Right to a Paper Copy of This Notice: You have the right to obtain a paper copy of this Notice at any time, even if you have agreed to receive it electronically.

Right to Be Notified of a Breach: You have the right to be notified in the event that we discover a breach of your unsecured PHI.

How to Exercise Your Rights or File a Complaint

To exercise any of these rights, or if you believe your privacy rights have been violated, you may contact:

Privacy Officer: Frances Antoinette Pobre

Everstrong Medical Corporation

615 E. Foothill Blvd., Suite D, San Dimas, CA 91773

Phone: (909) 840-0500

Email: info@everstrongmenshealth.la

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr, by calling 1-800-368-1019, or by writing to 200 Independence Avenue SW, Washington, DC 20201. We will not retaliate against you for filing a complaint.