Effective Date: October 28, 2025

Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

BeWell Grace Medical, LLC provides telehealth-only virtual care in Florida. We do not offer in-person visits or walk-ins. Patients must be physically located in Florida at the time of the visit. BeWell Grace Medical is self-pay only.

Our HIPAA relationship and privacy commitment

BeWell Grace Medical, LLC (“BeWell Grace Medical,” “we,” “us,” or “our”) is a HIPAA-covered entity. We are committed to protecting your protected health information (“PHI”) and safeguarding your privacy in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable Florida laws.

This Notice applies to BeWell Grace Medical and the clinicians and workforce members involved in providing your telehealth care. PHI may be shared among authorized individuals for treatment, healthcare operations, and other purposes permitted by law.

Your information. Your rights. Our responsibilities.

• Information we collect about you
• How we use and share your information
• When we must share information
• When we need your authorization
• Your rights regarding your PHI
• How we protect your information
• Changes to this Notice

Information we collect about you

To provide telehealth services, we collect PHI that identifies you and relates to your health or healthcare. This information is collected and stored through our secure clinical systems and patient portal.

• Information about your health condition and symptoms
• Information about services provided to you
• Information related to payment for services

PHI collected from you

When you receive care, you may provide information such as your name, contact details, medical history, and symptoms during video visits, phone calls, or secure messages. This information is handled through the CharmHealth Patient Portal.

PHI collected from third parties

We may receive PHI from other healthcare providers or pharmacies when needed for coordination of care, prescription fulfillment, or continuity of treatment, as permitted by law.

PHI collected automatically

For security, auditing, and compliance purposes, limited technical information such as device identifiers, IP address, and access timestamps may be collected when you use our secure telehealth platforms or patient portal.

How we use and share your PHI

We use and disclose PHI only as permitted or required by law. Common uses and disclosures include:

Treatment

PHI may be shared among healthcare professionals involved in your care to support diagnosis, treatment decisions, referrals, or prescriptions.

Healthcare operations

We may use PHI for internal operations such as quality assurance, compliance activities, audits, credentialing, and business management. Certain vendors (“business associates”) may access PHI to support these functions and are required by contract to protect your information.

Other permitted disclosures

• Public health and safety reporting as required by law
• Health oversight activities such as audits or investigations
• Judicial or administrative proceedings when legally required
• Law enforcement purposes when mandated
• To prevent or reduce a serious threat to health or safety

When we need your authorization

We will not use or disclose your PHI for purposes not described in this Notice without your written authorization. You may revoke an authorization in writing at any time, except where action has already been taken in reliance on it.

Your rights regarding your PHI

• Access: You may request access to or copies of your medical records through the Patient Portal.
• Amendment: You may request corrections to PHI you believe is inaccurate or incomplete.
• Restrictions: You may request limits on certain uses or disclosures of your PHI.
• Confidential communications: You may request contact through specific methods.
• Accounting of disclosures: You may request a list of certain disclosures made in the past six years.
• Paper copy: You may request a paper copy of this Notice at any time.
• Complaints: You may file a complaint without retaliation.

How we protect your information

We maintain administrative, technical, and physical safeguards designed to protect PHI from unauthorized access, disclosure, or misuse. Access to PHI is limited to authorized individuals only.

Changes to this Notice

We may update this Notice from time to time. The current version will always be available on this page and will apply to all PHI we maintain.

Contact information

If you have questions about this Notice, wish to exercise your rights, or want to file a complaint, contact:

• Email: [email protected]
• Phone: 1-407-777-3787 ext. 100

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights: https://www.hhs.gov/ocr/privacy/hipaa/complaints/