Notice of Privacy Practices

Health Insurance Portability and Accountability Act (HIPAA)

Effective Date: September 23, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. What this Notice is

At Magi’s Infusions LLC, we understand that health information about you is personal. Federal law (HIPAA) requires us to protect your health information and to tell you how we may use and share it. We create a record of the care and services you receive from us. That record helps us provide quality care and meet legal requirements. This Notice applies to all records of your care that we create or keep (paper or electronic), describes how we may use and disclose your information, explains your rights, and describes our legal duties.

Protected health information (PHI) is information about you—including demographic information—that may identify you and that relates to your past, present, or future physical or mental health or condition, or related health care services. Electronic PHI is sometimes called ePHI.

Magi’s Infusions LLC takes reasonable steps to protect your verbal, written, and electronic health information, and uses administrative, technical, and physical safeguards to help prevent unintended or unauthorized use, disclosure, modification, or loss—while keeping information available to the providers who care for you.

When Magi’s Infusions LLC uses vendors that create, receive, maintain, or transmit PHI on our behalf, we do so under written business associate agreements (BAAs) that require those vendors to protect your PHI as required by HIPAA.

Florida privacy overlay. Where Florida law is more protective of your information than HIPAA, Magi’s Infusions LLC follows Florida law. In particular, Florida Statute § 456.057 is often stricter than HIPAA about discussing your medical condition or furnishing copies of your records to third parties without your written authorization, except in listed exceptions. See Section 8 for how you may give written permission for family or friends.

2. How we use and disclose your PHI

Your PHI may be used and disclosed by Magi’s Infusions LLC staff and by others involved in delivering your care. We may also use and disclose PHI to bill and collect payment and to support our health care operations. The examples below are common types of uses and disclosures we are permitted to make. They are not a complete list.

Treatment. We use and share PHI to provide, coordinate, and manage your care and related services (including with other providers involved in your treatment). Example: we may share your treatment notes and medication history with your primary care provider or a specialist coordinating your care.

Payment. We use and share PHI to bill you or a payer, obtain payment, and manage claims. Example: we may send claim information to your health insurer or share limited billing details with a card processor to collect payment for services.

Health care operations. We use PHI for quality improvement, staff training, licensing, business planning, and other activities that support how we run our practice. Example: we may use de-identified or limited chart information for staff training or quality review.

Appointment and care reminders. We may contact you about appointments, follow-up care, or similar reminders.

Uses and disclosures that require your written authorization. For uses and disclosures not otherwise allowed by law, we will ask for your written authorization before we proceed. Under HIPAA (§ 164.508), we must obtain your written authorization before we: (1) use or disclose PHI for most marketing purposes; (2) sell your PHI; or (3) use or disclose psychotherapy notes (if any). Magi’s Infusions LLC does not maintain psychotherapy notes as defined by HIPAA; if that ever changes, we would obtain your written authorization before using or disclosing them, except as HIPAA otherwise permits. You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

Required by law. We may use or disclose PHI when a law requires us to do so.

Public health activities. We may disclose PHI for public health purposes (for example, reporting certain diseases or injuries, or vital events, as required or permitted).

Communicable diseases. We may disclose PHI as required for reporting or controlling communicable diseases.

Health oversight. We may disclose PHI to health oversight agencies for audits, investigations, inspections, or licensing.

Abuse or neglect. We may disclose PHI if we reasonably believe a person is a victim of abuse, neglect, or domestic violence, as required or permitted by law.

FDA-related disclosures. We may disclose PHI related to FDA-regulated products (for example, adverse events or product tracking) as required or permitted.

Legal proceedings. We may disclose PHI in response to a court or administrative order, or certain other lawful process, as allowed by law.

Law enforcement. We may disclose PHI to law enforcement for specific purposes allowed by law (for example, responding to certain warrants or limited requests about a crime victim).

Research. Under limited conditions, we may use or disclose PHI for research, often with special approvals or de-identification.

Others involved in your care. Unless you object, we may share limited PHI with a family member, friend, or other person you identify who is involved in your care or payment for care, when it is in your best interest (especially if you are not present or cannot agree). Florida law may require written authorization in some situations—see Section 8 and the Florida overlay above.

3. Your rights regarding your health information

You have the following rights with respect to your PHI. You may exercise them by contacting us using the information in Section 7.

Inspect and copy. You may ask to look at or get a copy of PHI we maintain in a designated record set (with limited exceptions). If we maintain your PHI electronically in a designated record set and you request an electronic copy, we will provide an electronic copy of the ePHI in the form and format you request if it is readily producible; otherwise we will agree with you on a readable electronic form and format. We may charge a reasonable, cost-based fee as allowed by law.

Request restrictions. You may ask us to limit how we use or share your PHI for treatment, payment, or operations. We are not always required to agree (except in certain situations involving disclosures to a health plan for payment/operations when you paid in full out of pocket).

Restrict certain releases. You may ask us to restrict release of information for certain services in situations where the law gives you that right.

Confidential communications. You may ask us to contact you in a specific way or at a specific location (for example, only by email or at a work number).

Amend your PHI. You may ask us to correct PHI you believe is incomplete or incorrect. We may deny the request in certain cases and will tell you why in writing.

Accounting of disclosures. You may ask for a list of certain disclosures of your PHI that we made, subject to legal limits and time frames.

Breach notification. If a breach of unsecured PHI affecting you occurs, you have the right to be notified as required by law.

Paper copy of this Notice. You may ask for a paper copy of this Notice at any time, even if you agreed to receive it electronically. The current Notice is available on magisinfusions.com.

4. Our legal duties

Magi’s Infusions LLC is required by law to:

(a) Maintain the privacy of PHI in accordance with applicable law.

(b) Give you this Notice of our legal duties and privacy practices with respect to PHI about you.

(c) Notify you following a breach of unsecured PHI, as required by HIPAA’s Breach Notification Rule.

(d) Abide by the terms of the Notice that is currently in effect.

If Magi’s Infusions LLC utilizes certified electronic health record technology, Florida Statute § 408.051 requires, in part, that in addition to the requirements in 45 C.F.R. part 160 and subparts A and C of part 164, a health care provider that utilizes certified electronic health record technology must ensure that all patient information stored in an offsite physical or virtual environment, including through a third-party or subcontracted computing facility or an entity providing cloud computing services, is physically maintained in the continental United States or its territories or Canada. This applies to all qualified electronic health records that are stored using any technology that can allow information to be electronically retrieved, accessed, or transmitted.

5. Your medical records

The original copy of your paper and/or electronic medical record is the property of Magi’s Infusions LLC. You may request a copy of your records (including for transfer) by completing a medical records release form. Under Florida law (including Fla. Stat. § 456.057), Magi’s Infusions LLC will furnish copies in a timely manner. Any fee Magi’s Infusions LLC charges is limited to a reasonable, cost-based charge for copying and postage only (and, if applicable, preparing an explanation or summary if you agree). Magi’s Infusions LLC will not refuse to provide you with copies of your records solely because treatment bills are unpaid. As Magi’s Infusions LLC’s operational target—and without delaying records needed for urgent or life-threatening care—we generally aim to prepare and send requested records within about 14 business days from the date of a complete request.

6. Changes to this Notice

Magi’s Infusions LLC provides care through mobile and off-site services and does not maintain a fixed walk-in clinic suite. We reserve the right to change this Notice. When we do, the revised Notice will apply to PHI we already have as well as new information, as permitted by law. We will make the current Notice available on request, through magisinfusions.com, and at care encounters. The Notice will show the effective date.

7. Questions, rights requests, and complaints

If you have a question about this Notice, wish to exercise your rights, or believe your privacy rights have been violated, contact us in writing (or by the channels below). You will not be penalized or retaliated against for filing a complaint.

Privacy Officer contact:

Privacy Officer, Magi’s Infusions LLC, 754-227-1617, info@magisinfusions.com

Practice: Magi’s Infusions LLC, Florida

Website: https://magisinfusions.com

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). Information on how to file an OCR complaint is available at https://www.hhs.gov/hipaa/filing-a-complaint/ (or search “HHS OCR HIPAA complaint”). For general HIPAA information you may also visit https://www.hhs.gov/hipaa/.

8. Permission to share your health information (optional)

If you would like us to discuss your health information with a spouse, partner, family member, or other person, call us at 754-227-1617 and we will give you a written permission form to sign. You may update or revoke this permission at any time by contacting us.