FULL HIPAA PRIVACY POLIC!

Effective Date: April 2026 Entity: CCM Medical Services, LLC

CCM Medical Services, LLC (“we,” “our,” or “the Practice”) is committed to protecting your health information in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA). This Privacy Policy explains how we use, disclose, and safeguard your Protected Health Information (PHI).

PHI includes any information that identifies you and relates to your past, present, or future physical or mental health, healthcare services, or payment for healthcare services.

Examples include:

• Medical history, diagnoses, treatment plans
• Telehealth visit notes
• Lab results and prescriptions
• Billing and insurance information
• Contact information and demographic data

We use PHI to provide, coordinate, and manage your healthcare. This includes telehealth visits, prescriptions, referrals, and communication with other providers involved in your care.

We may use PHI to bill and collect payment for services, including communicating with insurance companies, pharmacies, and billing partners.

We use PHI for quality improvement, staff training, compliance activities, audits, and administrative functions.

We may disclose PHI when required by federal, state, or local law, including public health reporting, abuse reporting, or law enforcement requests.

Any use or disclosure not described in this policy requires your written authorization. You may revoke this authorization at any time.We have a team of specialists who provide advanced care for complex health conditions. Our specialties include cardiology, neurology, and more.

You may request copies of your medical records in paper or electronic form.

You may request corrections to your PHI if you believe it is inaccurate or incomplete.

You may request limits on how your PHI is used or disclosed.

You may request that we contact you at a specific phone number, email, or mailing address.

You may request a list of certain disclosures we have made of your PHI.

You may request a copy at any time.We believe that prevention is key to maintaining good health. Our preventive care services include annual physicals, immunizations, and cancer screenings.

We are required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this Privacy Policy
• Notify you if a breach occurs that may have compromised your PHI
• Follow the terms of this notice

We use secure, encrypted systems for telehealth, messaging, EMR access, and payment processing. Only authorized personnel may access PHI.

We use HIPAA‑compliant platforms for:

• Virtual visits
• Messaging
• Prescription processing
• Intake forms
• Patient portal access

While we take every precaution to secure electronic communication, no system is 100% risk‑free. By using telehealth services, you acknowledge these risks.

We may update this Privacy Policy at any time. Updates will be posted on our website with a revised effective date.