Privacy Policy.

NOTICE OF PRIVACY PRACTICES

RGH ENTERPRISES, LLC, inclusive of its subsidiaries, (collectively, “RGH Enterprises”) is committed to protecting the

confidentiality of its patients’ medical information. References herein to “RGH Enterprises”, “we”, “us” and “our” include

(i) the designated health care components of RGH Enterprises, LLC that are performing services as a HIPAA covered entity (as defined below), namely RGH Enterprises, LLC d/b/a Edgepark Medical Supplies; and (ii) the members of its affiliated covered entity (“RGH ACE”). An affiliated covered entity is a group of organizations under common ownership or control who designate themselves as a single covered entity for purposes of compliance with the Health Insurance Portability and Accountability Act of 1996, the Health Information Technology for Economic and Clinical Health Act and their respectiveimplementing regulations, as amended from time to time (collectively, “HIPAA”). RGH Enterprises, its employees, workforce members and members of the RGH ACE who are involved in providing and coordinating health care as HIPAA covered entities are all bound to follow the terms of this Notice of Privacy Practices (“Notice”). The members of the RGH ACE will share medical information among each other for purposes of treatment, payment and health care operations of the individual entities and/or the RGH ACE, and as permitted by HIPAA and this Notice. For a list of RGH ACE participating entities, which may be amended from time to time, you must submit your request in writing.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY USED AND DISCLOSED AND HOW YOU MAY GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. IN ADDITION, THIS NOTICE PROVIDES INFORMATION ABOUT YOUR RIGHTS RELATED TO YOUR MEDICAL INFORMATION AND HOW TO FILE A COMPLAINT CONCERNING A VIOLATION OF THE PRIVACY OR SECURITY OF YOUR MEDICAL INFORMATION OR OF YOUR RIGHTS CONCERNING YOUR MEDICAL INFORMATION. YOU HAVE A RIGHT TO A COPY OF THIS NOTICE AND TO DISCUSS THIS NOTICE WITH RGH ENTERPRISES IF YOU HAVE ANY QUESTIONS.

We create a record of the medical services and products you receive through RGH Enterprises, as this record is needed to provide you with quality care and to comply with certain legal requirements. This Notice applies to all records of your care in the possession of RGH Enterprises, whether created by RGH Enterprises or obtained from other health care entities with whom you are associated. Those health care entities may have different policies or notices regarding the use and disclosure of your medical information.

OUR RESPONSIBILITIES

As required by law, we must (i) maintain the privacy of your medical information; (ii) provide you with this Notice stating our legal duties and privacy practices with respect to your medical information; (iii) abide by the terms of this Notice; and (iv) notify you following a breach of your medical information that is not secured in accordance with certain security standards.

USES AND DISCLOSURES WITHOUT YOUR AUTHORIZATION

The following categories describe all the ways that RGH Enterprises may use and disclose medical information, except where prohibited by federal or state laws that require special privacy protections. However, not every use or disclosure in a category is listed. Note that some types of medical information, such as HIV information, genetic information, substance use disorder records, and psychotherapy notes may be subject to special confidentiality protections under applicable state or federal law, and we will abide by those special protections. If you would like additional information about special state law protections, you may contact the Customer Care Team.

• Treatment: We may use medical information to provide you with medical services and products. We may disclose medical information about you to physicians, nurses, or other health care entities to provide you with your supplies. For example, we may request diagnosis information from your physician to ensure that the correct supplies are being provided for treatment. In certain instances, we may use and disclose your medical information to communicate with you regarding treatment options or other health-related products or services.
• Payment: We may use and disclose medical information to bill and collect payment for health care services and products we provide. Also, we may disclose your information to other health care providers or entities involved in the coordination of your care for their billing purposes. For example, we may inform your health insurance provider about supplies you are going to receive to obtain prior approval or to determine if your plan will cover the supplies.
• Health Care Operations: We may use and disclose your medical information for a variety of business activities that are called health care operations. For example, we may use medical information to evaluate the performance of our staff in providing services and products to you or to work with others who assist us in complying with this Notice and other applicable laws.
• Business Associates: We may contract with third parties to perform certain services for us, such as technology services, consulting services or billing services. These third-party service providers (“Business Associates”) may need to access your medical information to perform the contracted services and are required by contract and law to protect your medical information and only use and disclose it as necessary to perform their services for us.
• Alternative Treatment/Supplies: Except as otherwise described below, we may use and disclose medical information to inform you of new alternatives and products that may help you manage your health. This may include providing you with product information in a face-to-face encounter.
• Supply Reminders: We may use and disclose your medical information to contact you about your supply needs and provide supply reminders about an item that is currently prescribed to you. If we receive payment from a manufacturer for this service, it will be reasonably related to our cost of providing this information to you.
• As Required by Law: We will use and disclose medical information about you when required to do so by federal, state or local law, including disclosure to parties under the jurisdiction of the U.S. Department of Health and Human Services (“HHS”).
• Public Health Activities: We may disclose medical information about you for public health activities, including disclosure to parties under the jurisdiction the U.S. Food and Drug Administration (“FDA”). Examples of these include post-marketing surveillance information to enable product recalls, repairs or replacements, or reporting problems about products.
• Health Oversight Activities: We may disclose medical information about you to a health oversight agency for activities authorized by law. Examples of these activities include audits, investigations, inspections, and licensure.
• Lawsuits/Disputes/Court Proceedings: If you are involved in a lawsuit, dispute or court proceeding, we may disclose medical information about you in response to a court or administrative order. We may disclose medical information about you in response to the following: subpoenas, discovery requests, or other lawful processes by others involved in the dispute. This will be done only if efforts have been made to inform you about the request or to obtain an order protecting the information requested.
• Law Enforcement: We may release medical information about you if asked to do so by a law enforcement official.
• Threat to Health/Safety: We may use and disclose medical information about you when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.
• Certain Government Functions: We may release medical information about you to authorized federal officials for the following government functions: intelligence, counterintelligence and other national security activities authorized by law; so that authorized federal officials may provide protection to the President, other authorized persons or foreign heads of state; or to conduct special investigations. We may also release medical information about you to the following parties: to a member of the armed forces as required by military command authorities, to correctional institutions or law enforcement officials.
• Death: We may disclose your medical information to a coroner, funeral director or medical examiner, as authorized by law.
• Organ and Tissue Procurement: We may disclose your medical information to organizations that facilitate organ, eye or tissue procurement, banking or transplantation.
• Victims of Abuse, Neglect or Domestic Violence: If we reasonably believe you are a victim of abuse, neglect or domestic violence, we may disclose your medical information to a government authority authorized by law to receive reports of such abuse, neglect, or domestic violence.
• Health-Related Benefits/Services: We may use and disclose medical information about you to inform you of health-related benefits, services or products that may help you manage your health.
• Workers’ Compensation: We may release medical information about you for workers’ compensation or similar programs that provide benefits for work-related injuries or illness.
• Research: We may use your medical information to conduct research and for purposes preparatory to research, and we may disclose your medical information to researchers as authorized by law. For example, we may use or disclose your medical information as part of a research study when the research has been approved by an institutional review board or privacy board that has reviewed the research proposal and established protocols to ensure the privacy of your information. YOUR CHOICES REGARDING CERTAIN USES AND DISLCOSURES For certain medical information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions. If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.
• Individuals Involved in Your Care or Payment for Your Care: We may disclose medical information about you to a friend or family member who you have listed as a contact involved in your medical care. Additionally, we may give information to an individual who helps pay for your care. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information, and we will share your medical information with them, as permitted by law.
• Notification: We may use or disclose your medical information to notify or assist in notifying a family member, personal representative or another person responsible for your care, regarding your location and general condition.
• Disaster Relief: We may use and disclose your medical information to organizations for purposes of disaster relief efforts.
• Fundraising: As permitted by applicable law, we may contact you to provide you with information about our fundraising programs. You have the right to “opt out” of receiving these communications, and such fundraising materials will explain how you may request to opt out of future communications if you do not want us to contact you further for fundraising efforts. OTHER USES AND DISCLOSURES REQUIRING YOUR AUTHORIZATION Other uses and disclosures of medical information not included in this Notice, or by laws that apply to its use, will be made only with your written authorization, unless otherwise permitted by law. Such uses and disclosures include, but are not limited to:
• Marketing: We must obtain your written authorization prior to using or disclosing your medical information for purposes that are considered marketing under HIPAA.
• Sale of Medical Information: We will not make any disclosure of your medical information that constitutes the sale of your medical information without your written authorization.
• Psychotherapy Notes: We will not use or disclose psychotherapy notes (private notes of a mental health professional kept separately from a medical record) without your written authorization. To secure your authorization for these and other types of communications, we may provide you with an authorization form electronically and/or by hard copy. If you sign an authorization electronically, you will be consenting to the use of electronic records and confirming that you have hardware and software sufficient for electronic communications with us. Should you no longer wish to receive electronic communications, you may withdraw your consent for these electronic communications by notifying us. At any time, you may revoke an authorization you provide to us by submitting your request in writing. If you revoke your authorization, we will no longer use or disclose medical information about you for the reasons covered by your written request. We are unable to take back any disclosure(s) that we have already made with your authorization or pursuant to this Notice. Additionally, we are required by law to retain records of the medical services and products that we provided to you for a specific period of time. YOUR RIGHTS REGARDING YOUR MEDICAL INFORMATION You have certain additional rights regarding your medical information:
• Right to Inspect and to Receive a Copy: You have the right to inspect and to receive a paper or electronic copy of your medical information that may be used to make decisions about your care. Usually, this includes medical and billing records. If you wish to request a copy of your information, you must submit your request in writing using our form, which you can obtain by calling:
  • 1-800-321-0591 for Edgepark Medical Supplies,
  • 1-866-422-4866 for Advanced Diabetes Supply, or
  • 1-877-840-8218 for United States Medical SupplyWe may charge a fee for the costs of copying, mailing or other supplies associated with your request. We may deny your request under certain circumstances. You will be provided with a reason for the denial. Additionally, we are required to provide you with a copy of your medical information in the form and format requested.
• Right to Request Restrictions: You have the right to request that we limit how we use or disclose your medical information. We will consider your request but are not legally bound to agree to the restrictions, except we must follow all restrictions on communications to health plans for payment or health care operation purposes that pertain solely to health care services or items for which you, or someone on your behalf, has paid us in full. We cannot agree to limit uses or disclosures that are required by law. If you wish to request a restriction, you must submit the request in writing. Upon receipt of your request, we will evaluate it and provide you with a written response.
• Right to Choose How We Contact You: You have the right to request that we contact you at an alternate address or by alternate means, including by e-mail or other electronic means. You must submit the request in writing. We will accommodate reasonable requests. However, if we are unable to contact you using the means or locations you have requested, we may contact you using the information we have. Please note that if you choose to receive communications from us via e-mail or other electronic means, those may not be a secure means of communication, and your medical information will not be encrypted. This means that there is risk that your medical information in e-mails or other electronic communications may be intercepted and read by, or disclosed to, unauthorized third parties.
• Right to Have Medical Information Amended: You have the right to request that we amend, correct, or supplement your medical information maintained by RGH Enterprises. If you wish to request an amendment, you must submit your request in writing. If you believe that we have information that is either inaccurate or incomplete, we may amend, correct or supplement the information and notify others who have copies of the information you deem to be inaccurate or incomplete. We may deny your request under certain circumstances. We will provide you with a reason for the denial.
• Right to Find Out What Disclosures Have Been Made: You have the right to request a detailed listing of disclosures other than instances of disclosure for which you gave consent or signed an authorization (examples include for treatment, payment, operations, law enforcement or to you or your family). This request must be submitted in writing and include your name, address, and a time period, which may not be longer than six (6) years and may not include dates before April 14, 2003. There will be no charge for up to one (1) list per year. For additional lists, there may be a fee to cover the cost of preparing the list.
• Right to Receive This Notice: You have the right to receive a paper copy of this Notice and/or an electronic copy by e-mail upon request. A copy of this Notice is also posted on our websites: www.edgepark.com www.edgeparkcgm.com www.edgeparkrx.com www.usmed-rx.com usmed.com advanceddiabetessupply.com
• Right to File a Complaint About Our Privacy Practices: If you believe that your privacy rights have been violated or if you are dissatisfied with our privacy policies or procedures, you may file a complaint:
  • With us in writing at the address at the end of this Notice;
  • With us by calling our Customer Care Team at:
    • 1-800-321-0591, Ext. 9004 for Edgepark Medical Supplies, and
    • 1-866-219-6336 for Advanced Diabetes Supply or United States Medical Supply; and/or
    • With the Secretary of the Department of Health and Human Services:

• In writing at 200 Independence Avenue, SW, Washington, DC 20201;
• By telephone at 1-877-696-6775; or
• online at www.hhs.gov/hipaa/filing-a-complaint/index.html.

We will not take any action against you or change our treatment of you in any way if you file a complaint.

CHANGES TO THIS NOTICE

We reserve the right to change our privacy practices that are described in this Notice. We reserve the right to make the revised or changed privacy practices applicable to medical information we already have about you, as well as any information we receive in the future. A copy of our current Notice will be posted in our offices and on our websites named above. Prior to a material change in this Notice, we will promptly revise and repost it.

EFFECTIVE DATE

This Notice is effective as of January 15, 2026.

Please submit written requests to:

Customer Care Team c/o Privacy Officer RGH Enterprises, LLC

1810 Summit Commerce Park Twinsburg, Ohio 44087