❤️ Regulate

HIPAA Notice of Privacy Practices

Notice of HIPAA Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED BY REGULATE INC., AND IF APPLICABLE, OUR INDEPENDENT MEDICAL PRACTITIONER PARTNERS (DEFINED BELOW) AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: September 26, 2026

Who follows this Notice

Regulate Inc. and its affiliated entities (collectively "Regulate Inc.") are accountable for compliance with HIPAA and are required by law to maintain the privacy of your Protected Health Information.

Regulate Inc. ("Regulate Inc.," "we," "our," or "us") is not a medical group, but is a Business Associate that has partnered with licensed clinicians in independent practice, each licensed in the state where you receive care (each an "Independent Medical Practitioner"), to bring healthcare services to patients through our telehealth solution. In this Notice, "we" and "us" also include the Independent Medical Practitioner who treats you through Regulate Care and the staff who support that practice.

Each of the Regulate Inc. entities, their related sites, locations, and care providers follow the terms of this Notice. Additionally, entities, sites, locations, and care providers may share medical information with each other for treatment, payment, or healthcare operations related to the Business Associate Agreements ("BAA") they share.

Telemedicine consults obtained through our Website or applications are provided by independent medical practitioners. Independent providers, and your own medical provider if you do not use a Regulate Inc. Medical Provider, are responsible for providing you with a Notice of Privacy Practices describing their collection and use of your health information. The pharmacy that fills your prescription provides its own Notice of Privacy Practices.

Our duties

We are required by law to maintain the privacy of your protected health information ("PHI"), to give you this Notice of our legal duties and privacy practices, to follow the terms of the Notice currently in effect, and to notify you if a breach of your unsecured PHI occurs. We reserve the right to change this Notice and to make the new Notice apply to all PHI we hold. If we make a material change, we will post the revised Notice on our website and in our applications, and you may ask us for a copy.

I. How we may use and disclose your PHI

We use and disclose your PHI for treatment, payment, and health care operations, and for other purposes the law permits or requires. The examples below describe these uses and disclosures. For any use or disclosure not described in this Notice, we will ask for your written authorization, which you may revoke at any time by giving us written notice. Where California law gives your information more protection than HIPAA, such as under the California Confidentiality of Medical Information Act, we follow California law.

  • Treatment. We use and disclose your PHI to provide and coordinate your care. For example, your clinician may send your prescription and related information to the pharmacy that fills it, and we may share your PHI with other healthcare providers involved in your care.
  • Payment. We use and disclose your PHI to bill and collect payment for the services and medication you receive. Regulate Care does not accept insurance.
  • Health care operations. We use and disclose your PHI to run our practice and services, for example for quality assessment and improvement, internal compliance audits, performance evaluations, and general business management and administration.
  • Refill reminders, treatment alternatives, and health-related benefits. We may contact you to remind you about prescription refills, to tell you about treatment options or alternatives, or to tell you about health-related benefits or services that may interest you. If we receive payment from a third party for a treatment communication, you will be told and given the chance to opt out.
  • Family members and friends. Unless you object, we may share PHI with a family member, relative, close friend, or other person you identify as involved in your care or in paying for it. If you are not present or able to agree or object, we may use our professional judgment to decide whether sharing is in your best interest, and we will share only the PHI relevant to that person's involvement.

We may also use or disclose your PHI without your authorization, and without giving you the chance to agree or object, in these situations:

  • When required by law, in line with that law;
  • To public health authorities, or a foreign government agency working with one, for activities such as preventing or controlling disease, reporting births and deaths, reporting adverse reactions to medications or problems with products, notifying people exposed to a communicable disease, and reporting abuse or neglect in certain circumstances;
  • To health oversight agencies for activities authorized by law, such as audits, inspections, investigations, and licensure actions;
  • In judicial and administrative proceedings, in response to a court or administrative order, subpoena, discovery request, or other lawful process, but only after efforts have been made to tell you about the request or to obtain an order protecting the information;
  • To law enforcement, to report certain injuries, comply with court orders, warrants, or similar process, identify or locate a suspect, fugitive, material witness, or missing person, or report a crime;
  • To coroners and medical examiners, for example to identify a deceased person or determine a cause of death;
  • To funeral directors, as needed to carry out their duties;
  • To organizations that handle organ, eye, or tissue donation and transplantation;
  • For research, when required approvals and privacy safeguards are in place;
  • To prevent or lessen a serious threat to the health or safety of a person or the public, and only to someone reasonably able to help;
  • For military and veterans activities, including for foreign military personnel, as required by military command authorities;
  • For lawful national security and intelligence activities;
  • For the protection of the President, other authorized persons, or foreign heads of state, or to conduct authorized investigations;
  • To a correctional institution or law enforcement official if you are an inmate or in lawful custody; and
  • As needed to comply with workers' compensation laws and similar programs for work-related injuries or illness.

We will not use or disclose your PHI for marketing, and we will not sell your PHI, without your written authorization.

II. Your rights

You have the following rights regarding your PHI.

  • Right to request restrictions. You may ask us to limit how we use or disclose your PHI. We do not have to agree, except that we must agree not to disclose PHI to a health plan about a service you paid for in full out of pocket. Your written request must say what you want limited, what information it covers, and to whom the limit applies (for example, your spouse). Even if we agree, we may still disclose your PHI to you if you ask for access or an accounting of disclosures, when the law requires or permits it, or in an emergency.
  • Right to confidential communications. You may ask us to contact you in a certain way or at a certain place, for example at an address other than your home. Send your request in writing to the Privacy Officer, stating how or where you want to be contacted. We will accommodate all reasonable requests.
  • Right to access and copy. You may inspect and get a copy of your PHI, including an electronic copy in the format you ask for if we can readily produce it, except for certain information HIPAA excludes. If we do not hold the information, we will tell you who does. We will respond in a timely manner and may charge a reasonable, cost-based fee for copies and postage. In limited cases we may deny your request; if so, we will explain why in writing, and you may ask for the denial to be reviewed.
  • Right to an accounting of disclosures. You may ask for a list of certain disclosures of your PHI that we, or our business associates, made during the six (6) years before your request, or a shorter period you choose. The first list in any 12-month period is free; we may charge a reasonable, cost-based fee for more, and we will tell you the cost first so that you can withdraw or change your request.
  • Right to request an amendment. If you believe PHI we hold about you is incorrect or incomplete, you may ask us in writing to amend it, giving your reasons, for as long as we keep the information. If we do not hold the information, we will tell you who does. We may deny your request, for example if we did not create the information or it is already accurate and complete. You may then file a written statement of disagreement, and we may respond to it. You may ask that your request, our denial, your statement, and our response be included with future disclosures of the information.
  • Right to a paper copy of this Notice. You may ask for a paper copy of this Notice at any time, even if you agreed to receive it electronically, by writing to the Privacy Officer.
  • Fundraising and sale of PHI. You may opt out of fundraising communications, and your PHI will not be used for fundraising or sold without your prior written authorization.
  • Right to be notified of a breach. You will be notified if a breach of your unsecured PHI occurs.

III. Questions and complaints

If you have questions about this Notice or want to exercise any of the rights described in it, contact our Privacy Officer:

Regulate Inc., Attn: Privacy Officer
24301 Paseo De Valencia, Suite R
Laguna Hills, CA 92653
Email: support@regulate.care
Phone: +1 (949) 208-9958

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, D.C. 20201, 1-877-696-6775, www.hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.

Acknowledgment of this Notice

This Notice of HIPAA Privacy Practices is published on the Regulate Inc. website and in Regulate Inc. applications.

In compliance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") we are required to ask each of our patients to acknowledge receipt of our Notice of HIPAA Privacy Practices.

You acknowledge receipt of the Notice of HIPAA Privacy Practices when you select the Sign Form button after being presented these forms during the account creation/sign-up process in the Regulate Inc. patient mobile applications or Regulate Inc. patient website, or by indicating or signing your acknowledgement in another written or digital format provided to you. You can receive a copy of the Notice of HIPAA Privacy Practices by asking the Privacy Officer, or by visiting our website and printing the form from there.