HIPAA Notice of Privacy Practices

Erosyn RX Inc. (“Erosyn RX,” “we,” “us,” or “our”) is committed to protecting the privacy of your protected health information (“PHI”). As a covered entity under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (collectively, “HIPAA”), we are required by law to maintain the privacy of your PHI, to provide you with this Notice of Privacy Practices, and to follow the terms of this Notice currently in effect.

1. WHO WE ARE AND HOW WE USE YOUR INFORMATION

Erosyn RX Inc. operates a telehealth platform that connects patients with licensed physicians through MD Integrations (MDI), our physician network partner. We facilitate physician-supervised wellness services, including hormone optimization and compounded medication prescribing, fulfilled through our partner pharmacies.

Your PHI includes any information that identifies you and relates to your past, present, or future physical or mental health condition, the provision of healthcare to you, or payment for such healthcare.

2. HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

2.1 For Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and any related services. This includes sharing your information with licensed physicians in the MDI network, consulting specialists, and our partner pharmacies (Empower Pharmacy and Strive Pharmacy) to fulfill your prescriptions.

2.2 For Payment

We may use and disclose your PHI to bill and collect payment for the healthcare services we provide to you. This includes sharing information with your health insurance plan or other payers.

2.3 For Healthcare Operations

We may use and disclose your PHI for healthcare operations, including quality assessment, training, licensing, and accreditation activities.

2.4 As Required by Law

We will disclose your PHI when required to do so by federal, state, or local law, including to public health authorities, law enforcement, or as ordered by a court.

2.5 For Public Health Activities

We may disclose your PHI to public health authorities authorized by law to collect or receive such information for the purpose of preventing or controlling disease, injury, or disability.

2.6 To Avert a Serious Threat to Health or Safety

We may use or disclose your PHI when necessary to prevent a serious and imminent threat to your health or safety, or the health or safety of the public or another person.

2.7 Business Associates

We may share your PHI with third-party service providers (“Business Associates”) who perform services on our behalf, including our physician network (MD Integrations), our partner pharmacies, and our technology service providers. We require all Business Associates to enter into written agreements to protect the confidentiality of your PHI in accordance with HIPAA.

3. USES AND DISCLOSURES REQUIRING YOUR AUTHORIZATION

The following uses and disclosures of your PHI will be made only with your written authorization:

• Most uses and disclosures of psychotherapy notes
• Uses and disclosures of your PHI for marketing purposes
• Disclosures that constitute a sale of your PHI
• Other uses and disclosures not described in this Notice

You may revoke any authorization you have given us at any time, in writing. However, we cannot reverse any uses or disclosures already made in reliance on your prior authorization.

4. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

4.1 Right to Access Your PHI

You have the right to inspect and obtain a copy of your PHI that we maintain in our designated record set. To request access, please submit a written request to [email protected]. We may charge a reasonable, cost-based fee for copies.

4.2 Right to Request Amendment

If you believe that your PHI is incorrect or incomplete, you have the right to request that we amend it. We may deny your request under certain circumstances. If we deny your request, we will provide you with a written explanation.

4.3 Right to an Accounting of Disclosures

You have the right to request a list (accounting) of disclosures we have made of your PHI during the six years prior to your request, except for disclosures made for treatment, payment, healthcare operations, or certain other purposes.

4.4 Right to Request Restrictions

You have the right to request that we restrict certain uses and disclosures of your PHI. We are not required to agree to your request unless you are asking us to restrict our use or disclosure of your PHI to a health plan for payment or healthcare operations purposes and the PHI pertains solely to a healthcare item or service for which you have paid out of pocket in full.

4.5 Right to Request Confidential Communications

You have the right to request that we communicate with you in a certain way or at a certain location. For example, you may request that we contact you by email only or at a specific email address. We will accommodate all reasonable requests.

4.6 Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have previously agreed to receive it electronically. Contact us at the information below to request a copy.

4.7 Right to Be Notified of a Breach

You have the right to be notified if a breach of your unsecured PHI occurs. We will notify you without unreasonable delay and no later than 60 days after we discover the breach.

5. OUR DUTIES

We are required by law to:

• Maintain the privacy and security of your PHI
• Provide you with notice of our legal duties and privacy practices with respect to your PHI
• Notify you following a breach of your unsecured PHI
• Follow the terms of the Notice that is currently in effect

We reserve the right to change the terms of this Notice and to make the new Notice effective for all PHI we maintain. If we change our privacy practices and policies, we will post the new Notice on our website at erosynrx.com.

6. COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights.

To file a complaint with us, contact our Privacy Officer:

PRIVACY OFFICER

Lauren Stone, CEO — Erosyn RX Inc.

EMAIL

[email protected]

PHONE

(903) 522-1974

MAILING ADDRESS

2021 Eagles Ridge Drive, Weatherford, Texas 76087

To file a complaint with the U.S. Department of Health and Human Services:

• Office for Civil Rights, U.S. Department of Health and Human Services
• 200 Independence Avenue, S.W., Washington, D.C. 20201
• Toll Free: 1-877-696-6775 · www.hhs.gov/ocr/privacy/hipaa/complaints/

We will not retaliate against you for filing a complaint.

7. CONTACT INFORMATION

For questions about this Notice or your privacy rights, contact us:

Erosyn RX Inc. · 2021 Eagles Ridge Drive, Weatherford, Texas 76087

Email: [email protected] · Phone: (903) 522-1974 · Website: erosynrx.com

Effective Date: October 1, 2026 · Last Revised: October 1, 2026

This Notice of Privacy Practices is provided in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH), and all applicable state privacy laws.