Notice of Privacy Practice

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices (“Notice”) is provided to you pursuant to the Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act and regulations implemented thereunder (collectively, “HIPAA”). This Notice is designed to inform you of how we Zerigo Health, Inc. (“Zerigo” or “We”) may, under federal law and any applicable state law, use or disclose your protected health information.

 

Zerigo is a Delaware corporation with its principal place of business in California. Zerigo is a medical device company and provider of services.

 

1. OUR PLEDGE TO PROTECT YOUR PRIVACY
   • Maintain the privacy of your protected health information;
   • Give you this Notice explaining our legal duties and privacy practices with respect to your protected health information;
   • Notify you if you are affected by a breach of unsecured protected health information; and
   • Follow the terms of the Notice that is currently in effect.
2. WHO WILL FOLLOW THIS NOTICE
   • All workforce members of Zerigo, including the Zerigo Care Guides.
3. HOW ZERIGO MAY USE AND DISCLOSE YOUR INFORMATION
   • For Treatment: we may use or disclose your information to provide you with medical treatment or services or to assist those who are providing, coordinating, or managing your care. This applies to any disclosures made for treatment purposes to healthcare providers. Example: Your health information may be used by Zerigo personnel to provide services to you. We may also share your progress information or other health information with your healthcare provider.
   • For Payment: we may use or disclose your information to bill and obtain payment for our services from insurance companies and other payers. This may include providing information such as symptoms, progress in treatment, and diagnosis of conditions. Example: Your health information may be released to an insurance company to obtain payment for services.
   • For Operational Purposes: we may use your information for uses necessary to improve and run our business, such as to conduct quality assessment activities, to continue to develop our products and services, to train and license staff, and prepare for legal and regulatory reviews. Example: we may use your health information to conduct internal audits to verify proper billing procedures or we may reach out to you for feedback on our services in order to improve them.
   • To Business Associates: we may share your information with “Business Associates,” as defined by HIPAA, who provide services to or on behalf of Zerigo. Example: We may share your name and address with our third-party shipping provider to ship a product to you.
   • Appointment Reminders, Test Results, Treatment Alternatives, etc.: we may use your protected health information to contact you to remind you about treatments, appointments, or to advise you of treatment alternatives.
   • Health-Related Benefits and Services: we may use your protected health information to advise you of health-related benefits and services provided by Zerigo that may be of interest to you including educational lectures, special events, and support groups.
   • To Individuals Involved in Your Care or Payment for Your Care: unless you tell us you object, we may use or disclose your protected health information to notify a friend, family member, or legal guardian who is involved in your care or who helps pay for your care.
   • As Required by Law: we will disclose your protected health information where required by applicable federal state or local law. Example: federal law may require that your protected health information be released to an appropriate health oversight agency or public health authority.
   • To Respond to Lawsuits or Legal Action: we will disclose your information where required to do so pursuant to a lawfully issued subpoena, a court/administrative order, or discovery request after attempting to inform you of the request.
   • Public Health and Safety: we may use and disclose your health information to prevent or control a serious threat to the health and safety of you, others, or the public, and for public health activities such as to prevent injury to yourself or others. Example: California law requires us to report birth defects and cases of communicable disease.
   • Food & Drug Administration (“FDA”) and Health Oversight Agencies: we may disclose your protected health information as it relates to incidents involving Zerigo’s Products or Services including regarding product defects, or post-marketing surveillance to the FDA and manufactures to enable product recalls, repairs, or replacements, and to health oversight agencies for activities authorized by law such as audits.
   • Workers’ Compensation: we may use or disclose medical information about you for purposes regarding your workers’ compensation claims or similar programs as authorized or required by law.
4. OTHER USES AND DISCLOSURES OF YOUR PROTECTED HEALTH INFORMATION
5. YOUR RIGHTS REGARDING YOUR PROTECTED HEALTH INFORMATION
6. CHANGES TO OUR PRIVACY PRACTICES
7. COMPLAINTS
8. EFFECTIVE DATE

We understand that the privacy of your personal health information, is important to you and we are committed to protecting the privacy of your information. As a patient who is utilizing Zerigo’s Products and Services, we maintain a record of the care you receive in a designated record set so that we may provide you with quality care and comply with various legal requirements. This Notice applies to the record of your care provided by Zerigo.

Protected Health Information Defined:

Protected Health Information or PHI is defined as your past or present health information combined with information that identifies you such as your name, address, IP address, email, phone number, etc. Excludes employment records that your employer may hold. Employment records, even those containing health information, are not considered PHI.

 

At Zerigo, we are required by law to:

 

The following people or groups will comply with this Notice:

 

• Law Enforcement Activities: we may be required to disclose protected health information to law enforcement officials. For example, we may release protected health information to law enforcement officials in response to a valid court order, grand jury subpoena, or search warrant.
• Right to a Copy of This Notice: you have the right to obtain a paper or electronic copy of this Notice upon request, even if you have previously agreed to receive the Notice electronically. To obtain a copy of this Notice, submit a written request to Zerigo addressed to the attention of the Zerigo Privacy Officer at the contact information below.

 

Except as described in this Notice, Zerigo will not use or disclose your protected health information without your specific written authorization. We will obtain your written authorization for: (i) (ii) most uses and disclosures of health information for marketing purposes, as defined by HIPAA; and (iii) disclosures that constitute a sale of PHI, as defined by HIPAA. If you authorize us to use or disclose your health information for another purpose, you may revoke your authorization, in writing, at any time. Your revocation will be effective upon receipt and Zerigo will no longer be allowed to use or disclose your protected health information for the purposes described in the authorization except to the extent that Zerigo had already taken action based upon the prior authorization.

 

You have the rights described below in regard to the protected health information that we maintain in a designated record about you. You must submit a written request to exercise any of these rights. You may obtain forms for making such a request by contacting the Privacy Officer at the number or address below.

 

• Right to Inspect/Obtain a Copy: you have the right to inspect and receive a copy of your protected health information maintained by Zerigo in the designated record set and used in decisions about your care. This right does not apply to psychotherapy notes and certain other information. We may charge you a reasonable cost for the same to cover the costs of copying, postage, and/or preparation of a summary. We may deny your request for some or all of the requested information in certain circumstances. You may request that a licensed healthcare professional, chosen by us, review our denial and we agree to comply with the chosen licensed healthcare professional’s decision.
• Right to Amend: if you believe that the protected health information we maintain pertaining to you is inaccurate or incomplete, you may request, in writing, that we amend your protected health information. You must provide a reason for the requested amendment in your request. We cannot delete or destroy any protected health information already included in your medical record maintained by other healthcare providers. We may deny your request if you request that we amend protected health information that: (i) we did not create, unless the person or entity that created the information is not available to make the amendment; (ii) is not part of the designated record set containing your protected health information that we maintain; (iii) is not part of the protected health information you are permitted by law to inspect and copy; or (iv) is accurate and complete. If we deny your request for an amendment, we will provide you with a written explanation of the denial. If you still disagree with the explanation provided, you may submit your written disagreement to Zerigo as referenced above, or you can ask that your request for amendment and the explanation of, or an accurate summary of such information, be included in any future disclosure of the pertinent protected health information or designated record set. If you submit a statement of disagreement to Zerigo, we may include a rebuttal statement addressing your statement of disagreement in the designated record set.
• Right to Accounting of Disclosures: you have the right to ask for a list or “accounting” of disclosures we have made of your protected health information. We are not required to list all disclosures, such as: (i) those you have authorized; (ii) disclosures made for treatment, payment, or health care operations; (iii) disclosures to person(s) involved in your healthcare; (iv) disclosures incident to a use or disclosure that is otherwise permitted or required by law; and (v) disclosures made for national security or intelligence purposes.
• Right to Request Restrictions: you have the right to request a restriction or limit on how Zerigo uses or discloses your protected health information. You must be specific in your request for restriction. We are not required to comply with your request, except when you request that we restrict disclosure of your protected health information to a health plan for a health care item or service for which you have paid out-of-pocket in full and the disclosure is for the purpose of carrying out payment or health care operations and not otherwise required by law.
• Right to Request Confidential Communications: you have the right to request, in writing, that we contact you about medical issues in a certain way, such as by mail, or at alternative locations. You must specify how or where you wish to be contacted. Zerigo we will try to accommodate reasonable requests.

To obtain an accounting of disclosures you must submit a written request to Zerigo and address the request to the Zerigo Privacy Officer at the address provided herein. Your request must include the specific time period of the disclosures requested. The first list of disclosures requested within a 12-month period shall be provided at no cost. Additional requests during the same 12-month time period will require payment of costs incurred by Zerigo in compiling and providing the list of disclosures.

 

 

We reserve the right to change our privacy practices and update this Notice accordingly. We reserve the right to make the revised or changed Notice effective for all your health information even if it was created prior to the change in the Notice. Revised Notices will be posted and available on our website at: https://zerigohealth.com/privacy-policy.html.

 

If you want to file a complaint or express concerns regarding Zerigo’s use or disclosure of your protected health information, please contact Zerigo at:

 

Zerigo Health Inc.

ATTN: Privacy Officer

c/o Hera Hub

6170 Cornerstone Court East, Suite 100

San Diego CA 92121

1-877-738-6041

privacy@zerigohealth.com

If you believe any of your privacy rights have been violated, you may file a written complaint with the U.S. Department of Health and Human Services – Office for Civil Rights at:

Office for Civil Rights

U.S. Department of Health and Human Services

200 Independence Avenue S.W.

Room 509F, HHH Building

Washington, D.C. 20201

1-877-696-6775

www.hhs.gov/hipaa/filing-a-complaint/complaint-process/index.html

Zerigo honors your right to express concerns regarding your privacy. Zerigo will not take any action against you for expressing or filing a complaint.

 

This Notice is effective as of March 6^th 2026_ .