Privacy Practices

Alori Health Notice of Privacy Practices

Effective Date: April 23, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

I. Who We Are

This Notice of Privacy Practices (“Notice”) describes the privacy practices of Alori Health and certain affiliated professional entities, including independent licensed providers, physicians, healthcare practitioners, and other personnel involved in supporting healthcare services made available through the Alori Health platform (collectively, “we,” “us,” or “our”).

Because Alori Health works with independent licensed providers and affiliated healthcare partners, this Notice applies to protected health information created, received, maintained, or transmitted in connection with healthcare services arranged through or supported by the Alori Health platform, to the extent required by applicable law.

II. Our Privacy Obligations

We are required by law to maintain the privacy of your protected health information (“PHI”), to provide you with this Notice of our legal duties and privacy practices with respect to your PHI, and to notify you following a breach of unsecured PHI when required by law.

When we use or disclose your PHI, we are required to follow the terms of this Notice, or any updated notice then in effect.

III. Permissible Uses and Disclosures Without Your Written Authorization

In certain situations described later in this Notice, we must obtain your written authorization before using or disclosing your PHI. However, we may use and disclose your PHI without your written authorization for the purposes listed below, as permitted or required by law.

A. Uses and Disclosures for Treatment, Payment, and Healthcare Operations

We may use and disclose your PHI, but not your Highly Confidential Information as described in Section IV.B except as permitted by law, for the following purposes:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your treatment. For example, we may share your PHI with independent licensed providers, pharmacies, laboratories, or other healthcare providers involved in your care.

Payment

We may use and disclose your PHI to obtain payment for healthcare services provided to you, to support billing and collections, or to coordinate payment-related activities.

Healthcare Operations

We may use and disclose your PHI for healthcare operations, which may include internal administration, quality assessment, care coordination, compliance activities, training, credentialing, complaint resolution, auditing, fraud detection, and efforts to improve the quality, effectiveness, and cost-efficiency of care and platform-supported services.

We may also disclose PHI to other healthcare providers or entities when such information is needed for their treatment, payment, or certain healthcare operations, as permitted by law.

B. Disclosure to Relatives, Close Friends, and Other Caregivers

We may disclose your PHI to a family member, relative, close personal friend, or another person identified by you if:

  1. you agree to the disclosure;

  2. you are given an opportunity to object and do not object; or

  3. we reasonably infer from the circumstances that you do not object.

If you are not present, unable to agree or object, or there is an emergency, we may use professional judgment to determine whether disclosure is in your best interest. In those situations, we will disclose only the PHI we believe is directly relevant to that person’s involvement in your care or payment for your care.

We may also use or disclose your PHI to notify, or help notify, such persons of your location, general condition, or death.

C. Public Health Activities

We may disclose your PHI for public health activities, including to:

  • report information to public health authorities for the prevention or control of disease, injury, or disability;

  • report child abuse or neglect where authorized or required by law;

  • report information related to products or services regulated by the U.S. Food and Drug Administration;

  • notify a person who may have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading a disease or condition; and

  • report information to an employer when required by laws concerning workplace illness, injury, or medical surveillance.

D. Victims of Abuse, Neglect, or Domestic Violence

If we reasonably believe that you are a victim of abuse, neglect, or domestic violence, we may disclose your PHI to a governmental authority or agency authorized by law to receive such reports.

E. Health Oversight Activities

We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, licensure actions, and oversight of the healthcare system or government health programs.

F. Judicial and Administrative Proceedings

We may disclose your PHI in the course of a judicial or administrative proceeding in response to a court order, subpoena, discovery request, or other lawful process, subject to applicable legal requirements.

G. Law Enforcement

We may disclose your PHI to law enforcement officials as required or permitted by law, including in response to legal process or where necessary to report certain crimes.

H. Decedents

We may disclose your PHI to coroners, medical examiners, and funeral directors as authorized by law.

I. Research

We may use or disclose your PHI for research purposes without your written authorization when an Institutional Review Board or Privacy Board has approved a waiver of authorization or when otherwise permitted by law.

J. Health or Safety

We may use or disclose your PHI when necessary to prevent or lessen a serious and imminent threat to your health or safety or the health or safety of another person or the public.

K. Specialized Government Functions

We may use and disclose your PHI for certain specialized government functions, such as military, national security, correctional institution, or protective services activities, where authorized by law.

L. Workers’ Compensation

We may disclose your PHI as authorized by and to the extent necessary to comply with laws relating to workers’ compensation or similar programs.

M. As Required by Law

We may use or disclose your PHI whenever required to do so by applicable federal, state, or local law.

IV. Uses and Disclosures Requiring Your Written Authorization

A. Uses or Disclosures with Your Authorization

We must obtain your written authorization for:

  • uses and disclosures of PHI for marketing purposes when authorization is required by law;

  • disclosures that constitute the sale of PHI; and

  • other uses and disclosures not otherwise described in this Notice or permitted by law.

For example, we may need your written authorization before sending your PHI to a life insurance company, attorney, or other third party for purposes outside treatment, payment, healthcare operations, or other legally permitted disclosures.

B. Uses and Disclosures of Highly Confidential Information

Certain federal and state laws provide additional privacy protections for specific categories of sensitive information (“Highly Confidential Information”). Depending on applicable law, this may include information relating to:

  1. mental health or developmental disabilities services;

  2. substance use disorder diagnosis, treatment, or referral;

  3. HIV/AIDS testing, diagnosis, or treatment;

  4. sexually transmitted infections or diseases;

  5. genetic testing;

  6. child abuse or neglect;

  7. domestic abuse involving an adult with a disability; and

  8. sexual assault.

Except as otherwise permitted or required by law, we must obtain your written authorization before disclosing Highly Confidential Information.

C. Revocation of Authorization

You may revoke your written authorization at any time, except to the extent we have already acted in reliance on it. To revoke an authorization, you must submit a written request to the Privacy Officer listed below.

V. Your Rights Regarding Your Protected Health Information

You have the following rights regarding your PHI, subject to certain limitations under applicable law.

A. Right to Further Information and to File Complaints

If you would like more information about your privacy rights, believe your privacy rights have been violated, or disagree with a decision we made regarding access to your PHI, you may contact our Privacy Officer using the contact information below.

You may also file a complaint with the Office for Civil Rights of the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

B. Right to Request Additional Restrictions

You have the right to request restrictions on certain uses and disclosures of your PHI for treatment, payment, and healthcare operations, as well as disclosures to individuals involved in your care or payment for your care.

For example, you may request that we not disclose PHI to a health plan for payment or healthcare operations purposes if the PHI relates solely to a healthcare item or service that has been paid out of pocket in full, where applicable law requires us to honor such a request.

For other requests, we are not always required to agree, but we will consider reasonable requests when appropriate.

C. Right to Receive Confidential Communications

You may request that we communicate with you about your PHI by alternative means or at alternative locations. We will accommodate reasonable written requests where required by law.

D. Right to Inspect and Copy Your Health Information

You may request access to inspect and obtain copies of your medical records and certain billing records maintained by us or on our behalf.

In limited circumstances, we may deny part or all of your request, as permitted by law. If you request copies, we may charge a reasonable, cost-based fee as allowed by law for copying, supplies, postage, or preparation of a summary or explanation if you agree to receive one.

To request access, please contact support@alorihealth.com.

E. Right to Request Amendment of Your Records

You have the right to request that we amend PHI maintained in your medical or billing records if you believe it is incorrect or incomplete.

We may deny your request in certain situations permitted by law, including if we believe the information is accurate and complete.

To request an amendment, please contact support@alorihealth.com.

F. Right to Receive an Accounting of Disclosures

You may request an accounting of certain disclosures of your PHI made by us during the six (6) years prior to the date of your request, excluding disclosures that are not required to be included by law.

If you request more than one accounting in a twelve (12) month period, we may charge a reasonable fee for additional accountings, and we will inform you of any fee in advance.

G. Right to Receive a Copy of This Notice

You have the right to receive a paper or electronic copy of this Notice upon request, even if you previously agreed to receive it electronically.

VI. Effective Date and Duration of This Notice

A. Effective Date

This Notice is effective as of the date listed at the top of this document.

B. Right to Change the Terms of This Notice

We reserve the right to change the terms of this Notice at any time. If we revise this Notice, the revised terms may apply to all PHI that we maintain, including information created or received before the change.

If we make a material change to this Notice, we will post the updated version on the Alori Health website and make it available upon request.

VII. Privacy Officer Contact Information

If you have questions about this Notice, want to exercise your privacy rights, or would like to file a complaint, please contact:

Alori Health Privacy Officer
Email: support@alorihealth.com
Phone: (786) 618-2694
Address: 66 W Flagler Street, Suite 900, PMB 12277, Miami, FL 33130

Important Platform Disclosure

Alori Health is a platform that works with independent licensed providers and affiliated healthcare partners. Alori Health does not directly provide medical care or pharmacy services. Healthcare services are provided by independent licensed providers and related professional entities.

This Notice applies to PHI handled in connection with healthcare services supported through the Alori Health platform, to the extent required by law. In some cases, an independent licensed provider or affiliated professional entity may provide you with its own Notice of Privacy Practices, which may also apply to your care.