HIPAA & FLORIDA PRIVACY COMPLIANCE PACKAGE Effective Date: November 8, 2025 Address: 5101 Clover Mist Drive

Apollo Beach, FL 33572 Phone: (813) 776-1272 Email: support@trustpointpc.com

1. Privacy Policy

(Full version as approved in your previous message — no changes needed.) This policy should be published on your website and available at your front desk.

2. Telehealth Privacy Addendum

Purpose: This addendum supplements the Privacy Policy and applies to all telehealth or virtual care services provided by Trustpoint Primary Care Clinic.

a. Information Collected During Telehealth

During telehealth visits, we may collect:

• Audio, video, or chat communications

• Photos, recordings, or documents you provide

• Technical data such as IP address or device type

b. Use and Disclosure

Your information will be used only for treatment, care coordination, and documentation purposes, in compliance with HIPAA.

We use secure, encrypted telecommunication platforms that meet HIPAA security standards. We do not record or store telehealth sessions without your written consent, except when required by law.

c. Patient Responsibility

Patients should ensure privacy during telehealth sessions and use secure internet connections. By using our telehealth services, you acknowledge that despite our safeguards, no technology is 100% secure.

3. Data Retention and Destruction Policy

a. Retention Period

Trustpoint Primary Care Clinic retains medical records and associated PHI for a minimum of 7 years from the last date of patient contact, or longer if required by Florida or federal law:

• For minors, records are retained until the patient reaches age 19 or 7 years after the last visit, whichever is later.

• Billing, insurance, and administrative records are retained for at least 7 years.

b. Secure Storage

All records are stored in secure electronic systems protected by encryption, firewalls, and access controls. Paper records are stored in locked areas accessible only to authorized personnel.

c. Secure Destruction

When the retention period expires, records are destroyed in a manner that protects privacy:

• Electronic records: permanently deleted or wiped per NIST standards.

• Paper records: shredded, pulped, or incinerated.

4. Florida Patient Data Protection Compliance Statement

This statement fulfills requirements under Florida Statutes §456.057.

Trustpoint Primary Care Clinic maintains the confidentiality of patient medical records and will release them only under the following conditions:

• Upon written authorization from the patient or legal representative.

• To other healthcare providers involved in the patient’s care.

• When required by law, court order, or public health reporting obligations.

• For insurance billing and payment purposes.

Patients may request copies of their medical records in writing. Reasonable reproduction costs may apply per Florida Administrative Code Rule 64B8-10.003.

Records are not released for marketing or third-party use without your explicit authorization.

5. Notice of Privacy Practices (NPP)

(Provide to every new patient at intake — keep a signed acknowledgment in their chart.)

NOTICE OF PRIVACY PRACTICES

Trustpoint Primary Care Clinic 9996 Alavista Drive, Gibsonton, FL 33534 Phone: (813) 776-1272 | Email: support@trustpointpc.com Effective Date: November 8, 2025

This Notice describes how your medical information may be used and disclosed, and how you can access this information. Please review it carefully.

Your Rights

You have the right to:

• Get a copy of your medical record

• Ask us to correct your medical record

• Request confidential communication

• Ask us to limit what we share

• Get a list of those with whom we’ve shared your information

• Get a paper copy of this notice at any time

• File a complaint if you believe your privacy rights have been violated

Our Uses and Disclosures

We may use and share your information for:

• Treatment: To provide and coordinate your healthcare.

• Payment: To bill insurance or manage billing.

• Operations: For clinic management, training, and quality assurance.

• Public Health and Safety: To report disease, abuse, or threats.

• Law Enforcement or Legal Compliance: As required by law.

Any other disclosures will require your written authorization.

Our Responsibilities

• We are required by law to maintain the privacy and security of your PHI.

• We will notify you promptly if a breach occurs that may compromise your information.

• We will follow the duties and privacy practices described in this Notice.

Contact or Complaints

If you have questions or concerns, contact:

Privacy Officer Trustpoint Primary Care Clinic 5101 Clover Mist Drive

Apollo Beach, FL 33572 Phone: (813) 776-1272 Email: support@trustpointpc.com

You may also contact: U.S. Department of Health and Human Services – Office for Civil Rights (OCR) Website: https://www.hhs.gov/ocr Phone: 1-800-368-1019