Effective Date: Jan 31, 2025

THIS NOTICE DESCRIBES HOW YOUR MEDICAL INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices is mandated by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). It describes how we may use and disclose your protected health information (PHI) to carry out treatment, payment, or healthcare operations, and for other purposes that are permitted or required by law. It also describes your rights to access and control your protected health information. “Protected health information” is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health or condition, related health care services, or related to the past, present, or future payment for the provision of health care to you.

We are required to abide by the terms of this Notice of Privacy Practices. We may change the terms of our notice at any time. Any such new notice will be effective for all protected health information that we maintain at that time. Upon your request, you may obtain any revised Notice of Privacy Practices by calling us and requesting that a revised copy be sent to you in the mail or by asking for one during your next telehealth consultation. You acknowledge receipt of this notice by accepting the Terms & Conditions for using the services provided by Sleep Reset.

‍

1. Uses and Disclosures of Protected Health Information

USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION BASED UPON YOUR WRITTEN CONSENT
Your protected health information may be used and disclosed by Sleep Reset and its affiliates (collectively, "Sleep Reset") and others involved in your care and treatment for the purpose of providing healthcare services to you. Your PHI may also be used and disclosed as necessary to pay healthcare bills and to support the operation of Sleep Reset.

‍

Set forth below are examples of the types of uses and disclosures of your PHI that Sleep Reset is permitted to make. These examples are not meant to be exhaustive but are provided to describe the types of uses and disclosures that may be made by Sleep Reset:

Payment:
Your protected health information may be used, as needed, to obtain payment for your healthcare services. For example, obtaining approval for telehealth services may require that your relevant PHI be disclosed to our health plan to obtain approval for treatment.

‍

Healthcare Operations:
We may use or disclose, as needed, your protected health information to support the normal business activities of Sleep Reset. These activities include, but are not limited to, quality assessment activities, employee review activities, training, licensing, and conducting or arranging for other business activities.

‍

We may also need to share your PHI with certain of our “business associates” or third parties that perform various activities (e.g., billing, care coordination, telehealth consultation scheduling) for Sleep Reset. Whenever an arrangement between Sleep Reset and a business associate involves the use or disclosure of your PHI, we will have in place the legally required safeguards to protect the privacy of your health information.

‍

Data Analytics and Quality Improvement: We may use or disclose de-identified health information derived from PHI for research, quality assessment, product development, and business intelligence purposes. This may include:

• Aggregating and analyzing treatment outcomes and patterns
• Developing and improving our services and technology
• Training machine learning models to enhance care delivery
• Conducting market research and business planning Any such use will comply with HIPAA de-identification standards and applicable laws.

‍

Technology and Platform Operations: Your PHI may be processed through our telehealth platform, mobile applications, and associated technologies. This processing may include:

• Secure cloud storage and transmission
• Integration with electronic health record systems
• Collection of usage data and technical metrics
• Automated scheduling and care coordination All technology vendors and service providers are bound by Business Associate Agreements and required to maintain HIPAA compliance.

‍

USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION BASED UPON YOUR WRITTEN AUTHORIZATION
Other uses and disclosures of your PHI will be made only with your written authorization, unless otherwise permitted or required by law. You may revoke your authorization at any time in writing, except to the extent that Sleep Reset has already relied on the use or disclosure as indicated in the authorization.

‍

‍OTHER USES AND DISCLOSURES THAT MAY BE MADE AND TO WHICH YOU MAY AGREE OR OBJECT
In the circumstances listed below, you may agree or object to the use or disclosure of your PHI in the manner described. If you do not object, Sleep Reset may determine, using professional judgment, whether disclosing health information is in your best interest. If such a determination is made, only the PHI relevant to your care will be disclosed.BUSINESS CONTINUITY AND CORPORATE TRANSACTIONS In the event of a merger, acquisition, or other corporate reorganization, your PHI may be transferred as part of the transaction, subject to the same protections and restrictions outlined in this policy. We may also transfer your PHI in connection with the sale of assets or similar corporate transaction, with appropriate safeguards in place.

‍

‍Others Involved in Your Healthcare:
Unless you object, we may disclose to a family member, relative, close friend, or any other person you identify, your PHI that directly relates to that person’s involvement in your healthcare. If you are unable to agree or object to such a disclosure, we may disclose such information as necessary if we determine it is in your best interests based on our professional judgment. We may also disclose PHI to assist in notifying a family member or personal representative of your location, general condition, or death.

‍

‍Emergencies:
In an emergency treatment situation, we may use or disclose your PHI without your prior consent. If this happens, Sleep Reset will make reasonable efforts to obtain your consent as soon as possible after treatment. If we are unable to obtain consent, we may still use or disclose your PHI to treat you.

‍

‍2. Your Rights

‍Set forth below is a statement of your rights with respect to your PHI and a brief description of how you may exercise these rights.

• Right to Inspect and Copy:
  You have the right to inspect and obtain a copy of your PHI. This includes information contained in a designated record set, such as medical and billing records. Certain records, such as psychotherapy notes, may not be accessible under federal law.
  
  
• Right to Request Restrictions:
  You may request restrictions on the use or disclosure of your PHI for treatment, payment, or healthcare operations. Sleep Reset is not required to agree to these restrictions, but if we do agree, we will comply with the terms of the restriction unless emergency treatment is necessary.
  
  
• Right to Request Confidential Communications:
  You have the right to request that we communicate your PHI by alternative means or at an alternative location. We will accommodate reasonable requests, but may require information on how payment will be handled or specification of the alternative contact information.
  
  
• Right to Amend:
  You have the right to request an amendment to your PHI if you believe it is inaccurate or incomplete. In some cases, we may deny your request, but you have the right to file a statement of disagreement.
  
  
• Right to Receive an Accounting of Disclosures:
  You have the right to receive an accounting of certain disclosures we have made of your PHI. This right does not apply to disclosures made for treatment, payment, or healthcare operations.
  
  

3. Electronic Communications

‍You may contact us at help@thesleepreset.com for any inquiries or to communicate with us electronically. However, we advise that email communication may not be encrypted and could potentially be intercepted. By communicating with us via email, you acknowledge the risk associated with email communication and agree to those risks.

‍

Platform Security and Data Transmission

Our telehealth platform and mobile applications employ industry-standard encryption and security measures to protect your PHI. While we maintain appropriate technical safeguards, no electronic transmission system is guaranteed to be 100% secure. By using our services, you acknowledge:

• Communications occur over internet and mobile networks
• Technical processing and transmission may involve multiple networks and systems
• Data may be stored in secure cloud environments
• Automated systems may process your information for service delivery

‍

Data Retention and Deletion

We maintain PHI in accordance with applicable laws and regulations. Unless otherwise required by law:

• Active patient records are maintained for a minimum of 7 years
• Inactive accounts may be archived after 2 years of inactivity
• De-identified data may be retained indefinitely for quality improvement
• You may request deletion of your PHI subject to legal requirements

‍

4. International Operations

‍If we expand services internationally, your PHI may be transferred to, stored, or processed in other countries, subject to appropriate safeguards and agreements to maintain HIPAA compliance and protect your privacy rights. Any international data transfers will comply with applicable laws and regulations.

‍

‍5. Changes to Services and Technology

‍We may update our technology, platforms, and services over time. Any substantial changes affecting PHI handling will be reflected in updates to this policy. Changes may include:

• New features or functionality
• Integration with additional healthcare services
• Implementation of new technologies
• Modifications to data processing systems

We will maintain appropriate safeguards and compliance through any such changes.

‍

‍6. Complaints

‍If you believe your privacy rights have been violated, you may file a complaint with Sleep Reset or the Secretary of Health and Human Services. Complaints should be directed to our Privacy Officer. We will not retaliate against you for filing a complaint.You can contact our Privacy Officer at:
Sleep Reset, Inc.
Attention: Privacy
2261 Market Street #4408
San Francisco, CA 94114
Email: help@thesleepreset.com

‍Last Updated: Jan 31, 2025

‍