Notice of Privacy Practices

This notice describes how medical information about you, or about a patient for whom you are a parent or authorized guardian, may be used and disclosed and how you can access it. Please review it carefully.

This Notice of Privacy Practices (“Notice”) is provided on behalf of TeleMed2U Inc., including Telemedicine Group Delaware, and Cloud Health Medical Group, P.A., Cloud Health Medical Group of Kansas, P.A., Cloud Health Medical Group of California, P.C., and Cloud Health Medical Group of New Jersey, together with their physicians, other healthcare practitioners, and personnel (collectively, “we” or “our”).

Our Pledge Regarding Medical Information

We understand that medical information about you and your health is personal, and we are committed to protecting it. We create a record of the care and services you receive at TeleMed2U to provide quality care and comply with legal requirements. This Notice is required by law and applies to all records of your care generated by us.

This Notice explains how we may use and disclose medical information, your rights, and our obligations regarding medical information.

We are required by law to keep identifiable medical information private, subject to permitted exceptions; give you this Notice of our legal duties and privacy practices; follow the Notice currently in effect; and promptly notify you if a breach may have compromised the privacy or security of your information.

Note for Parents and Authorized Guardians: When a parent or authorized guardian signs consent for a patient, references to “you” apply to the patient. The parent or guardian may exercise the rights described in this Notice on the patient’s behalf to the extent permitted by law.

Your Rights Regarding Protected Health Information (PHI)

1. An electronic or paper copy of your medical record

You may ask to inspect or receive an electronic or paper copy of your medical record and PHI, usually including medical and billing records but potentially excluding certain mental-health information. If maintained electronically, you may obtain an electronic copy and direct us, through clear, conspicuous, and specific instructions, to transmit it to a designated person or entity. Most PHI is available in the Member Portal. Written requests may be mailed to TeleMed2U, Inc., Attn: Records Request, P O Box 980753 West Sacramento, CA 95798-0753, or emailed to medrecs@telemed2u.com.

We may deny access in limited circumstances. You may request review by another licensed healthcare professional selected by TeleMed2U or Bridge, and we will comply with the review outcome. TeleMed2U, Inc. or Bridge. will usually provide the information within 30 days. Permitted fees may apply for mailing and labor involved in producing records.

2. Changes in your medical record

You may ask us to amend or correct PHI you believe is inaccurate or incomplete. Requests must be in writing and include a supporting reason. TeleMed2U may deny a request and will provide a written reply. Mail requests to TeleMed2U, Inc., Attn: Records Request, P O Box 980753 West Sacramento, CA 95798-0753, or email medrecs@telemed2u.com.

3. Request confidential communications

You may ask us to communicate about medical matters in a particular way or at a particular location, including contacting you through a specific method or mailing to a different address. We will accommodate reasonable requests. A written request must specify how or where you wish to be contacted and be sent to medrecs@telemed2u.com.

4. Request restrictions

You may request that TeleMed2U, Inc. and Bridge, Inc. restrict use or disclosure of PHI for treatment, payment, healthcare operations, or to people involved in your care or payment. We may decline a restriction that could affect care. If you pay in full out of pocket for a service or item, you may ask us not to disclose it to your health insurer for payment or operations.

You may request that disclosures be limited to specified individuals involved in your care or payment. If TeleMed2U, Inc. or Bridge, Inc. agrees, it will be bound by the restriction except when disclosure is required by law or needed in an emergency.

Requests must be in writing. Mail TeleMed2U, Inc., Attn: Records Request, P O Box 980753 West Sacramento, CA 95798-0753, or email medrecs@telemed2u.com. Specify the information to limit, whether use, disclosure, or both should be limited, and the people to whom the limit applies. TeleMed2U and Bridge are not generally required to agree.

TeleMed2U may participate in health information exchanges and record-locator services to obtain, use, and share health information as permitted by applicable law and as described in the Notice of Privacy Practices. Information obtained through these services will be limited to information reasonably necessary to provide, coordinate, or support treatment and related healthcare activities. Any applicable consent, notification, or opt-out requirements will be addressed as required by law. Medication-history information may also be obtained and incorporated into the medical record as permitted by law.

TeleMed2U may participate in health information exchanges and record-locator services to obtain, use, and share health information as permitted by applicable law and as described in the Notice of Privacy Practices. Information obtained through these services will be limited to information reasonably necessary to provide, coordinate, or support treatment and related healthcare activities. Any applicable consent, notification, or opt-out requirements will be addressed as required by law. Medication-history information may also be obtained and incorporated into the medical record as permitted by law..

TeleMed2U participates in Manifest MedEx (“MX”), a health information exchange that electronically shares health information among healthcare providers to support informed and safer care. You may opt out, but MX will then not make your information available to healthcare providers, including during emergencies. To opt out, submit the online form at https://www.manifestmedex.org/opt-out or call 1-800-490-7617.

Opt-out provisions do not apply to patient data shared by providers or health plans to support service authorization when patients have already been informed of that sharing through a provider or health-plan Notice of Privacy Practices.

5. Disclosures request

You may request an accounting of disclosures made during the six years before your request, including who received the information and why. TeleMed2U, Inc. and Bridge, Inc. will exclude treatment, payment, healthcare operations, and certain other disclosures, including disclosures made at your request. The first accounting is free; TeleMed2U may charge permitted costs for additional requests within 12 months. Mail a written request to TeleMed2U, Inc., Attn: Records Request, P O Box 980753 West Sacramento, CA 95798-0753, or email medrecs@telemed2u.com.

6. Request a written copy of this privacy notice

You may request a paper copy at any time, even if you agreed to electronic delivery. Contact TeleMed2U, Inc., Attn: Privacy Officer, P O Box 980753 West Sacramento, CA 95798-0753, or medrecs@telemed2u.com. We may change our privacy practices and apply changes to PHI obtained before the change. Material changes will be reflected in a revised Notice, and the current Notice will be posted at www.telemed2u.com.

7. Choose someone to act for you

A person designated through medical power of attorney or acting as legal guardian may exercise your rights and make choices about your health information. TeleMed2U, Inc. and Bridge, Inc. will verify the person’s authority before taking action.

8. File a complaint

If you believe your rights were violated, submit a written complaint to TeleMed2U, Inc., Attn: Privacy Officer, P O Box 980753 West Sacramento, CA 95798-0753, or medrecs@telemed2u.com. You may also contact Bridge, Inc. TeleMed2U will not retaliate against you. You may complain to the U.S. Department of Health and Human Services Office for Civil Rights by writing to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.

Uses and Disclosures of PHI

Treatment

TeleMed2U, Inc. and Bridge, Inc. may use PHI and share it with professionals involved in your care.

Organizational Operations

TeleMed2U, Inc. and Bridge, Inc. may use and share health information to run the practice, improve care, and contact you when necessary.

Billing for Services or Payment

TeleMed2U, Inc. and Bridge, Inc. may use and share health information to bill and obtain payment from health plans or other entities.

Authorization

TeleMed2U, Inc. and Bridge, Inc. may use or disclose health information under your written authorization to the extent consistent with it. You may revoke an authorization at any time. Revocation stops future use or disclosure for covered purposes except where we already relied on the authorization.

Individuals Involved in Your Care

We may release information to a friend or family member involved in your care when we obtain consent, give you an opportunity to object and you do not, or reasonably infer that you do not object. We may also give information to someone helping pay for your care.

Unless you specifically request otherwise in writing, we may tell family or friends your condition and that you receive services from TeleMed2U or Bridge. We may disclose information to a disaster-relief entity so family can be notified of your condition, status, and location.

Research

Under certain circumstances, we may use and disclose medical information for research subject to a special approval process. Information may be reviewed in preparation for a research project so long as it does not leave Bridge’s possession. We will obtain specific permission if a researcher will access your name, address, or other identifying information.

Limitation on the Use of PHI for Paid Marketing

As required by federal and state law, we will obtain written authorization to use or disclose PHI for marketing, such as use of a photograph in advertising, except for activities constituting treatment or healthcare operations.

We will obtain written authorization before using PHI or making treatment or healthcare recommendations involving financial remuneration from a third party. Financial remuneration does not include in-kind payments or payments to implement disease-management programs. Promotional gifts of nominal value do not require authorization.

Refill reminders are excluded when remuneration is reasonably related to communication costs, including labor, supplies, and postage. Communications about generic equivalents, medication adherence, and self-administered drugs or delivery systems are considered refill reminders. Face-to-face marketing communications, including written product brochures or pamphlets, are permitted under HIPAA.

Public Health and Safety Issues

TeleMed2U, Inc. and Bridge, Inc. may share health information for disease prevention, product recalls, adverse-event reporting, suspected abuse, neglect, or domestic violence, and to prevent or reduce a serious threat to health or safety. If a provider believes you may cause serious bodily harm to yourself or another person, the provider may contact your emergency contact or emergency services.

As Required by Law

TeleMed2U, Inc. and Bridge, Inc. will share information when state or federal law requires it.

Organ and Tissue Donation Requests

TeleMed2U, Inc. and Bridge, Inc. may share information with organ-procurement organizations.

Medical Examiner or Funeral Director

TeleMed2U, Inc. and Bridge, Inc. may share information with a coroner, medical examiner, or funeral director when a person dies for identification, cause-of-death determinations, and other duties relating to decedents.

Workers’ Compensation

TeleMed2U, Inc. and Bridge, Inc. may disclose PHI as necessary to comply with workers’ compensation and similar programs relating to work-related illness or injury.

Health Oversight Activities

We may disclose information to health-oversight agencies for authorized audits, investigations, inspections, and licensure activities necessary to monitor healthcare systems, government programs, and civil-rights compliance.

Government Requests

TeleMed2U, Inc. and Bridge, Inc. may use or share health information with law-enforcement officials as required by law or under a court order, grand-jury subpoena, or administrative subpoena; with health-oversight agencies for authorized audits, investigations, inspections, licensing, and disciplinary actions; and for special government functions involving the military, Department of State, national security, presidential protective services, intelligence, or national-security purposes.

Lawsuits and Legal Actions

TeleMed2U and Bridge may disclose PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process when required efforts have been made to notify you or obtain an order protecting the requested information.

Notification of Breach

TeleMed2U, Inc. and Bridge, Inc. will notify you promptly if a breach may have compromised the privacy or security of your information.

Communications to You

We may use and disclose information to remind you of upcoming refills; tell you about possible treatment options or alternatives; and describe health-related products or services that may interest you.

We may contact you to encourage use or purchase of a healthcare-related product or service. If we receive direct or indirect payment for that communication, we will obtain prior written permission, except when the communication concerns a drug currently prescribed and payment is reasonable, or is made by a business partner under a written agreement.

Legal Requirement

We may release medical information when required by law even if the requirement is not specifically described above.

Electronic Consent and Online Access

If you are a parent or authorized guardian who signs this Notice or related consent forms online for a patient, electronic acceptance has the same legal effect as a handwritten signature. By accepting electronically, you confirm that you have read and understood the Notice and are authorized to act for the patient.

Changes to This Notice and Contact Information

TeleMed2U, Inc. and Bridge, Inc. reserve the right to change this Notice, and changes will apply to all information maintained about you. The current Notice will be available on written request and at www.telemed2u.com. Address written correspondence to TeleMed2U’s Privacy Officer at medrecs@telemed2u.com or Bridge’s Privacy Officer at legal@usebridge.com. Updated October 2026.