Privacy & Terms

Thrive Rx LLC's Notice of Privacy Practices

Effective Date: July 1, 2025 (Revised August 4, 2026)

Purpose

Thrive Rx LLC ("We") respects your privacy. We are also legally required to maintain the privacy of your protected health information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).

As part of our commitment and legal compliance, we are providing you with this Notice of Privacy Practices ("Notice"). This Notice describes:

• •Our legal duties and privacy practices regarding your PHI, including our duty to notify you following a data breach of your unsecured PHI.
• •Our permitted uses and disclosures of your PHI.
• •Your rights regarding your PHI.

Contact

If you have any questions about this Notice, please contact info@thriverx.care.

PHI Defined

Your PHI:

• •Is health information about you which someone may use to identify you, and which we keep or transmit in electronic, oral, or written form.

Includes information such as your:

• •Name
• •Contact information
• •Past, present, or future physical or mental health or medical conditions
• •Payment for health care products or services
• •Prescriptions

Scope

We create a record of the care and health services you receive, to provide your care, and to comply with certain legal requirements. This Notice applies to all the PHI that we generate.

We and our employees and other workforce members follow the duties and privacy practices that this Notice describes and any changes once they take effect.

Changes to this Notice

We can change the terms of this Notice, and the changes will apply to all information we have about you. The new notice will be available on request, in our office, and on our website.

Data Breach Notification

We will promptly notify you if a data breach occurs that may have compromised the privacy or security of your PHI.

Your Rights

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.

You have the right to:

Get a copy of your PHI

You can ask to see or obtain an electronic or paper copy of the PHI that we maintain about you (right to request access).

Ask us to correct your medical record

You may ask us to correct or amend PHI that we maintain about you that you think is incorrect or inaccurate.

Ask us to limit what we use or share

You have the right to ask us to limit what we use or share about your PHI (right to request restrictions). You can contact us and request us not to use or share certain PHI for treatment, payment, or operations or with certain persons involved in your care. For these requests:

• •We are not required to agree;
• •We may say "no" if it would affect your care; but
• •We will agree not to disclose information to a health plan for purposes of payment or health care operations if the requested restriction concerns a health care item or service for which you or another person, other than the health plan, paid in full out-of-pocket, unless it is otherwise required by law.

Get a list of those with whom we've shared your PHI

You have the right to request an accounting of certain PHI disclosures that we have made. For these requests, we will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures, such as any you asked us to make.

Choose someone to act for you

If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your PHI.

Request confidential communications

You have the right to request that we communicate with you about health matters in a certain way or at a certain location. For example, you can ask that we only contact you at work or at a specific address. For these requests:

• •You must specify how or where you wish to be contacted; and
• •We will accommodate reasonable requests.

Make a complaint

You have the right to complain if you feel we have violated your rights. We will not retaliate against you for filing a complaint. You may either file a complaint:

• •Directly with us by contacting info@thriverx.care; or
• •With the Office for Civil Rights at the US Department of Health and Human Services by visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.

Your Choices

For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, please contact us and we will make reasonable efforts to follow your instructions.

In these cases, you have both the right and choice to tell us whether to:

• •Share information with your family, close friends, or others involved in your care.

In these cases, we will not share your information unless you give us your written permission:

• •Marketing purposes.
• •Selling or otherwise receiving compensation for disclosing your PHI.
• •Other uses and disclosures not described in this Notice.

You may revoke your authorization at any time, but it will not affect information that we already used and disclosed.

Uses and Disclosures of Your PHI

The law permits or requires us to use or disclose your PHI for various reasons, which we explain in this Notice. We have included some examples, but we have not listed every permissible use or disclosure. When using or disclosing PHI or requesting your PHI from another source, we will make reasonable efforts to limit our use, disclosure, or request about your PHI to the minimum we need to accomplish our intended purpose.

Uses and Disclosures for Treatment, Payment, or Health Care Operations

Treatment.

We may use or disclose your PHI and share it with other professionals who are treating you, including doctors, nurses, technicians, medical students, or hospital personnel involved in your care. For example, we might disclose information about your overall health condition to physicians who are treating you for a specific injury or condition.

Billing and payment.

We may use and disclose limited PHI as necessary to obtain payment for the services you request. This may include processing direct payments; issuing superbills upon request; and coordinating reimbursement with health savings accounts or flexible spending accounts (HSA/FSA). If you dispute a charge with your bank, credit card company, or payment processor, we may disclose the minimum necessary information — such as the date of service, the service provided, your signed consent to treatment, and payment records — to respond to the dispute and demonstrate that services were rendered. Any such disclosure will be limited to the minimum necessary information for the payment purpose. Thrive Rx does not bill insurance plans directly.

Unpaid balances.

If an account remains unpaid, we may disclose the minimum necessary information — such as your name, contact information, dates of service, and amount owed — to a collection agency or attorney for the purpose of collecting the balance. We do not disclose clinical details for collection purposes.

Running our organization.

We may use and disclose your PHI to run our practice, improve your care, and contact you when necessary. For example, we may use your PHI to manage the services and treatment you receive or to monitor the quality of our health care services.

Other Uses and Disclosures

We may share your information in other ways, usually for public health or research purposes or to contribute to the public good. For more information on permitted uses and disclosures, see www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html.

For example, these other uses and disclosures may involve:

Our business associates.

We may use and disclose your PHI to outside persons or entities that perform services on our behalf, such as auditing, legal, or transcription (Business Associates). The law requires our business associates and their subcontractors to protect your PHI in the same way we do. We also contractually require these parties to use and disclose your PHI only as permitted and to appropriately safeguard your PHI.

Complying with the law.

For example, we will share your PHI if the Department of Health and Human Services requires it when investigating our compliance with privacy laws.

Helping with public health and safety issues.

For example, we may share your PHI to:

• •Report injuries, births, and deaths;
• •Prevent disease;
• •Report adverse reactions to medications or medical device product defects;
• •Report suspected child neglect or abuse, or domestic violence; or
• •Avert a serious threat to public health or safety.

Responding to legal actions.

For example, we may share your PHI to respond to:

• •A court or administrative order or subpoena;
• •Discovery request; or
• •Another lawful process.

Addressing workers' compensation, law enforcement, or other government requests.

For example, we may use and disclose your PHI for:

• •Workers' compensation claims;
• •Health oversight activities by federal or state agencies;
• •Law enforcement purposes or with a law enforcement official; or
• •Specialized government functions, such as military and veterans' activities, national security and intelligence, presidential protective services, or medical suitability.

Contact Us

For questions about this Notice or to exercise your rights, please contact us:

Cookie Policy

Optional internal analytics, advertising and external media stay off unless you choose them. Internal analytics counts only coarse homepage clicks, without names, medical details, form submissions, identity, URLs or referrers. If you allow advertising, Google Analytics, Meta/Facebook Pixel, LinkedIn Insight and OpenAI may receive your IP address, browser information and advertising identifiers through isolated, restricted documents. OpenAI measures only homepage booking-button clicks, not completed appointments. Its isolated document may receive the OpenAI ad click reference, but cannot access website forms, parent-page content or first-party cookies. We do not send health-page visits or patient submissions to these providers. Browser controls may be needed to clear third-party cookies already set. This choice is not authorization to use or disclose medical information and is not a HIPAA authorization.

Website storage and optional services:

• •Essential: First-party session/authentication, form, and cart storage may be needed for site and account functions. Retention varies by function and provider; signing out or clearing browser storage may remove local session data. These are not controlled by the media choice.
• •Preference: A first-party localStorage entry (trx_privacy_choice_v2) saves your independent choices for internal analytics, advertising and external media for up to 180 days, then expires. All are off without an explicit choice; older media-only choices never enable analytics or advertising. You can change or withdraw choices through Privacy settings in the footer. We remove known old analytics identifiers where accessible.
• •Optional external media: Only if you allow it, YouTube thumbnails (img.youtube.com), videos (youtube-nocookie.com), and off-site images in blog articles may connect to their hosts, receive your IP address and set their own cookies. Their retention is governed by their policies. We send no referrer with these requests. You can withdraw permission here or in the footer; media then unmounts immediately.

Links you choose to open, including patient registration, social sharing and external manufacturer instructions, go to separate sites with their own privacy practices. Our first-party server and hosting providers may process necessary request logs; this website setting does not control those records or medical records.