HIPAA Notice

KyneRx, HIPAA Notice of Privacy Practices

Effective Date: May 5, 2025

Important Notice

This Notice of Privacy Practices describes how KyneRx and its affiliated medical providers may use and disclose your protected health information and how you can get access to this information. Please review it carefully.

Who Is Covered by This Notice

This notice applies to:

KyneRx, operated by Morph NC LLC
Arora Health and Aesthetics LLC
Medical Director Sean Arora, MD and all affiliated prescribing physicians
All staff, contractors, and business associates acting on behalf of KyneRx

What Is Protected Health Information

Protected Health Information, referred to as PHI, is any individually identifiable health information that relates to your past, present, or future physical health condition, the provision of healthcare services to you, or payment for those services. This includes but is not limited to:

Your name, date of birth, and address
Lab results and diagnostic information
Treatment plans and prescription records
Medical history and clinical notes
Payment and insurance information

How We Use and Disclose Your PHI

Treatment We use and share your PHI to provide, coordinate, and manage your telehealth care. This includes sharing information with licensed physicians, compounding pharmacies, and laboratory partners directly involved in your treatment.

Payment We may use your PHI to process and collect payment for services rendered, including prescription fulfillment and lab testing services.

Healthcare Operations We may use your PHI for internal operations including quality improvement, physician training, compliance monitoring, and administrative functions directly related to your care.

Required by Law We may disclose your PHI when required by federal or state law, including disclosures to public health authorities, law enforcement, or as required by court order or subpoena.

Breach Notification If a breach of your unsecured PHI occurs, we will notify you as required under the HIPAA Breach Notification Rule within 60 days of discovery of the breach.

Other Permitted Disclosures We may also disclose your PHI in the following circumstances without your written authorization:

To prevent a serious threat to health or public safety
To comply with workers compensation laws
To military and veterans agencies if applicable
To correctional institutions if applicable
For research purposes under strict protocols and oversight

All Other Uses Require Your Authorization Any use or disclosure of your PHI beyond the purposes listed above will only occur with your written authorization. You may revoke that authorization at any time in writing, except where we have already acted in reliance on it.

Your Rights Regarding Your PHI

Right to Access You have the right to inspect and obtain a copy of your PHI held by KyneRx, including lab results, consultation notes, and treatment records. Requests must be submitted in writing. We will respond within 30 days.

Right to Amend You have the right to request corrections to your PHI if you believe it is inaccurate or incomplete. We may deny the request if we determine the information is accurate and complete.

Right to an Accounting of Disclosures You have the right to request a list of instances where we have disclosed your PHI for purposes other than treatment, payment, or healthcare operations during the past six years.

Right to Request Restrictions You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to all restrictions but will comply where required by law.

Right to Confidential Communications You have the right to request that we communicate your PHI in a specific way or at a specific location, such as a different email address or phone number.

Right to a Paper Copy of This Notice You have the right to receive a paper copy of this notice at any time, even if you have agreed to receive it electronically. Contact us to request a copy.

Right to File a Complaint If you believe your privacy rights have been violated, you have the right to file a complaint with KyneRx directly or with the U.S. Department of Health and Human Services Office for Civil Rights at:

HHS Office for Civil Rights 200 Independence Avenue, SW Washington, DC 20201 1-877-696-6775 www.hhs.gov/ocr

Filing a complaint will not affect your access to care or services through KyneRx.

Our Duties Under HIPAA

KyneRx is required by law to:

Maintain the privacy and security of your PHI
Provide you with this notice of our privacy practices
Follow the terms of this notice currently in effect
Notify you in the event of a breach of your unsecured PHI
Not retaliate against you for exercising your privacy rights

Data Security

KyneRx uses industry-standard encryption and security protocols to protect your PHI from unauthorized access, disclosure, alteration, and destruction. All health data transmitted through our platform is encrypted and stored securely in compliance with HIPAA technical safeguard requirements.

Business Associate Agreements

KyneRx works with licensed compounding pharmacies, laboratory partners, and technology vendors to deliver our services. All third-party partners who access your PHI are bound by HIPAA-compliant Business Associate Agreements and are prohibited from using your PHI for any purpose beyond the services they provide directly in connection with your care.

Changes to This Notice

KyneRx reserves the right to update this HIPAA Notice of Privacy Practices at any time. Any changes will apply to all PHI we currently maintain. The updated notice will be posted on our website with a revised effective date. You may request a copy of the current notice at any time.

Patient Acknowledgment of Receipt

By using KyneRx telehealth services and proceeding with a consultation, you acknowledge that you have received, read, and understood this HIPAA Notice of Privacy Practices. A formal acknowledgment of receipt will be collected during your medical intake process.

If you have questions about this notice or wish to exercise any of your rights, please contact our Privacy Officer at:

Contact for HIPAA Inquiries

Business Name: KyneRx, Morph NC LLC

Privacy Officer Email: support@kynerx.com

Phone: (910) 807-3821

Mailing Address: KyneRx, c/o Arora Health and Aesthetics LLC, 300 Lenora Street, Seattle, WA 98121

Hours: Monday to Friday, 9:00 AM to 6:00 PM EST

Attorney Review Notice

This HIPAA Notice of Privacy Practices has been prepared based on standard HIPAA requirements and should be reviewed by a licensed healthcare attorney before final publication. KyneRx and its operators are advised to obtain legal counsel to confirm this document meets all applicable federal and state requirements specific to their telehealth practice and state licensing footprint.