Legal

Patient Privacy Practices

Effective Date: July 2, 2026

HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Uplevel Bio operates the patient-facing platform that connects you with independent licensed clinicians (through the Asher Med provider network) and with licensed 503A compounding pharmacies. In connection with your care, we and our provider network create, receive, and maintain "Protected Health Information" (PHI) about you as that term is defined under the federal Health Insurance Portability and Accountability Act (HIPAA), 45 CFR Parts 160 and 164.

This Notice describes how PHI about you may be used and disclosed, and how you can get access to that information. It applies to PHI held by Uplevel Bio in its capacity as a business associate of the Asher Med provider network and by the clinicians in that network in their capacity as covered entities.

How we may use and disclose your PHI

For treatment. We use and disclose PHI to allow independent licensed clinicians to review your intake, evaluate your health history and goals, prescribe protocols, monitor your response, and coordinate care. Your treating provider may share PHI with other providers involved in your care. For payment. We use and disclose PHI to process payments for services and prescriptions, to bill for services rendered, and to coordinate with pharmacy partners on fulfillment. For healthcare operations. We use PHI for internal operations, including quality assessment and improvement, credentialing of providers, compliance with regulatory requirements, and audit and legal services. Uses and disclosures that require your written authorization:
  • Sale of PHI (we do not sell PHI)
  • Use of PHI for marketing purposes (we do not market to you using your PHI without authorization)
  • Use of psychotherapy notes for purposes other than treatment, payment, or healthcare operations
  • Any other use or disclosure not described in this Notice

You may revoke a written authorization at any time by writing to us at privacy@uplevel.bio. Revocation will not affect uses or disclosures made in reliance on the authorization before we received your revocation.

Uses and disclosures that do not require your authorization. In addition to treatment, payment, and healthcare operations, HIPAA permits certain uses and disclosures without your authorization, including:
  • To you or your personal representative
  • For public-health activities (such as disease reporting)
  • For victims of abuse, neglect, or domestic violence (with limits)
  • For health oversight activities by government agencies
  • For judicial and administrative proceedings under valid legal process
  • For law enforcement purposes, within limits set by HIPAA
  • To coroners, medical examiners, and funeral directors
  • For organ and tissue donation
  • For research, subject to specific HIPAA protections
  • To avert a serious threat to health or safety
  • For specialized government functions (such as military and national security)
  • For workers' compensation as authorized by law

Your rights regarding PHI

You have the following rights under HIPAA with respect to PHI we hold about you.

Right to inspect and copy your PHI. You have the right to inspect and get an electronic or paper copy of the PHI we maintain about you. Requests should be sent to privacy@uplevel.bio. We will respond within 30 days (with the possibility of one 30-day extension). We may charge a reasonable, cost-based fee for copies. Right to request amendment of PHI. You have the right to request that we amend PHI that you believe is inaccurate or incomplete. Requests must be in writing and include a reason. We may deny a request if the PHI was not created by us, is not part of the designated record set, is not part of the information you would be permitted to inspect, or is already accurate and complete. Right to an accounting of disclosures. You have the right to request an accounting of certain disclosures we have made of your PHI outside of treatment, payment, and healthcare operations. Your first request in any 12-month period is free; we may charge a reasonable fee for additional requests within that period. Right to request restrictions. You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, except that we must agree to a request to restrict disclosure to a health plan of PHI about a service for which you have paid in full out of pocket. Right to request confidential communications. You have the right to request that we communicate with you about medical matters in a specific way or at a specific location. We will accommodate reasonable requests. Right to a paper copy of this Notice. You have the right to a paper copy of this Notice at any time, even if you have agreed to receive it electronically. Request one at privacy@uplevel.bio. Right to be notified of a breach. You have the right to be notified, without unreasonable delay, of any breach of unsecured PHI that affects you, as required by HIPAA and the HITECH Act.

Our duties

We are required by law to maintain the privacy of PHI, to provide you with this Notice of our legal duties and privacy practices, to notify you of any breach of unsecured PHI, and to abide by the terms of the Notice currently in effect.

We reserve the right to change this Notice and to make the new Notice effective for all PHI we maintain. We will post the current Notice on our website with the effective date.

Your right to complain

If you believe your privacy rights have been violated, you may file a complaint with us at privacy@uplevel.bio or in writing to Uplevel Bio, Attn: Privacy Officer, 9 Maple Street, Scituate, MA 02066. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights, at:

  • Web: https://www.hhs.gov/hipaa/filing-a-complaint/
  • Phone: 1-877-696-6775
  • Mail: 200 Independence Avenue SW, Washington, DC 20201

We will not retaliate against you for filing a complaint.

Contact — Privacy Officer

For questions about these Patient Privacy Practices, to exercise any of the rights described above, or to file a complaint:

Email: privacy@uplevel.bio Mail: Uplevel Bio, Attn: Privacy Officer, 9 Maple Street, Scituate, MA 02066