NOTICE OF PRIVACY PRACTICES

Testosterone Shots, PC (DBA: TestosteroneShotsCom)

Last Updated: May 15, 2026

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

IF YOU ARE EXPERIENCING A MEDICAL EMERGENCY, CALL 911 IMMEDIATELY.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

IMPORTANT PHARMACY AND PAYMENT CLARIFICATION

Testosterone Shots is an independent telemedicine business and is separate from any licensed pharmacy. Testosterone Shots collects payment only for telemedicine consultation, clinical review, care coordination, laboratory services, membership services, and related clinical services.

Testosterone Shots does not collect payment for prescription-only or pharmacy-only medication through Stripe or through its website checkout.

If a licensed provider determines that treatment is medically appropriate, the prescription may be sent to a licensed pharmacy partner. We may disclose your Protected Health Information to the pharmacy as necessary for prescription transmission, care coordination, patient contact, shipping verification, billing verification, medication fulfillment, pharmacist counseling where applicable, and pharmacy compliance.

The pharmacy contacts the patient directly to verify shipping information, verify billing information, and collect payment for the medication. The pharmacy is responsible for medication billing, payment processing, dispensing, pharmacist counseling where applicable, and shipping.

Testosterone Shots does not manufacture, compound, dispense, sell, handle, warehouse, ship, or collect payment for prescription medication.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

I. WHO WE ARE

This Notice of Privacy Practices, referred to as this “Notice,” describes the privacy practices of Testosterone Shots, PC and its affiliates, including certain affiliated professional entities, physicians, healthcare practitioners, workforce members, and other personnel, collectively referred to as “we,” “us,” or “our.”

Testosterone Shots operates as an independent telemedicine business. Healthcare services may be delivered remotely through HIPAA-secure electronic communications, where required by law.

Your Protected Health Information may be transmitted electronically to facilitate your telehealth consultations, support clinical review, coordinate care, coordinate prescription transmission to licensed pharmacy partners when treatment is approved, support pharmacy contact with the patient for shipping verification and billing verification, and process laboratory orders through third-party laboratory networks.

All such transmissions are conducted in accordance with applicable privacy and security requirements.

Testosterone Shots is separate from any licensed pharmacy. Licensed pharmacy partners are independent third-party entities responsible for their own pharmacy services, including medication billing, payment processing, dispensing, pharmacist counseling where applicable, shipping, and pharmacy compliance.

II. OUR PRIVACY OBLIGATIONS

We are required by law to maintain the privacy of your health information, referred to as “Protected Health Information” or “PHI,” and to provide you with this Notice of our legal duties and privacy practices with respect to your PHI.

We are also required to notify you following a breach of unsecured PHI, where required by law.

When we use or disclose your PHI, we are required to follow the terms of this Notice or other notice in effect at the time of the use or disclosure.

In the event of a breach of your unsecured PHI, we will notify you without unreasonable delay and in no case later than sixty (60) days following discovery of the breach, as required by the HIPAA Breach Notification Rule, 45 C.F.R. §§ 164.400–414.

III. PERMISSIBLE USES AND DISCLOSURES WITHOUT YOUR WRITTEN AUTHORIZATION

In certain situations, described in Section IV below, we must obtain your written authorization before using or disclosing your PHI.

We do not need written authorization for the following uses and disclosures.

A. Treatment, Payment, and Healthcare Operations

We may use and disclose PHI, but not Highly Confidential Information as defined in Section IV.B below, to provide treatment, obtain payment for services we provide to you, and conduct healthcare operations.

Treatment

We may use and disclose your PHI to provide treatment, support clinical review, coordinate care, and assist licensed healthcare providers in evaluating your health information.

For example, we may use your PHI to allow a licensed provider to review your medical history, symptoms, lab results, medications, allergies, treatment request, and other clinically relevant information.

We may also disclose PHI to other healthcare providers involved in your care, including licensed pharmacy partners that may receive prescriptions when treatment is approved, and laboratories that process your laboratory orders.

If a provider determines that treatment is medically appropriate and issues a prescription, we may disclose PHI to a licensed pharmacy partner for prescription transmission, patient contact, shipping verification, billing verification, pharmacist counseling where applicable, dispensing, medication fulfillment, and pharmacy compliance.

Payment

We may use and disclose your PHI to obtain payment for telemedicine consultation, clinical review, care coordination, laboratory services, membership services, and related non-pharmacy services that we provide to you. This may include sharing necessary information with third-party payment processors.

Testosterone Shots does not use Stripe or its website checkout to collect payment for prescription-only or pharmacy-only medication.

Medication payment, if any, is collected directly by the dispensing pharmacy. The pharmacy may contact you directly to verify billing information and collect payment for the medication.

Healthcare Operations

We may use and disclose your PHI for healthcare operations, including internal administration, quality assessment, compliance, auditing, credentialing, provider review, training, customer service, complaint resolution, business planning, security, fraud prevention, and activities that improve the quality and effectiveness of the care and services provided.

For example, we may use PHI to evaluate the quality and competence of physicians, nurse practitioners, other healthcare practitioners, support staff, technology systems, and service workflows.

Telehealth Services

Because healthcare services may be delivered through telehealth, your PHI, including consultation notes, prescription information, laboratory results, intake forms, medical history, communications, and related information, may be transmitted electronically through secure platforms.

We maintain administrative, physical, and technical safeguards designed to protect your PHI during electronic transmission and storage.

Pharmacy and Laboratory Coordination

We may disclose your PHI to licensed pharmacy partners for the purpose of prescription transmission, patient contact, shipping verification, billing verification, pharmacist counseling where applicable, dispensing, medication fulfillment, and pharmacy compliance when a Provider determines that treatment is medically appropriate.

We may also disclose your PHI to licensed laboratory networks for the purpose of processing diagnostic test orders, laboratory testing, specimen collection, result reporting, and related care coordination.

These disclosures are made to facilitate your care and related healthcare operations.

Licensed pharmacy partners are independent third-party entities and are separate from Testosterone Shots. Testosterone Shots does not dispense, sell, ship, handle, or collect payment for prescription medication. The pharmacy contacts the patient directly to verify shipping information, verify billing information, and collect payment for the medication.

B. Disclosure to Relatives, Close Friends, and Other Caregivers

We may use or disclose your PHI to a family member, other relative, close personal friend, caregiver, or any other person identified by you when you are present for, or otherwise available before, the disclosure if:

1. we obtain your agreement;

2. we provide you with the opportunity to object and you do not object; or

3. we reasonably infer from the circumstances that you do not object.

If you are not present, or the opportunity to agree or object cannot practically be provided because of incapacity or an emergency circumstance, we may use professional judgment to determine whether disclosure is in your best interests.

We will disclose only information directly relevant to that person’s involvement in your healthcare or payment related to your healthcare.

We may also disclose your PHI to notify or assist in notifying such persons of your location, general condition, or death, where permitted by law.

C. Public Health Activities

We may disclose your PHI for public health activities, including:

1. reporting health information to public health authorities for preventing or controlling disease, injury, or disability;

2. reporting child abuse or neglect to public health authorities or other government authorities authorized by law;

3. reporting information about products or services under the jurisdiction of the U.S. Food and Drug Administration;

4. alerting a person who may have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading a disease or condition;

5. reporting information to your employer as required under laws addressing work-related illnesses and injuries or workplace medical surveillance.

D. Victims of Abuse, Neglect, or Domestic Violence

If we reasonably believe you are a victim of abuse, neglect, or domestic violence, we may disclose PHI to a governmental authority, including a social service or protective services agency, authorized by law to receive such reports.

E. Health Oversight Activities

We may disclose your PHI to a health oversight agency that oversees the healthcare system and is charged with responsibility for ensuring compliance with applicable laws and regulations, including oversight of government health programs, licensing, audits, inspections, investigations, and disciplinary actions.

F. Judicial and Administrative Proceedings

We may disclose your PHI in the course of a judicial or administrative proceeding in response to a court order, subpoena, discovery request, or other lawful process, as required or permitted by law.

G. Law Enforcement

We may disclose your PHI to police or other law enforcement officials as required or permitted by law, including in response to a court order, warrant, subpoena, summons, administrative request, or other legal process.

H. Decedents

We may disclose PHI to a coroner, medical examiner, or funeral director as authorized by law.

I. Research

We may use or disclose your PHI for research purposes without your authorization if an Institutional Review Board or Privacy Board approves a waiver of authorization, or as otherwise permitted by law.

J. Health or Safety

We may use or disclose your PHI when necessary to prevent or lessen a serious and imminent threat to a person’s or the public’s health or safety.

K. Specialized Government Functions

We may use and disclose your PHI to government units with special functions, such as the U.S. military, national security agencies, protective services, correctional institutions, or the U.S. Department of State, under certain circumstances and as permitted by law.

L. Workers’ Compensation

We may disclose your PHI as authorized by and to the extent necessary to comply with state law relating to workers’ compensation or similar programs.

M. As Required by Law

We may use and disclose your PHI when required to do so by any other law not already described in the preceding categories.

IV. USES AND DISCLOSURES REQUIRING YOUR WRITTEN AUTHORIZATION

A. Use or Disclosure With Your Authorization

We must obtain your written authorization for uses and disclosures of PHI for marketing purposes where required by law, disclosures that constitute the sale of PHI, and other uses or disclosures not described in this Notice.

For example, you may need to complete and sign an authorization before we can send PHI to a life insurance company, an attorney, or another party not otherwise involved in your treatment, payment, or healthcare operations.

B. Uses and Disclosures of Highly Confidential Information

Federal and state law may require special privacy protections for certain highly confidential information about you, referred to as “Highly Confidential Information.”

Highly Confidential Information may include certain information related to:

1. mental health and developmental disability services;

2. alcohol or substance use disorder prevention, treatment, and referral;

3. HIV/AIDS testing, diagnosis, or treatment;

4. sexually transmitted diseases;

5. genetic testing;

6. child abuse or neglect;

7. domestic abuse of an adult with a disability;

8. sexual assault;

9. psychotherapy notes;

10. other information given special protection under applicable law.

In order for us to disclose Highly Confidential Information for a purpose other than those permitted by law, we must have your written authorization.

C. Revocation of Your Authorization

You may withdraw or revoke your written authorization at any time, except to the extent we have already taken action in reliance on it.

To revoke an authorization, you must submit a written statement to the Privacy Officer identified below. A revocation form is available upon request.

V. YOUR RIGHTS REGARDING YOUR PROTECTED HEALTH INFORMATION

A. Right to Further Information and Complaints

If you would like more information about your privacy rights, if you are concerned that we have violated your privacy rights, or if you disagree with a decision we made about access to your PHI, you may contact our Compliance and Privacy Officer at:

Email: [email protected]

Phone/Text: 323-283-9219

Mail:

Testosterone Shots, PC

ATTN: Privacy Officer

638 1/2 N Robertson Blvd

West Hollywood, CA 90069

You may also file a written complaint with the Director, Office for Civil Rights of the U.S. Department of Health and Human Services.

You can file a complaint online at www.hhs.gov/ocr/privacy/hipaa/complaints/ or by calling 1-800-368-1019.

We will not retaliate against you in any way for filing a complaint with us or with the U.S. Department of Health and Human Services.

B. Right to Request Additional Restrictions

You have the right to request a restriction on the uses and disclosures of your PHI for treatment, payment, and healthcare operations purposes.

You also have the right to request restrictions on disclosures to individuals involved in your care or payment for your care, such as a family member, relative, close personal friend, or caregiver.

You also have the right to request that we not disclose PHI to a health plan for payment or healthcare operations purposes if the PHI pertains solely to a healthcare item or service for which you, or someone on your behalf other than the health plan, paid out of pocket in full.

We are required to comply with your request for this type of restriction where required by law. For other restriction requests, we are not required to agree, but we will attempt to accommodate reasonable requests when appropriate.

To request restrictions, contact our Compliance and Privacy Officer.

C. Right to Receive Confidential Communications

You may request that we communicate with you about your PHI by alternative means or at alternative locations.

For example, you may ask that we contact you only by email, only by phone, or at a different mailing address.

We will accommodate reasonable written requests.

D. Right to Inspect and Copy Your Health Information

You have the right to inspect and obtain a copy of PHI maintained in your medical record and billing records, subject to limited exceptions under applicable law.

You may request records in paper or electronic format. If you request an electronic copy, we will provide it in the electronic format you request if readily producible, or in another readable electronic format if not.

To request your records, contact our Privacy Officer at [email protected].

If you request copies, we may charge a reasonable, cost-based fee, as permitted by law. This fee may include labor for copying PHI, supplies for creating paper copies or electronic media, postage if you request mailing, and the cost of preparing an explanation or summary if you agree in advance.

E. Right to Request an Amendment

You have the right to request that we amend PHI maintained in your medical record or billing records.

To request an amendment, contact our Compliance and Privacy Officer at [email protected].

We will comply with your request unless we believe the information is accurate and complete, was not created by us, is not part of the designated record set, is not available for inspection, or another permitted reason applies.

If we deny your request, we will provide a written explanation of the denial and your rights.

F. Right to Receive an Accounting of Disclosures

You have the right to request an accounting of certain disclosures of your PHI made by us during a period of time before the date of your request, not to exceed six (6) years.

This accounting does not include certain disclosures, such as disclosures made for treatment, payment, or healthcare operations, disclosures made to you, disclosures made pursuant to your authorization, and other disclosures excluded by law.

If you request an accounting more than once during a twelve (12) month period, we may charge a reasonable fee for additional accountings. We will inform you of any fee in advance so you may withdraw or modify your request.

G. Right to Receive a Copy of This Notice

You have the right to receive a paper or electronic copy of this Notice upon request.

To request a copy, contact:

Testosterone Shots, PC

ATTN: Privacy Officer

638 1/2 N Robertson Blvd

West Hollywood, CA 90069

Email: [email protected]

Phone/Text: 323-283-9219

VI. PHARMACY PAYMENT AND BILLING PRIVACY CLARIFICATION

For clarity, Testosterone Shots is an independent telemedicine business and is separate from any licensed pharmacy.

Testosterone Shots collects payment only for telemedicine consultation, clinical review, care coordination, laboratory services, membership services, and related clinical services.

Testosterone Shots does not collect payment for prescription-only or pharmacy-only medication through Stripe or through its website checkout.

If treatment is approved and a prescription is issued, the prescription may be sent to a licensed pharmacy partner. We may disclose PHI to the pharmacy as necessary for prescription transmission, patient contact, shipping verification, billing verification, dispensing, medication fulfillment, pharmacist counseling where applicable, and pharmacy compliance.

The pharmacy contacts the patient directly to verify shipping information, verify billing information, and collect payment for the medication.

Any medication payment information collected by the pharmacy is collected directly by the pharmacy, not by Testosterone Shots.

The pharmacy is responsible for its own privacy practices, medication billing, payment processing, dispensing, pharmacist counseling where applicable, shipping, and compliance with pharmacy laws and regulations.

VII. EFFECTIVE DATE AND DURATION OF THIS NOTICE

A. Effective Date

This Notice is effective as of May 15, 2026.

B. Right to Change Terms of This Notice

We may change the terms of this Notice at any time.

If we change this Notice, we may make the new notice terms effective for all PHI that we maintain, including information created or received before issuing the new notice.

If we change this Notice, we will post the updated notice on our website at testosteroneshots.com. You may also obtain any updated notice by contacting [email protected].

VIII. PRIVACY OFFICER

You may contact the Privacy Officer with any questions, concerns, complaints, or requests related to this Notice at:

Testosterone Shots, PC

ATTN: Privacy Officer

638 1/2 N Robertson Blvd

West Hollywood, CA 90069

Email: [email protected]

Phone/Text: 323-283-9219

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

IX. SUMMARY OF PHARMACY AND PAYMENT TERMS

For clarity:

- Testosterone Shots is an independent telemedicine business and is separate from any licensed pharmacy.

- Testosterone Shots collects payment only for telemedicine consultation, clinical review, care coordination, laboratory services, membership services, and related clinical services.

- Testosterone Shots does not collect payment for prescription-only or pharmacy-only medication through Stripe or through its website checkout.

- If a licensed provider determines that treatment is medically appropriate, the prescription may be sent to a licensed pharmacy partner.

- We may disclose PHI to the pharmacy as necessary for prescription transmission, patient contact, shipping verification, billing verification, dispensing, medication fulfillment, pharmacist counseling where applicable, and pharmacy compliance.

- The pharmacy contacts the patient directly to verify shipping information, verify billing information, and collect payment for the medication.

- Medication payment information collected by the pharmacy is collected directly by the pharmacy, not by Testosterone Shots.

- The pharmacy is responsible for medication billing, payment processing, dispensing, pharmacist counseling where applicable, shipping, and pharmacy compliance.

- Testosterone Shots does not manufacture, compound, dispense, sell, handle, warehouse, ship, or collect payment for prescription medication.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

© 2026 Testosterone Shots, PC. All rights reserved.