Effective Date: August 10, 2026

This Notice describes how medical information about you may be used and disclosed by Quorum Prosthetics and how you may access and control certain information about your care.

Please review this Notice carefully.

This Notice applies to Quorum Prosthetics and the healthcare professionals, staff members, and other workforce members who provide services on behalf of Quorum at the locations covered by this Notice.

Your Rights

You have certain rights regarding your health information. This section explains those rights and how you may exercise them.

Get a Copy of Your Health Information

You may ask to inspect or receive an electronic or paper copy of your medical record and other health information that we maintain about you.

We will generally provide the information within 30 days of receiving your request. We may charge a reasonable, cost-based fee when permitted by law.

In limited circumstances, we may deny access to certain information. If we do, we will explain the reason and tell you whether the decision may be reviewed.

Ask Us to Correct Your Health Information

If you believe information in your medical record is incorrect or incomplete, you may ask us to amend it.

We may deny the request in certain circumstances. If we deny your request, we will provide an explanation in writing, generally within 60 days.

Request Confidential Communications

You may ask us to communicate with you in a particular way or at a particular location.

For example, you may ask us to:

• Call a specific telephone number
• Use email rather than telephone when appropriate
• Send mail to a different address
• Avoid leaving detailed voicemail messages

We will accommodate reasonable requests.

Ask Us to Limit What We Use or Share

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

We are generally not required to agree to every requested restriction. If we agree, however, we will follow the restriction except when disclosure is necessary to provide emergency treatment or otherwise permitted by law.

If you pay for a healthcare service or item completely out of pocket, you may ask us not to disclose information about that service or item to your health plan for payment or healthcare operations. We will honor that request unless disclosure is required by law.

Get a Record of Certain Disclosures

You may request an accounting of certain disclosures of your health information made during the six years before your request.

The accounting will generally identify:

• Who received the information
• What information was disclosed
• When the disclosure occurred
• Why the disclosure was made

Certain disclosures are not included, such as many disclosures made for treatment, payment, healthcare operations, or disclosures you specifically authorized.

One accounting during a 12 month period will generally be provided without charge. We may charge a reasonable, cost-based fee for additional requests during the same period.

Get a Copy of This Notice

You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

Choose Someone to Act for You

If another person has legal authority to act on your behalf, such as a legal guardian, healthcare agent, or person holding an appropriate medical power of attorney, that person may exercise certain privacy rights for you.

We may require documentation establishing that person's authority before taking action.

File a Privacy Complaint

You may file a complaint if you believe your privacy rights have been violated.

You may contact:

Quorum Prosthetics - Attn: AJ Johnson
561 E Garden Drive, Unit H Windsor, Colorado 80550
(970) 686-2266
info@opquorum.com
www.quorumprosthetics.com

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

Quorum Prosthetics will not retaliate against you for making a privacy complaint.

Your Choices

For certain uses and disclosures of your health information, you may tell us your preferences.

Family, Friends, and Others Involved in Your Care

You may tell us whether we may share relevant information with family members, friends, caregivers, or others involved in your care or payment for your care.

If you are unable to communicate your preference, we may disclose information when we reasonably determine that doing so is in your best interest and is permitted by law.

We may also disclose information when necessary to prevent or reduce a serious and imminent threat to health or safety.

Marketing

We generally will not use or disclose your protected health information for marketing purposes when HIPAA requires your written authorization.

General communications about Quorum services that do not involve an impermissible use of protected health information may be handled separately under applicable law.

Sale of Health Information

We will not sell your protected health information when HIPAA requires your written authorization for such a transaction.

Psychotherapy Notes

If Quorum ever maintains psychotherapy notes as that term is defined under HIPAA, most uses or disclosures of those notes require your written authorization.

Fundraising

We may contact you about fundraising when permitted by law.

If we send fundraising communications based on information permitted to be used for that purpose, you have the right to tell us not to contact you again for fundraising.

How We May Use and Share Your Health Information

HIPAA allows or requires us to use and disclose your health information for certain purposes without obtaining a separate authorization each time.

Treatment

We may use and share your health information to provide, coordinate, and manage your healthcare.

For example, we may share relevant information with:

• Your prosthetist or orthotist
• Physicians
• Physical therapists
• Occupational therapists
• Rehabilitation professionals
• Hospitals or rehabilitation facilities
• Other healthcare providers involved in your care

We may also use your information to design, fabricate, fit, adjust, repair, or otherwise provide prosthetic or orthotic care and related services.

Healthcare Operations

We may use and disclose your health information to operate our organization and improve the quality of care we provide.

Examples may include:

• Quality improvement activities
• Staff training
• Credentialing
• Compliance activities
• Patient service activities
• Business planning
• Internal auditing
• Evaluating the performance of our services
• Contacting you when necessary regarding your care

Payment

We may use and disclose information in order to obtain payment for healthcare services.

For example, we may provide necessary information to:

• Health insurance companies
• Medicare or Medicaid
• Veterans healthcare programs
• Other payers
• Billing and claims processing services

Information may be used to determine eligibility, obtain authorization, submit claims, respond to payer inquiries, and collect payment.

Appointment and Care Communications

We may use your information to contact you regarding:

• Appointments
• Appointment reminders
• Scheduling changes
• Follow-up care
• Prosthetic or orthotic services
• Treatment alternatives
• Health-related benefits or services that may be relevant to your care

Business Associates

We may share protected health information with outside companies or individuals that perform services for Quorum when they need the information to perform those services.

When required by HIPAA, these organizations must agree to appropriately safeguard protected health information.

Examples may include certain billing, information technology, records management, legal, administrative, or other service providers.

Other Uses and Disclosures Permitted or Required by Law

We may also use or disclose health information in other circumstances permitted or required by law.

Public Health and Safety

We may disclose information for certain public health activities, including:

• Preventing or controlling disease or injury
• Reporting certain injuries or conditions
• Reporting adverse events or product problems
• Supporting product recalls
• Reporting suspected abuse, neglect, or domestic violence when permitted or required by law
• Preventing or reducing a serious threat to health or safety

Research

We may use or disclose health information for research when the research meets applicable legal requirements.

When a written authorization or another form of approval is required, we will obtain it before using or disclosing your information.

Compliance With Law

We may disclose health information when required by federal, state, or local law.

We may also disclose information to the U.S. Department of Health and Human Services when necessary to demonstrate our compliance with federal health information privacy requirements.

Workers' Compensation

We may disclose health information as permitted or required for workers' compensation programs or similar programs established by law.

Health Oversight Activities

We may disclose information to authorized health oversight agencies for activities such as:

• Audits
• Investigations
• Inspections
• Licensure activities
• Government healthcare program oversight
• Other activities authorized by law

Law Enforcement

We may disclose health information for certain law enforcement purposes when the disclosure is permitted or required by law.

Legal Proceedings

We may disclose health information in response to certain court or administrative orders, subpoenas, discovery requests, or other lawful legal processes when the requirements of applicable law are met.

Coroners, Medical Examiners, and Funeral Directors

When permitted by law, we may disclose information to a coroner, medical examiner, or funeral director following an individual's death.

Organ and Tissue Donation

When applicable, we may disclose information to organizations involved in organ, eye, or tissue donation and transplantation.

Government Functions

We may disclose health information when permitted by law for certain government activities, including military, national security, protective services, or other authorized government functions.

Substance Use Disorder Records

Certain substance use disorder treatment records may receive additional protections under federal law, including 42 CFR Part 2.

To the extent Quorum Prosthetics receives or maintains records protected by these laws, additional restrictions may apply.

Information from records protected by 42 CFR Part 2 generally may not be used or disclosed in civil, criminal, administrative, or legislative investigations or proceedings against a patient unless legally required conditions are satisfied, which may include the patient's written consent or an appropriate court order and subpoena.

Where these additional protections apply, Quorum will follow them.

Uses Requiring Your Written Authorization

Other uses or disclosures of your health information that are not described in this Notice will generally be made only with your written authorization when required by law.

If you give us written authorization, you may revoke it in writing at any time.

Revoking an authorization will not affect actions already taken in reliance on your authorization before we received the revocation.

Our Responsibilities

Quorum Prosthetics is committed to protecting the privacy and security of your protected health information.

We are required by applicable law to:

• Maintain the privacy and security of protected health information
• Provide you with this Notice explaining our privacy practices and legal responsibilities
• Follow the privacy practices described in the Notice currently in effect
• Notify affected individuals following certain breaches of unsecured protected health information as required by law
• Respect your privacy rights under applicable federal and state law

We will not use or disclose your protected health information in a manner inconsistent with this Notice unless you authorize us to do so or the use or disclosure is otherwise permitted or required by law.

Additional Privacy Protections

Certain types of health information may receive greater protection under federal or state law.

When another applicable law provides greater privacy protection than HIPAA, Quorum Prosthetics will comply with the applicable requirements.

Changes to This Notice

We may change the terms of this Notice and our privacy practices.

Any revised Notice may apply to all protected health information we maintain, including information created or received before the revision.

When we make a material change, the updated Notice will be:

• Available upon request
• Available at locations where required
• Posted prominently on our website when required

The effective date at the beginning of the Notice will identify the version currently in effect.

Questions or Complaints

If you have questions about this Notice, want to exercise a privacy right, or wish to make a complaint, contact:

Quorum Prosthetics - Attn: AJ Johnson
561 E Garden Drive, Unit H Windsor, Colorado 80550
(970) 686-2266
info@opquorum.com
www.quorumprosthetics.com

You may also submit a complaint to:

U.S. Department of Health and Human Services Office for Civil Rights
200 Independence Avenue SW
Washington, DC 20201
Phone: (877) 696-6775

Quorum Prosthetics will not retaliate against you for filing a complaint or exercising a privacy right.