HIPAA Notice of Privacy Practices

Last updated: April 3, 2026

1. Our Commitment to Your Privacy

Nuviven, operated by Aion Energy Capital Inc., is committed to protecting the privacy and security of your protected health information (PHI). This Notice of Privacy Practices describes how your health information may be used and disclosed, and how you can access this information. We are required by law to maintain the privacy of your PHI and to provide you with this notice of our legal duties and privacy practices.

2. Protected Health Information We Collect

In the course of providing our telehealth services, we may collect the following types of PHI:

• Information you provide during the medical intake process, including medical history, current medications, allergies, and symptoms.
• Health questionnaire responses and self-reported health data.
• Laboratory test results and diagnostic information.
• Prescription and treatment records.
• Communications between you and your treating physician.
• Billing and insurance information related to your care.

3. How We Use and Disclose Your PHI

We may use and disclose your PHI without your written authorization for the following purposes:

• Treatment: To provide, coordinate, and manage your healthcare. This includes sharing your PHI with licensed physicians in our telehealth partner network who evaluate your health history and prescribe treatment, as well as with licensed compounding pharmacies that prepare and dispense your medications.
• Payment: To obtain payment for services provided to you, including billing, claims management, and collection activities.
• Healthcare Operations: To support our business activities, including quality assessment, compliance programs, audits, business planning, customer service, and administrative functions.

4. Disclosures Requiring Your Authorization

Except as described in this notice, we will not use or disclose your PHI without your written authorization. Uses and disclosures not described in this notice will be made only with your written authorization. You may revoke an authorization at any time by submitting a written request to our Privacy Officer. Revocation will not affect any disclosures already made in reliance on your prior authorization.

5. Disclosures Without Authorization

In certain circumstances, we may be required or permitted by law to use or disclose your PHI without your authorization, including:

• As Required by Law: When disclosure is mandated by federal, state, or local law.
• Public Health Activities: To public health authorities for the purpose of preventing or controlling disease, injury, or disability, and for other public health purposes as permitted by law.
• Health Oversight Activities: To health oversight agencies for activities authorized by law, including audits, investigations, and inspections.
• Legal Proceedings: In response to a court order, subpoena, or other lawful process.
• Law Enforcement: To law enforcement officials for law enforcement purposes as required or permitted by law.
• To Avert a Serious Threat: To prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
• Coroners and Medical Examiners: To coroners, medical examiners, and funeral directors as necessary for them to carry out their duties.

6. Your Rights Regarding Your PHI

You have the following rights with respect to your protected health information:

• Right to Access Your Records: You have the right to inspect and obtain a copy of your PHI maintained by us. To request access, submit a written request to our Privacy Officer. We may charge a reasonable fee for copying and mailing costs.
• Right to Request Amendments: You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. We may deny your request under certain circumstances but will provide a written explanation.
• Right to an Accounting of Disclosures: You have the right to receive a list of certain disclosures we have made of your PHI. The first accounting in any 12-month period is free; subsequent requests may be subject to a reasonable fee.
• Right to Request Restrictions: You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree to your request unless the disclosure is to a health plan for payment or healthcare operations purposes and the PHI relates to a service for which you have paid in full out of pocket.
• Right to Confidential Communications: You have the right to request that we communicate with you about health matters in a particular way or at a particular location. We will accommodate reasonable requests.
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services (HHS). We will not retaliate against you for filing a complaint.

7. Breach Notification

In the event of a breach of unsecured PHI, we will notify affected individuals, the U.S. Department of Health and Human Services, and, in certain circumstances, the media, in accordance with applicable law. Notification will be made without unreasonable delay and no later than 60 days after discovery of the breach.

8. Minimum Necessary Standard

When using or disclosing your PHI, we will make reasonable efforts to limit the information to the minimum necessary to accomplish the intended purpose. This standard does not apply to disclosures made for treatment purposes, disclosures made to you, disclosures made pursuant to your authorization, or disclosures required by law.

9. Business Associates

We may share your PHI with third-party service providers (business associates) who perform functions on our behalf that involve access to PHI. All business associates are required to sign a Business Associate Agreement obligating them to safeguard your PHI in accordance with HIPAA requirements.

10. Changes to This Notice

We reserve the right to change this Notice of Privacy Practices and to make the revised notice effective for PHI we already have as well as any information we receive in the future. When we make material changes, we will post the updated notice on our website and update the effective date. We encourage you to review this notice periodically.

11. Contact Information

To exercise any of your rights, request further information about our privacy practices, or file a complaint, please contact our Privacy Officer:

Privacy Officer
Aion Energy Capital Inc. d/b/a Nuviven
6335 Pemberton Drive
Dallas, TX 75230
Email: hello@nuviven.com

12. Filing a Complaint with HHS

If you believe your privacy rights have been violated, you may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting www.hhs.gov/ocr/complaints or by calling 1-877-696-6775. You will not be penalized or retaliated against for filing a complaint.