Halo Health PC Privacy Policy
Halo Health, PC (“Halo Health” dba Halo Integrative Wellness & Aesthetics, IA-h) is committed to maintaining the
security and privacy of your personal information collected through this website, (the “Website”), the Halo Health
electronic health record (the “EHR”) and the Halo Health patient portal, (the “Patient Portal”). This Privacy Policy
discloses Halo Health’s information collection and dissemination practices in connection with the Website, the
Clinical EHR and the Patient Portal and applies solely to the information that we collect through those means. This
Privacy Policy does not address personal information that you provide to us in other contexts (e.g., through a
business or investment relationship not expressly described in this Privacy Policy.) By using Halo Health’s website
you indicate your acceptance of this Privacy Policy. Please do not use this website if you do not agree to the terms
of the Privacy Policy. Halo Health will post changes to these terms of the Privacy Policy and continued use of this
website means that you accept those changes.

Electronic Health Record
Halo Health provides the web-based Clinical EHR to customers (“Customers”), who then authorize Clinical EHR
users, including physicians, physician assistants, nurse practitioners and non-physician staff members
(“Authorized Users”). Customers and Authorized Users are responsible for determining uses and disclosures of
patient medical information maintained in the Clinical EHR, in accordance with their legal and professional
responsibilities as health care professionals and state and federal medical privacy laws, including the federal
Health Insurance Portability and Accountability Act (“HIPAA”). To the extent that Halo Health receives or
maintains patient medical information in the course of providing the Clinical EHR, that information is secured,
used and disclosed only in accordance with Halo Health’s legal obligations as “business associate” under HIPAA.

Personal Identifiable Information Provided by You.
Except as described in this Privacy Policy, Halo Health only collects your personally identifiable information (“PII”)
through this Website when you choose to provide such information, such as when you use the “Contact Us”
feature or submit a job application. PII can include your name, date of birth, email address and zip code. Halo
Health uses your PII to address your requests for information, products or services. Halo Health will not sell, rent,
license, or trade your PII with third parties for their own direct marketing use unless we receive your express
consent to do so. Unless you give us permission to do so, Halo Health will not share your PII other than as
specified in this Privacy Policy. We may share your PII with other business entities in connection with the sale,
assignment, merger or other transfer of all or a portion of Halo Health’s business to such business entity. We will
require any such successor business entity to honor the terms of this Privacy Policy.

Patient Portal
Halo Health may choose to make the Patient Portal available to patients to enable certain interactions between
the Customer, Authorized Users and patients, including scheduling appointments, discussing medical treatment,
sending medication prescription-related messages, and enabling patient viewing of a portion of the Clinical EHR.
Customers are solely responsible for the content of the patient’s medical record maintained in the Clinical EHR
and determining the portion of the Clinical EHR that may be viewed by the patient through the Patient Portal.
Halo Health may utilize patient medical information on a limited basis as necessary to provide the Patient Portal
services, including the following uses and disclosures:

• An email address and a cell phone number are required to be stored in the Clinical EHR before an
  invitation can be sent to the patient to open a Patient Portal account.
• When a letter or a response from a doctor is opened by the patient through the Patient Portal, the
  opened status will be communicated to the doctor inside the Clinical EHR.
• If instructed by the patient to fax a clinical profile derived from the patient’s medical record (a “Profile”)
  to a fax machine within the Portal, Halo Health will fax such documents on the patient’s behalf.
• Halo Health will send email or text notifications to the patient when a letter from the doctor or clinical
  document is available in the Patient Portal. The email or cell phone number used is documented in the
  patient’s chart in the Clinical EHR.
• Halo Health will maintain aggregate information regarding usage of the Patient Portal for product improvement
  purposes, but that data will not identify individual patients. Halo Health will not sell any personal information
  provided by a patient through the Patient Portal to a third party.