Privacy Policy

Notice of Privacy Practices

This notice describes how medical information about you (or the patient for whom you are a parent or authorized guardian) may be used and disclosed, and how you can get access to this information. Please review it carefully.

Who Will Follow This Notice

This notice describes BRDG, Inc.’s privacy practices and those of its affiliates, including Cloud Health Medical Group, P.A., Cloud Health Medical Group of Kansas, P.A., Cloud Health Medical Group of California, P.C., and Cloud Health Medical Group of New Jersey, their physicians, other healthcare practitioners, and other personnel (collectively, “Bridge,” “we,” or “us”).

Our Pledge Regarding Medical Information

We understand that medical information about you and your health is personal and we are committed to protecting it. We create a record of the care and services you receive at Bridge. We need this record to provide you with quality care and to comply with certain legal requirements. This notice is required by law and applies to all records of your care generated by us.

This notice will tell you about the ways in which we may use and disclose medical information about you. We also describe your rights and certain obligations we have regarding the use and disclosure of medical information.

We are required by law to:

• Ensure that medical information that identifies you is kept private (with certain exceptions);

• Give you this notice of our legal duties and privacy practices with respect to medical information about you;

• Follow the terms of the notice that is currently in effect; and

• Promptly notify you if a breach occurs that may have compromised the privacy or security of your information.

Note for Parents and Authorized Guardians: Where a parent or authorized guardian has signed consent on behalf of a patient, references to “you” throughout this notice apply to the patient. The parent or authorized guardian has the right to exercise the rights described herein on the patient’s behalf to the extent permitted by applicable law.

How We May Use and Disclose Medical Information About You

The following categories describe different ways that we use and disclose medical information. For each category, we will explain what we mean. Not every use or disclosure in a category will be listed; however, all ways we are permitted to use and disclose information will fall within one of these categories.

For Treatment

We may use medical information about you to provide you with medical treatment or services. We may disclose medical information to doctors, nurses, technicians, or other Bridge personnel involved in providing Bridge’s services. For example, Bridge personnel may discuss your prescription with your doctor to ensure we dispense the appropriate drug.

For Payment

We may use and disclose medical information to obtain payment for the services we provided to you. For example, we may need to give your health plan information about your appointment so your health plan will pay us.

For Healthcare Operations

We may use and disclose medical information about you for healthcare operations. These uses and disclosures are necessary to run Bridge and ensure that all patients receive quality care. For example, we may use medical information to review our treatment and services and to evaluate the performance of our staff in caring for you. We may also combine medical information with information from other providers to identify where we can make improvements in the care and services we offer. We may remove information that identifies you from this set of medical information so others may use it to study health care and delivery without learning who the specific patients are.

We may also use and disclose your medical information to other providers when necessary for them to treat you or receive payment for services they have rendered to you. Additionally, we may disclose your medical information in order to resolve any complaints you may have.

To You

We may use and disclose medical information to contact you as a reminder that you have an upcoming refill.

We may use and disclose medical information to tell you about or recommend possible treatment options or alternatives that may be of interest to you.

We may use and disclose medical information to tell you about our health-related products or services that may be of interest to you.

We have the right to use medical information about you to contact you in an effort to encourage you to purchase or use a health care-related product or service from us. If we receive any direct or indirect payment for making such a communication, however, we would need your prior written permission to contact you. The only exceptions are when our communication (i) describes only a drug or medication currently being prescribed for you and our payment for the communication is reasonable in amount, or (ii) is made by one of our business partners consistent with our written agreement with them.

Individuals Involved in Your Care

We may release medical information about you to a friend or family member who is involved in your medical care, provided we (a) obtain your consent, (b) provide you an opportunity to object and you do not object, or (c) can make a reasonable inference that you do not object. We may also give information to someone who helps pay for your care.

Unless there is a specific written request to the contrary, we may also tell your family or friends your condition and that you are a part of Bridge. In addition, we may disclose medical information about you to an entity assisting in a disaster relief effort so that your family can be notified about your condition, status, and location.

Research

Under certain circumstances, we may use and disclose medical information about you for research purposes. All research projects are subject to a special approval process. Before we use or disclose medical information for research, the project will have been approved through this process. We may, however, disclose medical information to people preparing to conduct a research project (for example, to help them look for patients with specific medical needs), so long as the medical information they review does not leave Bridge’s possession. We will always ask for your specific permission if the researcher will have access to your name, address, or other information that reveals who you are.

To Avert a Serious Threat to Health or Safety

We may use and disclose medical information about you when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person. Any disclosure, however, would only be to someone able to help prevent the threat.

Limitation on the Use of PHI for Paid Marketing

We will, in accordance with federal and state laws, obtain your written authorization to use or disclose your PHI for marketing purposes (e.g., to use your photo in ads), but not for activities that constitute treatment or healthcare operations.

We will obtain your written authorization prior to using your PHI or making any treatment or healthcare recommendations, should financial remuneration from a third party be involved. We must clarify that financial remuneration does not include in-kind payments or payments to implement a disease management program. Any promotional gifts of nominal value are not subject to the authorization requirement.

The only exclusion to this is “refill reminders,” so long as the remuneration for making such a communication is reasonably related to our cost for making it. Permissible reimbursable costs include labor, supplies, and postage. “Generic equivalents,” “adherence to take medication as directed,” and “self-administered drug or delivery system communications” are all considered to be “refill reminders.”

Face-to-face marketing communications, such as sharing a written product brochure or pamphlet, are permissible under current HIPAA law.

Special Situations

Workers’ Compensation

We may release medical information about you for workers’ compensation or similar programs as required by state law. These programs provide benefits for work-related injuries or illness.

Public Health Risks

We may disclose medical information about you for public health activities, including:

• To prevent or control disease, injury, or disability;

• To report deaths;

• To report the abuse or neglect of children, elders, and dependent adults;

• To report reactions to medications or problems with products;

• To notify people of recalls of products they may be using;

• To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition; and

• To notify the appropriate government authority if we believe a patient has been the victim of abuse, neglect, or domestic violence. We will only make this disclosure if you agree or when required or authorized by law.

Health Oversight Activities

We may disclose medical information to a health oversight agency for activities authorized by law, including audits, investigations, inspections, and licensure. These activities are necessary for the government to monitor the healthcare system, government programs, and compliance with civil rights laws.

Lawsuits and Disputes

We may disclose medical information about you in response to a court or administrative order, or in response to a subpoena, discovery request, or other lawful process, but only if efforts have been made to notify you about the request or to obtain an order protecting the information requested.

Law Enforcement

We may release medical information to authorized law enforcement officials as required by law or due to a court order, grand jury, or administrative subpoena.

Coroners, Medical Examiners, and Funeral Directors

We may release medical information to a coroner, medical examiner, or funeral director as required by law.

Specialized Government Functions

We may disclose medical information about you to U.S. government entities with special functions, such as the military or Department of State, under certain circumstances when required by law.

Legal Requirement

We may release your medical information when required by law not specifically referenced in the preceding categories.

HIPAA Forms

If you would like us to share your Protected Health Information with anyone besides you, we will need you to complete and sign an Authorization for the Use/Disclosure of Health Information.

If you previously provided us with an Authorization and would like to revoke it, please complete and sign a Revocation of Authorization to Disclose Protected Health Information.

If you would like to request a copy of your medical records, please fill out and sign a Patient Request for Health Information.

Your Rights Regarding Medical Information About You

Right to Inspect and Copy

You have the right to inspect and copy medical information that may be used to make decisions about your care. Usually, this includes medical and billing records, but may not include some mental health information. If your medical information is maintained in an electronic health record, you may obtain an electronic copy and, if you choose, instruct us to transmit such copy directly to an entity or person you designate in a clear, conspicuous, and specific manner.

To inspect and copy your medical information, you must submit your request in writing to Bridge’s Privacy Officer at the address listed at the end of this notice. An authorization form must be completed. We may charge a fee for the costs of copying, mailing, or other supplies associated with your request. Our fee for providing an electronic copy will not exceed our labor costs in responding to your request.

We may deny your request to inspect and copy in certain limited circumstances. If you are denied access, you may request that the denial be reviewed by another licensed health care professional chosen by Bridge. We will comply with the outcome of the review.

Right to Amend

If you feel that medical information we have about you is incorrect or incomplete, you may ask us to amend it. To request an amendment, you must submit your request in writing to Bridge’s Privacy Officer, along with a reason supporting your request.

We will act on your request within 60 days (or 90 days if additional time is needed) and will inform you in writing as to whether the amendment will be made or denied. Even if we deny your request for amendment, you have the right to submit a written addendum of not more than 250 words regarding any item or statement in your record you believe is incomplete or incorrect.

Right to an Accounting of Disclosures

You have the right to request an “accounting of disclosures” — a list of disclosures we made of medical information about you other than for treatment, payment, and healthcare operations, and subject to other exceptions permitted by law. To request this list, you must submit a written request to Bridge’s Privacy Officer specifying a time period of no more than six years. We will respond within 60 days (or 90 days if needed). The first list within a 12-month period is free; additional lists may incur a charge.

Right to Request Restrictions

You have the right to request a restriction or limitation on the medical information we use or disclose about you for treatment, payment, or healthcare operations, or to someone involved in your care. We are not required to agree to your request, except where the disclosure is to a health plan for payment or healthcare operation purposes and the medical information relates solely to a healthcare item or service for which you have paid out-of-pocket in full.

To request restrictions, you must submit a written request to Bridge’s Privacy Officer specifying (1) what information you want to limit, (2) whether you want to limit our use, disclosure, or both, and (3) to whom you want the limits to apply.

Right to Request Confidential Communications

You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. To request confidential communications, you must make your request to Bridge’s Privacy Officer. We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted.

Right to a Paper Copy of This Notice

You have the right to a paper copy of this notice at any time, even if you have agreed to receive it electronically. You may obtain a copy of this notice at our website or by contacting Bridge’s Privacy Officer.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with Bridge or with the Office of Civil Rights, U.S. Department of Health and Human Services. To file a complaint with Bridge, contact Bridge’s Privacy Officer at the address listed below. All complaints must be submitted in writing. We will not retaliate against you if you file a complaint with us or the Director.

Other Uses of Medical Information Requiring Your Authorization

Other uses and disclosures of medical information not covered by this notice or applicable law will be made only with your written permission. If you provide us permission to use or disclose medical information about you, you may revoke that permission in writing at any time. Revoking permission will stop any further use or disclosure for the purposes covered by your written authorization, except where we have already acted in reliance on your permission.

Electronic Consent and Online Access

If you are a parent or authorized guardian who has signed this Notice or related consent forms on behalf of a patient online, your electronic acceptance of this Notice carries the same legal force and effect as a handwritten signature. By accepting this Notice electronically, you confirm that you have read and understood its contents, and that you are authorized to do so on the patient’s behalf.

Changes to This Notice

We reserve the right to change our privacy practices and to make any such change applicable to the protected health information we obtained about you before the change. If a change in our practices is material, we will revise this Notice to reflect the change. We will post a copy of the current notice on www.cloudhealthmedicalgroup.com. You may also obtain any new notice by contacting the Privacy Officer.

Contact Information

Address all correspondence in writing to Bridge’s Privacy Officer at:

Privacy Officer
legal@usebridge.com

Updated: February 2026