Effective Date: August 11, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1) Who We Are
This Notice of Privacy Practices (“Notice”) describes the privacy practices of Dr. Shakir Hussein (“Provider,” “we,” “us,” “our”) and applies to protected health information (“PHI”) that we create, receive, maintain, or transmit in connection with your care.

Privacy Contact
If you have questions about this Notice, want to exercise your rights, or wish to file a complaint, contact:

Dr. Shakir Hussein, Privacy Officer
Address: 1209 Orange Street, Wilmington, DE 19801
Phone: +1 (248) 835-0040
Email: support@organoptima.com

Organized Health Care Arrangement (OHCA) (If Applicable)

[OHCA STATUS = YES/NO]

If YES, insert:

• We participate in an Organized Health Care Arrangement (“OHCA”) with: [OHCA PARTICIPANTS / SYSTEM NAME(S)].
• This Notice applies to the following service delivery sites: [SITES].
• Participants in the OHCA may share PHI with each other as necessary to carry out treatment, payment, and health care operations relating to the OHCA.

2) Our Legal Duties
We are required by law to:

• Maintain the privacy of your PHI;
• Provide you with this Notice of our legal duties and privacy practices regarding your PHI; and
• Notify affected individuals following a breach of unsecured PHI.

We must follow the terms of this Notice currently in effect.

3) How We May Use and Disclose Your PHI (Without Your Written Authorization)
HIPAA permits us to use and disclose PHI for treatment, payment, and health care operations, and for certain other purposes permitted or required by law.

Treatment

• We may use and disclose your PHI to provide, coordinate, or manage your health care and related services.
• Example: Your transplant surgeon may share information with nurses, pharmacists, laboratories, and other providers involved in your care, including through secure electronic communications.

Payment

• We may use and disclose your PHI to bill for services and obtain payment.
• Example: We may share information with your health plan to obtain prior authorization, determine coverage, or process claims.

Health Care Operations

• We may use and disclose your PHI for health care operations, such as quality assessment and improvement, training, licensing, accreditation, auditing, and compliance.
• Example: We may review records to evaluate clinical outcomes or conduct internal audits.

Other Uses and Disclosures Permitted or Required by Law

• We may use or disclose PHI as permitted or required by law, including (as applicable):
  • Public health reporting;
  • Health oversight activities (audits, inspections, investigations);
  • Judicial and administrative proceedings in response to lawful process, as required/allowed by law;
  • Law enforcement purposes, as required/allowed by law;
  • To avert a serious threat to health or safety, as allowed by law;
  • Workers’ compensation, as required/allowed by law;
  • Coroners, medical examiners, and funeral directors, as allowed by law.

4) Uses and Disclosures That Require Your Written Authorization
We will not use or disclose your PHI for purposes outside those described in this Notice unless we obtain your written authorization or the law permits or requires it.

You may revoke an authorization in writing at any time, except to the extent we have already relied on it.

5) Your Rights Regarding Your PHI
You have the following rights, subject to certain legal requirements and limited exceptions:

A) Right to Inspect and Obtain a Copy

• • You may request access to inspect and obtain a copy of PHI in a designated record set (which may include medical and billing records).

B) Right to Request an Amendment

• • If you believe information in your record is incorrect or incomplete, you may request an amendment. We may deny your request in certain circumstances and will provide a written explanation.
    

C) Right to an Accounting of Disclosures

• • You may request a list (“accounting”) of certain disclosures of your PHI.
    

D) Right to Request Restrictions

• • You may request restrictions on certain uses and disclosures of your PHI. We are not required to agree to all requested restrictions, but we will comply if required by law in certain circumstances.

E) Right to Request Confidential Communications

• • You may request that we communicate with you in a certain way or at a certain location (e.g., a different mailing address).

F) Right to a Paper Copy of This Notice

• • You may request a paper copy of this Notice at any time, even if you have agreed to receive it electronically.
    

6) Using Our Secure Patient Communication Platform
We may offer a secure online portal and messaging platform (the “Platform”) to support care communications.

• Messages you send through the Platform may become part of your medical record.
• Not for emergencies: The Platform is not intended for urgent or emergency medical issues. If you believe you have an emergency, call 911 or go to the nearest emergency room.

7) Electronic Notice and Acknowledgment (Online/Portal Users)
If your first service delivery occurs electronically (for example, through the Platform), we will provide this Notice electronically at that time and make a good-faith effort to obtain your acknowledgment of receipt (for example, via checkbox acknowledgment, return receipt, or similar method).

8) Communications by Email and Text (If Enabled)
If enabled and consistent with your preferences, we may send you notifications related to the Platform and your care, such as:

• New message alerts and appointment reminders.

You may be able to adjust notification preferences within the Platform settings or by contacting our office.

9) Complaints
If you believe your privacy rights have been violated, you may file a complaint with us using the contact information in Section 1. You may also file a complaint with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

10) Changes to This Notice
We reserve the right to change this Notice and make the new terms effective for all PHI we maintain. If we make material changes, we will update the effective date and make the revised Notice available on our website and upon request.

11) Contact
For questions about this Notice or to exercise your rights, contact the Privacy Contact listed in Section 1.