JAMES LIU, LLC

doing business as HOLISTIC ACUPUNCTURE & HERBAL CARE

Effective Date: August 8, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Your Information. Your Rights. Our Responsibilities.

This notice applies to protected health information created or received by JAMES LIU, LLC, doing business as HOLISTIC ACUPUNCTURE & HERBAL CARE (“the Practice,” “we,” “our,” or “us”), including information created or received by Qingdong Liu in providing acupuncture, Chinese herbal medicine, cupping, moxibustion, and related services.

Your rights at a glance

• Get an electronic or paper copy of your medical record.
• Ask us to correct information you believe is incorrect or incomplete.
• Request confidential communications and reasonable alternative contact methods.
• Ask us to limit certain uses or disclosures of your information.
• Receive a list of certain disclosures we have made.
• Get a paper copy of this notice and choose someone authorized to act for you.
• File a complaint without retaliation if you believe your privacy rights were violated.

How we may use and share your information

We may use or share your health information for treatment, payment, and health care operations, and in other situations permitted or required by law. We generally do not submit insurance claims on your behalf. We may, however, use your information to process your payment and to prepare a receipt or superbill at your request.

Questions about this notice?  Contact Qingdong Liu, Privacy Official, at 656-205-0831 or info@holisticacupuncturefl.com.

1. Your Rights

You have the following rights regarding health information we maintain about you.

Get an electronic or paper copy of your medical record. You may ask to inspect or receive an electronic or paper copy of your medical record and other health information we maintain about you. We will ordinarily provide a copy or summary within 30 days. We may charge a reasonable, cost-based fee as permitted by law. Access to your records will not be conditioned on payment of an outstanding balance for treatment.

Ask us to correct your medical record. You may ask us to amend health information that you believe is incorrect or incomplete. We may deny the request in certain circumstances, but we will explain the reason in writing, generally within 60 days.

Request confidential communications. You may ask us to contact you in a particular way, such as by phone, text message, email, or mail, or at a different address or telephone number. We will accommodate reasonable requests.

Ask us to limit what we use or share. You may ask us not to use or share certain health information for treatment, payment, or health care operations. We are not required to agree to most requests. If we agree, we may still use or share the information if you need emergency treatment or when otherwise required by law.

Restrict disclosures to a health plan after full out-of-pocket payment. If you pay for a service or item out of pocket in full, you may ask us not to disclose information about that service or item to your health plan for payment or health care operations. We will agree unless the disclosure is required by law.

Get a list of certain disclosures. You may ask for an accounting of certain disclosures made during the six years before the date of your request. The accounting will not include disclosures for treatment, payment, or health care operations and certain other disclosures excluded by law. One accounting in any 12-month period is free; we may charge a reasonable, cost-based fee for an additional accounting during that period.

Get a copy of this notice. You may request a paper copy at any time, even if you agreed to receive it electronically. We will provide it promptly.

Choose someone to act for you. A person with legal authority to act as your personal representative, such as a legal guardian or an agent under a valid health care power of attorney, may exercise your privacy rights. We will verify that authority before taking action.

File a complaint. You may complain to us or to the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.

2. Your Choices and Written Authorizations

Family, friends, and others involved in your care. You may tell us whether we may share relevant information with a family member, close friend, caregiver, or another person involved in your care or payment for your care. If you cannot tell us your preference, we may share information when permitted by law if we believe doing so is in your best interest. We may also share information with a disaster-relief organization or when necessary to prevent or reduce a serious and imminent threat to health or safety.

Written authorization. We will obtain your written authorization for uses and disclosures that are not described in this notice unless a use or disclosure is otherwise permitted or required by law. You may revoke an authorization in writing at any time, except to the extent that we have already relied on it.

• We will obtain written authorization for marketing when HIPAA or Florida law requires it.
• We will obtain written authorization for any sale of your protected health information. We do not sell protected health information.
• Most uses and disclosures of psychotherapy notes, if we ever receive or maintain such notes, require written authorization.
• We do not use protected health information for fundraising.

Appointment reminders, follow-up communications, information about treatment alternatives, and information about health-related services that may be relevant to your care may be permitted without a marketing authorization.

3. How We May Use and Share Your Information

Treatment, payment, and health care operations

Treatment. We may use your health information to evaluate and treat you and may share relevant information with other health care professionals involved in your care. Example: with your care needs in mind, Qingdong Liu may communicate with your primary care provider or another practitioner involved in your treatment.

Payment. We may use and share health information as needed to obtain payment, process patient payments, collect amounts due, or prepare documentation you request. Example: at your request, we may prepare a receipt or superbill containing diagnosis and service information for you to submit to your health plan. We generally do not submit insurance claims on your behalf.

Health care operations. We may use and share health information to run the Practice, improve quality, coordinate scheduling and follow-up, manage records, conduct compliance and legal activities, and work with service providers that support our operations. Example: we may review treatment records to evaluate the quality and consistency of care.

Other uses and disclosures permitted or required by law

Public health and safety. We may disclose information for public health activities, such as preventing disease, reporting adverse reactions to medications or products, assisting with recalls, reporting suspected abuse, neglect, or domestic violence when authorized or required, or preventing or reducing a serious threat to health or safety.

Health oversight. We may disclose information to health oversight agencies for activities authorized by law, including audits, inspections, licensing, and disciplinary investigations.

Compliance with law. We will disclose information when federal or state law requires it, including to the U.S. Department of Health and Human Services when it requests information to determine our compliance with federal privacy law.

Workers’ compensation and other government requests. We may use or disclose information as permitted or required for workers’ compensation claims, certain law-enforcement purposes, and special government functions such as military, national-security, or protective-service activities.

Judicial and administrative proceedings. We may disclose information in response to a valid court or administrative order, subpoena, discovery request, or other lawful process, subject to the protections and notice requirements of applicable federal and Florida law.

Medical examiners, coroners, and funeral directors. We may disclose information to these persons when authorized by law after an individual’s death.

Organ and tissue donation. We may disclose information to organizations that facilitate organ, eye, or tissue donation and transplantation when applicable and permitted by law.

Research. We do not ordinarily conduct health research. If research is undertaken, we will use or disclose health information only as allowed by law, such as with your authorization, with approval of an institutional review board or privacy board when applicable, or in de-identified form.

Business associates. We may share information with vendors and service providers that perform services for us, such as scheduling, electronic records, secure communications, payment processing, legal, accounting, or data support. When required by HIPAA, they must sign written agreements requiring them to safeguard your information.

Special protection for substance use disorder records

To the extent we receive or maintain substance use disorder treatment records protected by 42 CFR Part 2, those records, and testimony describing their contents, will not be used or disclosed in a civil, criminal, administrative, or legislative investigation or proceeding against you unless you provide written consent or a court authorizes the use or disclosure after the notice and hearing protections required by law. A qualifying court order must also be accompanied by a subpoena or other legal requirement compelling disclosure. We do not use Part 2 information for fundraising.

Additional protections under Florida law

Florida law generally provides additional confidentiality protections for patient records and information disclosed during care. Except as permitted or required by applicable law, we will not furnish your patient records or discuss your medical condition with persons other than you, your legal representative, or health care practitioners and providers involved in your care or treatment without your written authorization. We will not use patient information to solicit or market the sale of goods or services without a specific written release or authorization. If another applicable law provides greater privacy protection than HIPAA, we will follow the more protective law.

4. Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will notify you as required by law if a breach occurs that may have compromised the privacy or security of your unsecured protected health information.
• We must follow the duties and privacy practices described in the notice currently in effect and provide you with a copy of it.
• We will not use or disclose your information other than as described in this notice unless you authorize us in writing or the law otherwise permits or requires the use or disclosure.

Changes to this notice

We reserve the right to change the terms of this notice and to make the revised notice effective for all protected health information we maintain, including information created or received before the revision. If we make a material change, the revised notice will be available on request, at any physical treatment location we maintain, and on our website.

5. Questions or Complaints

Contact the Practice. If you have questions, want to exercise a right, request a copy of this notice, or file a complaint, contact:

Privacy Official: Qingdong Liu
Phone: +1 (656) 205-0831
Email: info@holisticacupuncturefl.com

Contact the U.S. Department of Health and Human Services. You may also file a complaint with the Office for Civil Rights by mailing a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201; calling 1-877-696-6775; or visiting https://www.hhs.gov/hipaa/filing-a-complaint/index.html. We will not retaliate against you for filing a complaint.