Effective date: October 1, 2026

Your information. Your rights. Our responsibilities.

This notice describes how Washington Specialty Physicians, Inc., doing business as Longevistic, may use and share your medical information and how you can get access to it. Please review it carefully.

For questions or to exercise a right, contact our Privacy Officer at 19203 Edgecliff Dr SW, Normandy Park, WA 98166, hello@longevistic.com, or (206) 486-0662.

Where your information is hosted

Health data for the member portal and care systems is stored with Amazon Web Services (AWS) under a business associate agreement (BAA). The public website is hosted separately and does not store protected health information (PHI).

Your rights

You have the right to:

• Get a copy of your medical record. You may ask for an electronic or paper copy of your medical record and other health information we have about you. We usually provide a copy or summary within 30 days. We may charge a reasonable, cost-based fee where the law allows. We keep medical records for 10 years from the date of your last activity with Longevistic. From the portal Account tab you can download a PDF of your consent record. That PDF shows your name and email, each current consent (whether it is in effect, when it was given, and the name and email recorded with it), the full text of a consent when the stored record matches the current form, and the history of consent events. It does not include your intake answers or the rest of your medical record. You may still ask us for a copy of the rest of your record.
• Ask us to correct your record. You may ask us to correct health information that you believe is incorrect or incomplete. We may deny the request, but we will explain why in writing, generally within 60 days.
• Request confidential communications. You may ask us to contact you in a specific way or at a different address. We will agree to all reasonable requests.
• Ask us to limit what we use or share. You may ask us not to use or share certain information for treatment, payment, or health care operations. We do not have to agree, except that if you pay for a service or item out of pocket in full, we will agree not to share that information with your health plan for payment or health care operations unless a law requires us to share it.
• Get a list of disclosures. You may ask for an accounting of certain disclosures made during the six years before your request. One accounting in a 12-month period is free; we may charge a reasonable, cost-based fee for additional requests.
• Get a copy of this notice. You may ask for a paper copy at any time, even if you agreed to receive it electronically. We will provide it promptly.
• Choose someone to act for you. If someone has legal authority to act as your personal representative, that person may exercise your rights and make choices about your health information. We will verify the authority before acting.
• File a complaint. You may complain to us or to the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Your choices

For some health information, you may tell us how you want us to share it. If you have a clear preference, contact us. We will follow your instructions about whether to:

• Share information with a family member, close friend, or another person involved in your care or payment for your care;
• Share information in a disaster-relief situation; or
• Share information when needed to lessen a serious and imminent threat to health or safety.

If you cannot tell us your preference, we may share information when we believe it is in your best interest. We do not operate a hospital, maintain a hospital directory, or conduct fundraising.

Uses and disclosures that require your written permission

We generally need your written authorization to:

• Use or share your information for marketing, except where HIPAA allows a limited face-to-face communication or other exception;
• Sell your information; and
• Use or share most psychotherapy notes.

Other uses and disclosures not described in this notice will be made only with your written authorization. You may revoke an authorization in writing at any time, except to the extent we already relied on it. Contact us to revoke an authorization.

We do not use your medical information for advertising and do not sell it.

How we may use and share your health information

We may use or share your health information without your additional written permission in the following ways:

Treat you

We may use your health information and share it with other professionals who are treating you. For example, a clinician treating you may ask another clinician about your overall health.

Run our organization

We may use and share your health information to run our practice, improve care, coordinate services, train staff, and contact you when necessary. For example, we may use information to manage your treatment and services, conduct quality review, or arrange appointments.

Bill for your services

We may use and share your health information to collect what you pay us. Membership is cash-pay. Longevistic does not bill insurance and does not send claims to health plans. We may share information needed to process those payments, including with our payment service provider, while keeping clinical details out of payment descriptions and metadata.

Help with public health and safety

We may share health information for permitted public-health and safety purposes, such as preventing disease, helping with product recalls, reporting adverse reactions to medications, reporting suspected abuse, neglect, or domestic violence when required or permitted, or preventing or reducing a serious threat to anyone’s health or safety.

Do research

We may use or share your information for health research when permitted by law and applicable safeguards are in place.

Comply with the law

We will share information when federal or Washington law requires it. We may share information with the U.S. Department of Health and Human Services when it wants to confirm that we are complying with federal privacy law.

Respond to organ and tissue donation requests

We may share health information with organ-procurement organizations as permitted by law.

Work with a medical examiner or funeral director

We may share health information with a coroner, medical examiner, or funeral director when an individual dies.

Address workers’ compensation, law enforcement, and other government requests

We may use or share health information:

• For workers’ compensation claims;
• For law-enforcement purposes when HIPAA permits it and the required legal conditions are met;
• With health-oversight agencies for activities authorized by law; and
• For special government functions, such as military, national-security, or presidential-protective services.

These permissions generally allow, but do not require, a disclosure. We disclose only the information permitted or required by applicable law or legal process.

Respond to lawsuits and legal actions

We may share health information in response to a court or administrative order, or in response to a subpoena or other lawful process when HIPAA’s conditions are met.

Reproductive health care privacy

Reproductive health care includes health care that affects the health of an individual in all matters relating to the reproductive system and its functions and processes. This can include, for example, contraception, pregnancy, miscarriage, abortion, fertility care, and treatment of reproductive-system conditions.

We protect reproductive health information like other protected health information. We will not use or disclose your information for a purpose prohibited by HIPAA or other applicable law. We will not disclose information merely because you sought, obtained, provided, or facilitated reproductive health care when HIPAA does not permit the disclosure. Requests involving reproductive health information will be reviewed for a valid legal basis, and we will disclose only what the law permits or requires.

Washington law may provide additional protections for some reproductive health care and other sensitive information. Where a more protective Washington or federal law applies, we follow that law.

Our responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information, as required by law.
• We must follow the duties and privacy practices described in this notice and give you a copy.
• We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind in writing.

For more information, see the HHS Office for Civil Rights information at https://www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html.

Changes to this notice

We may change the terms of this notice, and the changes may apply to all health information we have about you. The new notice will be available upon request and on our website. The effective date appears at the top.

File a complaint

You may complain to us using the contact information at the top of this notice. You may also complain to the HHS Office for Civil Rights by visiting https://www.hhs.gov/hipaa/filing-a-complaint/index.html, calling 1-877-696-6775, or writing to 200 Independence Avenue, S.W., Washington, D.C. 20201. We will not retaliate against you.

Covered entity

This notice applies to Washington Specialty Physicians, Inc., doing business as Longevistic, and the clinicians and workforce members who provide care through Longevistic in Washington.