Notice of Privacy Practices

Effective date: October 17, 2026

This notice applies to LightWeight MD, PLLC (“LightWeight MD,” “we,” “us”), a South Carolina medical practice owned and operated by Henry Igdal, M.D. It covers all health information we create or receive about you, including your eligibility questionnaire, visit notes, prescriptions, and messages with your care team.

Our Privacy Policy explains how our website and services handle information more generally. If the two conflict about your health information, this notice controls.

1. Our duties

The law requires us to:

• Keep your protected health information private
• Give you this notice of our legal duties and privacy practices
• Follow the notice currently in effect
• Notify you if a breach compromises the privacy or security of your information

We will not use or share your information other than as this notice describes unless you tell us we can in writing.

2. How we use and share your information

We use and share your health information mainly in three ways.

To treat you. Your physician uses your information to evaluate you, prescribe, and adjust your care. Example: we send your prescription, name, date of birth, shipping address, and allergies to our compounding pharmacy, Pharmcore, Inc. d/b/a Hallandale Pharmacy Compounding, so it can prepare and ship your medication.

To bill for your care. We use your information to bill your subscription and process refunds. Example: we charge your card each month for your plan. We do not bill health insurance, and we do not send health information to our payment processor.

To run our practice. We use your information to operate the practice, improve care, and meet our legal obligations. Example: we review records to check the quality of care and to keep our systems secure. Vendors that help us operate, such as our hosting, email, text-message, and video-visit providers, may handle your information, but only under written business associate agreements that require them to protect it.

3. Other uses and disclosures allowed without your permission

The law allows or requires us to share your information in other ways, usually to protect public health or comply with legal duties. We share only what the situation requires.

• When the law requires it, including when the U.S. Department of Health and Human Services asks to confirm we comply with privacy law.
• For public health and safety, such as reporting serious side effects or problems with a medication to the FDA, or reporting suspected abuse or neglect.
• For health oversight, such as audits, inspections, and investigations by the South Carolina Board of Medical Examiners, the South Carolina Board of Pharmacy, or other agencies.
• For lawsuits and legal actions, in response to a court order or administrative order, or to a subpoena when the law’s safeguards are met.
• For law enforcement, in limited situations, such as responding to a warrant or reporting certain crimes.
• To prevent a serious threat to your health or safety, or to someone else’s.
• For research, only with your written permission or when an approved review board allows it under the law.
• For workers’ compensation claims, as the law allows.
• For special government functions, such as military and national security activities.
• To coroners, medical examiners, funeral directors, and organ-donation organizations, as the law allows.

4. People involved in your care, and reminders

We may share information with a family member, friend, or other person you name who is involved in your care, but only if you agree or do not object. If you cannot tell us your preference, for example in an emergency, we may share what we believe is in your best interest.

We may contact you by email, text message, or through the patient portal with appointment reminders, shipment updates, and information about your treatment. You can ask us to contact you in a different way (Section 7).

5. Uses that need your written permission

We will never sell your health information, use it for marketing, or use it for fundraising.

Any use or disclosure not described in this notice requires your written permission. If you give permission, you may take it back in writing at any time. Taking it back stops future uses and disclosures, but it cannot undo what we already shared while your permission was in effect.

6. South Carolina law

South Carolina law sometimes protects your information more than federal law does. When it does, we follow the stricter rule. For example, South Carolina’s Physicians’ Patient Records Act generally bars a physician from releasing your records without your written consent, except where the law requires or allows it.

7. Your rights

Get a copy of your records. You can ask to see or get an electronic or paper copy of your medical and billing records. Copies are free. In rare cases the law lets us deny part of a request; if we do, we will explain why in writing and tell you how to ask for a review.

Ask us to correct your records. If you think information in your records is wrong or incomplete, you can ask us in writing to correct it. If we say no, we will explain why in writing, and you may add a statement of disagreement to your records.

Ask us to contact you confidentially. You can ask us to reach you in a specific way, such as at a different email address or phone number. We will agree to every reasonable request and will not ask why.

Ask us to limit what we use or share. You can ask us not to use or share certain information for treatment, payment, or our operations. We are not required to agree, and we may say no if it would affect your care. If you pay for a service in full yourself, you can ask us not to share information about it with your health plan, and we will agree unless the law requires otherwise. We do not bill health insurance, so we do not share information with health plans for payment.

Get a list of those we shared your information with. You can ask for a list of the times we shared your information in the six years before your request, and with whom and why. The list leaves out disclosures for treatment, payment, and our operations, and ones you asked us to make. The list is free.

Get a copy of this notice. You can ask for a paper copy of this notice at any time, even if you agreed to receive it electronically.

Choose someone to act for you. If you have given someone medical power of attorney, or someone is your legal guardian, that person can exercise your rights. We will confirm their authority first.

Be told about a breach. We will notify you if a breach affects your unsecured health information.

File a complaint. If you believe we violated your privacy rights, see Section 10.

8. How to exercise your rights

Email privacy@lightweightmd.com or call 864-668-6120. We verify your identity before releasing or changing any information, usually by confirming details on your account.

If we need more time for a records copy, a correction, or a list of disclosures, we will tell you why in writing before the deadline. We may take one extension of up to 30 more days.

9. Changes to this notice

We may change this notice, and the changes will apply to all information we hold about you. We will post the new notice on our website with its effective date, email active patients, and give you a copy on request.

10. How to file a complaint

If you believe we violated your privacy rights, you can complain to us or to the federal government.

• To us: email privacy@lightweightmd.com or call 864-668-6120.
• To the U.S. Department of Health and Human Services, Office for Civil Rights: file online at hhs.gov/ocr/complaints, call 1-877-696-6775, or write to 200 Independence Avenue SW, Washington, DC 20201.

We will not retaliate against you for filing a complaint.

11. Contact

Privacy Official: Henry Igdal, M.D.
LightWeight MD, PLLC
Email: privacy@lightweightmd.com
Phone: 864-668-6120