Notice of Privacy Practices

Effective Date: April 6, 2026

LERA operates an organized healthcare arrangement designed to deliver whole-body care through a coordinated structure.

Clinical services are provided exclusively by LERA Medical Informatics LLC ("LMI"), a healthcare services entity. Your clinical relationship as a member is with LMI.

LMI delivers health and wellness services through a team of licensed medical practitioners, whole-body health coaches, and mindful resilience coaches, all of whom are independent contractors of LMI.

LERA Health LLC ("LERA Health") provides the technology platform, administrative services, and operational support that enable care delivery.

LERA Nutraceuticals LLC ("LN") provides LERA's proprietary professional-grade supplements.

LMI, LERA Health and LN may be referred to collectively as "LERA" where appropriate; however, clinical services and medical decision-making are provided solely by LMI.

This Notice describes how medical and health information about you may be used and disclosed, and how you can access that information.

Please read it carefully.

Our Commitment to Your Privacy

At LERA, your health information is deeply personal.

We are committed to protecting your privacy, complying with applicable laws, and being transparent about how your information is used.

This Notice applies to protected health information ("PHI") created, received, or maintained by LERA in connection with the clinical services we provide.

What Is Protected Health Information (PHI)?

PHI is information that:

identifies you, or could reasonably be used to identify you, and
relates to your health, medical history, test results, care, or payment for care

This includes information you provide to us, information generated through testing or clinical services, and information shared with us by labs or other healthcare providers. We are required by law to maintain the privacy of your PHI and to provide you with this notice of our legal duties and privacy practices concerning your PHI. We are also required to notify you following any breach of unsecured PHI.

How We Use and Share Your PHI

1) For Treatment

We may use and share your PHI to provide, coordinate, or manage your care.

Examples include:

reviewing your health history
ordering and reviewing lab tests
developing and updating your personalized care plan
communicating with labs, clinicians, or other healthcare providers involved in your care

2) For Payment

We may use and share your PHI to obtain payment for services provided.

This may include:

billing you or a third-party payer
verifying coverage
processing payments

3) For Healthcare Operations

We may use your PHI to support the operation and improvement of our services.

Examples include:

quality improvement
clinical oversight and review
care coordination
internal audits
compliance and risk management

4) With Service Providers and Business Associates

We may share PHI with trusted vendors who help us operate our platform or deliver services (for example, labs, technology providers, or administrative partners). LERA entities will share your PHI with each other, as necessary to carry out treatment, payment, or health care operations relating to the organized health care arrangement. LERA may also disclose PHI for health care fraud and abuse detection compliance.

These parties are required by law and contract to safeguard your information and use it only as permitted.

5) Technology, Analytics, and Care Support

LERA uses secure technology systems, including rules-based analytics, to support personalization, care delivery, and longitudinal monitoring.

We do not sell your health information.

We do not use your PHI for advertising without your authorization.

6) As Required by Law

We may disclose PHI when required by law, including for:

public health reporting
health oversight activities
law enforcement requests
court orders or legal proceedings
to report abuse, neglect, or domestic violence

7) With Your Authorization

In situations not covered by this Notice, we will obtain your written authorization before using or sharing your PHI.

You may revoke an authorization at any time in writing, except where we have already relied on it.

In addition, we may use or disclose your PHI to a family member, other relative, friend, or any other person identified by you when you are receiving treatment.

Your Rights Regarding Your PHI

You have the right to:

Access Your Records

Request a copy of your PHI in electronic or paper form.

Request Corrections

Ask us to correct information you believe is inaccurate or incomplete.

Request Confidential Communications

Ask us to contact you in a specific way (for example, via email instead of mail).

Request Restrictions

Ask us to limit how your PHI is used or shared. We may not be able to agree to all requests, but we will consider them carefully.

Receive an Accounting of Disclosures / Inspect Your Records

Request a list of certain disclosures of your PHI.

Receive a Copy of This Notice

You may request a paper or electronic copy at any time.

File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with LERA or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

Our Responsibilities

We are required by law to:

maintain the privacy and security of your PHI
provide you with this Notice
follow the terms of the Notice currently in effect
notify you if a breach occurs that may have compromised your information

Changes to This Notice

We may update this Notice from time to time.

Any changes will apply to all PHI we maintain and will be posted on our website. The effective date will be updated accordingly.

If You Are Using LERA Through an Employer or Partner

If LERA is offered through an employer, health plan, or partner organization:

your employer does not receive your individual health information
any reporting provided is aggregated and de-identified
your participation and results cannot be used for employment decisions

Contact Information

If you have questions, want to exercise your rights, or wish to file a complaint, please contact:

Privacy Officer
LERA Health
Email: support@lerahealth.com
Mail: PO Box 16242, Golden, CO 80402

You may also file a complaint with:

U.S. Department of Health and Human Services
Office for Civil Rights
www.hhs.gov/ocr

Notice of Privacy Practices

Effective Date: April 6, 2026

LERA operates an organized healthcare arrangement designed to deliver whole-body care through a coordinated structure.

Clinical services are provided exclusively by LERA Medical Informatics LLC ("LMI"), a healthcare services entity. Your clinical relationship as a member is with LMI.

LMI delivers health and wellness services through a team of licensed medical practitioners, whole-body health coaches, and mindful resilience coaches, all of whom are independent contractors of LMI.

LERA Health LLC ("LERA Health") provides the technology platform, administrative services, and operational support that enable care delivery.

LERA Nutraceuticals LLC ("LN") provides LERA's proprietary professional-grade supplements.

LMI, LERA Health and LN may be referred to collectively as "LERA" where appropriate; however, clinical services and medical decision-making are provided solely by LMI.

This Notice describes how medical and health information about you may be used and disclosed, and how you can access that information.

Please read it carefully.

Our Commitment to Your Privacy

At LERA, your health information is deeply personal.

We are committed to protecting your privacy, complying with applicable laws, and being transparent about how your information is used.

This Notice applies to protected health information ("PHI") created, received, or maintained by LERA in connection with the clinical services we provide.

What Is Protected Health Information (PHI)?

PHI is information that:

identifies you, or could reasonably be used to identify you, and
relates to your health, medical history, test results, care, or payment for care

How We Use and Share Your PHI

1) For Treatment

We may use and share your PHI to provide, coordinate, or manage your care.

Examples include:

reviewing your health history
ordering and reviewing lab tests
developing and updating your personalized care plan
communicating with labs, clinicians, or other healthcare providers involved in your care

2) For Payment

We may use and share your PHI to obtain payment for services provided.

This may include:

billing you or a third-party payer
verifying coverage
processing payments

3) For Healthcare Operations

We may use your PHI to support the operation and improvement of our services.

Examples include:

quality improvement
clinical oversight and review
care coordination
internal audits
compliance and risk management

4) With Service Providers and Business Associates

These parties are required by law and contract to safeguard your information and use it only as permitted.

5) Technology, Analytics, and Care Support

LERA uses secure technology systems, including rules-based analytics, to support personalization, care delivery, and longitudinal monitoring.

We do not sell your health information.

We do not use your PHI for advertising without your authorization.

6) As Required by Law

We may disclose PHI when required by law, including for:

public health reporting
health oversight activities
law enforcement requests
court orders or legal proceedings
to report abuse, neglect, or domestic violence

7) With Your Authorization

In situations not covered by this Notice, we will obtain your written authorization before using or sharing your PHI.

You may revoke an authorization at any time in writing, except where we have already relied on it.

In addition, we may use or disclose your PHI to a family member, other relative, friend, or any other person identified by you when you are receiving treatment.

Your Rights Regarding Your PHI

You have the right to:

Access Your Records

Request a copy of your PHI in electronic or paper form.

Request Corrections

Ask us to correct information you believe is inaccurate or incomplete.

Request Confidential Communications

Ask us to contact you in a specific way (for example, via email instead of mail).

Request Restrictions

Ask us to limit how your PHI is used or shared. We may not be able to agree to all requests, but we will consider them carefully.

Receive an Accounting of Disclosures / Inspect Your Records

Request a list of certain disclosures of your PHI.

Receive a Copy of This Notice

You may request a paper or electronic copy at any time.

File a Complaint

Our Responsibilities

We are required by law to:

maintain the privacy and security of your PHI
provide you with this Notice
follow the terms of the Notice currently in effect
notify you if a breach occurs that may have compromised your information

Changes to This Notice

We may update this Notice from time to time.

Any changes will apply to all PHI we maintain and will be posted on our website. The effective date will be updated accordingly.

If You Are Using LERA Through an Employer or Partner

If LERA is offered through an employer, health plan, or partner organization:

your employer does not receive your individual health information
any reporting provided is aggregated and de-identified
your participation and results cannot be used for employment decisions

Contact Information

If you have questions, want to exercise your rights, or wish to file a complaint, please contact:

Privacy Officer
LERA Health
Email: support@lerahealth.com
Mail: PO Box 16242, Golden, CO 80402

You may also file a complaint with:

U.S. Department of Health and Human Services
Office for Civil Rights
www.hhs.gov/ocr