Notice of Privacy Practices

Anthony D. Rogers, M.D., Professional Corporation, doing business as One Tree Medical

216 E. Gutierrez Street, 2nd Floor, Santa Barbara, CA 93101

Phone: 805-335-1114

Fax: 805-728-7030

Effective date: September 3, 2026

Who follows this notice

This notice applies to Anthony D. Rogers, MD, and everyone who works for or with this practice, including staff and contractors who handle your health information on our behalf.

Our legal duties

We are required by law to keep your health information private, to give you this notice explaining our privacy practices, and to follow the terms of the notice currently in effect. If we change it, the new notice applies to all information we hold, and we will post the current version in our office and on our website.

How we may use and disclose your health information without your authorization

TREATMENT. To provide and coordinate your care — for example, sending your records to a specialist, ordering labs or imaging, or sending a prescription to your pharmacy.

PAYMENT. To bill and get paid — for example, submitting claims to your insurer, or verifying coverage.

HEALTH CARE OPERATIONS. To run the practice — for example, quality review, keeping records, training, scheduling, and administration.

BUSINESS ASSOCIATES. We use outside companies for services such as our medical records system, secure messaging, phone and fax, transcription, and AI-assisted record-keeping. Each one signs a HIPAA Business Associate Agreement requiring it to protect your information the same way we do.

OTHER USES THE LAW ALLOWS OR REQUIRES. We may use or disclose your information without your authorization when the law requires or permits it, including: public health activities such as reporting disease or adverse events; suspected abuse, neglect, or domestic violence; health oversight audits and inspections; court orders, subpoenas, and other lawful legal process; law enforcement requests the law permits; serious threats to your health or safety or the safety of others; workers' compensation; coroners, medical examiners, and funeral directors; organ donation; specialized government functions such as military or national security; and research approved by a review board with privacy protections in place.

APPOINTMENT REMINDERS AND CARE OPTIONS. We may contact you about appointments, or about treatment alternatives and health services that may interest you.

PEOPLE INVOLVED IN YOUR CARE. Unless you object, we may share information relevant to their involvement with a family member, friend, or anyone else you identify as helping with your care or payment.

Uses that always require your written authorization

We will not do any of the following without your written authorization: sell your health information; use or share it for marketing; share psychotherapy notes, except in the narrow circumstances the law allows; or use it for any purpose not described in this notice. You may revoke an authorization in writing at any time. Revoking it stops future uses; it cannot undo what was already done in reliance on it.

We do not use your information to train AI, and we do not sell it

Your health information is never used to train, fine-tune, or improve any artificial intelligence model, and it is never sold.

Your rights

ACCESS. Get a copy of your health record, on paper or electronically. We will provide it within 30 days and may charge a reasonable cost-based fee. To request it, contact our Privacy Officer below.

AMEND. Ask us to correct information you believe is wrong or incomplete. We may deny the request, and if we do we will explain why in writing and you may submit a statement of disagreement to be kept with your record.

ACCOUNTING OF DISCLOSURES. Get a list of certain disclosures we made in the six years before your request. Disclosures for treatment, payment, and operations are not included.

REQUEST RESTRICTIONS. Ask us to limit how we use or share your information. We are not required to agree, with one exception we must honor: if you pay in full out of pocket for a service, you may require us not to share information about it with your health plan.

CONFIDENTIAL COMMUNICATIONS. Ask us to contact you a specific way or at a specific address — for example, only by a certain phone number. We will accommodate reasonable requests.

PAPER COPY. Get a paper copy of this notice at any time, even if you agreed to receive it electronically.

NOTICE OF A BREACH. Be notified if a breach occurs that compromises the privacy or security of your information.

CHOOSE SOMEONE TO ACT FOR YOU. Have a person with medical power of attorney, or your legal guardian, exercise these rights for you.

How to exercise your rights, or complain

Contact our Privacy Officer:

Anthony D. Rogers, MD, Privacy Officer Anthony D. Rogers, M.D., Professional Corporation, dba One Tree Medical 216 E. Gutierrez Street, 2nd Floor, Santa Barbara, CA 93101 Phone: 805-335-1114 Email: tony@onetreemedical.org

If you believe your privacy rights have been violated, you may file a complaint with us using the contact above, and you may also file a complaint directly with the U.S. Department of Health and Human Services, Office for Civil Rights:

Office for Civil Rights, U.S. Department of Health and Human Services 200 Independence Avenue SW, Washington, DC 20201 Phone: 1-877-696-6775 Online: www.hhs.gov/ocr/privacy/hipaa/complaints/

WE WILL NOT RETALIATE AGAINST YOU FOR FILING A COMPLAINT. Filing a complaint will not affect your care in any way.

California law

California law protects some health information more strictly than federal law — including information about mental health, substance use treatment, HIV/AIDS, genetic testing, and reproductive health. Where California law is stricter, we follow California law.

Changes to this notice

We may change this notice, and changes will apply to information we already hold as well as information we receive in the future. The current version is always posted in our office and on our website, and is available on request.

For your records, or to print a copy for the office.