Notice of Privacy Practices

1. Our Responsibilities

Blue Flower Health, LLC ("we," "our," or "us") is committed to maintaining the privacy and security of your protected health information ("PHI"). We are required by law to:

• Maintain the privacy and security of your information
• Provide you with this Notice of Privacy Practices
• Follow the terms currently in effect
• Notify you if a breach occurs that may compromise your information

2. How We Use and Disclose Your Information

A. For Services and Support

We may use your information to:

• Review health-related information you voluntarily provide
• Provide educational wellness guidance and nurse-led support
• Coordinate laboratory services through third-party laboratory providers when applicable

B. For Payment

We may use your information to:

• Process payments for purchased services
• Verify transactions related to services you request

Blue Flower Health primarily operates on a direct-pay model and may not bill insurance.

C. Healthcare Operations

We may use your information to:

• Improve services and user experience
• Conduct internal quality reviews
• Support business operations and administration

D. Laboratory Services

When laboratory testing is purchased:

• We may collect information necessary to facilitate testing
• Lab orders may be coordinated through authorized third-party providers when required
• Information may be shared with laboratory partners solely for purposes related to requested services and reporting

E. Business Associates and Service Providers

We may share information with trusted third-party service providers who help operate our business. Examples may include:

• Secure payment processors
• Website hosting providers
• Secure communication platforms
• Cloud-based forms and document systems
• Laboratory partners

These providers are expected to maintain appropriate safeguards for your information.

F. As Required by Law

We may disclose information when required by federal or Missouri law, including:

• Public health reporting
• Law enforcement requests
• Health oversight activities

G. To Prevent Serious Harm

We may use or disclose information when necessary to help prevent a serious threat to health or safety.

3. Uses Requiring Authorization

We will not use or disclose your information for the following purposes without your written authorization:

• Marketing unrelated to services you requested
• Sale of personal health information
• Sharing identifiable information for unrelated non-healthcare purposes

You may revoke authorization in writing at any time.

4. Your Rights

You have the right to:

• Request access to your information
• Request corrections to inaccurate information
• Request restrictions on certain uses or disclosures
• Request confidential communications
• Request a list of certain disclosures
• Request a copy of this Notice

5. Electronic Communications

By using our services, you acknowledge that electronic communications such as email, web forms, and approved messaging platforms may involve some privacy or security risks despite reasonable safeguards.

6. How We Protect Your Information

We use reasonable administrative, technical, and physical safeguards, including:

• Secure electronic systems
• Limited access to information
• Encrypted communications when appropriate

Access to client information is limited to individuals who require access for operational or service-related purposes.

7. Breach Notification

If a breach occurs that compromises the privacy or security of your information, we will notify you in accordance with applicable law.

8. Changes to This Notice

We reserve the right to update this Notice at any time. Updated versions will be posted with a revised effective date.

9. Questions or Complaints

Questions regarding this Notice may be directed to:

Blue Flower Health, LLC
admin@blueflowerhealth.com
636-293-8370

You may also file a complaint with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

10. Acknowledgment

By using our services, you acknowledge that you have been provided access to this Notice of Privacy Practices.