Bluetree Dental: Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. About This Notice
This Notice describes the privacy practices of Bluetree Dental practices and the “organized health care arrangement,” which includes each individual dental practice owned by or affiliated with Carefree Practice Resources, LLC (referred to as “Bluetree Dental”). These practices may share medical information with each other for treatment, payment, or healthcare operations as described in this Notice. We are required by law to maintain the privacy of your “protected health information” (PHI), to provide you with this Notice of our legal duties, and to abide by the terms of the Notice currently in effect.

2. How We May Use and Disclose Your PHI
We use your PHI for treatment, payment, and healthcare operations, as well as other purposes permitted or required by law.

• Treatment: We disclose PHI to healthcare professionals who require access for your treatment, such as staff members, other dentists, or physicians not affiliated with Bluetree Dental.
• Payment: We use and disclose PHI to bill and collect payment, determine eligibility for services, or obtain payment from health plans.
• Health Care Operations: This includes quality assurance, utilization reviews, management, and other necessary functions to support our operations.
• Appointment Reminders: Bluetree Dental may use your medical and contact information to provide appointment reminders. If we do not reach you, we may leave a message with an individual who answers the phone or leave a voicemail.
• Individuals Involved in Your Care: We may release PHI to a friend or family member involved in your medical care or someone who helps pay for your care. We may also disclose information to disaster relief entities to notify your family of your location or status.
• Business Associates: We may share PHI with third-party “business associates” (e.g., billing, collections, or storage services) who perform jobs for us, provided they agree to safeguard your information.
• Redisclosure Warning: Information disclosed pursuant to this Notice may be subject to redisclosure by the recipient and may no longer be protected by the HIPAA Privacy Rule.
• Other Uses: For purposes not described (such as marketing or the sale of PHI), we will ask for your written authorization, which you may revoke at any time.

3. Special Protections (2026 Updates)

• Substance Use Disorder (SUD) Records: Consistent with 42 CFR Part 2, any SUD records we maintain are subject to heightened protections. We will not use or disclose these records in civil, criminal, administrative, or legislative proceedings against you without your express written consent or a specific court order. If we use SUD records for fundraising, we will provide you a clear opportunity to opt-out.
• Reproductive Health Care: We will not use or disclose PHI for the purpose of investigating or imposing liability on any person for the mere act of seeking, obtaining, providing, or facilitating lawful reproductive health care.

4. Required or Permitted Disclosures Without Authorization

• Required by Law: We disclose PHI when required by federal, state, or local law.
• Public Health & Safety: We may disclose PHI to public health authorities to prevent disease, report births/deaths, or report suspected abuse, neglect, or domestic violence. We may also disclose info to avert a serious threat to the health or safety of yourself, the public, or another person.
• Oversight & Legal Proceedings: PHI may be disclosed for audits, investigations, or licensing. It may also be disclosed in response to a court order, administrative order, or subpoena.
• Law Enforcement: We may disclose PHI to law enforcement officials in response to a warrant, summons, or similar legal process, subject to legal requirements.
• Specialized Functions: We may disclose PHI for research approved by a review board, to organ donor organizations, coroners, or workers’ compensation agents.

5. Your Individual Rights

• Right to Inspect and Copy: You and your representative have the right to access and receive a copy of your PHI, usually within 30 days of a written request.
• Right to Amend: If you believe your PHI contains a mistake, you may request a written correction. We may deny this if the information is accurate, complete, or was not created by us.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures made in the past six years (excluding treatment, payment, or operations). The first list in a 12-month period is free.
• Right to Request Restrictions: You may request limitations on how we use or disclose PHI. We must honor requests to restrict disclosure to a health plan if you have paid for the service out-of-pocket and in full.
• Right to Confidential Communications: You may request that we communicate with you in a specific way or at a specific location, provided the request is reasonable.
• Right to a Paper Copy: You are entitled to a paper copy of this Notice at any time, even if you agreed to receive it electronically.

6. Changes and Complaints

• Changes to This Notice: We reserve the right to change this Notice. Revised notices will be posted on our website at bluetreedental.com.
• Complaints: If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against.

Privacy Officer: Trevor Hassell

Address: 9785 Gateway Drive Suite 2000, Reno, NV 89521

Effective Date: February 16, 2026