Notice of Privacy Practices

HueVine PLLC — 17641 W 12 Mile Rd, Lathrup Village, MI 48076 · hello@huevine.com · (248) 234-5001 Effective Date: July 22, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who Follows This Notice

This Notice applies to HueVine PLLC and the licensed clinicians, employees, and workforce members who deliver or support your medical and aesthetic-medical care. HueVine operates as separate entities: HueVine PLLC provides medical and injectable services and is the health-care component covered by this Notice; HueVine Skincare LLC operates the website, retail store, memberships, Programs, and non-medical spa services. Non-medical, retail, and general marketing activities are governed by our general Privacy Policy, not this Notice.

What This Notice Covers — "Protected Health Information" (PHI)

"Protected Health Information," or PHI, is health information that identifies you (or could reasonably be used to identify you) and relates to your past, present, or future physical or mental health, the care we provide you, or payment for that care. This includes your treatment records, clinical notes, medical history, medications, consultation notes, clinical photographs, and identifiable before-and-after treatment images.

How We May Use and Disclose Your PHI Without Your Authorization

Treatment. We use and share your PHI to provide, coordinate, and manage your care.

Payment. We use and share your PHI to bill and collect payment for services — for example, to process a payment, arrange financing you request, or verify coverage.

Health Care Operations. We use and share your PHI for our own operations — for example, quality review, training, scheduling, care coordination, and improving our services.

Appointment reminders and scheduling. We may contact you to remind you of appointments or to schedule care. We send only the minimum information necessary and honor reasonable requests for confidential communication.

Recorded communications. Calls, texts, and voicemails with us may be recorded and transcribed by a service provider acting on our behalf, and handled as confidential, access-restricted records. We disclose this before recording and you may ask not to be recorded. See our Call Recording & Transcription Notice.

As required or permitted by law. We may use or disclose PHI when the law requires or permits it — for example, for public-health activities, to report abuse or neglect, for health-oversight activities, in response to a lawful court order or subpoena, to avert a serious threat to health or safety, for workers' compensation, or for specialized government functions, each subject to the limits the law imposes.

Uses and Disclosures That Require Your Written Authorization

We will obtain your written authorization before we use or disclose your PHI for any of the following, and you may revoke that authorization in writing at any time (the revocation applies going forward):

• Marketing and publicity that uses your PHI.
• Before-and-after photos, testimonials, reviews, or social-media content that identifies you or your treatment. Consenting to treatment is not the same as authorizing marketing. We will not make your treatment conditional on agreeing to optional marketing use of your images or story.
• Sale of PHI.
• Psychotherapy notes, where applicable.
• Most other uses not described in this Notice.

Your Rights Regarding Your PHI

You have the right to:

• Inspect and get a copy of your PHI in a designated record set, in the form and format you request when readily producible, within the timeframes the law allows.
• Request an amendment to PHI you believe is incorrect or incomplete.
• Request an accounting of certain disclosures we have made.
• Request restrictions on how we use or disclose your PHI. We will accommodate a request to restrict disclosure to a health plan for a service you paid for in full, out of pocket, as required by law.
• Request confidential communications — for example, that we contact you only by a specific method or at a specific address. We will accommodate reasonable requests.
• Get a paper copy of this Notice, even if you agreed to receive it electronically.
• Be notified if a breach of your unsecured PHI occurs.
• Designate a personal representative to act on your behalf, consistent with law.

To exercise any of these rights, contact our Privacy Officer below. We will not retaliate against you for exercising your rights.

Our Duties

We are required by law to maintain the privacy of your PHI, to provide you this Notice of our legal duties and privacy practices, to notify affected individuals following a breach of unsecured PHI, and to follow the terms of the Notice currently in effect. We must obtain your authorization for uses and disclosures not described in this Notice.

Changes to This Notice

We may change this Notice and make the new terms effective for all PHI we maintain. When we make a material change, we will update the effective date and make the revised Notice available in our facility and, where applicable, on our website.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, and you may file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). We will not retaliate against you for filing a complaint.

• U.S. HHS, Office for Civil Rights — https://www.hhs.gov/hipaa/filing-a-complaint/index.html

Michigan Note

HIPAA sets a federal privacy floor. Where Michigan law (or the law of your state of residence) gives you greater privacy protection, that stronger protection applies. This Notice addresses health-information privacy only; it does not describe which licensed professional may perform a given service — that is governed separately by Michigan licensing and scope-of-practice rules.

Contact — Privacy Officer

HueVine PLLC — Privacy Officer 17641 W 12 Mile Rd, Lathrup Village, MI 48076 hello@huevine.com · (248) 234-5001