HIPAA & Patient Privacy Information

Karr Holdings LLC, doing business as MEYA Wellness & Longevity

Last Updated: October 26, 2026

IMPORTANT: THIS PAGE EXPLAINS HOW PATIENT HEALTH INFORMATION MAY BE HANDLED BY THE LICENSED HEALTHCARE PROVIDERS AND CLINICAL PARTNERS ACCESSIBLE THROUGH MEYA WELLNESS & LONGEVITY. PLEASE REVIEW IT CAREFULLY.

1. Introduction

MEYA Wellness & Longevity ("MEYA," "we," "us," or "our") is operated by Karr Holdings LLC.

MEYA provides wellness education, information about available treatment programs, and care coordination. Clinical evaluations, medical consultations, treatment decisions, and prescribing services are facilitated through our clinical partner, Altro, and appropriately licensed healthcare professionals.

MEYA does not independently practice medicine or prescribe medications.

The Health Insurance Portability and Accountability Act (HIPAA) establishes federal privacy and security protections for certain health information maintained by covered healthcare entities and their business associates.

The official Notice of Privacy Practices applicable to a patient's medical care is provided by the responsible healthcare entity. This page is informational and does not replace that notice.

2. Protected Health Information

Protected health information (PHI) may include information relating to an individual's medical history, health conditions, laboratory results, prescriptions, treatment plans, and healthcare services when maintained or transmitted by an entity subject to HIPAA.

Medical information submitted through Altro's clinical platform is handled according to the applicable privacy and security practices of the responsible healthcare providers and entities.

MEYA's general website privacy practices are described in our separate Privacy Policy.

3. How Healthcare Providers May Use and Disclose PHI

Subject to applicable law, HIPAA-covered healthcare providers may use and disclose protected health information for purposes including:

A. Treatment

To provide, coordinate, and manage medical care, including communication with other healthcare professionals involved in treatment.

B. Payment

To process payment for healthcare services, determine coverage where applicable, and carry out related billing activities.

C. Healthcare Operations

To conduct permitted healthcare operations, including quality assessment, compliance, licensing, and administrative activities.

D. Treatment Reminders and Healthcare Communications

To communicate with patients about appointments, follow-up care, treatment-related information, and available health-related services, as permitted by law.

E. Family Members and Caregivers

To share relevant information with individuals involved in a patient's care when permitted by applicable law and patient preferences.

F. Other Legally Permitted Disclosures

Certain disclosures may be permitted or required for public health, health oversight, judicial proceedings, law enforcement, research, or prevention of serious threats to health or safety, subject to applicable legal requirements.

Other uses or disclosures may require the patient's written authorization.

4. Patient Privacy Rights

Under HIPAA, where applicable, patients generally have rights that may include:

• Access to medical records: Requesting access to and copies of protected health information.

• Corrections: Requesting amendments to inaccurate or incomplete medical information.

• Confidential communications: Requesting communication through alternative methods or locations.

• Restrictions: Requesting limits on certain uses or disclosures of health information.

• Accounting of disclosures: Requesting information about certain disclosures of protected health information.

• Notice of Privacy Practices: Receiving a copy of the applicable healthcare provider's official notice.

• Complaints: Filing a privacy complaint without retaliation.

Some rights are subject to legal conditions and exceptions.

Patients should submit requests concerning clinical records to the healthcare provider or clinical entity responsible for maintaining those records.

5. Medical Record Retention

Medical records maintained by licensed healthcare professionals and clinical entities are retained according to applicable federal and state recordkeeping requirements.

Retention periods may vary depending on the patient's state, the type of medical service, and the healthcare provider responsible for the records.

MEYA does not independently establish medical-record retention periods for Altro's healthcare providers.

6. Privacy and Security Safeguards

Healthcare entities subject to HIPAA are required to implement applicable safeguards to protect electronic protected health information.

These safeguards may include administrative, physical, and technical protections designed to reduce the risk of unauthorized access, disclosure, alteration, or loss.

No electronic system can guarantee absolute security.

The responsible healthcare entity handles legally required notifications concerning breaches of protected health information.

7. Medical Privacy Complaints

Patients who believe their HIPAA privacy rights have been violated may submit a complaint to the responsible healthcare provider or clinical entity.

Patients may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.

U.S. Department of Health and Human Services

Office for Civil Rights

Website: https://www.hhs.gov/ocr

Patients are protected against retaliation for filing a HIPAA complaint.

8. Third-Party Clinical Services

MEYA may direct patients to Altro's clinical platform to complete medical intake, communicate with licensed healthcare professionals, or access prescribed treatment services.

When patients use that platform, the privacy policies, patient agreements, and official Notices of Privacy Practices of the applicable clinical entities may apply.

Patients should review those documents before submitting medical information.

9. Changes to This Information

We may update this informational page to reflect changes in our clinical partnerships, website operations, or applicable privacy requirements.

Updates will be posted with a revised date.

Changes to an official healthcare provider's HIPAA Notice of Privacy Practices are governed by that provider's applicable legal obligations.

10. Contact Information

For general questions about MEYA's website privacy practices or assistance locating the appropriate clinical privacy resources, contact:

Karr Holdings LLC
Doing business as MEYA Wellness & Longevity

Email: Hello@Meyawellness.com

Website: www.meyawellness.com

For requests involving medical records, treatment information, or protected health information maintained by a healthcare provider, please contact the responsible clinical entity through its designated patient support or privacy channel.

Important Disclosure: This page provides general information about patient privacy and HIPAA. It is not the official HIPAA Notice of Privacy Practices of Altro or any treating healthcare provider and does not replace documents required by applicable law.