HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: February 16, 2026 (Updated November 2026)

Shahri Dental Corp, doing business as Neo Dental ("Neo Dental," "our office," "we," or "us"), is committed to protecting your privacy, and we have adopted privacy practices to safeguard the information we gather from you. We understand that dental and medical information about you and your health is personal. This Notice of Privacy Practices ("Notice") describes how we may use and disclose your "Protected Health Information" ("PHI"), as defined by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations, and explains how you can access this information and exercise your privacy rights.

Consumer information is never shared with or sold to third parties for marketing purposes.

How We Typically Use or Share Your Health Information

We typically use or share your health information in the following ways:

• Treat You: We can use your health information and share it with other healthcare professionals who are treating you (for example, consulting with your physician or a dental specialist regarding your overall health or treatment plan).
• Bill for Your Services: We can use and share your health information to bill and receive payment from dental/health plans or other entities (for example, submitting a claim to your dental insurance carrier).
• Run Our Office: We can use and share your health information to operate our practice, improve your quality of care, and contact you when necessary (for example, internal quality assessments or appointment reminders).

How Else Can We Use or Share Your Health Information?

We are allowed or required to share your information in other ways—usually to contribute to the public good, such as public health and research—after meeting strict legal conditions (learn more at www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html):

• Help with Public Health and Safety Issues: Preventing disease, reporting suspected abuse, neglect, or domestic violence, and preventing or reducing a serious threat to anyone's health or safety.
• Comply with the Law: Sharing information when required by state or federal law, including with the U.S. Department of Health and Human Services ("HHS") or the Dental Board of California.
• Do Research: Using and sharing information for approved health research under strict privacy safeguards.
• Family and Friends: Disclosing relevant health information to a family member, friend, or caregiver involved in your care or payment for your care, or to notify a legally authorized representative of your location, general condition, or status. If you are a minor, we may release your health information to your parents or legal guardians as permitted or required under federal and California law.
• Organ and Tissue Donation Requests: Sharing information with organ procurement organizations when applicable.
• Medical Examiner or Funeral Director: Sharing information with a coroner, medical examiner, or funeral director when an individual passes away.
• Workers' Compensation, Law Enforcement, and Government Requests: Sharing information for workers' compensation claims, law enforcement purposes, health oversight agencies, and specialized government functions (such as military and national security).
• Lawsuits and Legal Actions: Sharing health information in response to a court or administrative order, or in response to a lawful subpoena (subject to stricter rules below for Substance Use Disorder records).

Special Protections for Substance Use Disorder Records (42 CFR Part 2)

Although Neo Dental provides dental care rather than substance use disorder ("SUD") treatment, we may receive or maintain health histories, medication lists, or referral records from federally assisted SUD programs protected under 42 CFR Part 2 ("Part 2"). These records receive heightened federal confidentiality protections beyond standard HIPAA rules:

• Consent Requirements: Except in limited circumstances permitted by law (such as a bona fide medical emergency, qualified audits/evaluations, or reporting suspected child abuse or neglect), we will not use or disclose Part 2-protected SUD records without your specific written consent. Where you provide a single written consent for future uses and disclosures for treatment, payment, and health care operations ("TPO"), we and our business associates may use and redisclose those records as permitted by HIPAA, subject to the legal proceeding prohibition below. Separate written consent is always required for SUD counseling notes.
• Prohibition on Use in Legal Proceedings: Substance Use Disorder records received from a Part 2 program—or testimony relaying the content of such records—shall not be used or disclosed in any civil, criminal, administrative, or legislative proceeding against you unless based on your specific written consent OR a qualifying court order issued after you and the record holder have been given notice and an opportunity to be heard, accompanied by a subpoena or other legal requirement compelling disclosure.
• Fundraising: We do not use or disclose Part 2 SUD records for fundraising. If we ever intended to use or disclose such records for fundraising, you would first be provided a clear and conspicuous opportunity to opt out of receiving fundraising communications.

Notice of Potential Redisclosure

Please be aware that Protected Health Information disclosed by our office pursuant to the HIPAA Privacy Rule may be subject to redisclosure by the recipient and may no longer be protected by federal HIPAA regulations—unless protected by stricter California confidentiality laws or 42 CFR Part 2.

Your Rights Regarding Your Health Information

When it comes to your health information, you have the following rights:

• Get an Electronic or Paper Copy of Your Record: You have the right to inspect and/or obtain an electronic or paper copy of your dental and medical records maintained in our designated record set, or ask us to send an electronic copy to a person or organization you designate. Submit a written request to our Privacy Officer; we may charge a reasonable, cost-based fee permitted by law.
• Ask Us to Correct Your Record: You can ask us to correct health information about you that you believe is incomplete or incorrect. If we deny your request, we will explain why in writing within 60 days.
• Request Confidential Communications: You can ask us to contact you in a specific way (for example, home or cell phone only) or send mail to a different address. We will accommodate all reasonable requests.
• Ask Us to Limit What We Use or Share: You can ask us not to use or share certain health information for treatment, payment, or operations. While we are not required to agree if it would affect your care, we must agree if you pay for a service or health care item out-of-pocket in full and ask us not to share that information with your health insurer.
• Get a List of Those With Whom We've Shared Information (Accounting of Disclosures): You can ask for an accounting of disclosures of your health information made during the prior six years (excluding disclosures for treatment, payment, operations, and certain other exceptions). One accounting per 12-month period is free; a reasonable, cost-based fee may apply to additional requests within 12 months.
• Get a Copy of This Privacy Notice: You can ask for a paper copy of this Notice at any time in our office, even if you agreed to receive it electronically.
• File a Complaint: If you feel we have violated your privacy rights, you may file a complaint with our Privacy Officer using the contact information below, or with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Ave., S.W., Room 509F HHH Bldg., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. We will never retaliate against you for filing a complaint.

SMS / Text Messaging & Written Authorization Rules

• SMS / Text Messaging: By providing your mobile phone number and opting into our SMS messaging service through our website, patient portal, or intake forms, you consent to receive text messages related to your dental care (such as appointment reminders, scheduling updates, post-op check-ins, and billing notices). Promotional or marketing text messages are sent only if you provide separate, express written consent. Your mobile number and opt-in consent are protected with industry-standard security measures and are never shared with or sold to third parties for marketing purposes (though they may be processed by our HIPAA-compliant messaging vendor under a Business Associate Agreement strictly to deliver your messages). You may opt out at any time by replying STOP.
• When Written Authorization Is Required: We will never use or disclose your health information for marketing purposes, fundraising, or the sale of your information without your explicit written authorization. Other uses and disclosures not described in this Notice will be made only with your written authorization, which you may revoke in writing at any time.
• De-Identified Information & Emergency Exceptions: We may create and use de-identified health information after removing all personally identifiable data in accordance with HIPAA standards. We may also use or disclose PHI without prior consent for treatment, payment, or health care operations if required by law to treat you or in an emergency where substantial communication barriers prevent obtaining consent and your consent is clearly inferred.

California State Law & Our Legal Duties

• Stricter California Laws: We will never use or share your information if California law prohibits it. Where California state law is stricter than federal HIPAA regulations (including California's Confidentiality of Medical Information Act ("CMIA") and heightened protections for HIV/AIDS, reproductive health, or mental health records), we follow the stricter California standard.
• Our Duties: We are required by law to maintain the privacy and security of your Protected Health Information, abide by the terms of the Notice currently in effect, and notify you promptly if a breach occurs that may have compromised the privacy or security of your unsecured information. We reserve the right to revise this Notice, and any updated Notice will apply to all health information we maintain and will be posted in our office and on neodentalbh.com.

Questions & Privacy Officer Contact Information

If you have questions about this Notice or wish to exercise any of your privacy rights, please contact our Privacy Officer:

• Privacy Officer: Dr. Soheil Shahri, DDS
• Practice Name: Neo Dental (Shahri Dental Corp)
• Mailing Address: 350 S Beverly Dr, Suite 180, Beverly Hills, CA 90212
• Phone: (310) 277-3451
• Website: https://neodentalbh.com