Notice of Privacy Practices.

Effective date of this Notice: March 14, 2025

Introduction

EHE Health (“EHE Health,” “we,” or “our”) creates and maintains a record that includes protected health information (“EHE Health Record”) for each patient member (“you,” or “your”) who receives our preventative health services (“Services”). We use the term “protected health information” to refer to information that is (1) subject to the Health Insurance Portability and Accountability Act (“HIPAA”) or similar state and federal laws and (2) identifiable to you and related to your health, medical condition, diagnosis, symptoms, treatment, and care. We collect protected health information when:

  • You receive preventative health services or treatment from EHE Health providers.
  • You use our patient portal at https://my.ehe.health/.
  • Providers or others authorized by you, who are not part of EHE Health, submit health information to your EHE Health Record.

THIS NOTICE OF PRIVACY PRACTICES DESCRIBES HOW YOUR PROTECTED HEALTH INFORMATION—INFORMATION THAT IS SUBJECT TO THE HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPAA) AND SIMILAR STATE AND FEDERAL LAWS—MAY BE USED AND DISCLOSED (SHARED), HOW YOU CAN GET ACCESS TO (SEE AND COPY) THIS INFORMATION, AND OTHER RIGHTS REGARDING THIS INFORMATION.

PLEASE REVIEW THIS NOTICE OF PRIVACY PRACTICES CAREFULLY AND REGULARLY. EHE Health has the right to change this Notice without first notifying you. If you have questions about this Notice, contact us through the methods stated in our “Contact Us” section below.

This Notice of Privacy Practices (“Notice”) is in addition to the information practices described in our Privacy Policy, which apply to other types of information you provide or we may collect about you when, for example, you use EHE Health’s website, patient portal, or preventative health services and when we receive information from your employer.

How EHE Health May Use and Share Your Protected Health Information

We want you to understand that when you sign up through your employer to receive EHE Health’s services, we may use and share your health information, in addition to the reasons outlined in the section titled “How We May Use and Share Protected Health Information,” to:

  • Provide you with access to our preventative care services through our medical examinations and screenings.
  • Maintain a full patient health record to tailor our preventative care services and treatment options to your needs.
  • Coordinate your care, which may include such things as giving you appointment reminders and providing information about other treatment options.
  • Improve our member service, fulfill requests for information, and verify member information.
  • Build a long-term relationship by learning about your experience with us and keeping records of your needs, preferences and interests.
  • Manage our websites and monitor website usage.
  • Uphold our contractual obligations, contractual relations, and protect our business interests.
  • Comply with the law and respond to government requests.
  • Protect our rights, property, and safety or the rights, property and safety of others.
  • Meet special situations as described in this Notice of Privacy Practices, such as public health and safety.

All other uses and sharing of your health information will be done only with your specific written permission or as permitted or required by law.

Your Protected Health Information Rights

Your legal rights regarding your protected health information are described in the section titled “Your Rights Concerning Your Health Information.” These include the rights to:

  • Ask to see and receive a copy of your medical record.
  • Ask that incorrect or incomplete information in your medical record be corrected.
  • Ask for a list of all people and organizations to which EHE Health disclosed your health information, subject to limits permitted by law.
  • Ask EHE Health to limit how we use and share your health information without your consent.
  • Ask for confidential communications with EHE Health.
  • Choose someone to act for you (such as when you have given someone medical power of attorney or if someone is your legal guardian).
  • Ask for a paper copy of the notice of privacy practices.
  • File a complaint with the U.S. Department of Health and Human Services if you believe your rights are violated. (See the section titled “Violation of Privacy Rights.”)

WHAT IS A NOTICE OF PRIVACY PRACTICES?

This Notice describes the ways EHE Health may use and share your health information, as well as legal duties regarding your health information. The Notice also outlines your rights under federal (United States) and state laws.

WHEN DOES THIS NOTICE OF PRIVACY PRACTICES APPLY?

This Notice only applies to protected health information that is subject to HIPAA or similar state health information privacy laws. This includes your EHE Health Record and our websites where you can access your electronic health record such as EHE Health’s patient portal (my.EHE.health), and your interactions with a healthcare provider regarding your specific care. This Notice does not apply to health information used or shared in a manner that cannot identify you.

OUR DUTY TO PROTECT YOUR HEALTH INFORMATION

We are required by law to:

  • Ensure that your protected health information is used in accordance with this Notice (as currently in effect).
  • Make available to you this Notice that describes the ways we use and share your health information, as well as your rights under the law.

HOW WE MAY USE AND SHARE YOUR PROTECTED HEALTH INFORMATION

We want you to understand that when you sign up through your employer to receive EHE Health’s preventative care services, we may use and share your health information in the ways identified, and subject to the limitations, described below.

A. Ways We Are Allowed to Use and Share Your Protected Health Information Without Your Consent:

1.    Treatment. When you participate in one of our examinations or screenings, you are providing us with your health information. We may use that health information to provide you medical treatment or related services. Unless we have your express written consent, we will not provide access to your EHE Health electronic medical record to providers outside the EHE Health network. If authorized by you, we will enable providers outside of the EHE Health network to have access to your electronic medical record including, for example, your primary care physician, physical therapist, long term care facility, home healthcare agencies, or their organizations.

2.    Appointment Reminders. We may use and share your health information to remind you of your appointment for a scheduled examination, treatment, or medical care. Depending on the communications methods you authorize us to use, we may call, text, or e-mail you to remind you of a scheduled appointment. We may also use and share your health information to confirm the time, place, and attendance of your appointment for treatment.

3.    Suggestions about Treatment Options and Other Health-Related Benefits and Services. We may use and share your health information to tell you about possible treatment options and other health-related benefits and services. For example, if you suffer from an illness or condition, we may use your health information to assess your eligibility and propose treatments.

4.    Website Use of Cookies and Other Tracking Technologies. When you visit and use our websites (including the patient portal), we (and third parties we authorize) may collect and share data about your use of these websites and applications through cookies and other tracking technologies. Data collected using these technologies generally is not considered to be protected health information unless it is collected through our patient portal. This information can include technical information about your device or browser (such as, for example, your internet protocol (IP) address, operating system, device identifier, browser type, and referring URLs) as well as information about your activities or use of the websites (such as, for example, access times, pages viewed, and links clicked). Please review the EHE Health Privacy Policy posted on the EHE website for information on the use of cookies and other technologies on our websites and ways you may choose to restrict these technologies.

5.    Special Circumstances. In the following situations, the law either permits or requires us to use or share some of your protected health information with others, subject to the restrictions imposed by laws governing particularly sensitive health information (such as behavioral health information, drug and alcohol treatment information, and HIV status).

a.    As Required by Law. We may share your health information when required or permitted by federal, state, or local law. For example, if we believe that you have been a victim of abuse, we may share your health information with an authorized government agency. If we share your health information for this purpose, we will tell you unless we believe that telling you would put you or someone else at risk of harm.

b.    To Prevent a Serious Threat to Health or Safety. We may use and share your health information to prevent or lessen the threat of serious harm to the health and safety of you, the public, or another person. State laws may require such disclosure when an individual or group has been specifically identified as the target or potential victim.

c.     Special Government Purposes. We may use and share your health information with certain government agencies, such as sharing your health information with authorized federal officials for intelligence, counterintelligence and other national security activities authorized by law.

d.    Public Health. As permitted or required by law, including the National Emergencies Act, we may share your health information with public health authorities for public health purposes to prevent or control disease, injury, or disability. This includes, but is not limited to, reporting disease, injury, and important events such as birth or death, and conducting public health monitoring, investigations, or activities. For example, we may share your health information to 1) report abuse or neglect; 2) collect and report on the quality, safety, and effectiveness of products and activities regulated by the Food and Drug Administration (FDA) (such as drugs and medical equipment, and could include product recalls, repairs, and monitoring); or 3) help contain the spread of a disease.

B. Other Ways We Are Allowed to Use and Provide Your Protected Health Information to Others

1.    People You Authorize to Access Your Health Information Record. With your express written consent, we will provide access to your full EHE Health Record to healthcare providers outside the EHE Health network and other people you authorize. For example, if authorized by you, we will enable non-EHE Health providers such as your primary care physician, physical therapist, long term care facility, home healthcare agencies, or their organizations to have access to your EHE Health Record.

2.    Other People You Authorize to be Involved in Your Care. We may share your health information with a friend, family member, or another person identified by you who is involved in your medical care. We may share your health information with others if you are present or available before we share your health information with them and you do not object to our sharing your health information with them, or we reasonably believe that you would not object to this. If you are not present and circumstances indicate to us that it would be in your best interests to do so, we will share information with a friend or family member, to the extent we believe reasonably necessary. However, we will only provide access to your full EHE Health Record to the people you expressly authorize to have that access.

3.    Disclosures to Law Enforcement. We may share your health information with a law enforcement official or authorized individual:

a.    In response to a court order, subpoena, warrant, summons, or similar process;

b.    To identify or locate a suspect, fugitive, material witness, or missing person;

c.     About the victim of a crime if, under certain limited circumstances, we are unable to obtain the person’s agreement;

d.    About a death we believe may be the result of criminal conduct;

e.    About criminal conduct at an EHE Health facility; or in emergency circumstances to report a crime; the location of the crime or victims; or the identity, description or location of the person who committed the crime.

C. When Your Written Permission is Required

Except for the reasons described in this Notice or in our Privacy Policy, we require your permission before we can:

  • Use your protected health information for any other purpose; or
  • Share your protected health information with anyone outside of EHE Health.

D. Cancelling Permission to Share Information.

If you give us permission to use or share your health information, you may cancel that permission, in writing, at any time. However, this does not apply to health information that we have already shared with your permission.

Your Rights Concerning Your Health Information

The law gives you the following rights about your health information:

1.    Right to Ask to See and Request a Copy. You have the right to see and request a copy of the health information maintained in your “designated records set” (as defined by HIPAA) – which includes medical records about you and other records we use to make decisions about your care. This includes your right to request electronic access to your medical records or request to receive a copy of your electronic medical records in electronic form. EHE Health provides patient portals as one option for patients to electronically access their health information. You can contact us to find out how to make a request as outlined in the “Contact Us” section. You may also request that the information be provided to a designated third party.

2.    Right to Ask for a Correction. If you feel that health information we have about you is incorrect or incomplete, you may ask us to correct the information. You have the right to ask for a correction for as long as the information is kept by or for EHE Health. You must put your request in writing. If you do not ask in writing or give your reasons in writing, we may not make the change. We also have the right to refuse your request if 1) we determine that the information is correct and complete; 2) the information is not part of the health information created or kept by or for EHE Health; 3) the person or place who created the information is no longer available to make the correction and we believe the information to be correct; or 4) the information is not part of the information that you are permitted by law to see and/or copy. We may also ask you to verify your identity before correcting any inaccurate information.

3.    Right to Ask for an “Accounting of Disclosures.” You have the right to ask for an “accounting of disclosures.” This is a list of people and organizations who have received or accessed your health information. This right does not include information made available for treatment or made available when you have provided us with permission to do so. You must put your request in writing and give it to your doctor or the place where you received care. You must include the period for which written request applies, to a maximum of six years from the date of the request.

4.    Right to Ask for Limits on Use and Sharing.

a.    Generally. You have the right to ask us to limit the health information we use or share with others about you for treatment. You also have the right to ask us to limit health information that we share with someone who is involved in your care, like a family member or friend. In your written request, you must tell us 1) what information you want limited; 2) whether you want to limit our use, disclosure, or both; and 3) the person or institution the limits apply to (for example, your spouse).

5.    Right to Ask for Confidential Communications. You have the right to ask that we contact you about your health information in a certain way or at a certain location that you believe provides you with greater privacy. For example, you can ask that we contact you at work or by mail. Your request must state how or where you wish to be contacted. You do not need to provide a reason for your request. We will comply with reasonable requests.

6.    Right to Ask for a Paper Copy of This Notice. You may ask us to give you a copy of this Notice at any time. Even if you have agreed to receive this Notice electronically you still have the right to a paper copy of this Notice. You can also obtain a copy of this Notice at our website. To obtain a paper copy of this Notice, contact us.

Violation of Privacy Rights

If you believe your privacy has been violated by us, you may file a complaint directly with us. You can do this by contacting us as set forth below.

You also may file a complaint with the Secretary of the U.S. Department of Health and Human Services. To file a complaint with the Secretary of Health and Human Services, you must 1) name the EHE Health person or place that you believe violated your privacy rights and describe how that place or person violated your privacy rights; and 2) file the complaint within 180 days of when you knew or should have known that the violation occurred. All complaints to the Secretary of the U.S. Department of Health and Human Services must be in writing and addressed to:

U.S. Department of Health and Human Services
200 Independence Ave. S.W.
Washington, DC 20201

You will not be penalized for filing a complaint, and a complaint against us will not affect the quality of service we provide to you.

Changes to This Notice

We reserve (have) the right to change this Notice. We reserve (have) the right to make the revised or changed Notice effective for health information we already have about you and for any future health information. We will post a copy of the revised Notice on our website. The Notice will contain the effective date.

Contact Us:

If you have any questions about this Notice, please contact us. You also may contact us at:

  • Email us at privacy@ehe.health
  • Call us toll-free at 1.800.362.8671
  • Send us postal mail at:

EHE Health
Privacy & Security Officer
600 Fifth Avenue, 5th Floor
New York, NY 10020

Please note that this Notice of Privacy Practices applies to the organizations identified below:

Life Extension Institute, LLC d/b/a EHE Health, is a preferred provider group for preventive health services, with its subsidiary clinics and network offering employee health and lifestyle management and devoting itself to empowering individuals to lead productive and positive lives through early detection and preventive disease management. EHE Health provides such services through its national network of Physician Practices (“EHE Health Clinics”), contracted providers outside the EHE Health Clinics (“EHE Health Independent Providers”) as well as certain ancillary providers (“Ancillary Providers”) (collectively, “EHE Health Providers”).

The EHE Health Clinics include (1) EHG Medical Group of Texas, P.A., (2) Executive Health Exams of Massachusetts, P.C., (3) Executive Health Group of Connecticut, P.C., (4) Executive Health Group of Illinois, S.C., (5) Executive Health Medical Group of New Jersey, P.C., and (6) Executive Health Medical Group of New York, P.C. The EHE Health Clinics are contracted with EHE Health through Management Services Agreements.