Notice of Privacy Practices

Effective Date: January 1, 2026  |  Last Updated: May 1, 2026

Our Commitment to Your Privacy

Regener8MD is committed to protecting the privacy of your medical information. We are required by federal law to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice, and to follow the terms of the notice currently in effect.

How We May Use and Disclose Your Health Information

Treatment

We may use and disclose your PHI to provide medical treatment and services. Dr. Capasso and clinical staff may share your health information to coordinate your care, or with outside providers or specialists as part of your treatment protocol.

Payment

Because Regener8MD is a cash-pay practice and does not bill insurance, payment disclosures are limited. We may use your health information to process payments, issue receipts, and maintain billing records.

Health Care Operations

We may use and disclose your PHI for operations necessary to run our practice, including quality improvement, staff training, and compliance activities, all conducted with appropriate safeguards.

Other Permitted Uses Without Your Authorization

• Required by law - when mandated by federal, state, or local law
• Public health activities - to public health authorities for disease control and prevention
• Health oversight - to agencies conducting audits, investigations, or licensure activities
• Judicial proceedings - in response to court orders or lawful subpoenas
• Law enforcement - in limited circumstances as required or permitted by law
• Serious threat to health or safety - when necessary to prevent or lessen a serious threat
• Coroners and medical examiners - as necessary to identify a deceased person or determine cause of death

Uses Requiring Your Written Authorization

Most other uses require your written authorization, including marketing communications, sale of your PHI, most uses of psychotherapy notes, and any use not described in this Notice. You may revoke any authorization in writing at any time, except to the extent we have already acted on it.

Your Rights Regarding Your Health Information

Right to Access

You have the right to request access to your PHI in our records. We will provide copies in the format you request if readily producible. We may charge a reasonable fee for copies.

Right to Amend

If you believe your PHI is incorrect or incomplete, you may request that we amend it. We may deny your request under certain circumstances and will explain why in writing.

Right to an Accounting of Disclosures

You may request a list of disclosures we have made of your PHI during the past six years, except for disclosures for treatment, payment, health care operations, and certain other purposes.

Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI. We are not required to agree to your request, except that we must agree to restrict disclosure to a health plan if you pay out-of-pocket in full for a service.

Right to Confidential Communications

You may request that we communicate with you in a certain way or at a certain location. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You may request a paper copy of this Notice at any time by contacting our office.

Right to Be Notified of a Breach

You have the right to be notified following a breach of your unsecured PHI.

How to Exercise Your Rights or File a Complaint

California Residents — Your Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information. You have the right to: (1) know what personal information we collect and how it is used; (2) request deletion of your personal information; (3) opt out of the sale of your personal information (Regener8MD does not sell personal information); and (4) non-discrimination for exercising your CCPA rights. To exercise your rights, contact us at the address below.

International Users

If you access this website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. By using this website, you consent to any such transfer of information outside your country. We handle your information in accordance with applicable U.S. law. If you are located in the European Economic Area (EEA), you may have additional rights under the General Data Protection Regulation (GDPR). To exercise any rights or make inquiries, contact us at the address in this policy.

Changes to This Notice

We reserve the right to change this Notice at any time. The revised Notice will be effective for all PHI we hold about you. The current Notice will be posted in our offices and on this website.