THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: October 12, 2026

RA Fischer Co. supplies The Fischer iontophoresis device and the PureWick™ urine collection system. We take appropriate steps to safeguard the medical and personal information you provide to us.

Our legal duties

The Privacy Rule under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) requires us to:

• Maintain the privacy and security of your protected health information (“PHI”).
• Give you this notice of our legal duties and privacy practices.
• Follow the terms of the notice currently in effect.
• Notify you promptly if a breach occurs that may have compromised the privacy or security of your information.

Who follows this notice

This notice describes the practices of RA Fischer Co., including our Treatment Specialists, staff, and all of our sites and locations. They may share medical information with each other for the treatment, payment and health care operations purposes described in this notice.

Information we collect about you

When we provide The Fischer, PureWick or related supplies and services, you may give us information such as:

• Your name, address, phone number and email address.
• Your or your child’s medical history and diagnosis.
• Your insurance information and coverage, including Medicare or Medicaid details.
• Information about your doctor, nurse or other medical providers.
• Birth dates and Social Security numbers for insurance purposes.

We also keep records of the devices, supplies and support we provide to you. Others in your “circle of care” may also share information with us, such as your referring physician, your other doctors, your health plan, and family members or caregivers.

How we may use and disclose your health information

The categories below describe how we may use and disclose your health information. Not every use or disclosure within a category is listed.

Required disclosures. We must disclose your health information to you when you exercise your rights described below, and to the Secretary of Health and Human Services when requested to review our compliance with HIPAA.

For treatment. We may use your health information to provide, set up and support your device. For example, we may confirm your prescription with your physician or share information with your care team about how to use The Fischer or PureWick.

For payment. We may use and disclose your health information to bill for our products and services and to collect payment from you, your insurance company, Medicare or Medicaid. For example, we may give your payer information about your condition so it will pay for the device we furnished. We may also share information to obtain prior authorization or confirm coverage.

For health care operations. We may use and disclose your information to run our business. For example, auditors or consultants may review our practices to help us improve our services, or we may review the quality of service you received.

Public policy uses and disclosures. We may use or disclose your health information without your authorization in these situations:

• As required by law — when federal, state or local law requires it.
• Public health — to a public health authority authorized to prevent or control disease, injury or disability, such as a state health department, the Centers for Disease Control and Prevention, or the Food and Drug Administration (FDA). This includes reports of child abuse or neglect to authorities authorized to receive them.
• FDA-regulated products — to report adverse events or product defects, track products, enable recalls, repairs or replacements, or conduct post-market surveillance.
• Communicable disease and workplace safety — to a person who may have been exposed to a communicable disease, or to an employer evaluating a work-related illness or injury, as the law allows.
• Abuse, neglect or domestic violence — when we reasonably believe you are a victim and you agree, or the law requires it.
• Health oversight — to agencies authorized by law for audits, investigations, inspections, licensure and similar activities that oversee the health care system and government benefit programs.
• Legal proceedings — in response to a court or administrative order, or a subpoena or discovery request if efforts were made to notify you or obtain a protective order.
• Law enforcement — in response to a warrant or similar order, to help identify or locate a suspect, fugitive, material witness or missing person, or about crime victims or a death.
• Coroners, medical examiners, funeral directors and organ donation — to identify a deceased person, determine cause of death, or support organ and tissue donation.
• Workers’ compensation — to programs that provide benefits for work-related injuries or illnesses.
• Serious threats — when necessary to prevent a serious threat to your health and safety or that of others.
• Research — when an Institutional Review Board or Privacy Board has approved the research and determined your privacy is adequately protected.
• Military and veterans — as required by military command authorities, including for foreign military personnel.
• Inmates — to a correctional institution or law enforcement official when needed for your health or safety or that of others.
• National security — for intelligence, counterintelligence and protective services for the President and other officials.

Business associates. We work with outside companies that help us operate, such as billing, hosting and IT providers. We may share your information with them so they can do that work. They must sign a written agreement to protect your information.

People involved in your care or payment. We may share information with people involved in your or your child’s care or payment for that care, such as a spouse, caregiver, home health aide or your other doctors. We may also notify someone responsible for your care about your location, general condition or death, including for disaster relief. We will generally get your verbal agreement first, except in an emergency.

Reminders and follow-up. We may contact you by phone, email, text or mail about your order, supply refills, insurance paperwork or device follow-up. We may leave the minimum necessary information on voicemail or with a member of your household.

Uses that require your written authorization

We will not use or disclose your health information for any purpose not described in this notice without your written authorization. We will never sell your health information or use it for marketing without your written authorization. You may revoke an authorization in writing at any time; this will not affect disclosures we already made in reliance on it.

Your rights

You have the right to:

• Get a copy of your records. Ask to inspect or receive a copy of your medical and billing records, on paper or electronically. We may charge a reasonable, cost-based fee.
• Ask us to correct your records. Ask us to correct or add to information you believe is incorrect or incomplete. Tell us the reason in writing. We may deny the request in some cases and will explain why in writing.
• Request confidential communications. Ask us to contact you a specific way or at a specific location, such as by mail or at home only. We will accommodate reasonable requests.
• Ask us to limit what we use or share. Ask us to restrict uses and disclosures for treatment, payment or operations, or to people involved in your care. We are not required to agree, except as stated next.
• Restrict disclosures to your health plan. If you pay for an item or service in full out of pocket, you can ask us not to share information about it with your health plan, and we will agree unless the law requires us to share it.
• Get a list of disclosures. Ask for an accounting of the times we shared your information in the six years before your request, other than for treatment, payment, operations and certain other purposes. One list per year is free; we may charge a reasonable fee for additional requests.
• Get a copy of this notice. Request a paper copy at any time, even if you agreed to receive it electronically.
• Choose someone to act for you. A legal guardian or someone with medical power of attorney can exercise your rights. We will confirm their authority first.

To exercise any of these rights, contact us in writing using the information at the end of this notice.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr/complaints, or by calling 1-877-696-6775. We will not retaliate against you for filing a complaint.

Website privacy

This section explains what we collect when you visit rafischer.com. Health information you send us through the site is protected under the Notice of Privacy Practices above.

Information you submit. When you use our contact, insurance or authorization forms, or live chat, we collect what you provide, such as your name, contact details and insurance information. We use it to respond to you, verify coverage and arrange your order. Our site has no online checkout and no patient login.

Cookies and tracking tools. Our site uses cookies and similar technologies, loaded through Google Tag Manager, to measure site traffic and advertising performance. These tools run on our site:

We use this information to understand how visitors find and use our site and to measure how our ads perform. Google and Microsoft handle it under their own privacy policies: Google and Microsoft.

What we don’t do. We do not sell your personal information. What you type into our forms or chat, including health and insurance details, is not sent to Google, Microsoft or other advertising providers. They learn only that a form was submitted.

Service providers. Our site is hosted by a HIPAA-compliant provider. We also use third parties for live chat, form handling and customer relationship management. Providers that receive health information sign a Business Associate Agreement with us.

Your choices. You can block or delete cookies in your browser settings; the site will still work. You can also:

• Opt out of Google Analytics with the Google Analytics opt-out add-on.
• Manage Google ad personalization at My Ad Center.
• Manage Microsoft ad personalization in your Microsoft privacy settings.

To ask about or update information you’ve submitted, contact us below.

Children. Our website is not directed to children under 13. Information about a minor patient is provided by a parent or guardian and handled under this notice.

Security. We use encryption (SSL/TLS), access controls and other safeguards to protect information sent through our site. No method of transmission over the internet is completely secure.

Changes to this notice

We may change this notice at any time, and the changes will apply to all information we hold about you. If we make a material change, we will post the revised notice on our website and make copies available on request. The effective date appears at the top of this notice.

Contact us

RA Fischer Co.
Attn: Privacy Officer, Jennifer Jacobellis
5400 Atlantis Ct., Moorpark, CA 93021
Phone: (800) 525-3467
Email: privacy@rafischer.com