This Privacy Policy describes how Miami Health Center — operating through BARBARA M. MUINA, M.D., P.A. and JEFFREY A. LOMAN, M.D., P.A. (collectively referred to as “Miami Health Center,” “we,” “us,” or “our”) — collects, uses, discloses, and safeguards information when you visit our website at miamihealthcenter.com (the “Site”) or interact with our practice. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site or provide us with any personal information.

Miami Health Center is a physician-led, integrated medical group located at 9195 Sunset Drive, Suite 210, Miami, FL 33173. Our practice has been serving the South Florida community since 1987, providing Internal Medicine, Endocrinology, Preventive Care, and related services. As a medical practice, we are committed to protecting the privacy and security of your personal and health information in accordance with all applicable laws, including the Health Insurance Portability and Accountability Act (HIPAA) and the Florida Information Protection Act (FIPA).

Effective Date: March 27, 2026

Information We Collect

We may collect the following categories of information from and about visitors to our Site and patients of our practice:

Personal Information

• Name, date of birth, and contact information (address, phone number, email address).
• Insurance information, including plan name, member ID, and group number.
• Payment and billing information.
• Information submitted through our contact forms, appointment request forms, or patient portal.

Health and Medical Information (Protected Health Information / PHI)

• Medical history, diagnoses, treatment records, and clinical notes.
• Laboratory and diagnostic test results.
• Prescription and medication information.
• Information related to your care for conditions including but not limited to diabetes, hypertension, thyroid disorders, obesity, hormonal conditions, and cardiovascular risk factors.

Technical and Usage Data

• IP address, browser type, and operating system.
• Pages visited on our Site, time and date of visits, and time spent on pages.
• Referring URLs and clickstream data.
• Device identifiers and mobile network information.

Location Information

• With your consent, approximate location data derived from your IP address or, if permitted by your device settings, more precise location information.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, coordinate, and manage your medical care and treatment.
• To process appointment requests and communicate with you regarding your care.
• To verify your identity and insurance eligibility.
• To process billing and submit insurance claims.
• To comply with applicable federal and state laws and regulations, including HIPAA.
• To operate, maintain, and improve our Site and patient-facing digital tools.
• To respond to your inquiries, questions, and requests submitted through our Site.
• To send appointment reminders, health-related communications, and administrative notices.
• To analyze usage trends and improve the user experience on our Site.
• To protect the security and integrity of our systems and patient records.
• To fulfill any other purpose for which you provide information or to which you consent.

HIPAA & Protected Health Information

As a covered healthcare practice under HIPAA, Miami Health Center — through BARBARA M. MUINA, M.D., P.A. and JEFFREY A. LOMAN, M.D., P.A. — is required to maintain the privacy and security of your Protected Health Information (PHI). PHI includes any information that can identify you and relates to your past, present, or future physical or mental health condition, healthcare treatment, or payment for healthcare services.

Your rights with respect to your PHI are governed by our separately issued Notice of Privacy Practices (NPP), which is provided to all patients at the time of their first visit and is available upon request at our office. The NPP describes in detail how we may use and disclose your PHI for treatment, payment, and healthcare operations, as well as your rights to access, amend, and restrict the use of your health information.

For any HIPAA-related questions or concerns, please contact our office at:

• Address: 9195 Sunset Drive, Suite 210, Miami, FL 33173
• Phone: (305) 271-9065
• Email: info@miamihealthcenter.com

Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

Treatment, Payment, and Healthcare Operations

We may share your PHI with other healthcare providers involved in your care, health insurance companies, pharmacies, and laboratories for purposes of treatment, payment, and healthcare operations, as permitted by HIPAA.

Business Associates

We may share information with third-party vendors and service providers who perform services on our behalf — such as billing companies, electronic health record (EHR) vendors, and IT service providers — under Business Associate Agreements (BAAs) that require them to protect your information in accordance with HIPAA.

Legal and Regulatory Compliance

We may disclose your information when required to do so by law, court order, subpoena, or governmental regulation, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of our practice, patients, or the public.

With Your Consent

We may share your information with other parties when you provide explicit written authorization to do so, which you may revoke at any time in accordance with applicable law.

Log Data & Cookies

When you visit our Site, our servers automatically collect log data, including your computer’s IP address, browser type and version, the pages you visit, the date and time of your visit, the amount of time spent on those pages, and other diagnostic data. This information is used to analyze trends, administer the Site, and improve your experience.

Cookies and Similar Technologies

Our Site uses cookies — small text files stored on your device — and similar tracking technologies to enhance functionality and analyze Site usage. Cookies may be session-based (deleted when you close your browser) or persistent (remaining on your device until deleted or expired). Types of cookies we may use include:

• Strictly Necessary Cookies: Required for the Site to function properly.
• Analytics Cookies: Help us understand how visitors interact with our Site (e.g., Google Analytics).
• Functional Cookies: Remember your preferences and settings.

You may configure your browser to refuse all cookies or to alert you when cookies are being sent. However, disabling cookies may affect the functionality of certain areas of our Site. Our Site does not currently respond to “Do Not Track” browser signals.

Security

The security of your personal and health information is a top priority. We implement industry-standard administrative, technical, and physical safeguards to protect your information from unauthorized access, use, disclosure, alteration, or destruction. These safeguards include, but are not limited to:

• Encrypted data transmission using SSL/TLS protocols.
• Secure, access-controlled electronic health record (EHR) systems.
• Role-based access controls for practice staff and contractors.
• Regular security assessments and staff training.
• Secure patient portal with multi-factor authentication.

Please be aware that no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security. If you have reason to believe that your information has been compromised, please contact us immediately at (305) 271-9065.

Your Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correct: Request correction of inaccurate or incomplete information.
• Right to Delete: Request deletion of your personal information, subject to legal and regulatory retention requirements.
• Right to Restrict Processing: Request that we limit how we use your information in certain circumstances.
• Right to Opt Out: Opt out of certain communications or data uses.

With respect to your Protected Health Information (PHI), your rights are governed by HIPAA and our Notice of Privacy Practices. To exercise any of these rights, please contact us using the information in the Contact Us section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Third-Party Links

Our Site may contain links to external websites, patient portals, and third-party platforms that are not operated or controlled by Miami Health Center. These include, but may not be limited to, our patient portal (powered by EClinicalWorks), appointment scheduling platforms, and health plan portals.

We have no control over the content, privacy practices, or data collection methods of these third-party sites and cannot accept responsibility or liability for their respective privacy policies. We strongly encourage you to review the privacy policies of any external site before providing your personal information. The inclusion of a link to a third-party site does not constitute our endorsement of that site or its privacy practices.

Changes To This Policy

We reserve the right to update or modify this Privacy Policy at any time, in our sole discretion, to reflect changes in our practices, applicable law, or the services we provide. Any changes will become effective immediately upon posting the updated Privacy Policy to this page, with the “Effective Date” updated accordingly.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Site or continued relationship with our practice after any changes are posted constitutes your acknowledgment of and agreement to the updated Privacy Policy.

For material changes to how we handle Protected Health Information under HIPAA, we will provide notice as required by applicable law, including by updating our Notice of Privacy Practices.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Practice Name: Miami Health Center (BARBARA M. MUINA, M.D., P.A. and JEFFREY A. LOMAN, M.D., P.A.)
• Address: 9195 Sunset Drive, Suite 210, Miami, FL 33173
• Phone: (305) 271-9065
• Fax: (305) 274-1470
• Email: info@miamihealthcenter.com

For matters specifically related to your rights under HIPAA, please refer to our Notice of Privacy Practices, available at our office or upon request.