About Elephas Laboratories

NOTICE OF PRIVACY PRACTICES

Effective Date: January 19, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Introduction

This Notice of Privacy Practices (“Notice”) applies to Elephas Laboratories (“Elephas”), which operates as a single covered entity under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”).

Elephas is required by law to maintain the privacy of your Protected Health Information (“PHI”), to provide you with this Notice describing our legal duties and privacy practices with respect to PHI, and to notify affected individuals following a breach of your unsecured PHI. PHI is information that identifies you and relates to your health, medical condition, or payment for health care services.

Elephas will comply with the terms of this Notice currently in effect. However, we reserve the right to revise this Notice and make such changes applicable to all PHI we maintain. If we make changes, we will post the revised Notice on our public website at www.elephaslabs.com. You may also request a copy at any time.

This Notice addresses HIPAA compliance and may also incorporate additional protections required by federal or state laws for certain types of sensitive information—for example, information related to mental health, HIV/AIDS, reproductive health, genetic testing, or substance use disorders. Where such laws are more stringent, Elephas will comply with the more protective requirements.

Uses and Disclosures of Your PHI

Treatment, Payment, and Health Care Operations

We may use and disclose your PHI for treatment, payment, and health care operations without your written authorization, including:

Treatment: We use your PHI to perform diagnostic testing ordered by your healthcare provider and share results with authorized healthcare professionals involved in your care. For example, we may use or disclose your PHI to remind you of an appointment or return your specimen collection kit, notify you of the status of your laboratory test, or inform you of additional health-related products and services that may be relevant to your care.
Payment: We use or disclose your PHI to bill you or your health plan for our services. For example, we may use or disclose your PHI to your health plan or other payers to determine if you are enrolled with the payer or are otherwise eligible for health benefits, as well as to obtain payment for our services.
Health Care Operations: We use and disclose your PHI for necessary business activities such as quality assurance, compliance audits, and process improvement. For example, we may use and disclose your PHI to perform quality checks on our testing or develop reference ranges for our tests.

Elephas may also share PHI with third-party business associates (e.g., consultants, contractors, auditors) who perform services on our behalf. These parties are required by law and by contract to safeguard your information.

Other Permitted Uses and Disclosures Without Your Authorization

We may also use or disclose PHI in the following situations:

When Required by Law – e.g., to report suspected abuse, neglect, or domestic violence.
For Public Health or Safety Purposes – e.g., to public health authorities for disease prevention or to avert serious threats to health or safety.
For Certain Law Enforcement Purposes – e.g., to report crimes on our premises or in emergencies or for limited identification and location purposes
For Legal Proceedings – e.g., in response to court orders, subpoenas, or other lawful processes.
For Specialized Government Functions – e.g., for military and veteran activities, or for national security and intelligence activities authorized by law
For Workers’ Compensation – e.g., in connection with your workers’ compensation or similar programs as required by law.
To Others Involved in Your Care – e.g., family members or friends assisting in your treatment or payment, unless you object.
To Your Personal Representatives – e.g., individuals legally authorized to act on your behalf.
For Research Purposes – e.g., for health research under safeguards protecting your privacy.
For Organ, Eye, or Tissue Donation – e.g., to organ procurement organizations as applicable.
Regarding Deceased Individuals – e.g., to coroners, medical examiners, and funeral directors.
To Correctional Facilities – e.g., if you are in custody and disclosure is necessary for care or safety.

Uses and Disclosures Requiring Your Written Authorization

For any other use or disclosure of your PHI not covered by this Notice—such as for marketing or sale of PHI—Elephas will obtain your written authorization. You may revoke your authorization at any time in writing, except to the extent Elephas has already relied on it.

Your Rights Regarding Your PHI

You have the following rights concerning your PHI:

Right to Request Restrictions – You may request limits on how your PHI is used or shared. While Elephas is not required to agree, we will honor lawful restrictions, such as when you pay in full out-of-pocket and request we not disclose related information to your health plan. Your request must be in writing.
Right to Confidential Communications – You may request that we contact you at a specific address or by alternate means or at alternative locations. Your request must be in writing.
Right to Inspect and Copy – You may obtain access to or copies of your PHI upon written request. A reasonable, cost-based fee may apply.
Right to Amend – You may request corrections to your PHI if you believe it is inaccurate or incomplete. Your request must be in writing.
Right to an Accounting of Disclosures – You may obtain a list of certain disclosures made within the previous six years upon request, excluding those for treatment, payment, and health care operations, and certain other exempted disclosures.
Right to a Paper Copy of this Notice – You may obtain a printed copy upon request, even if you previously received it electronically.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with Elephas or with the U.S. Department of Health and Human Services (HHS). Please visit https://www.hhs.gov/hipaa/filing-a- complaint/index.html for further information on how to file a complaint with the Department. To make a complaint directly to us, please contact the Privacy Officer below. You will not be retaliated against for filing a complaint.

Contact Information

Privacy Officer
Elephas Biosciences Corporation
1 Erdman Place
Madison, WI 53717
Phone: 608-622-9954

Email: privacy@elephas.com

For questions about this Notice or to exercise your privacy rights, please contact our Privacy Officer using the information above.

Ready to order?

Order online

Email or eFax