Medical Patient Privacy Notice
Your Information. Your Rights. Our Responsibilities.
Notice of Privacy Practices
Effective Date: October 8, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
In this Notice, "SWAY," "we," "us," and "our" mean KAP-JG LLC, Sway Dispensary 3340 LLC, and their affiliated companies that operate or support SWAY dispensaries. These companies follow this Notice and may share your PHI with each other for the purposes it describes. We understand that information about you is personal, and SWAY is committed to protecting your privacy. This Notice describes how SWAY handles your protected health information ("PHI") when we dispense medical cannabis at SWAY dispensaries, including 3340 N. Halsted, Chicago, Illinois.
For this Notice, PHI is information about you that we obtain to provide medical cannabis products to you and that can be used to identify you. It may include your name, contact information, identification numbers, information about your health and medical conditions, the products we provide to you, and payment for those products.
Our Privacy Obligations
We are required to:
Maintain the privacy of your PHI.
Give you this Notice of our legal duties and privacy practices with respect to your PHI.
Notify you if you are affected by a breach of unsecured PHI.
Follow the terms of the Notice that is currently in effect.
How We May Use and Disclose Your PHI Without Your Written Authorization
Treatment. We may use or disclose your PHI to dispense medical cannabis and provide product-related services. We may also use your information to describe products available at SWAY. We may contact you about your orders, such as order and pickup reminders.
Payment. We may use or disclose your PHI to obtain payment for our services.
Health Care Operations. We may use or disclose your PHI for our health care operations, which include internal administration and planning and activities that improve the quality and cost effectiveness of the products and services we provide.
Communication with Individuals Involved in Your Care. We may share your PHI with persons you have designated as caregivers in accordance with Illinois requirements. We may also share your PHI with family members, other relatives, close friends, or other persons involved in your care if we obtain your agreement, give you the opportunity to object and you do not object, or we reasonably infer that you do not object.
Public Health and Safety. We may share your PHI to help with public health and safety issues when we are required or permitted to do so, for example to prevent disease, report adverse reactions, report suspected abuse, neglect, or domestic violence, or prevent or reduce a threat to anyone's health or safety.
Health Oversight Activities. We may share your PHI with a health oversight agency for audits, investigations, inspections, and licensure activities.
Lawsuits, Disputes and Administrative Proceedings. We may disclose your PHI in response to a court or administrative order, a subpoena, a warrant, a discovery request, or other lawful process.
Law Enforcement. We may disclose your PHI for law enforcement purposes as authorized or required by law or in compliance with a court order.
Required by Law. We will disclose your PHI where required by any applicable federal, state, or local law.
Workers' Compensation. We may disclose your PHI to the extent necessary to comply with laws relating to workers' compensation or similar programs.
Research. We may use and disclose your PHI for research with your valid authorization or when an institutional review board or privacy board has waived the authorization requirement. In certain circumstances, your PHI may be disclosed without your authorization to researchers preparing to conduct a research project, for research on decedents, or as part of a data set that omits your name and other information that directly identifies you.
Organ and Tissue Donation. We may share your PHI with organ procurement organizations.
Coroners and Medical Examiners. We may release PHI to a coroner or medical examiner as authorized by law.
Other Uses and Disclosures of Your PHI With Your Authorization
We will obtain your written authorization for:
Uses and disclosures for marketing purposes as defined by the Health Insurance Portability and Accountability Act of 1996 and related regulations ("HIPAA").
Disclosures of psychotherapy notes (to the extent we have any).
Sales of your PHI to third parties, except in connection with the transfer of a business to another entity that is required to comply with HIPAA.
If you give us authorization, you may revoke it in writing at any time. Your revocation will not affect actions we took in reliance on your authorization before you revoked it.
Your Choices About Texts and Emails
Texts and emails from SWAY are optional. You may opt out at any time by replying STOP to a text or using the unsubscribe link in an email.
Your Rights
Right to Request Restrictions. You may ask us not to use or disclose certain PHI. For example, you may ask us not to share information with certain individuals involved in your care or payment for care. Your request must be in writing. We are not required to agree if it would affect your care or if we are legally required to share the information. We will agree to restrict disclosure to a health plan for an item or service you paid for out-of-pocket in full when the disclosure is for payment or health care operations and is not otherwise required by law.
Right to Request Confidential Communications. You may ask us to communicate with you about your PHI in a certain way or at a certain location. For example, you may ask us to contact you only at a certain phone number or by mail. Your request must be in writing. We will use our best efforts to accommodate all reasonable requests.
Right to Inspect and Obtain a Copy. You may ask to inspect or obtain copies of your PHI. Your request must be in writing. If you request copies, we may charge a reasonable fee as permitted under HIPAA and Illinois law. If we cannot fulfill your request, you can ask us to reconsider by contacting the Privacy Officer at the address below.
Right to Request an Amendment. If you believe your PHI is incorrect or incomplete, you may submit a written request to correct it. We may deny your request if the information is accurate and complete, if we do not maintain it, or in certain other circumstances.
Right to an Accounting of Disclosures. You may request a list of disclosures of your PHI that we made to outside parties in the past six years. We include all disclosures except those made for treatment, payment, and health care operations. Your request must be in writing. You may obtain one accounting in any 12-month period for free. We may charge a reasonable fee for additional accountings.
Right to a Paper Copy of This Notice. You may obtain a paper copy of this Notice on request.
Changes to This Notice
We may change the terms of this Notice at any time, and the changes will apply to all PHI we have about you. The new Notice will be available on request, in our dispensary, and on our website.
For More Information, to File a Complaint, and to Report a Breach of PHI
If you have questions or want more information, contact our Privacy Officer at the address below. You may also file a written complaint with the Privacy Officer if you believe your privacy rights were violated.
KAP-JG LLC and Sway Dispensary 3340 LLC (SWAY)
Attn: Privacy Officer
3340 N Halsted St., Chicago, IL 60657
You may also file a complaint with the Illinois Department of Financial and Professional Regulation (IDFPR) at FPR.MedicalCannabis@illinois.gov.
If a breach occurs, you should contact IDFPR at FPR.MedicalCannabis@illinois.gov and the Illinois Department of Public Health (IDPH) at DPH.MedicalCannabis@illinois.gov. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at https://ocrportal.hhs.gov/ocr/smartscreen/main.jsf or by calling (800) 368-1019. We will not retaliate against you for filing a complaint.
Contact us
If you have any questions or concerns regarding this Privacy Notice, contact us by email at hey@everybodysway.com, by telephone at 773-638-7989, or by mail at 3712 N. Broadway #364, Chicago, IL 60613.