Confidentiality & Discretion Policy

Confidentiality & Discretion Policy

Effective Date: August 17, 2026

Privacy is not simply an administrative requirement at Stone River Advisory LLC. It is a fundamental part of our relationship with every client.

Stone River recognizes that clients may seek our assistance regarding highly personal, sensitive, and confidential circumstances. We are committed to approaching every client relationship with discretion, professionalism, and respect.

Protected Information:

Information entrusted to Stone River Advisory may include:

• Client identity

• Protected Health Information ("PHI")

• Health and treatment information

• Personal and family circumstances

• Professional circumstances

• Communications with Stone River Advisory

• Appointment information

• Documents and records

• Information regarding providers or services

• Information obtained while coordinating authorized services

• The existence or nature of the client's relationship with Stone River Advisory

HIPAA:

Stone River Advisory maintains PHI in accordance with applicable HIPAA Privacy, Security, and Breach Notification requirements.

Access to PHI is limited based upon legitimate job responsibilities and applicable legal requirements.

Where the HIPAA minimum necessary standard applies, Stone River Advisory takes reasonable steps to limit PHI used, disclosed, or requested to the minimum reasonably necessary to accomplish the intended purpose.

Client Identity:

Stone River Advisory does not publicly identify clients simply because they receive services from us.

We do not publish client identities, testimonials, case histories, photographs, circumstances, or other identifying information for marketing purposes without appropriate permission and any authorization required by law.

Family Members and Other Individuals:

A person's relationship with a client does not automatically entitle that person to confidential information.

Stone River Advisory will communicate with family members, employers, colleagues, attorneys, providers, representatives, or other individuals concerning confidential client information only when permitted by applicable law.

Authorized Coordination:

When Stone River Advisory is asked to coordinate with other professionals or organizations, we will obtain or document appropriate permission or authorization when required.

Safeguards

Stone River Advisory uses administrative, physical, and technical safeguards designed to protect PHI and other confidential information from inappropriate access, use, disclosure, alteration, or loss.

Business Associates:

When outside organizations perform services for Stone River Advisory involving access to PHI and qualify as business associates under HIPAA, appropriate Business Associate Agreements will be maintained as required.

Legal Exceptions:

Confidentiality has legally recognized exceptions.

Information may be used or disclosed without individual authorization when permitted or required by HIPAA or other applicable law.

Breaches and Incidents:

Suspected privacy or security incidents involving PHI are evaluated according to Stone River Advisory's privacy and security procedures.

When a breach of unsecured PHI requires notification, Stone River Advisory will provide notification in accordance with applicable law.

Questions:

Questions regarding confidentiality may be directed to:

Barbara Alexander
Stone River Advisory LLC
1418 15th St.
Port Huron, MI 48060
www.stoneriveradvisory.com