Notice of Privacy Practices

Notice of Privacy Practices:

Effective Date: August 17, 2026

THIS NOTICE DESCRIBES HOW MEDICAL AND HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Stone River Advisory LLC is committed to protecting the privacy and confidentiality of your Protected Health Information ("PHI").

This Notice describes our privacy practices, our legal responsibilities, and your rights concerning your PHI.

Our Responsibilities:

Stone River Advisory is required by applicable law to:

• Maintain the privacy and security of your PHI.

• Provide you with this Notice describing our legal duties and privacy practices.

• Follow the terms of the Notice currently in effect.

• Notify affected individuals following a breach of unsecured PHI when notification is required by law.

How We May Use and Disclose Your PHI:

HIPAA permits certain uses and disclosures of PHI without obtaining a separate authorization from you.

Depending upon the circumstances and the services involved, these may include uses and disclosures for:

Treatment:

We may use or disclose PHI as permitted to provide, coordinate, or manage your care and related services and to communicate with appropriate professionals involved in your care when permitted by law.

Payment:

We may use or disclose PHI as permitted to obtain payment for services, process billing, verify benefits where applicable, and conduct other permitted payment activities.

Health Care Operations:

We may use or disclose PHI for permitted health care operations, which may include administrative activities, quality assessment, compliance, auditing, business management, training, and other activities necessary to operate Stone River Advisory.

Required by Law:

We may use or disclose PHI when required by applicable federal, state, or local law.

Public Health and Safety:

HIPAA permits certain disclosures under specified circumstances for public health activities and to address serious threats to health or safety.

Government and Legal Activities:

Certain disclosures may be permitted or required for purposes including health oversight, law enforcement, judicial or administrative proceedings, workers' compensation, and other governmental activities when applicable legal requirements are satisfied.

Other Uses and Disclosures:

Uses and disclosures of PHI not otherwise permitted or required by law will generally be made only with your written authorization.

You may revoke an authorization in writing, subject to applicable legal limitations and except to the extent that Stone River Advisory has already acted in reliance upon it.

Substance Use Disorder Records:

Certain substance use disorder ("SUD") records may receive additional protections under federal law.

Where applicable, Stone River Advisory handles such information in accordance with HIPAA and any additional federal confidentiality requirements governing SUD patient records.

Information protected by applicable SUD confidentiality requirements will not be used or disclosed in civil, criminal, administrative, or legislative proceedings against an individual except as permitted by applicable law.

Where authorization is required for a use or disclosure of SUD records, Stone River Advisory will obtain the authorization required by applicable law.

Your Rights:

Subject to applicable law, you have important rights concerning your health information.

Get a Copy of Your Health Information:

You may ask to inspect or obtain a copy of PHI maintained in a designated record set about you.

Request a Correction:

If you believe information in your record is incorrect or incomplete, you may request that Stone River Advisory amend it.

We may deny certain requests as permitted by law, but we will explain an applicable denial.

Request Confidential Communications:

You may ask us to contact you in a specific way or at an alternative location.

We will accommodate reasonable requests as required by applicable law.

Request Restrictions

You may request restrictions on certain uses or disclosures of your PHI.

Stone River Advisory is not required to agree to every requested restriction except where applicable law requires us to do so. If we agree to a restriction, we will comply with it as required by law.

Receive an Accounting of Disclosures:

You may request information concerning certain disclosures of your PHI made during the period permitted by law.

Obtain a Copy of This Notice:

You may request a paper or electronic copy of this Notice at any time, even if you previously agreed to receive it electronically.

Choose Someone to Act for You:

If another individual has legal authority to act on your behalf, Stone River Advisory will recognize that person's rights to the extent required by law after verifying the person's authority.

File a Complaint:

If you believe your privacy rights have been violated, you may submit a complaint directly to Stone River Advisory.

You may also submit a complaint to the U.S. Department of Health and Human Services Office for Civil Rights.

Stone River Advisory will not retaliate against you for exercising your privacy rights or filing a complaint.

Breach Notification:

If a breach of unsecured PHI occurs and applicable law requires notification, Stone River Advisory will provide the required notifications.

Changes to This Notice:

Stone River Advisory reserves the right to change this Notice and its privacy practices as permitted by law.

Any revised Notice will apply as permitted by applicable law and will be made available through our website and upon request.

Privacy Contact:

For questions about this Notice, to exercise a privacy right, or to submit a privacy complaint, contact:

Barbara Alexander
Stone River Advisory LLC
1418 15th St.
Port Huron, MI 48060
www.stoneriveradvisory.com