Notice of Privacy Practices.

1Our pledge regarding Protected Health Information

Stratum Industries is committed to protecting the privacy and security of your Protected Health Information (PHI). PHI includes individually identifiable health information created, received, maintained, or transmitted by us in connection with our services and platform.

Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules (45 CFR Parts 160 and 164), we are required by law to:

• Maintain the privacy and security of your PHI.
• Provide you with this Notice of Privacy Practices explaining our legal duties and privacy practices regarding your PHI.
• Abide by the terms of the Notice currently in effect.
• Notify affected individuals promptly following a breach of unsecured PHI.

2How we may use and disclose your PHI

We may use and disclose PHI without your written authorization for the following purposes:

• Treatment: To provide, coordinate, or manage your health care and related services.
• Payment: To bill and collect payment for services provided to you from health plans, insurers, or third parties.
• Health Care Operations: To support our business operations, quality improvement, compliance audits, customer service, and platform administration.
• As Required by Law: When required by federal, state, or local law, court order, or judicial/administrative proceedings.
• Public Health & Safety: To public health authorities for disease control, product reporting, or to avert a serious and imminent threat to health or safety.
• Health Oversight Activities: To health oversight agencies for authorized audits, investigations, and inspections.
• Business Associates: To third-party service providers (Business Associates) who perform functions on our behalf, under written Business Associate Agreements ensuring PHI protection.

3Uses & disclosures requiring your written authorization

Any other uses or disclosures not described in this Notice, including marketing, the sale of PHI, or disclosure of psychotherapy notes, will be made only with your explicit written authorization.

You may revoke an authorization in writing at any time, except to the extent that we have already taken action in reliance on it.

4Your individual privacy rights

You have the following rights regarding your PHI maintained by Stratum Industries:

• Right to Inspect and Copy: You have the right to inspect and obtain an electronic or paper copy of your PHI in our designated record sets.
• Right to Amend: If you feel your PHI is incorrect or incomplete, you may request an amendment in writing.
• Right to an Accounting of Disclosures: You have the right to request a list (accounting) of disclosures we have made of your PHI for purposes other than treatment, payment, or health care operations over the prior six years.
• Right to Request Restrictions: You may request restrictions on certain uses or disclosures of your PHI. (We are not required to agree unless it pertains to items paid out of pocket in full).
• Right to Confidential Communications: You may request that we communicate with you via alternative means or locations.
• Right to a Paper Copy: You have the right to receive a paper copy of this Notice at any time upon request.

5Questions and complaints

If you believe your privacy rights have been violated, or if you have questions regarding this Notice, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services (HHS).

You will not be penalized or retaliated against for filing a complaint.

6Changes to this notice

Stratum Industries reserves the right to change the terms of this Notice at any time. Revised notices will apply to all PHI we maintain and will be posted on our website and made available upon request.