Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Strive Health (“Strive”) is required by law to maintain the privacy of your health information and provide you with a description of our privacy practices. This Notice of Privacy Practices (“Notice”) applies to any health care entity that Strive controls, whether directly, through a management agreement, or through one of its subsidiaries or joint ventures, including members of the Strive Health Affiliated Covered Entity (“ACE”). The ACE includes organizations under Strive’s common ownership or control that have designated themselves as a single covered entity for purposes of compliance with the Health Insurance Portability and Accountability Act (“HIPAA”). A complete list of organizations participating in the ACE can be found at https://strivehealth.com/privacy/ace/.

All employees, staff, volunteers, trainees, and others, who perform work for Strive and are under the direct control of Strive, whether or not they are paid by Strive, are bound by this Notice. Other health care providers, such as physicians and nurse practitioners, that may offer clinically integrated health care services for Strive in an Organized Health Care Arrangement are also bound by this Notice. However, this Notice only applies to the privacy practices of these health care providers when they are providing care on behalf of Strive. It does not apply to the privacy practices of these health care providers in their own offices or other health care settings. Strive will share your information with these health care providers as described in this Notice.

Your Rights‍

Get a copy of this Notice. We will promptly provide you with a paper copy of this Notice when you request it, even if you have agreed to receive it electronically. You may print or view a copy by visiting https://strivehealth.com/privacy/noticeofprivacypractices.com.

Protect your substance use disorder records. In rare circumstances, we may receive, maintain, use, or share your health information from programs that provide treatment or payment for substance use disorders (“SUD”) and are subject to federal confidentiality protections under 42 CFR Part 2 (“Part 2”). SUD records are subject to heightened privacy protections and may only be used or disclosed in accordance with both HIPAA and Part 2 regulations. If we receive your SUD treatment records as permitted by law or with a valid written consent, we may use and share this information for treatment, payment, and health care operations, consistent with applicable law.

View and/or receive a copy of your medical record. You have the right to see and/or receive a paper or electronic copy of your health information maintained in our designated record set. We will provide you with a copy of your health information or a summary if you prefer. We may require you to do this in writing by emailing roi@strivehealth.com, or by sending a written request to:  Strive Health, Attn: Medical Records, 1125 17th St, Ste #1000, Denver, CO 80202. We may charge you a reasonable, cost-based fee as permitted by law.

We may deny your request for some of your health information. If we deny your request, we will inform you in writing why we denied it, how you may have the denial reviewed in certain instances, and how you may file a complaint regarding our decision.

Request a restriction on certain use and sharing of your health information. You have the right to ask us not to use or share any part of your health information for treatment, payment, or health care operations. We are not required to agree to your request, but we will tell you why in writing if we do not agree. If we agree to your request, we will not use or share your health information in violation of that restriction unless needed in an emergency. We may also change our decision in the future, but if we do, we will tell you in writing. The change will only apply to the health information we create or receive after we notify you of the change.

If you pay for a health care service or item out-of-pocket and in full, you can ask us not to share that information with your health insurer if it is for a payment or health care operations purpose. The request must be made in writing to our Privacy Officer, and we will approve your request unless we are required by law to share that information.

Request an amendment to your health information. ‍You may request that we amend health information about you that you think is incorrect or incomplete. We may deny your request, but we will tell you why in writing if we do.

Request confidential communications. ‍You may request that we communicate with you in a certain way or at a certain location. For example, you can ask that we only contact you at work instead of your home, or to send mail to a different address. We will not require you to explain your request and we will accommodate all reasonable requests.

Get a list of those with whom we have shared your information. You may request a list (accounting) of the times we shared your health information, including SUD records, who we shared it with, and why. The list will include disclosures for the six years before the date of your request, except disclosures for treatment, payment, and health care operations, and certain other disclosures, such as any you asked us to make. We will provide one list per year for free but may charge a reasonable, cost-based fee if you request another one within twelve months.

Choose someone to act on your behalf. We may discuss or share your health information with a person named as your medical power of attorney, legal guardian, or other personal representative. We will ensure the person has this authority and can act for you before we take any action.

Ask a question, make a request, or file a complaint if you feel your rights are violated. To ask us questions, make a request, express concerns, or file a complaint, you may contact our Privacy Officer by emailing privacy@strivehealth.com; by sending a letter to:  Strive Health, Attn: Privacy Officer, 1125 17th St, Ste #1000, Denver, CO 80202; or by calling our Privacy Officer at 720-729-8885. We will not retaliate against you for filing a complaint or exercising your rights under this Notice.

You may file a privacy complaint with the U.S. Department of Health and Human Services’ Office for Civil Rights by sending a letter to:  200 Independence Avenue, S.W., Washington, D.C. 20201; by calling 1-877-696-6775; or by or visiting https://ocrportal.hhs.gov/ocr/smartscreen/main.jsf. Complaints to the Office for Civil Rights must be filed within 180 days of when you learn of or should have known about a potential violation. We will not retaliate against you for filing a complaint.

Your Choices

You can tell us your choices about what we share in certain situations.

• Reminding you that you have an appointment for care.
• Sharing limited health information with your family, friends, or others involved in your care or payment for care.
• Sharing limited information with an authorized entity to assist in disaster relief efforts.
• Including limited information about you in our facility directory.
• Providing your religious affiliation to a member of the clergy.
• Contacting you for fundraising efforts. You can tell us not to contact you again by following the instructions included in the material we send you. You may opt out of fundraising communications, including those that may involve information related to SUD records.
• Sharing your health information through a health information exchange (“HIE”). HIE organizations have individualized requirements and allow your health information to be made available to other health care providers and health plans outside of Strive for treatment, payment, and/or health care operations purposes. HIEs are required to safeguard your information, and when required, we will get your written consent before sharing your information with HIEs.

If you have a clear preference for how we share your information in the situations described above, let our Privacy Officer know. If you are unable or do not tell us your preference, we may share your information if we believe it is in your best interest.

Our Uses and Disclosures

We are permitted or required to use or disclose (share) your health information as outlined in this section.  Some use and sharing described below may be further restricted by applicable state or federal laws, including Part 2.

To treat you. We may use and share your health information to provide, coordinate, and manage your health care and related services. For example, we may share your health information with your primary care provider or another provider involved in your care.

To bill for your services or other payment reasons. We may use and share your health information to bill and obtain payment for treatment services. For example, we may share health information with your health insurance plan to receive payment, or query your insurance plan to determine the best, most effective drug to prescribe you.

For our operations. We may use or share your health information to carry out our general business activities, improve your care, and contact you when necessary. For example, we may share your health information to review your treatment or evaluate the quality of care performed by our staff. Unless you object, we may use audio and/or video recordings of you for training and quality improvement purposes.

To Business Associates. Some of the services provided to you are performed on our behalf by outside vendors called Business Associates. We may share your health information with our Business Associates to allow them to perform services for us. For example, we share your health information with software companies that maintain our electronic health records. Business Associates are required by law to safeguard your information.

For future communications. We may communicate to you via newsletters, mailings, or other means regarding treatment options, health-related information, disease-management programs, wellness programs, research projects, or other community-based initiatives or activities in which we participate.

‍As required by law. We will share your health information if state or federal law requires it, including with the federal Department of Health and Human Services if it wants to confirm that we comply with federal privacy law.

For public health and safety. We may share your health information with a health oversight agency for certain circumstances, such as:  preventing disease; reporting adverse reactions to medications; helping with product recalls; reporting suspected abuse, neglect, or domestic abuse; and preventing or reducing a serious threat to anyone’s health or safety.‍ Some of these shares may be required by law.

To law enforcement. We may share your health information with law enforcement in limited circumstances, such as:  to identify or locate suspects, fugitives, witnesses, or victims of a crime; to report deaths from a crime; and to report crimes that occur on Strive property. If you are in custody, we may disclose health information to correctional institutions or law enforcement officials under certain circumstances.

For judicial and administrative proceedings. We may share your health information in response to a valid court or administrative order and certain subpoenas, discovery requests, or other lawful processes. Part 2 restricts the use of SUD records, or testimony relaying the content of SUD records, in civil, criminal, administrative, and legislative proceedings against you without your written consent or a valid court order.

To coroners, health examiners, and funeral directors. We may share health information with a funeral director as necessary to carry out their duties, including for arrangements after death, or with coroners and medical examiners to identify the deceased, determine a cause of death, or as otherwise authorized by law.

For organ and tissue donation. We may share your health information with organ procurement, banking, or transplantation organizations to facilitate organ, eye, or tissue donation and transplant.

For research. We may use and share your health information for research purposes, but only when researchers meet all state and federal requirements to protect your privacy. We may contact you to request that you participate in a research study.

For workers’ compensation, health oversight, and to government authorities. We can share your health information for workers’ compensation claims and with health oversight agencies for activities authorized by law. We can share your health information for special government functions such as military, national security, and presidential protective services.

Our Responsibilities

Adhering to this Notice. We must follow the privacy practices described in this Notice and provide you with a copy. We will not use or share your information other than as described in this Notice unless you tell us in writing that we can. If you tell us we can, you may change your mind anytime by writing to the Privacy Officer.

Notifying you of a breach. We will notify you promptly if a breach may have compromised the privacy or security of your health information.

When your authorization is required. We will not use or share your health information for the following purposes unless we get your written authorization:

• For marketing purposes, except if we talk with you in person or give you a promotional gift of little value from a company with which we partner.
• For the sale of your health information.
• For sharing psychotherapy notes, which are private notes of a mental health professional kept separately from your health record.

Changes to this Notice. We reserve the right to change the terms of this Notice and make the provisions of the new Notice effective for all health information that we maintain. If we change the privacy practices in this Notice, the revised Notice will be made available upon request and on our website.

Effective Date: February 16, 2026