HIPAA Statement

Notice of Privacy Practices.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

The privacy of your health information is important to us.

This notice is issued by SJF Castle Rock Cryo Care, LLC, doing business as Castle Rock Regenerative Healthcare ("we", "us", "our").

Our Legal Duty

We are required by law to:

• maintain the privacy of your health information;
• give you this notice of our legal duties and privacy practices with respect to your health information;
• notify you following a breach of your unsecured health information; and
• follow the terms of the notice that is currently in effect.

This notice takes effect on November 9, 2026 and will remain in effect until we replace it.

We reserve the right to change our privacy practices and the terms of this notice at any time, provided such changes are permitted by applicable law. We reserve the right to make the changes in our privacy practices and the new terms of our notice effective for all health information that we maintain, including health information we created or received before we made the changes. Before we make a significant change in our privacy practices, we will change this notice and make the new notice available upon request.

You may request a copy of our notice at any time. For more information about our privacy practices, or for additional copies of this notice, please contact us using the information listed at the end of this notice.

Uses and Disclosures of Health Information

We use and disclose health information about you for treatment, payment, and healthcare operations. For example:

Treatment: We may use or disclose your health information to a physician or other healthcare provider providing treatment for you.

Payment: We may use and disclose your health information to obtain payment for services we provide to you.

Healthcare operations: We may use and disclose your health information in connection with our healthcare operations. Healthcare operations include quality assessment and improvement activities, reviewing the competence or qualifications of healthcare professionals, evaluating practitioner and provider performance, conducting training programs, accreditation, certification, licensing, or credentialing activities.

Your authorization: In addition to our use of your health information for treatment, payment or healthcare operations, you may give us written authorization to use your health information or to disclose it to anyone for any purpose. If you give us an authorization, you may revoke it in writing at any time. Your revocation will not affect any use or disclosures permitted by your authorization while it was in effect. Unless you give us a written authorization, we cannot use or disclose your health information for any reason except those described in this notice.

To your family and friends: We must disclose your health information to you, as described in the Patient Rights section of this notice. We may disclose your health information to a family member, friend, or other person to the extent necessary to help with your healthcare or with payment for your healthcare, but only if you agree that we may do so.

Persons involved in care: We may use or disclose health information to notify or assist in the notification of (including identifying or locating) a family member, your personal representative, or another person responsible for your care, of your location, your general condition, or death. If you are present, then prior to use or disclosure of your health information, we will provide you with an opportunity to object to such uses or disclosures. In the event of your incapacity or emergency circumstances, we will disclose health information based on a determination using our professional judgment disclosing only health information that is directly relevant to the person's involvement in your healthcare. We will also use our professional judgment and our experience with common practice to make reasonable inferences of your best interest in allowing a person to pick up filled prescriptions, medical supplies, x-rays, or other similar forms of health information.

Marketing health-related services: We will not use your health information for marketing communications without your written authorization.

Uses and disclosures that always require your written authorization: Most uses and disclosures of psychotherapy notes, any use or disclosure of your health information for marketing, and any disclosure that would be a sale of your health information require your written authorization. We do not sell your health information. Any other use or disclosure not described in this notice will be made only with your written authorization, and you may revoke that authorization in writing at any time, except to the extent we have already acted in reliance on it.

Where state law gives you more protection: Some Colorado laws protect certain health information more strictly than federal law does. Where that is the case, we follow the stricter rule.

Substance use disorder treatment records: To the extent we receive or maintain records from a substance use disorder treatment program covered by 42 CFR part 2, those records, and testimony relaying their content, may not be used or disclosed in any civil, criminal, administrative, or legislative proceeding against you unless you give written consent or a court orders it.

Required by law: We may use or disclose your health information when we are required to do so by law, including to the U.S. Department of Health and Human Services if it asks to see that we follow federal privacy law.

Public health reporting: Colorado law requires us to report certain conditions to public health authorities without your consent, including specified communicable and infectious diseases, sexually transmitted infections, tuberculosis, and cancer registry information. Those reports include identifying information. Colorado public health agencies may also review the parts of your record that are relevant and necessary to an investigation, and no more than that.

Genetic test results: Under Colorado law, information from genetic testing is confidential and belongs to you. We will not release it for any purpose other than your diagnosis, treatment, or therapy without your specific written consent. That includes marketing, case studies, and sharing with partners or laboratories for their own purposes.

Abuse or neglect: We may disclose your health information to appropriate authorities if we reasonably believe that you are a possible victim of abuse, neglect, domestic violence, or the possible victim of other crimes. We may disclose your health information to the extent necessary to avert a serious threat to your health or safety or the health or safety of others.

National security: We may disclose to military authorities the health information of Armed Forces personnel under certain circumstances. We may disclose to authorized federal officials health information required for lawful intelligence, counterintelligence, and other national security activities. We may disclose to a correctional institution or law enforcement official having lawful custody the protected health information of an inmate or patient under certain circumstances.

Other disclosures the law allows: We may also use or disclose your health information without your written authorization in the situations below, and only as the law allows. Where Colorado law is stricter, we follow the stricter rule.

Health oversight: to agencies that oversee health care, such as for audits, investigations, inspections and licensing.

Lawsuits and legal actions: in response to a court or administrative order, or to a subpoena or other lawful process.

Law enforcement: to law enforcement officials for purposes the law allows, such as responding to a court order, warrant or summons.

Coroners, medical examiners and funeral directors: as they need it to carry out their duties.

Organ and tissue donation: to organizations that handle organ, eye or tissue donation.

Research: for research approved through a process that protects your privacy, such as an institutional review board.

Workers' compensation: as workers' compensation laws allow.

Product safety: to the FDA and manufacturers, for example to report reactions to medications or product problems, or to help with recalls.

Appointment reminders: We may use or disclose your health information to provide you with appointment reminders (such as text messages, emails, voicemail messages, postcards, or letters).

Patient Rights

Access: You have the right to look at or get copies of your health information, with limited exceptions, including the right to an electronic copy of information we hold electronically. You may request a particular format and we will use it if we can readily produce it. We will respond within 30 days of your request. You may obtain a request form using the contact information at the end of this notice.

What we may charge for a copy: If you ask for a copy, we may charge a reasonable, cost-based fee limited to the cost of labor for making the copy, supplies such as paper or a USB drive, and postage if you ask us to mail it. We do not charge you for the time we spend searching for or retrieving your records, and we do not charge you anything to inspect them here.

Disclosure accounting: You have the right to receive a list of instances in which we or our business associates disclosed your health information for purposes other than treatment, payment, healthcare operations and certain other activities, for the last 6 years, but not before April 14, 2003. If you request this accounting more than once in a 12-month period, we may charge you a reasonable, cost-based fee for responding to these additional requests.

Restriction: You have the right to request that we place additional restrictions on our use or disclosure of your health information. We are not required to agree to most requested restrictions, but if we do agree, we will abide by our agreement except where the information is needed for your emergency treatment.

Restriction we must agree to, if you paid in full: There is one restriction we cannot refuse. If you pay for an item or service out of pocket in full, you may ask us not to disclose the information about that item or service to a health plan for payment or health care operations purposes, and we will agree unless a law requires the disclosure. Because we do not bill insurance, this applies to essentially everything we provide. Ask at the front desk or write to the Privacy Officer at the address at the end of this notice. Once this restriction applies to a paid-in-full item or service, we cannot later cancel it.

Alternative communication: You have the right to request that we communicate with you about your health information by alternative means or to alternative locations. You must make your request in writing. Your request must specify the alternative means or location and provide satisfactory explanation how payments will be handled under the alternative means or location you request.

Amendment: You have the right to request that we amend your health information. Your request must be in writing, and it must explain why the information should be amended. We may deny your request under certain circumstances.

If your physician stops practicing: Colorado law requires us to tell you in writing how you would get your records if your physician dies, retires, or otherwise stops practicing. If that happens, your records remain available to you. Contact the practice at the phone number or address at the end of this notice and we will provide a copy or transfer them to the provider you choose. If the practice itself closes, we will notify patients seen in the previous three years and tell you where the records are held and how to request them.

A paper copy of this notice: You have the right to ask for a paper copy of this notice at any time, even if you agreed to receive it electronically or read it on our website, and we will give you one. Ask at the front desk or call us.

Questions and Complaints

If you want more information about our privacy practices or have questions or concerns, please contact us.

If you are concerned that we may have violated your privacy rights, or you disagree with a decision we made about access to your health information or in response to a request you made to amend or restrict the use or disclosure of your health information or to have us communicate with you by alternative means or at alternative locations, you may complain to us using the contact information listed at the end of this notice. You also may submit a written complaint to the U.S. Department of Health and Human Services. We will provide you with the address to file your complaint with the U.S. Department of Health and Human Services upon request.

We support your right to the privacy of your health information. We will not retaliate in any way if you choose to file a complaint with us or with the U.S. Department of Health and Human Services.

To complain to us, write to the Privacy Officer at the address below, or call us and ask for the Privacy Officer. To complain to the federal government, you can file online at hhs.gov/ocr/complaints, or write to the Office for Civil Rights, U.S. Department of Health and Human Services, 200 Independence Avenue SW, Washington, DC 20201, or call 1-877-696-6775.

Effective date of this notice: November 9, 2026.

Related: Privacy Policy, Terms of Use, HIPAA Statement, SMS Terms and Conditions.