Notice of Privacy Practices

Effective October 16, 2026

Our duties

We are required by law to maintain the privacy of your protected health information, to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect. We are also required to notify you if a breach affects your unsecured health information.

What information this covers

To perform a collection we typically hold your name, date of birth, contact details, the service address, the order or requisition your provider sent us, the specimen collected, chain-of-custody and identity-verification records, and the date and time of the visit.

For most services, testing is performed by the outside laboratory named on your order, and that laboratory generates, holds, and releases your results to your ordering provider. For the point-of-care services we explicitly offer — PT/INR fingerstick testing and non-DOT rapid urine drug screening — Stumptown performs the screening or test itself and keeps the associated record. We report a point-of-care result to your ordering provider (or give a rapid screening result to you directly), and we do not hold results generated by outside laboratories.

How we may use and disclose your information

Without your written authorization, we may use or disclose your information to:

• Provide treatment-related services — collecting the specimen your provider ordered and delivering it to the correct laboratory or carrier.
• Coordinate with your ordering provider about the order, scheduling, specimen condition, or a recollection.
• Obtain payment for the collection service, including processing your card payment and, where applicable, billing an employer or research sponsor under an agreement.
• Include insurance information you choose to give us with the laboratory documentation that accompanies your specimen, so the performing laboratory can bill your health plan for the testing it performs. Stumptown does not bill health insurance for the mobile collection service.
• Operate our business — scheduling, staff training, quality review, and safety follow-up.
• Comply with the law, including public-health reporting, health-oversight activities, court orders, and lawful requests from law enforcement.
• Avert a serious and imminent threat to the health or safety of a person or the public.
• Work with our business associates, such as our scheduling, payment, and secure-storage vendors, who are contractually bound to protect your information.

Uses that always require your written authorization

• Most uses and disclosures of psychotherapy notes.
• Use or disclosure for marketing purposes.
• Any sale of your protected health information.
• Most other uses not described in this notice.

You may revoke an authorization in writing at any time. Revoking it stops future uses, but does not undo a disclosure we already made in reliance on it.

Your rights

• Inspect and copy the collection records we hold about you, in the form and format you request when it is readily producible.
• Ask us to correct information you believe is inaccurate or incomplete.
• Request confidential communication — for example, that we call a specific number or write to a specific address.
• Request a restriction on certain uses and disclosures. We are not required to agree to every request, but we will if it is reasonable.
• Receive an accounting of certain disclosures we have made in the six years before your request.
• Receive a paper copy of this notice on request, even if you first received it electronically.
• Choose someone to act for you — a personal representative, guardian, or person with a healthcare power of attorney — after we verify that authority.
• File a complaint if you believe your privacy rights were violated.

How to exercise a right or file a complaint

Contact our Privacy Officer at privacy@stumptownlabservices.com, by phone at (971) 204-6819, or by mail at 1355 NW Everett St, Suite 100, Portland, OR 97209. We will respond to written requests within the timeframes required by law.

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/complaints. We will never retaliate against you for filing a complaint.

Changes to this notice

We may change this notice and apply the revised terms to information we already hold. A current copy is always posted on this page, and paper copies are available at any appointment on request.