James Gerard Brewer, M.D., Inc.

NOTICE OF PRIVACY PRACTICES James Gerard Brewer, M.D., Inc.

THIS NOTICE DESCRIBES HOW WE USE AND SHARE YOUR HEALTH INFORMATION AND YOUR RIGHTS. PLEASE READ IT CAREFULLY.

Effective date: June 10, 2026

1. OUR COMMITMENT TO YOUR PRIVACY

James Gerard Brewer, M.D., Inc. is required by law to protect your health information ("PHI"). We must give you this notice. We must follow the terms of this notice. We must notify you if there is a breach of your health information.

PHI means health information that can be tied to you. It includes your past, present, or future health conditions, the care you receive, and how you pay for that care.

2. HOW WE MAY USE AND SHARE YOUR HEALTH INFORMATION

We may use and share your PHI without your written permission in these situations:

A. Treatment. We may use and share your PHI to provide and manage your care. This includes sharing information with other providers, ordering lab tests, and writing prescriptions.

B. Payment. We may use and share your PHI to get paid for your care. This includes checking your insurance, submitting claims, and collecting unpaid balances.

C. Health care operations. We may use and share your PHI for our business operations. This includes quality reviews, staff training, credentialing, and licensing.

D. Required by law. We will share your PHI when the law requires it. This includes public health activities, cases of abuse or domestic violence, court orders, and law enforcement requests.

E. Public health and safety. We may share your PHI with public health authorities or the FDA. We may also share it to stop a serious threat to health or safety.

F. Workers' compensation, military, national security, and inmate care. We may share your PHI as allowed for workers' compensation, military service, national security, or care in a correctional facility.

G. Business partners. We may share your PHI with companies that help us run our practice — such as our health record vendor or billing service. Each company must agree in writing to protect your PHI.

H. Appointment reminders and health information. We may contact you with reminders about your appointments or information about your care options and health services.

I. We also use your PHI to leverage AI scribing tools.

3. USES AND DISCLOSURES THAT REQUIRE YOUR WRITTEN PERMISSION

For most other uses or disclosures of your PHI, we will ask for your written permission first. We will ask before: • Using or disclosing your mental health treatment notes, except as the law allows; • Using or disclosing your PHI for marketing, except for face-to-face talks or a small promotional gift; • Selling your PHI.

You may take back your permission in writing at any time. Your revocation will not apply to disclosures we have already made.

4. SUBSTANCE USE DISORDER TREATMENT RECORDS

If our practice provides or has provided substance use disorder treatment to you, federal law places extra limits on those records. These extra limits are on top of the protections in this notice. Contact our Privacy Officer for details.

5. YOUR RIGHTS

You have the following rights about your health information:

A. Right to see and get a copy of your records — You may ask to review or get a copy of your PHI that we keep. We will respond within 30 days. We may charge a reasonable fee for the copy.

B. Right to correct your records — You may ask us to correct PHI you believe is wrong or incomplete. We may deny your request in certain cases and will explain why in writing.

C. Right to a list of certain disclosures — You may ask for a list of certain times we shared your PHI in the past six years.

D. Right to ask us to limit how we use or share your PHI — You may ask us to limit certain uses or disclosures. We do not have to agree in most cases. If we do agree, we will follow that limit except in an emergency. We must agree to limit disclosures to your health plan for services you paid for fully out of pocket.

E. Right to ask us to contact you in a certain way — You may ask us to reach you in a specific way, such as only by mail at a certain address. We will honor reasonable requests.

F. Right to a paper copy of this notice — You may ask for a paper copy of this notice at any time, even if you agreed to receive it electronically.

G. Right to be notified of a breach — We will notify you if your health information is involved in a breach.

H. Right to file a complaint — You may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services if you believe your privacy rights were violated. We will not retaliate against you for filing a complaint.

To use any of these rights, contact our Privacy Officer (see Section 7 below).

6. CHANGES TO THIS NOTICE

We may change the terms of this notice at any time. Changes apply to all PHI we maintain. When we make a material change, we will post the new notice in our office and on our website if we have one. We will make it available at your next visit. Each notice shows its effective date.

7. CONTACT THE PRIVACY OFFICER

To learn more about this notice, to use your rights, or to file a complaint, contact:

Privacy Officer: James Brewer James Gerard Brewer, M.D., Inc. 2421 Bath Street Santa Barbara, CA, 93105 Phone: (805) 563-0167

—

Practice: James Gerard Brewer, M.D., Inc. Effective date: June 10, 2026 Privacy Officer: James Brewer