Last Updated: [Insert Date]

[Med Spa Name] (“we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, and protect your information, including Protected Health Information (“PHI”) as defined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Information We Collect

We may collect the following types of information:

Personal Information

• Name, email address, phone number, date of birth

• Appointment requests, consultation forms, and intake forms

• Payment information (processed securely via third-party providers)

Health Information (PHI)

• Medical history, treatment notes, photographs, and other health-related information you voluntarily provide for consultation or treatment purposes

Automatically Collected Information

• IP address, browser type, device information, and website usage data

How We Use Your Information

We use your information to:

• Provide medical aesthetic services and treatments

• Schedule appointments and manage patient care

• Communicate regarding services, follow-ups, and office updates

• Comply with legal, regulatory, and HIPAA obligations

• Improve our services and website functionality

HIPAA Compliance & Protected Health Information

We comply with HIPAA and applicable state privacy laws. Your PHI is used and disclosed only as permitted by law, including for:

• Treatment

• Payment

• Healthcare operations

We will not use or disclose your PHI for marketing purposes without your written authorization.

Disclosure of Information

We may share information with:

• Licensed medical professionals involved in your care

• Third-party service providers (e.g., EMR systems, scheduling software, billing processors) under HIPAA-compliant agreements

• Regulatory or legal authorities when required by law

We do not sell your personal or health information.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect your information in compliance with HIPAA standards. While we take reasonable measures, no system can be guaranteed to be completely secure.

Your Rights Under HIPAA

You have the right to:

• Access and obtain a copy of your medical records

• Request corrections to your health information

• Request restrictions on certain uses or disclosures

• Receive a list of disclosures of your PHI

• Request confidential communications

To exercise these rights, contact us using the information below.

Contact Information

Privacy Officer: [Name or Title]
Email: [email address]
Phone: [phone number]
Address: [physical address]