Notice of Privacy Practices

Our Commitment to Your Privacy

Aura Aesthetica is committed to protecting the privacy of your protected health information ("PHI"). PHI is information about you, including basic demographic information, that may identify you and that relates to your past, present, or future physical or mental health condition and related healthcare services.

This Notice of Privacy Practices ("Notice") describes how we may use and disclose your PHI to carry out treatment, payment, or healthcare operations, and for other purposes permitted or required by law. This Notice also describes your rights regarding your PHI. We are required by law to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and notify you in the event of a breach of your unsecured PHI.

We are required to follow the terms of this Notice currently in effect.

How We May Use and Disclose Your Health Information

The following describes the ways we may use and disclose your PHI without your written authorization:

For Treatment

We may use your PHI to provide, coordinate, or manage your healthcare and related services. For example, we may share your information with other healthcare providers, laboratories, or specialists involved in your care.

For Payment

We may use and disclose your PHI to obtain payment for the services we provide. For example, we may share information with your insurance company or payment processor to obtain reimbursement for treatment.

For Healthcare Operations

We may use and disclose your PHI for our internal operations, including quality assessment, performance improvement, staff training, accreditation, certification, licensing, credentialing, business planning, and general administrative activities.

Appointment Reminders and Follow-Up

We may contact you to remind you of upcoming appointments, follow up after a procedure, or provide information about treatment alternatives, health-related benefits, or services that may be of interest to you.

As Required by Law

We will use and disclose your PHI when required to do so by federal, state, or local law.

Public Health Activities

We may disclose your PHI for public health activities, including reporting communicable diseases, adverse drug or device events, or other public health concerns to authorized public health authorities.

Health Oversight Activities

We may disclose your PHI to health oversight agencies for activities authorized by law, including audits, investigations, inspections, and licensure.

Judicial and Administrative Proceedings

We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.

Law Enforcement

We may disclose your PHI to law enforcement officials when required by law or in response to a valid request, including identifying or locating a suspect, fugitive, material witness, or missing person.

Coroners, Medical Examiners, and Funeral Directors

We may disclose PHI to coroners, medical examiners, and funeral directors as necessary to carry out their duties.

Organ and Tissue Donation

We may disclose PHI to organizations that handle organ procurement, transplantation, or tissue donation.

Research

We may use or disclose your PHI for research purposes when an Institutional Review Board has approved a waiver of authorization or when other privacy protections are in place.

Avert a Serious Threat to Health or Safety

We may use or disclose your PHI when necessary to prevent a serious and imminent threat to your health or safety or the health or safety of others.

Specialized Government Functions

We may disclose PHI for specialized government functions, including military and veterans' activities, national security and intelligence activities, and protective services for the President.

Workers' Compensation

We may disclose your PHI as authorized by and to the extent necessary to comply with workers' compensation laws.

Uses and Disclosures Requiring Your Written Authorization

The following uses and disclosures will be made only with your written authorization:

• Marketing. Most uses or disclosures of PHI for marketing purposes require your authorization.
• Sale of PHI. Disclosures that constitute a sale of your PHI require your authorization.
• Psychotherapy notes. Most uses or disclosures of psychotherapy notes (where applicable) require your authorization.
• Before-and-after photographs and videos used for marketing. We will not use or disclose photographs or videos of you for advertising, marketing, social media, or promotional purposes without your separate written authorization.

You may revoke your authorization at any time, in writing, except to the extent that we have already taken action in reliance on it.

Your Rights Regarding Your Health Information

Right to Inspect and Copy

You have the right to inspect and obtain a copy of your PHI maintained in our records. We may charge a reasonable, cost-based fee for copies, as permitted by law. To request access, please submit a written request to our Privacy Officer.

Right to Request Amendment

If you believe your PHI is incorrect or incomplete, you have the right to request that we amend it. Requests must be submitted in writing and include a reason supporting the requested amendment. We may deny your request under certain circumstances permitted by law.

Right to an Accounting of Disclosures

You have the right to request an accounting of certain disclosures of your PHI made by us in the six years prior to your request. The first accounting in any 12-month period will be provided free of charge; we may charge a reasonable, cost-based fee for additional requests.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, except in the case of a disclosure to a health plan for payment or operations purposes when you have paid for the service in full out of pocket.

Right to Request Confidential Communications

You have the right to request that we communicate with you about your health matters in a specific way or at a specific location. For example, you may request that we contact you only at home or only by mail. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically. To obtain a paper copy, please contact our Privacy Officer.

Right to Be Notified of a Breach

You have the right to be notified in the event of a breach of your unsecured PHI, as required by law.

Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights. You may file a complaint with HHS at https://www.hhs.gov/hipaa/filing-a-complaint/. We will not retaliate against you for filing a complaint.

Changes to This Notice

We reserve the right to change the terms of this Notice at any time. Any change will apply to all PHI we maintain. The revised Notice will be posted on our website and made available in our office. The effective date of the most current Notice is shown at the top of this page.

Contact Information

If you have questions about this Notice, wish to exercise any of your rights, or wish to file a complaint, please contact our Privacy Officer: