Aurora Medical Spa – HIPAA Notice of Privacy Practices
Effective Date: June 25, 2025
This Notice of Privacy Practices describes how Aurora Medical Spa (“we,” “us,” or “our”) may use and disclose your Protected Health Information (PHI), and how you can access your information. This Notice is provided in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Please review it carefully.
Our Responsibilities
We are required by law to maintain the privacy and security of your protected health information. We must provide you with this notice of our legal duties and privacy practices and follow the duties and practices described in this Notice.
How We May Use and Disclose Your Health Information
We may use or disclose your protected health information (PHI) for the following purposes
without your written authorization:
- Treatment – To provide or coordinate aesthetic care and related services.
- Payment – To process payment for services you receive.
- Health Care Operations – For internal quality review, staff supervision, and management purposes.
- As Required by Law – To comply with legal obligations such as court orders or public safety reporting.
- Lawsuits and Disputes – If necessary, in response to legal proceedings or defense of legal claims.
- Law Enforcement or Threat Prevention – When necessary to address potential threats to safety or as required by legal authorities.
Uses and Disclosures Requiring Your Authorization
We will not use or disclose your PHI for the following purposes without your written authorization:
- Marketing purposes.
- Sale of your information.
If you provide us authorization to use or disclose your PHI for another purpose, you may revoke
that authorization at any time in writing.
Your Rights Regarding Your PHI
- Right to Inspect and Copy – You can request to see or receive a copy of your health records.
- Right to Amend – You can ask us to correct health information you believe is incorrect or incomplete.
- Right to an Accounting of Disclosures – You can ask for a list of the times we’ve shared your PHI, who we shared it with, and why.
- Right to Request Restrictions – You can ask us not to use or share certain PHI for treatment, payment, or operations.
- Right to Request Confidential Communications – You can request that we contact you in a specific way (e.g., at home or by mail).
- Right to Receive a Paper Copy – You can request a paper copy of this Notice, even if you agreed to receive it electronically.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.
To file a complaint with us, contact: info@auroramedicalspa.com
Changes to This Notice
We reserve the right to change this Notice and make the revised Notice effective for health information we already have about you as well as any information we receive in the future. We will post a copy of the current Notice at our physical locations and on our website.
