HIPAA
Notice of Privacy Practices

Effective Date: January 1, 2025

1. Introduction
This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

2. Our Legal Duties and Privacy Safeguards
Thin MD MedSpa is required by law to:
• Maintain the privacy of your protected health information (PHI),
• Provide you with this notice of our legal duties and privacy practices,
• Notify you following any breach of unsecured PHI.

We abide by the terms of this notice currently in effect. We reserve the right to change its terms and to make new provisions effective for all PHI we maintain, including information created before the change. We will provide you with a revised notice when changes occur.

3. How We May Use and Disclose Your PHI
We may use and disclose PHI for:
• Treatment: To coordinate or manage your health care, such as sharing information with physicians we refer you to.
• Payment: To bill and obtain payment for services (e.g. sharing information with financing companies).
• Healthcare Operations: To support business functions like quality assessment, licensing, and appointment reminders (e.g. via sign-in sheets or calling your name in the waiting area).

Additionally, we may use or disclose your PHI without your authorization when required by law (e.g. public health purposes, legal proceedings, law enforcement, research, etc.)

Any other uses or disclosures not described will be made only with your written authorization, which you may revoke at any time.

4. Your HIPAA Rights
You have the right to:
• Request restrictions on certain uses and disclosures - although we are not required to agree.
• Receive confidential communications by alternative means or locations.
• Inspect and copy your PHI maintained in a designated record set.
• Amend your PHI if you believe it is incorrect or incomplete.
• Receive an accounting of disclosures of your PHI made by us.
• Obtain a paper copy of this notice upon request, even if you have received it electronically.

To exercise any of these rights, please contact our Privacy Officer at staff@thinmdmedspa.com

5. Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

6. Changes to This Notice
We reserve the right to change this notice at any time as permitted by law. A revised notice will be effective for all PHI we maintain. You may obtain the current version by contacting us by visiting our website.