Notice of Privacy Practices

Effective Date: January 1, 2025

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Our Commitment to Your Privacy

At Medspa Bella, PLLC, we understand that your medical information is personal and private. We are committed to protecting your health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations at 45 CFR 164.520. This Notice of Privacy Practices describes how we may use and disclose your protected health information (PHI) to carry out treatment, payment, or health care operations, and for other purposes permitted or required by law.

How We May Use and Disclose Your Health Information

Treatment

We may use your health information to provide you with medical treatment or services. For example, we may share your information with other healthcare providers involved in your care.

Payment

We may use and disclose your health information to obtain payment for services we provide to you.

Healthcare Operations

We may use and disclose your health information for our healthcare operations, such as quality assessment and improvement activities.

Your Rights Regarding Your Health Information

Right to Access

You have the right to inspect and obtain a copy of your health information.

Right to Amend

You have the right to request that we amend your health information if you believe it is incorrect or incomplete.

Right to an Accounting

You have the right to request a list of disclosures we have made of your health information.

Right to Request Restrictions

You have the right to request restrictions on certain uses and disclosures of your health information.

Right to Confidential Communications

You have the right to request that we communicate with you in a certain way or at a certain location.

Our Duties

We are required by law to maintain the privacy of your health information, provide you with this notice of our legal duties and privacy practices, notify you if there is a breach of your unsecured health information, and follow the terms of the notice that is currently in effect.

How We Protect Your Information

We implement administrative, physical, and technical safeguards to protect your health information, including encrypted data storage, secure access controls, staff HIPAA training, and secure disposal of records in accordance with applicable regulations.

Data Retention

We retain your health information for a minimum of 7 years after your last service date, or as required by Florida law (F.S. 456.057), whichever is longer.

Breach Notification

In the event of a breach of your unsecured protected health information, we will notify you within 60 days of discovery as required by HIPAA, and within 30 days as required by Florida law (F.S. 501.171).

Business Associates

We may use third-party service providers (Business Associates) who help us operate our practice. These providers are contractually required to protect your health information under HIPAA-compliant Business Associate Agreements.

Changes to This Notice

We reserve the right to change this notice at any time. The revised notice will be effective for all health information we already have about you, as well as any information we receive in the future.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, DC 20201, phone 1-877-696-6775, or online at hhs.gov/ocr/complaints. You will not be penalized for filing a complaint.

Cookies

This website uses essential cookies for session management and security. We do not use third-party tracking or advertising cookies.