HIPAA Privacy Policy for Enhance Medical Aesthetics

Effective Date: 01/01/2025

 

At Enhance Medical Aesthetics, we understand the importance of protecting the privacy and security of your personal and health information. We are committed to complying with the Health Insurance Portability and Accountability Act (HIPAA) and maintaining the confidentiality of your Protected Health Information (PHI). This Privacy Policy outlines how we collect, use, disclose, and protect your PHI in accordance with HIPAA requirements.

​

1. What is Protected Health Information (PHI)?

 

Protected Health Information (PHI) refers to any health-related information that can be used to identify you and is created, received, or maintained by Enhance Medical Aesthetics. This includes, but is not limited to:

• Your medical history

• Your treatment records

• Information about your appointments and services

• Billing and payment information

 

2. How We Use and Disclose Your PHI

 

We may use and disclose your PHI in the following situations:

 

• Treatment: We may use or disclose your PHI to provide, coordinate, or manage your medical treatment. This includes sharing your information with other healthcare providers involved in your care.

• Payment: We may use or disclose your PHI to process payments for services rendered. This includes sharing PHI with your insurance provider or other third-party payers.

• Healthcare Operations: We may use or disclose your PHI for administrative, quality control, or operational purposes.

• This may include evaluating the quality of care, conducting training, and managing business operations.

• Appointment Reminders: We may use or disclose your PHI to contact you with appointment reminders or follow-up messages.

• Marketing: We may use or disclose your PHI to communicate with you about services, products, or promotions that may be of interest to you, but only if we have your written consent to do so.

• Legal and Regulatory Requirements: We may disclose your PHI when required by law, including complying with requests from government agencies, law enforcement, or courts.

​

3. Your Rights Regarding PHI

 

Under HIPAA, you have several rights related to your PHI:

 

• Right to Access: You have the right to inspect and obtain a copy of your PHI that we maintain. You may request a copy of your medical records, treatment plans, and other health-related information we have.

• Right to Correct: If you believe that any of the PHI we have about you is incorrect or incomplete, you have the right to request that we correct or update your records.

• Right to Request Restrictions: You have the right to request restrictions on how we use or disclose your PHI. While we are not required to agree to your request, we will make every effort to accommodate reasonable restrictions.

• Right to Confidential Communications: You have the right to request that we communicate with you about your PHI in a specific way or at a specific location (for example, through a different phone number or address).

• Right to an Accounting of Disclosures: You have the right to request an accounting of the disclosures of your PHI made by us, except for disclosures related to treatment, payment, or healthcare operations, or disclosures for which you provided consent.

• Right to File a Complaint: If you believe your privacy rights have been violated, you have the right to file a complaint with us or with the U.S. Department of Health and Human Services (HHS).

To exercise any of these rights, please contact us using the information provided below.

 

4. How We Protect Your PHI

 

We are committed to safeguarding your PHI. We use a variety of administrative, physical, and technical measures to protect the confidentiality, integrity, and availability of your health information. These measures include:

• Secure storage of physical records

• Use of encryption and secure communications for electronic PHI

• Access controls to limit who can view or handle your PHI

• Staff training on HIPAA compliance and confidentiality

 

Despite these protections, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your PHI, we cannot guarantee its absolute security.

​

5. Third-Party Disclosure of PHI

 

We do not sell or rent your PHI to third parties. However, we may share your PHI with third parties in the following circumstances:

• Business Associates: We may share your PHI with trusted third-party service providers (business associates) who assist us in providing healthcare services. These business associates are required by law to safeguard your information and are contractually obligated to comply with HIPAA privacy and security standards.

• Legal and Regulatory Compliance: We may disclose your PHI when required by law or in response to a legal request, such as a subpoena or court order.

​

6. Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time. Any changes will be posted on our website, and the updated policy will be effective immediately upon posting. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your PHI.

​

7. Contact Us

 

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact us at:

 

Enhance Medical Aesthetics 490 Providence Road

Brooklyn, CT 06234

 

Phone: 860-415-6777

 

Email: enhancect@gmail.com​
 

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services:

U.S. Department of Health and Human Services Office for Civil Rights

Phone: 1-800-368-1019

 

Website: www.hhs.gov/ocr