Effective/Revision Date: July 29, 2026

1. Our Legal Duty regarding Your Protected Health Information (PHI)

This Notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

Allure Laser Medispa is required by the federal Health Insurance Portability and Accountability Act (HIPAA) and Florida state regulations to maintain the privacy and security of your Protected Health Information (PHI). This includes any medical records, laboratory results, or clinical data regarding your medical weight loss, GLP-1/peptide therapies, hormone optimization, IV vitamin therapy, or aesthetic treatments. We are legally obligated to provide you with this notice of our privacy practices and to notify you following any breach of unsecured PHI. [1]

2. Permissible Uses & Disclosures of Your Health Information

We may use and share your health information for the following specific purposes without your prior written authorization:

• For Treatment: We disclose PHI to our licensed Florida doctors, nurse practitioners, and clinical staff involved in your care (e.g., sharing lab data to adjust hormone or peptide dosages).
• For Healthcare Operations: We use your PHI to run our practice, improve medical quality, assess clinical outcomes, and manage automated appointment reminders via email or SMS.
• For Payment: We use and disclose your PHI to process secure electronic payments or handle credit card billing verifications through our third-party merchant processors.
• As Required by Law: We share information if federal or Florida state laws require it, including reporting public health risks or complying with a court subpoena.

3. Uses & Disclosures Requiring Your Explicit Authorization

We will never use or share your clinical information for purposes outside of treatment, payment, or healthcare operations without your explicit, written authorization.

• Marketing Disclosures: We will never sell or share your PHI, medical histories, or treatment choices with third-party marketing firms.
• Before-and-After Galleries: We will never post clinical photos, treatment reviews, or case histories on social media or our public website without your signed media consent form.
• Revocation: You may revoke any written authorization at any time by notifying our privacy officer in writing.

4. Your Individual HIPAA Rights

Under federal law, you have the following rights regarding your medical records:

• Access & Copying: You have the right to inspect and obtain an electronic or paper copy of your medical records and billing history. We provide these within 30 days of a request.
• Record Amendments: You can request that we correct or amend health information you believe is inaccurate or incomplete. We may deny this request if we believe the record is accurate, but we will provide a written explanation.
• Restriction Requests: You can ask us to limit what health information we use or share for treatment or operations. We are not required to agree if it impacts your care, but we will accommodate reasonable requests.
• Accounting of Disclosures: You can request a list of the times we shared your health information for reasons other than treatment, payment, or operations over the past six years.

5. Changes to This Notice & Formal Complaint Procedures

We reserve the right to change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request in our clinic and on our website.