Privacy Policy for Rella Aesthetics

Effective Date: August 1, 2023

At Rella Aesthetics, we are committed to protecting the privacy and security of our patients’ Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA). This Privacy Policy describes how we handle PHI, your rights regarding your health information, our legal duties, and the contact information for our Privacy Official.

1. How We Treat Protected Health Information (PHI) or Medical Records

Rella Aesthetics collects, uses, and discloses PHI in accordance with HIPAA regulations. Since we do not accept insurance, PHI is primarily used or shared in the following ways:

• For Treatment: We may use or share your PHI with healthcare providers involved in your care to ensure you receive appropriate treatment. This includes coordination with other medical professionals and specialists when necessary.
• For Payment: Although we do not accept insurance, we may use your PHI to process payments for the healthcare services provided directly to you. This involves using your information to handle payments made by you or on your behalf.
• For Healthcare Operations: We may use your PHI to conduct internal operations, such as quality assessment and improvement activities, staff training, and administrative functions. These activities help us provide high-quality care and maintain efficient clinic operations.
• As Required by Law: We may disclose your PHI when required by federal, state, or local law, including to comply with subpoenas, court orders, or legal processes.

2. Patient Rights Regarding Protected Health Information

As a patient of Rella Aesthetics, you have the following rights concerning your PHI:

• Right to Access: You have the right to access and obtain a copy of your medical records and other health information we maintain about you. You can request this information in electronic or paper form.
• Right to Request Corrections: If you believe that any information in your medical records is incorrect or incomplete, you have the right to request that we correct it. We may deny your request under certain circumstances, but we will provide an explanation in writing within 60 days.
• Right to Request Confidential Communications: You can request that we communicate with you about medical matters in a specific way or at a certain location (e.g., home or office phone). We will accommodate all reasonable requests.
• Right to Restrict Disclosures: You have the right to request restrictions on certain uses and disclosures of your PHI. While we are not required to agree to all requests, we will comply with any restrictions we do agree to.
• Right to an Accounting of Disclosures: You can request a list of certain disclosures we have made of your PHI over the past six years. This list will not include disclosures for treatment, payment, healthcare operations, and certain other disclosures (such as those you authorized).
• Right to a Copy of This Privacy Policy: You can request a paper copy of this Privacy Policy at any time, even if you have agreed to receive it electronically.

3. Rella Aesthetics’ Legal Duties Regarding PHI

As a covered entity under HIPAA, Rella Aesthetics has certain legal duties:

• Duty to Maintain Privacy and Security: We are required by law to maintain the privacy and security of your PHI. We implement appropriate administrative, technical, and physical safeguards to protect your information from unauthorized access, use, or disclosure.
• Duty to Provide Notice of Breaches: In the event of a breach of unsecured PHI, we will notify you promptly and provide details about the breach and the steps we are taking to address it.
• Duty to Follow This Privacy Policy: We are required to adhere to the terms of this Privacy Policy and to provide you with a copy of it upon request.

4. Contact Information for Our Privacy Official

If you have any questions or concerns about this Privacy Policy or how your PHI is handled, or if you wish to exercise your rights as described above, please contact our Privacy Official:

Privacy Official: Ryan McDonough
Email: [email protected]
Phone: 707-328-2932
Address: 542 Main St, Vacaville, CA 95688

We are committed to protecting your privacy and upholding the highest standards of confidentiality and security for your health information.

5. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. The updated policy will be posted on our website, and you may request a copy of the current policy at any time.