Notice of Privacy Practices
🔒 This Notice of Privacy Practices is provided to you as required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act. We are required by law to maintain the privacy of your protected health information (PHI), provide you with this notice, and follow the terms of this notice.
Our Commitment to Your Privacy
At Glam Medspa, we understand that health information is personal. We are committed to protecting your medical information and to ensuring its confidentiality, integrity, and availability. Dr. Quan Nguyen, MD and all clinical staff are bound by strict confidentiality obligations.
How We May Use and Disclose Your Health Information
Treatment
We may use and disclose your PHI to provide, coordinate, or manage your medical aesthetic treatment. For example, we may share information with other healthcare providers involved in your care.
Payment
We may use and disclose your PHI to obtain payment for services provided to you, including billing and collections activities.
Healthcare Operations
We may use and disclose your PHI for our internal operations including quality assessment, staff training, audits, and business management activities necessary to run our practice.
Appointment Reminders
We may contact you to provide appointment reminders or information about treatment alternatives by phone, email, or text message.
As Required by Law
We will disclose your PHI when required by federal, state, or local law, including disclosures to public health authorities, law enforcement, or in response to legal proceedings.
Other Permitted Disclosures
- To avert a serious threat to health or safety
- To workers' compensation programs
- For research purposes (with appropriate protections in place)
- To the Secretary of the Department of Health and Human Services for compliance investigations
Uses and Disclosures Requiring Your Authorization
We will not use or disclose your PHI for the following purposes without your written authorization:
- Marketing communications (beyond treatment and service notifications)
- Sale of your PHI
- Most uses of psychotherapy notes
- Any other use or disclosure not described in this Notice
You may revoke any authorization you have given us at any time in writing, except to the extent we have already taken action in reliance on it.
Your Rights Regarding Your Health Information
Right to Access
You have the right to inspect and receive a copy of your medical records and other PHI maintained by us, usually within 30 days of your request. We may charge a reasonable fee for copies.
Right to Request Amendment
If you believe your PHI is incorrect or incomplete, you may request that we amend it. We may deny your request in certain circumstances but will provide a written explanation.
Right to an Accounting of Disclosures
You have the right to receive a list of disclosures of your PHI made by us in the six years prior to your request, except for disclosures for treatment, payment, and operations, or disclosures you authorized.
Right to Request Restrictions
You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to your request in most cases, but if we do agree, we are bound by that agreement.
Right to Confidential Communications
You have the right to request that we communicate with you about your health information in a certain way or at a certain location (e.g., only at a specific phone number or address).
Right to a Paper Copy
You have the right to receive a paper copy of this Notice upon request, even if you have agreed to receive it electronically.
Right to be Notified of a Breach
You have the right to be notified in the event that your unsecured PHI has been breached.
Our Duties
- We are required by law to maintain the privacy of your PHI
- We must provide you with this Notice of our legal duties and privacy practices
- We must follow the terms of the Notice currently in effect
- We must notify you of any breach of your unsecured PHI
We reserve the right to change our privacy practices and the terms of this Notice. Changes will apply to PHI we already hold as well as new information. We will post any revised Notice in our practice and on our website.
How to Exercise Your Rights or File a Complaint
To exercise any of the rights described in this Notice, or if you have questions about our privacy practices, please contact us:
- Phone: (682) 493-0947
- Email: glammedspaskin@gmail.com
- Sunnyvale Location: 200 West McKinley Ave, Studio 103, Sunnyvale, CA 94086
- San Jose Location: 6950 Santa Teresa Blvd, Ste E, San Jose, CA 95119
- Online: Contact Form
If you believe your privacy rights have been violated, you have the right to file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.
To file a complaint with HHS: www.hhs.gov/hipaa/filing-a-complaint
This Notice of Privacy Practices was prepared as a general template and must be reviewed and customized by a qualified HIPAA compliance officer or healthcare attorney prior to use in clinical practice.