Privacy policy.
FLOR AESTHETICS
NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW YOUR MEDICAL INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Effective date: March 1, 2024
Summary
This is a summary of how we may use and disclose your protected health information and your rights and choices when it comes to your information. We will explain these in more detail on the following pages.
Purpose
Flor Aesthetics (“Flor”) respects your privacy. We are also legally required to maintain the privacy of your protected health information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”) and other federal and state laws. We follow state privacy laws when state laws are more stringent and offer greater protections of your PHI than federal law. As part of our commitment and legal compliance, we are providing you with this Notice of Privacy Practices (“Notice”).
Scope
We create a record of the care and health services you receive, to provide your care, and to comply with certain legal requirements. This Notice applies to all PHI that we generate. Flor, our employees, and other workforce members follow the duties and privacy practices that this Notice describes and any changes once they take effect.
Your Rights
When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.
You have the right to:
Request a copy of your PHI. You can ask to see or obtain an electronic or paper copy of the PHI that we maintain about you (right to request access). You may do so by e-mailing our business at info@floraesthetics.com, or mailing your request to the mailing address at the bottom of this Notice.
Ask us to correct our records about you. You may ask us to correct or amend PHI that we maintain about you that you think is incorrect or inaccurate. You may do so by e-mailing our business line at info@floraesthetics.com, or mailing your request to the mailing address at the bottom of this Notice. Please understand that there are certain circumstances in which we cannot amend PHI in your record.
Ask us to limit what we use or share. You have the right to ask us to limit what we use or share about your PHI (right to request restrictions). You can contact us and request us not to use or share certain PHI for treatment, payment, or operations or with certain persons involved in your care. You may do so by e-mailing our business at info@floraesthetics.com, or mailing your request to the mailing address at the bottom of thisNotice. For these requests:
We are not required to agree;
We may say "no"; if it would affect your care; but
We will agree not to disclose information to a health plan for purposes of payment or health care operations if the requested restriction concerns a health care item or service for which you or another person, other than the health plan, paid in full out-of-pocket, unless it is otherwise required by law.
Get a list of those with whom we've shared your PHI. You have the right to request an accounting of certain PHI disclosures that we have made. You may do so by e-mailing our business at info@floraesthetics.com, or mailing your request to the mailing address at the bottom of this Notice.
Request confidential communications. You have the right to request that we communicate with you only by a certain means or at a certain location. For example, you may ask us to only contact you at a designated phone number, or only by telephone call or text message. We will accommodate all reasonable requests. You may communicate this type of request over the phone, but we may require that you submit this request in writing.
● Make a complaint. You have the right to complain if you feel we have violated your rights. We will not retaliate against you for filing a complaint. You may file a complaint directly with us by contacting us at info@floraesthetics.com, or with the Office for Civil Rights at the US Department of Health and Human Services by visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
● Request a paper copy of this Notice. You have the right to request a paper copy of this Notice. e-mailing our business line at info@floraesthetics.com, or mailing your request to the mailing address at the bottom of this Notice.
Uses and Disclosures of Your PHI
The law permits or requires us to use or disclose your PHI for various reasons, which we explain in this Notice. We have included some examples, but we have not listed every permissible use or disclosure. When using or disclosing PHI or requesting your PHI from another source, we will make reasonable efforts to limit our use, disclosure, or request about your PHI to the minimum we need to accomplish our intended purpose. Despite our efforts to ensure that the information we disclose to others remains confidential, there is always potential that your information be re-disclosed by someone that we shared it with, at which point the information may no longer be protected under HIPAA.
Uses and Disclosures for Treatment, Payment, or Health Care Operations
● Treatment. We may use or disclose your PHI and share it with other providers who are treating you, including doctors, nurses, or other practitioners involved in your care.
● Billing and payment. We may use and disclose your PHI to bill and receive payment from health plans or others. For example, we may share your PHI with your health insurance plan to receive payment for services provided to you.
● Running our organization. We may use and disclose your PHI to run our business operations, improve your care, and contact you when necessary. For example, we may use your PHI to manage the services and treatment you receive or to monitor the quality of care provided to you.
Other Uses and Disclosures
We may share your information in other ways allowed by 45 C.F.R. § 164.512 or other applicable laws and regulations. For more information on permitted uses and disclosures under 45 C.F.R. § 164.512, see www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html.
For example, these other uses and disclosures may involve:
● Complying with the law. For example, we will share your PHI if the Department of Health and Human Services requires it when investigating our compliance with privacy laws.
● Helping with public health and safety issues. For example, we may share your PHI with the appropriate governmental oversight entity when required to:
○ report injuries and deaths;
○ prevent disease;
○ report adverse reactions to medications or medical device product defects; or
○ avert a serious threat to public health or safety.
● Responding to legal actions. For example, we may share your PHI to respond to:
○ a court or administrative order or subpoena;
○ discovery request; or
○ another lawful process.
● Research. For example, we may share your PHI for some types of health research that do not require your authorization. For certain research activities, an Institutional Review Board may approve uses and disclosures of your health information without your authorization.
● Working with medical examiners or funeral directors. For example, we may share PHI with coroners, medical examiners, or funeral directors when an individual dies.
● Addressing workers; compensation, law enforcement, or other government requests.
Other federal and state laws may have additional requirements that we must follow or may be more restrictive than HIPAA on how we use and disclose certain of your health information. If there are specific more restrictive requirements, even for some of the purposes listed above, we may not disclose your health information without your written permission as required by such laws.
Disclosure of your PHI or its use for any purpose other than those listed above requires your specific written authorization. Some examples include:
● Marketing. We will not use or disclose your PHI for marketing purposes without your written authorization except as otherwise permitted by law.
● Sale of your PHI. We will not sell your PHI without your written authorization except as otherwise permitted by law.
● Psychotherapy notes. We generally do not maintain what HIPAA calls “psychotherapy notes” about our callers. If we do, we will not use and disclose your psychotherapy notes without your written authorization except as otherwise permitted by law.
If you change your mind after authorizing a use or disclosure of your PHI, you may withdraw your permission by revoking the authorization. However, your decision to revoke the authorization will not affect or “undo” any use or disclosure of your PHI that occurred before you notified us of your decision, or any actions that we have taken based upon your authorization. All revocations must be in writing. Please send written revocations to our mailing address at the bottom of this Notice or call our business line for alternative options.
Reproductive Health Care Records
HIPAA prohibits us from using or disclosing reproductive health care records for certain “prohibited purposes.” If our PHI records indicate that someone sought, obtained, provided, or facilitated legal reproductive health care services, we will not disclose that information in furtherance of any civil, criminal, or administrative investigation or legal action initiated for the mere act of seeking, obtaining, providing, or facilitating reproductive health care. This protection only applies to legal reproductive health care services, which varies from state to state.
If we receive a request to disclose PHI in service of health oversight activities, judicial or administrative proceedings, law enforcement purposes, or coroner/medical examiner purposes, and the PHI requested potentially relates to reproductive health care, we will not disclose that PHI without first receiving a written “attestation” from the requestor. The attestation will state that the PHI will not be used for any of the prohibited purposes discussed above (i.e., it will not be used to conduct an investigation into any person for the mere act of seeking, obtaining, providing, or facilitating reproductive health care). For example, if we receive a court-ordered subpoena for someone’s call records, and those records indicate that the caller received a legal abortion, we will not disclose those records without a written attestation promising that the records would not be used to support a claim against the caller for obtaining an abortion.
Data Breach Notification
We will promptly notify you if a data breach occurs that may have compromised the privacy or security of your PHI.
Changes to this Notice
We can change the terms of this Notice, and the changes will apply to all information we have about you. Any new versions of this Notice will be published on our website.
Contact
If you have any questions about this Notice, please contact info@floraesthetics.com. Any written notices may be mailed to the following mailing address:
Flor Aesthetics
ATTN: Flor Aesthetics
849 N 4th Street, Suite 103, Coeur d' Alene, Idaho 83814