Notice of Privacy Practices

Effective Date: October 7, 2026

Your information. Your rights. Our responsibilities. This Notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. This Notice describes how Hella Tight Aesthetics may use and disclose your protected health information, your rights concerning that information, and our responsibilities for protecting it. It applies to health information created or maintained in connection with care provided by Hella Tight Aesthetics.

Your Rights

You may ask to see or obtain an electronic or paper copy of your medical record and other health information we maintain. You may ask us to correct information you believe is incorrect or incomplete; request confidential communications; ask us to limit certain uses or disclosures; request an accounting of certain disclosures; and request a paper copy of this Notice at any time. If you have given someone medical power of attorney or another person has legal authority to act for you, that person may exercise your privacy rights as permitted by law. We may verify that person’s authority before taking action. If you believe your rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Your Choices

You may tell us whether we may share relevant health information with family, friends, caregivers, or others involved in your care or payment. We will obtain written authorization before using or disclosing PHI for marketing when HIPAA requires it, and we will not sell protected health information without authorization where required by law. Clinical photographs maintained in your medical record are protected health information. We will not use identifiable treatment photographs, before-and-after photographs, videos, testimonials, or other patient images for advertising, social media, promotional materials, or other marketing purposes when authorization is required unless you have provided separate written authorization. Agreeing to promotional photography is not a condition of receiving treatment.

How We Typically Use or Share Your Health Information

We may use or disclose health information without written authorization for treatment, payment, and healthcare operations. We may share relevant information with clinicians, pharmacies, laboratories, or other healthcare professionals involved in care; use information to obtain or document payment; and use information to operate the practice, improve quality, manage compliance activities, and train our workforce. We may use contact information for appointment reminders, scheduling, follow-up care, treatment, payments, or other healthcare-related matters by telephone, voicemail, email, or text message.

Other Ways We May Use or Share Information

We may use or disclose health information without authorization when permitted or required by law, including when required by law; for public health and safety; to prevent serious threats; regarding abuse, neglect, or domestic violence; for health oversight; in legal proceedings; for law enforcement; for workers’ compensation; to medical examiners and funeral directors; for organ and tissue donation; and for certain specialized government functions.

Electronic Health Information and Service Providers

We may maintain or process health information using electronic health records, practice-management and appointment-scheduling systems, secure communications platforms, payment systems, pharmacies, laboratories, and other vendors that assist in providing or administering care. We may use Boulevard for appointment scheduling and practice management and an electronic health record system for clinical documentation. When a service provider receives PHI on our behalf and qualifies as a business associate under HIPAA, we require appropriate protections, including a Business Associate Agreement when required by law. Payment providers may receive information necessary to process or document transactions and may also be governed by their own privacy practices.

Substance Use Disorder Records

Certain records concerning substance use disorder diagnosis, treatment, or referral for treatment may receive additional protection under federal law, including 42 CFR Part 2. If we receive or maintain records protected by Part 2, we will use and disclose those records only as permitted by applicable law. Part 2 records, or testimony describing their contents, generally may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against a patient unless specifically authorized by the patient or permitted by law.

Uses and Disclosures Requiring Authorization

Uses and disclosures not otherwise permitted by HIPAA or other applicable law generally require written authorization. This includes certain marketing uses and disclosures, sales of PHI, uses of identifiable patient photographs, videos, or testimonials for advertising or promotional purposes, and other uses not described in this Notice. You may revoke an authorization in writing at any time. Revocation will not affect actions already taken in reliance on authorization before it was received.

Our Responsibilities and Changes to This Notice

We are required by law to maintain the privacy and security of protected health information; provide this Notice; follow the duties and privacy practices currently in effect; and notify you following a breach of unsecured PHI when notification is required. We may change this Notice and our privacy practices. Changes may apply to all health information we maintain. When materially revised, the updated Notice will be available upon request, at our practice, and on our website; the current version will identify its effective date.

Questions or Complaints

For questions, privacy requests, or complaints, contact Hella Tight Aesthetics, Privacy Contact, 109 N 12th Street, Suite 806, Brooklyn, NY 11249; phone (201) 228-0611; email hello@hellatightaesthetics.com. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights, 200 Independence Avenue SW, Washington, DC 20201, phone 1-877-696-6775. We will not retaliate against you for exercising your rights or filing a complaint.