HIPAA Privacy Notice
Effective Date: October 1, 2025
This Notice describes how your medical information may be used and disclosed, and how you can get access to this information. Please review it carefully.
At Collective Beauty Med Spa (“Collective Beauty,” “we,” “our,” or “us”), we are committed to protecting your privacy and the confidentiality of your health information. This Notice of Privacy Practices (“Notice”) explains how we may use and disclose your protected health information (PHI), your rights regarding that information, and our responsibilities under the law.
Our Responsibilities
Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable California privacy laws, we are required to:
- Maintain the privacy and security of your PHI.
- Provide you with this Notice describing our legal duties and privacy practices.
- Notify you if a breach occurs that may have compromised the privacy or security of your information.
- Follow the terms of this Notice as long as it is in effect.
How We May Use and Disclose Your Information
We may use and disclose your PHI for the following purposes without additional authorization:
Treatment
To provide, coordinate, or manage your care. For example, we may share information with our medical director or other healthcare providers involved in your treatment.
Payment
To obtain payment for the services we provide. This may include billing your insurance company or verifying coverage.
Healthcare Operations
To support daily business activities, such as quality assessment, staff training, and practice management.
Appointment Reminders & Follow-Up
We may use your contact information to send appointment reminders, treatment follow-ups, or relevant wellness updates.
Legal Requirements
We may disclose information when required by law, such as in response to a subpoena, court order, or public health requirement.
Other Uses and Disclosures Requiring Authorization
We will not use or share your PHI for marketing purposes, sale of information, or other non-treatment-related activities without your written consent.
You may revoke your authorization in writing at any time, except to the extent that action has already been taken in reliance on it.
Your Rights Regarding Your Health Information
You have the following rights under HIPAA and California law:
1. Right to Access
You may request a copy of your medical records or health information. We may charge a reasonable, cost-based fee for copies.
2. Right to Amend
If you believe your information is incorrect or incomplete, you may request that we correct it.
3. Right to an Accounting of Disclosures
You may request a list of certain disclosures of your PHI made in the past six years.
4. Right to Request Restrictions
You can request that we limit how we use or disclose your PHI. While we are not required to agree to all requests, we will comply when possible.
5. Right to Request Confidential Communications
You may ask that we contact you in a specific way (for example, at a home or office phone number).
6. Right to a Paper Copy of This Notice
You can request a printed copy of this Notice at any time, even if you agreed to receive it electronically.
6. Right to File a Complaint
If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights (OCR).
- Filing a complaint will not affect your care or your relationship with us.
- To file with OCR: www.hhs.gov/ocr/privacy/hipaa/complaints/
Contact Information
To exercise your rights or for questions about this Notice, please contact:
Collective Beauty Med Spa
Privacy Officer: Alexis York
23622 Calabasas Road, Suite 111
Calabasas, CA 91302
Email: [email protected]
Phone: 818-221-1044
Changes to This Notice
We reserve the right to revise or update this Notice at any time. The updated version will be posted in our office and on our website with a new effective date.
