HIPAA Notice of Privacy Practices

Effective date: August 21, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice applies to protected health information maintained by Fix Med Spa when Fix Med Spa is acting as a health care provider covered by the Health Insurance Portability and Accountability Act (“HIPAA”). It applies to Fix Med Spa’s covered health care operations at 314 N Glendale Ave, Glendale, California, and to workforce members and business associates acting on its behalf as permitted by law.

This Notice is separate from our Website Privacy Policy, which describes information collected through the public website, cookies, analytics, advertising, and general online forms.

Your rights

When it comes to your health information, you have certain rights. Contact our Privacy Officer using the information at the end of this Notice for help exercising them.

Get an electronic or paper copy of your record

You may ask to inspect or receive an electronic or paper copy of your medical record and other health information we maintain about you. We will explain how to submit a request. We generally will provide a copy or summary within 30 days, as required by law, and may charge a reasonable cost-based fee.

Ask us to correct your record

You may ask us to correct health information that you believe is inaccurate or incomplete. We may deny the request in certain circumstances, but we will provide a written explanation, generally within 60 days as required by law.

Request confidential communications

You may ask us to contact you in a specific way, such as at a particular telephone number, or to send mail to a different address. We will accommodate reasonable requests.

Ask us to limit what we use or disclose

You may ask us not to use or disclose certain information for treatment, payment, or health care operations. We are not always required to agree, including when a restriction could affect your care. If we agree, we may still disclose the information when needed for emergency treatment.

If you pay in full out of pocket for a service or item, you may ask us not to disclose information about that service or item to your health plan for payment or health care operations. We will agree unless the law requires disclosure.

Receive an accounting of disclosures

You may ask for a list of certain disclosures of your health information made during the six years before your request, including who received the information and why. The list will not include every disclosure, such as most disclosures for treatment, payment, health care operations, or disclosures you authorized. One accounting in a 12-month period is free; a reasonable cost-based fee may apply to additional requests.

Get a copy of this Notice

You may ask for a paper copy of this Notice at any time, even if you agreed to receive it electronically. We will provide one promptly.

Choose someone to act for you

If a person has legal authority to act as your personal representative, such as a legal guardian or an agent under a valid medical power of attorney, that person may exercise your rights and make choices about your health information. We will verify the person’s authority before acting.

File a complaint

You may complain to our Privacy Officer if you believe your privacy rights have been violated. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting hhs.gov/hipaa/filing-a-complaint, calling 1-877-696-6775, or writing to 200 Independence Avenue SW, Washington, DC 20201.

We will not retaliate against you for filing a complaint.

Your choices

For certain health information, you may tell us your preferences about what we disclose. If you have a clear preference in the situations below, tell us what you want us to do and we will follow your instructions when the law allows.

You may choose whether we:

share information with family members, close friends, or others involved in your care or payment for your care;
share information in a disaster-relief situation; or
contact you about fundraising.

If you cannot communicate your preference, such as when you are unconscious, we may disclose information if we believe it is in your best interest. We may also disclose information when necessary to prevent or lessen a serious and imminent threat to health or safety.

We will obtain your written authorization before using or disclosing your health information for marketing when HIPAA requires authorization, before selling your health information, or before disclosing most psychotherapy notes. We do not currently use protected health information for fundraising. If that changes, you may tell us not to contact you again.

You may revoke an authorization in writing at any time, except to the extent that we have already relied on it.

How we typically use and disclose health information

To treat you

We may use your health information and disclose it to physicians, nurses, pharmacies, laboratories, and other professionals involved in your care. For example, a treating professional may review your medication history when evaluating whether a service is appropriate.

To run our practice

We may use and disclose health information for health care operations, such as care coordination, quality assessment, staff training, licensing, compliance, auditing, customer service, and business management. For example, we may review records to evaluate and improve the quality of our services.

To bill for services

We may use and disclose health information to bill you, a health plan, or another responsible party and to receive payment for services, when applicable.

We may use your information to contact you about appointments, treatment alternatives, or health-related benefits and services that may be of interest, as permitted by law.

Business associates

We may disclose health information to vendors that perform services for us, such as practice-management, records, billing, legal, or technology support. When HIPAA requires it, those business associates must agree in writing to safeguard the information and use it only as permitted.

Other uses and disclosures permitted or required by law

We may use or disclose health information for other purposes allowed or required by law, after satisfying the applicable conditions. These purposes may include:

preventing disease and addressing public-health or safety matters;
reporting adverse reactions, product defects, or recalls;
reporting suspected abuse, neglect, or domestic violence;
health research approved or otherwise permitted by law;
compliance with federal or state law and oversight by the U.S. Department of Health and Human Services;
organ and tissue donation requests;
coroners, medical examiners, and funeral directors after a person dies;
workers’ compensation claims;
health-oversight activities;
certain law-enforcement requests;
military, national-security, protective-service, and other special government functions; and
court or administrative orders, subpoenas, lawsuits, and legal proceedings as permitted by law.

If we maintain substance-use-disorder patient records protected by 42 CFR Part 2, those records will not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless you consent in writing or a court order and subpoena authorize the use or disclosure, as applicable.

California law may provide additional protections for certain types of medical information. We will follow the more protective law when it applies.

Any use or disclosure not described in this Notice will be made only with your written authorization unless otherwise permitted or required by law.

Our responsibilities

We are required by law to maintain the privacy and security of protected health information.
We will notify affected individuals following a breach of unsecured protected health information when required by law.
We must follow the duties and privacy practices described in the Notice currently in effect and provide you with a copy upon request.
We will not use or disclose your information other than as described here unless you authorize it in writing or the law otherwise permits or requires it.

Changes to this Notice

We may change this Notice and make the revised terms apply to all protected health information we maintain, including information created or received before the change. A current Notice will be available on this Website, at our office, and upon request.

Privacy contact

For questions, requests, or complaints regarding this Notice, contact:

Privacy Officer, Fix Med Spa
314 N Glendale Ave
Glendale, CA 91206
info@fixmedspa.com
(818) 248-9575