HIPPA PRIVACY STATEMENT
Notice of Privacy Practices
Effective Date: August 18, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU MAY ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Who Is Covered by This Notice
This Notice of Privacy Practices applies to Le Haus Med Spa, its healthcare professionals, employees, workforce members, and authorized service providers who may access your protected health information while providing or supporting your care.
Our Commitment to Your Privacy
At Le Haus Med Spa, we understand that information about your health, medical history, treatments, photographs, and services is personal. We create and maintain records of the care and services you receive to provide safe, appropriate treatment, coordinate your care, process payments, operate our practice, and comply with applicable law.
“Protected Health Information,” or PHI, includes information that identifies you and relates to your past, present, or future physical or mental health, healthcare services, treatment, or payment for care. PHI may exist in written, electronic, photographic, video, or verbal form.
Our Legal Responsibilities
Le Haus Med Spa is required by applicable federal and California law to:
Maintain the privacy and security of your PHI.
Provide you with this Notice explaining our privacy practices and legal duties.
Follow the terms of the Notice currently in effect.
Notify you if a breach occurs that may have compromised the privacy or security of your unsecured PHI.
Limit the use and disclosure of your information as required by law.
Provide additional protections when California or other applicable law is more protective of your information.
How We May Use and Disclose Your Information
Treatment: We may use and disclose your PHI to provide, coordinate, or manage your care. This may include sharing relevant information with physicians, nurses, pharmacies, laboratories, imaging centers, emergency personnel, specialists, or other healthcare professionals involved in your treatment.
Payment: We may use or disclose your PHI to bill and collect payment for services. This may include communications with you, your insurance company when applicable, financing providers, payment processors, or another person responsible for payment.
Healthcare Operations: We may use and disclose your information to operate our practice and improve the quality and safety of our services. This may include quality review, staff training, credentialing, auditing, compliance, legal services, business planning, patient service activities, and evaluation of provider performance.
Appointment Reminders and Follow-Up: We may contact you by telephone, voicemail, text message, email, patient portal, or mail regarding appointments, scheduling, treatment follow-up, aftercare, test results, prescriptions, account matters, or other healthcare-related communications. You may request that we contact you in a particular manner or at a particular location.
Treatment Options and Health-Related Services: We may contact you about treatment alternatives, follow-up services, health-related benefits, products, or services that may be relevant to your care. Promotional communications will be handled in accordance with applicable privacy and communication laws.
Family, Friends, and Others Involved in Your Care: With your permission, or when otherwise permitted by law, we may share information relevant to your care or payment with a family member, close friend, caregiver, or another person you identify. If you are unavailable, incapacitated, or involved in an emergency, we may use professional judgment to disclose limited information when we believe doing so is in your best interest.
Business Associates: We may share PHI with outside companies that assist us with services such as electronic medical records, online scheduling, payment processing, billing, laboratory services, pharmacy coordination, secure communications, data storage, information technology, legal services, accounting, and document destruction. When required, these parties must agree to appropriately safeguard your PHI.
Clinical Photography: Photographs or videos taken for diagnosis, treatment planning, documentation, patient safety, or evaluation of treatment outcomes may become part of your medical record and may be used for treatment, payment, or healthcare operations as permitted by law.
We will not publicly post or use identifiable patient photographs, videos, testimonials, or treatment information for advertising, social media, website content, education outside permitted healthcare operations, or other promotional purposes without a separate written authorization. Declining a photography, video, testimonial, or media authorization will not affect your right to receive treatment.
Required or Permitted by Law: We may use or disclose your information when required or permitted by federal, California, or local law, including for:
Public health and safety activities.
Reporting suspected abuse, neglect, or domestic violence.
Reporting adverse reactions, product defects, or recalls.
Preventing or reducing a serious and imminent threat to health or safety.
Health oversight audits, investigations, inspections, and licensing activities.
Workers’ compensation claims.
Court or administrative orders, subpoenas, or other lawful legal processes.
Certain authorized law-enforcement requests.
Coroners, medical examiners, and funeral directors.
Organ or tissue donation purposes.
Certain military, national security, protective service, and government functions.
Research activities approved or permitted by law.
When California law provides greater protection than federal law, we will follow the more protective requirement. Certain categories of information, including some mental health, substance use disorder, HIV-related, genetic, reproductive health, and other specially protected records, may require additional authorization or legal process before disclosure.
To the extent we receive or maintain substance use disorder patient records protected by 42 CFR Part 2, those records will not be used or disclosed in a civil, criminal, administrative, or legislative investigation or proceeding against you unless you provide written consent or the disclosure is authorized by a qualifying court order and legal process.
Uses and Disclosures Requiring Written Authorization
We will obtain your written authorization before using or disclosing your PHI when authorization is required by law. This generally includes:
Most uses or disclosures for marketing purposes.
The sale of PHI.
Most uses or disclosures of psychotherapy notes.
Public use of identifiable before-and-after photographs, videos, testimonials, or treatment information.
Other uses or disclosures not described in this Notice or otherwise permitted by law.
You may revoke an authorization in writing at any time. Revocation will not affect actions already taken in reliance on your authorization.
Your Rights Regarding Your Health Information
Right to Access and Receive a Copy: You may request to inspect or receive an electronic or paper copy of your medical record and other PHI maintained by Le Haus Med Spa. We will respond within the time required by law and may charge a reasonable, cost-based fee when permitted.
Right to Request an Amendment: You may ask us to correct or amend information that you believe is inaccurate or incomplete. We may deny the request in certain circumstances, but we will provide a written explanation when required.
Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI made during the legally permitted lookback period. The list will not include every disclosure, such as many disclosures made for treatment, payment, healthcare operations, or disclosures you specifically authorized.
Right to Request Restrictions: You may ask us to limit how we use or disclose your information for treatment, payment, or healthcare operations. We are not required to agree to every request. However, when you pay for a service completely out of pocket, you may ask us not to disclose information about that service to your health plan for payment or healthcare operations, unless disclosure is required by law.
Right to Request Confidential Communications: You may ask us to contact you in a specific way, such as only by telephone, text, email, or mail, or to use an alternative address or telephone number. We will accommodate reasonable requests.
Right to Choose a Personal Representative: A person legally authorized to act on your behalf, such as a legal guardian, healthcare agent, or holder of an appropriate power of attorney, may exercise your privacy rights. We may request documentation confirming that person’s authority.
Right to Receive a Copy of This Notice: You may request a paper or electronic copy of this Notice at any time, even if you previously agreed to receive it electronically.
Right to Receive Breach Notification: You have the right to be notified if a breach of unsecured PHI occurs and notification is required by law.
Right to File a Complaint: You may file a complaint if you believe your privacy rights have been violated. You may contact Le Haus Med Spa’s Privacy Officer using the information below. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, through its complaint portal, by mail at 200 Independence Avenue SW, Washington, DC 20201, or by calling 1-877-696-6775.
Le Haus Med Spa will not retaliate against you or deny you treatment for filing a privacy complaint.
Changes to This Notice
We reserve the right to revise this Notice and our privacy practices. Any revised Notice may apply to PHI we already maintain as well as information created or received in the future. The current version will be available at our office, upon request, and on our website at www.lehausmedspa.com.
Contact — Privacy Officer
For questions about this Notice, requests involving your medical information, or privacy-related complaints, please contact:
Le Haus Med Spa — Privacy Officer
2021 4th St., Suite 120
Santa Ana, CA 92701
Email: info@lehausmedspa.com
Phone: (714) 981-9999