Privacy Policy

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Beverly Hills Aesthetic Group ("we," "us," or "our") is committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

1. Information We Collect

Personal Information

We may collect the following types of personal information:

• Contact information (name, email address, phone number, mailing address)
• Demographic information (age, gender, date of birth)
• Government-issued identification numbers when required
• Payment and billing information
• Emergency contact information

Protected Health Information (PHI)

As a medical aesthetic practice, we collect and maintain protected health information including:

• Medical history and current health status
• Treatment records and progress notes
• Photographs for medical documentation purposes
• Insurance information and claims
• Prescription and medication information
• Laboratory results and diagnostic information

Website and Digital Information

• IP address and device information
• Browser type and operating system
• Website usage data and analytics
• Email newsletter subscription preferences
• Cookies and similar tracking technologies

2. How We Use Your Information

Treatment, Payment, and Healthcare Operations

We use your protected health information for:

• Treatment: Providing, coordinating, and managing your medical aesthetic treatments
• Payment: Processing payments, billing, and insurance claims
• Healthcare Operations: Quality improvement, staff training, and business operations

Other Uses

• Appointment scheduling and reminders
• Communicating about your care and treatment options
• Newsletter communications (with your consent)
• Website functionality and improvement
• Legal compliance and regulatory requirements

3. Information Sharing and Disclosure

We may share your information in the following circumstances:

Healthcare Providers

• Other healthcare providers involved in your care
• Referring physicians and specialists
• Emergency medical personnel when necessary

Business Associates

• Medical equipment and software vendors
• Billing and collection agencies
• IT support and cloud storage providers
• Insurance companies and claims processors

Legal Requirements

• When required by law or court order
• Public health authorities for disease prevention
• Law enforcement for legitimate purposes
• Regulatory agencies for compliance purposes

4. Your Rights Under HIPAA

You have the following rights regarding your protected health information:

• Right to Access: Request copies of your medical records
• Right to Amend: Request corrections to your medical records
• Right to Restrict: Request limitations on how we use your information
• Right to Confidential Communications: Request communications through specific methods
• Right to an Accounting: Request a list of disclosures we've made
• Right to Notification: Be notified if your information is breached

5. Your Rights Under California Consumer Privacy Act (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: Request information about personal data collection and use
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale or sharing of personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit: Limit use of sensitive personal information

Note: CCPA does not apply to protected health information covered by HIPAA. Medical records and treatment information are governed by HIPAA, not CCPA.

6. Data Security

We implement appropriate technical, administrative, and physical safeguards to protect your information:

• Encrypted data transmission and storage
• Secure access controls and authentication
• Regular security assessments and updates
• Staff training on privacy and security
• Incident response and breach notification procedures

7. Website Cookies and Tracking

Our website uses cookies and similar technologies to:

• Enhance website functionality and user experience
• Analyze website traffic and usage patterns
• Remember your preferences and settings
• Provide personalized content and advertising

You can control cookie settings through your browser preferences.

8. Third-Party Services

We may use third-party services that have their own privacy policies:

• Payment processors
• Appointment scheduling systems
• Email marketing platforms
• Analytics services
• Social media platforms

9. Data Retention

We retain your information as follows:

• Medical Records: As required by California law (minimum 7 years)
• Payment Records: As required for tax and regulatory purposes
• Website Data: As necessary for business operations
• Marketing Data: Until you unsubscribe or request deletion

10. Children's Privacy

Our services are not directed to children under 13 years of age. For patients under 18, we require parental consent before collecting or using personal information. We do not knowingly collect personal information from children under 13 without verified parental consent.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the effective date. For HIPAA-related changes, we will provide additional notice as required by law.

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Privacy Officer

For HIPAA-related concerns, you may contact our Privacy Officer at the address above.

California Residents

California residents may submit CCPA requests by:

• Calling (424) 424-0260
• Emailing privacy@beverlyhillsaesthetic.com
• Visiting our office during business hours

13. Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

• Our Privacy Officer at the contact information above
• The U.S. Department of Health and Human Services Office for Civil Rights
• The California Privacy Protection Agency (for CCPA violations)

You will not be retaliated against for filing a complaint.