Legal & Accessibility

Effective Date: September 23, 2013  Publication Date: September 23, 2014. Updated Date: July 1, 2025

This notice describes how medical information about you may be used and disclosed, and how you can access this information. Please review it carefully.Illy Aesthetics maintains protected health information (PHI) about you in both written and electronic formats. PHI includes your personal identifiers (such as name, address, or phone number) and information related to your past, present, or future physical or mental health and related healthcare services.We are required by law to protect the confidentiality of your PHI and to follow specific rules when using or disclosing it. This notice outlines your rights and explains how we use and share your information to provide care, process payment, manage operations, and comply with the law.

YOUR RIGHTS UNDER HIPAA

You have the right to:

​

Receive a Copy of This Notice

We are required to provide this notice upon request and to follow its terms. We reserve the right to revise it and will make any updated versions available in our office and on our website.

Authorize Use or Disclosure

We need your written authorization to use or disclose PHI for purposes not outlined in this notice (e.g., marketing or the sale of PHI). You may revoke an authorization at any time in writing, except when we’ve already relied on it.

Request Alternative Communication

You can ask us to contact you using a specific method (such as email, text, or a different phone number or address). Reasonable requests will be honored when made in writing.

Inspect and Copy Your Health Record

You have the right to view and obtain a copy of your health records. If stored electronically, you may request a digital version. Reasonable fees may apply for processing.

Request Restrictions

You may request in writing that we not use or share certain PHI. We are not required to agree, except when you fully pay out-of-pocket for a service and request that it not be disclosed to your health plan.

​

Request an Amendment

If you believe your record is incomplete or inaccurate, you may request an amendment. We may deny the request in certain situations.Request a List of DisclosuresYou may request an accounting of certain disclosures of your PHI made outside of treatment, payment, or healthcare operations.

Receive Notification of a Breach

You have the right to receive written notice if your unsecured PHI is compromised and notification is required under federal law.If you have questions about your privacy rights, please contact our Privacy Manager (listed below).​

HOW WE MAY USE OR DISCLOSE YOUR PHI

Below are examples of how your PHI may be used or disclosed. This list is not exhaustive, but outlines the most common uses.

Treatment

To coordinate your care with other providers or third parties (such as a pharmacy).

Special Notices

To remind you of appointments, share test results, or provide information about care options or services. You may opt out of these communications at any time.

Payment

To process billing, verify insurance, or obtain payment for services provided.Healthcare OperationsTo support activities like compliance audits, quality improvement, legal reviews, or patient safety efforts.

Health Information Exchange

We may share your PHI through secure systems or networks for continuity of care.

Involvement in Your Care

Unless you object, we may share relevant PHI with a family member or designated individual involved in your care. In urgent situations, disclosures will be made based on professional judgment.

​OTHER PERMITTED AND REQUIRED USES

We may use or disclose your PHI without your authorization in the following cases:

As required by law

For public health and safety

For oversight, audits, or investigations

To report abuse, neglect, or domestic violence

To comply with FDA or legal proceedings

For law enforcement or national security

For organ donation or coroner review

For workers’ compensation

When required by the Department of Health and Human Services