HIPAA Notice of Privacy Practices

1Uses & Disclosures for Treatment, Payment & Operations

• Treatment — to provide, coordinate, and manage your care. Example: our clinician and Medical Director review your history and medications to plan a safe injectable treatment, and may share information with a pharmacy or another provider involved in your care.
• Payment — to bill and collect for services. Example: we send an invoice or process a card payment for a treatment you received, or verify a membership.
• Health-care operations — for quality, training, and administration. Example: we review records to improve care quality or train staff, and use scheduling and record systems to run the clinic.

2Other Uses Permitted or Required by Law

We may use or disclose your PHI without your authorization in the following circumstances, as permitted or required by law:

• For public-health activities (e.g., reporting adverse events or communicable disease).
• For health oversight activities (audits, investigations, licensure).
• For judicial and administrative proceedings, and to law enforcement, as required by law or court order.
• To coroners, medical examiners, and funeral directors.
• For organ, eye, or tissue donation.
• For approved research, subject to legal safeguards.
• To avert a serious and imminent threat to health or safety.
• For workers’ compensation as authorized by law.
• For specialized government functions and as otherwise required by law.

3Uses That Require Your Written Authorization

Other uses and disclosures not described in this Notice will be made only with your written authorization. In particular, most uses and disclosures of psychotherapy notes, uses and disclosures for marketing, and any sale of your PHI require your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

4Photographs & Before/After Images

Clinical photographs are PHI. We take, store, and use before/after images only with your specific written consent, and we never publish patient images without a signed release. Any before/after examples shared during a consultation are provided privately, not as a guarantee of results.

5Your Rights

• Inspect and obtain a copy of your PHI (in the form and format you request, where readily producible).
• Request an amendment to your PHI.
• Request restrictions on certain uses and disclosures.
• Request confidential communications (e.g., by a specific means or at a specific location).
• Receive an accounting of certain disclosures.
• Obtain a paper copy of this Notice on request, even if you agreed to receive it electronically.
• Be notified following a breach of your unsecured PHI.

6Our Duties

We are required by law to maintain the privacy of your PHI, to provide you this Notice of our legal duties and privacy practices, and to abide by the terms of the Notice currently in effect. We reserve the right to change this Notice and to make the revised Notice effective for all PHI we maintain; a revised Notice will be posted at www.activatebeautyusa.com and available in the clinic.

7Complaints & Privacy Officer

If you believe your privacy rights have been violated, you may complain to us or to the U.S. Department of Health and Human Services (HHS), Office for Civil Rights. You will not be retaliated against for filing a complaint. To file a complaint with us, or for more information, contact our Privacy Officer:

You may also contact HHS OCR at hhs.gov/ocr.

8Effective Date

This Notice is effective as of the date below and remains in effect until replaced.

Effective date: 15 July 2026