Notice of Privacy Practices
Aesthetic Lab
Effective Date: November 4, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Who This Notice Covers
This notice applies to Aesthetic Lab, a California corporation, at all of its locations (Modesto, Turlock, and Stockton), and to its providers, staff, and others who work at Aesthetic Lab under our direction. In this notice, “we,” “us,” and “our” mean Aesthetic Lab.
Our Duties
We are required by law to:
- Keep the privacy of your protected health information (“health information”).
- Give you this notice of our legal duties and privacy practices.
- Notify you if there is a breach of your unsecured health information.
- Follow the terms of the notice currently in effect.
Health information includes your medical history, consent forms, treatment records, treatment photographs taken for your chart, and billing records.
How We May Use and Share Your Health Information
Treatment. We may use and share your health information to provide and coordinate your care. For example, your nurse injector may review your chart and prior treatment photos before a follow-up appointment, or we may share information with our medical director or with another provider who is treating you.
Payment. We may use and share your health information to bill and collect payment for your services. For example, we may use your information to process a payment or to manage a package or membership balance.
Health care operations. We may use and share your health information to run our practice, improve care, and contact you when needed. For example, we may review charts for quality and safety, train our staff, or conduct compliance reviews.
Appointment reminders and services. We may contact you to remind you of appointments, give you pre- and post-treatment instructions, or tell you about treatment options and services we offer.
Business associates. We may share your health information with vendors that perform services for us, such as our scheduling and practice management software. Each must sign an agreement requiring it to protect your information.
Family and friends. We may share health information with a family member, friend, or other person you identify who is involved in your care or payment for your care, unless you object. If you are not present or able to agree, we may share information if we believe it is in your best interest.
Other Ways We May Use or Share Your Information Without Your Written Authorization
We may use or share your health information without your written authorization in the following situations, as permitted or required by law:
- As required by law, including federal, state, or local law.
- Public health activities, such as reporting adverse reactions to medications or products to the FDA, or preventing disease.
- Health oversight, such as audits, investigations, inspections, and licensing by agencies like the Board of Registered Nursing or the Medical Board of California.
- Abuse, neglect, or domestic violence reporting to the appropriate authorities when required or permitted by law.
- Lawsuits and legal proceedings, in response to a court or administrative order, or a subpoena or other lawful process, subject to the protections of law.
- Law enforcement, for certain purposes permitted by law, such as responding to a court order or warrant.
- Serious threats to health or safety, to prevent or lessen a serious and imminent threat to you, another person, or the public.
- Coroners, medical examiners, and funeral directors, as needed to carry out their duties.
- Organ and tissue donation organizations, if applicable.
- Research, when approved through a process that protects your privacy.
- Workers’ compensation, as permitted by workers’ compensation laws.
- Specialized government functions, such as military, national security, and protective services, as permitted by law.
- Department of Health and Human Services, when required to show our compliance with federal privacy law.
Uses That Require Your Written Authorization
We will not do the following without your written authorization:
- Marketing. Use or share your health information for marketing, except for face-to-face communications with you, promotional gifts of nominal value, and communications about our own services as allowed by law. We will not receive payment from a third party for sending you marketing communications without your authorization.
- Sale of health information. Sell your health information.
- Photographs and testimonials. Use your treatment photographs, before-and-after images, name, likeness, or testimonial in advertising, on our website, or on social media.
- Psychotherapy notes. Use or share psychotherapy notes, if any, except as allowed by law.
Any other use or sharing not described in this notice will be made only with your written authorization. You may revoke an authorization at any time in writing, except to the extent we have already acted on it.
We do not use your health information for fundraising.
California Law
California law, including the Confidentiality of Medical Information Act, may give you greater privacy protections than federal law. Where California law is more protective, we will follow it.
If we use your information for fundraising purposes, you will be provided with a clear opportunity to opt out of receiving such communications.
Your Rights
You have the following rights regarding your health information. To exercise any of them, contact our Privacy Officer using the information at the end of this notice. Some requests must be in writing.
- Get a copy of your records. You may inspect or get a paper or electronic copy of your medical and billing records. We will respond within the time required by law and may charge a reasonable, cost-based fee.
- Ask us to correct your records. You may ask us to correct health information you believe is incorrect or incomplete. We may say no, but we will tell you why in writing within 60 days.
- Request confidential communications. You may ask us to contact you in a specific way (for example, by cell phone only) or at a different address. We will agree to all reasonable requests.
- Ask us to limit what we use or share. You may ask us not to use or share certain health information for treatment, payment, or operations. We are not required to agree, unless you pay for a service in full out of pocket and ask us not to share information about that service with your health plan.
- Get a list of those we have shared information with. You may ask for an accounting of certain disclosures we made in the six years before your request. It will not include disclosures for treatment, payment, operations, or those you authorized. One accounting per year is free; we may charge a reasonable, cost-based fee for additional requests within 12 months.
- Get a copy of this notice. You may ask for a paper copy of this notice at any time, even if you agreed to receive it electronically.
- Choose someone to act for you. If you have given someone medical power of attorney or someone is your legal guardian, that person can exercise your rights. We will confirm the person has this authority before we act.
Changes to This Notice
We may change the terms of this notice, and the changes will apply to all health information we have about you. The new notice will be available at each of our locations and on our website.
Questions and Complaints
If you have questions about this notice or believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by writing to 200 Independence Avenue SW, Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
We will not retaliate against you for filing a complaint.