HIPAA Notice of Privacy Practices
IYKYK Aesthetics
Effective date: 11/10/26
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Commitment to Your Privacy
IYKYK Aesthetics protects information that identifies you and relates to your health, healthcare, or payment for care. This is called protected health information.
This notice applies to IYKYK Aesthetics and its workforce when acting on behalf of the practice.
We are legally required to protect your health information, provide this notice, and follow the privacy practices currently in effect. We will notify you following a breach of unsecured protected health information when required by law.
Contact Our Privacy Officer
For questions, copies of this notice, privacy requests, or complaints, contact:
Privacy Officer: Beverly Peters
Phone: 513-848-0011
Email: Bpeters@ifyouknowaes.com
Mailing address: 5554 Eureka Dr. Suite E, Fairfield twsp, OH 45011
Website: https://ifyouknowaes.com
How We Use and Disclose Health Information
Treatment
We may use and disclose information to provide and coordinate your care.
For example, we may share relevant medical history with your treating provider, send laboratory orders, or communicate with a pharmacy about a prescription.
Payment
We may use and disclose information to bill for services and obtain payment.
For example, we may use your treatment information to prepare a bill or provide necessary information to a health plan when applicable.
Healthcare Operations
We may use and disclose information to operate our practice, review treatment quality, train staff, conduct audits, and meet administrative requirements.
For example, we may review records to evaluate the quality of our services.
Electronic Records and Aesthetic Record
We use Aesthetic Record for electronic health records and related practice functions. Records may include medical history, laboratory information, treatment notes, clinical photographs, signed forms, and billing information.
Vendors handling protected health information on our behalf must protect it under applicable law and required business associate agreements. Our use of electronic records does not reduce your privacy rights.
Appointment Reminders and Care Communications
We may contact you about appointments, follow-up care, treatment alternatives, or health-related services as permitted by law. You may request reasonable changes to how or where we contact you.
Family, Friends, and Others Involved in Care
We may share relevant information with people involved in your care or payment when you agree or have an opportunity to object and do not object.
If you cannot express your preference, we may use professional judgment to disclose information in your best interest, as permitted by law. We may also share limited information for disaster relief.
Other Permitted or Required Disclosures
When applicable legal conditions are satisfied, we may use or disclose information for:
Public health and safety: Disease reporting, product recalls, medication reactions, reporting abuse or neglect, and preventing a serious and imminent threat.
Health oversight: Authorized audits, inspections, licensing activities, and investigations.
Research: Research meeting applicable privacy requirements.
Legal obligations: Disclosures required by federal or state law, including compliance reviews by the U.S. Department of Health and Human Services.
Legal proceedings: Responses to court orders, administrative orders, subpoenas, or other legal processes when disclosure requirements are met.
Law enforcement and government functions: Certain legally authorized law enforcement, military, national security, and protective-service activities.
Workers’ compensation: Disclosures authorized by applicable workers’ compensation laws.
Organ donation and deceased individuals: Disclosures to organ procurement organizations, coroners, medical examiners, and funeral directors as permitted by law.
These provisions do not allow unrestricted access to your records.
Additional Protections for Sensitive Information
Federal and Ohio laws may impose stricter confidentiality requirements on certain records, including certain HIV-related information, mental health records, and substance use disorder treatment records. When those protections apply, we follow them and obtain additional consent or authorization when required.
If we receive or maintain substance use disorder records protected by 42 CFR Part 2, we follow the restrictions applicable to those records. We will not use or disclose those records, or testimony describing their contents, in civil, criminal, administrative, or legislative investigations or proceedings against you without your written consent or a qualifying court order and subpoena or similar legal mandate, as required by law.
Before using Part 2 records for fundraising, we will provide clear advance notice and an opportunity to choose whether to receive those communications.
When We Need Your Written Authorization
We obtain written authorization for uses and disclosures requiring it, including:
Marketing involving your protected health information, except where an exception is permitted by law.
Sale of your protected health information.
Most uses and disclosures of psychotherapy notes, if maintained.
Other purposes not described in this notice or otherwise permitted or required by law.
We obtain separate authorization before using identifiable patient photographs, videos, or testimonials for advertising or social media.
You may revoke an authorization by contacting us in writing. Revocation does not reverse actions already taken in reliance on that authorization.
If we contact you for fundraising as permitted by law, you may opt out of future fundraising communications.
Your Rights
Access Your Health Information
You may request to inspect or receive an electronic or paper copy of records covered by your access rights.
We generally act within 30 days. If a legally permitted extension is necessary, we will notify you in writing. Any copying fee will comply with applicable law. If access is denied, we will explain the reason and any available review rights.
Request an Amendment
You may request an amendment to information you believe is inaccurate or incomplete.
We generally act within 60 days, subject to a legally permitted extension. If we deny your request, we will explain why in writing and describe your right to submit a statement of disagreement.
Request Confidential Communications
You may request that we contact you in a particular way or at a different location. We will accommodate reasonable requests.
Request Restrictions
You may ask us to restrict certain uses or disclosures for treatment, payment, or healthcare operations. We generally do not have to agree.
However, if you pay for a service or item out of pocket in full and request that the related information not be disclosed to your health plan for payment or healthcare operations, we must honor that request unless disclosure is required by law.
Request an Accounting of Disclosures
You may request an accounting of certain disclosures during the six years before your request.
The accounting excludes disclosures that the law does not require us to list, including many disclosures for treatment, payment, and healthcare operations. One accounting in a 12-month period is free. We will explain any permitted fee for additional requests before proceeding.
Obtain a Copy of This Notice
You may request a paper copy at any time, even if you previously agreed to electronic delivery.
Use a Personal Representative
A person with legal authority to act for you may exercise applicable rights on your behalf. We verify that authority and follow any applicable legal exceptions.
Privacy Complaints
You may submit a complaint to our Privacy Officer using the contact information above.
You may also complain to the U.S. Department of Health and Human Services, Office for Civil Rights:
Online: https://www.hhs.gov/hipaa/filing-a-complaint/index.html
Mail: 200 Independence Avenue, S.W., Washington, D.C. 20201
We will not retaliate against you for filing a complaint.
Changes to This Notice
We may revise this notice as permitted by law. Revisions may apply to information we already maintain and information received in the future.
The current notice will be available on our website, in our office, and upon request.