Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

This notice applies to the privacy practices of Cape Cod Aesthetics and MediSpa, DBA Cape Cod Surgical Arts and Medispa (“we,” “us,” the “Practice”), including all providers and staff who deliver care at 352 Main Street, Falmouth, Massachusetts.

We are required by law to protect the privacy of your health information, to give you this notice explaining our legal duties and privacy practices, to follow the terms of the notice currently in effect, and to notify you if a breach affects your unsecured health information.

How we may use and disclose your health information without your authorization

For treatment

We use your health information to provide and coordinate your care. For example, your surgeon, nurses, anesthesia provider and medical assistants share information about your history, allergies and medications so your procedure can be performed safely. We may disclose information to another provider you are referred to, to a pharmacy, to a laboratory, or to a hospital if you need care we cannot provide here.

For payment

We use and disclose your information to bill and collect payment for services — for example, to confirm coverage, to obtain prior authorization, or to submit a claim. Because many of our services are elective and paid directly, this may also include statements, deposits and refunds.

For health care operations

We use your information to run the practice well and keep care safe: quality review, adverse-event and incident review, staff training and competency assessment, licensing and credentialing, business planning, and audits.

Other uses permitted or required by law

• Appointment reminders and follow-up — by phone, text or email, using the contact details and preferences you give us.
• Treatment alternatives and practice services — information about services that may be of benefit to you, within the limits marketing rules allow.
• People involved in your care — a family member, friend or caregiver you identify, limited to information relevant to their involvement. If you are not present or are unable to agree, we use our professional judgment about what is in your best interest.
• As required by law — including federal, state and local reporting obligations.
• Public health activities — reporting disease, injury, births and deaths; reporting adverse events, product defects and recalls to the FDA.
• Abuse, neglect or domestic violence — reporting to authorities as the law requires or permits.
• Health oversight — audits, investigations, inspections and licensure activity by agencies that oversee health care.
• Judicial and administrative proceedings — in response to a court order, or to a subpoena or discovery request where the required assurances have been given.
• Law enforcement — as permitted, for example to identify or locate a suspect or missing person, or to report certain wounds.
• Coroners, medical examiners and funeral directors, and for organ and tissue donation.
• Research — where an institutional review board has approved the use and appropriate privacy protections are in place.
• To avert a serious threat to your health or safety, or that of another person or the public.
• Specialized government functions — military, national security and protective services.
• Workers’ compensation — as authorized by law.

Uses and disclosures that require your written authorization

We will obtain your written authorization before we:

• use or disclose your information for marketing purposes;
• use or disclose your photographs or images for advertising, before-and-after galleries, our website, or social media — clinical photography for your medical record is part of treatment, but any promotional use requires separate written authorization;
• sell your health information;
• use or disclose psychotherapy notes, where these exist.

Any other use or disclosure not described in this notice will be made only with your written authorization. You may revoke an authorization at any time, in writing, except to the extent we have already acted in reliance on it.

Massachusetts and other special protections

Some information receives stronger protection than HIPAA alone provides, and where state or other federal law is more protective, we follow that law. This includes information relating to HIV testing and status, mental health treatment, substance use disorder treatment records, genetic information, sexually transmitted infections, and reproductive health care. These generally require your specific written consent before disclosure.

Your rights regarding your health information

To exercise any of these rights, contact the Privacy Officer named below.

Our responsibilities

• We are required by law to maintain the privacy and security of your health information.
• We will let you know promptly if a breach occurs that may have compromised it.
• We must follow the duties and privacy practices described in this notice and give you a copy.
• We will not use or share your information other than as described here unless you tell us in writing that we may. If you tell us we may, you can change your mind at any time.

Changes to this notice

We may change this notice and make the new terms effective for all information we already hold as well as information we receive in future. The current notice will always be posted in our office and on this website, with its effective date shown.

Complaints

If you believe your privacy rights have been violated, you may complain to us using the contact details below, and you may file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.

Office for Civil Rights, U.S. Department of Health and Human Services, 200 Independence Avenue SW, Washington, D.C. 20201 · 1-877-696-6775 · hhs.gov/ocr/complaints

We will not retaliate against you for filing a complaint.

Contact

Effective date: October 20, 2026
This notice supersedes any Notice of Privacy Practices previously issued by the Practice.