Privacy Policy Effective Date: 03/15/2025 At MD Esthetics Woburn (“we,” “us,” or “our”), your privacy is important to us. This Privacy Policy outlines how we collect, use, and protect your information, including Protected Health Information (“PHI”), in accordance with the Health Insurance Portability and Accountability Act (“HIPAA”) and other applicable laws. 1. Use and Disclosure of Protected Health Information (PHI) We may collect and use PHI you provide through our website contact forms, appointment requests, or other communications. PHI includes any individually identifiable health information related to your past, present, or future physical or mental health condition, the provision of healthcare, or payment for that care. We may use your PHI for: Treatment (e.g., sharing information with medical staff) Payment (e.g., billing or claims processing) Healthcare operations (e.g., internal quality assurance, compliance) We will not use or disclose your PHI for any other purpose without your explicit written authorization, unless required or permitted by law. 2. Patient Rights Regarding PHI As a patient, you have the following rights regarding your PHI: Right to Access – You can request to view or receive a copy of your medical records. Right to Amend – You can request corrections to your records if you believe they are inaccurate or incomplete. Right to an Accounting of Disclosures – You may request a list of certain disclosures of your PHI we have made. Right to Request Restrictions – You may ask us to limit how we use or share your PHI for treatment, payment, or operations. Right to Confidential Communications – You can request that we contact you in a specific way (e.g., only by email or phone). Right to a Copy of This Notice – You may request a paper or electronic copy of this privacy policy at any time. Right to File a Complaint – If you believe your privacy rights have been violated, you can file a complaint with us or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint. 3. Our Responsibilities We are required by law to: Maintain the privacy and security of your PHI Provide you with this notice of our legal duties and privacy practices Abide by the terms of our current privacy policy Notify you if a breach occurs that may have compromised the privacy or security of your information 4. Data Security We take reasonable and appropriate measures to protect your PHI from unauthorized access, use, or disclosure, including the use of secure web forms, encrypted communications, and internal access controls. 5. Website Information and Cookies We may use cookies or similar technologies to improve user experience on our website. However, these do not collect PHI unless you voluntarily provide it via a form. 6. Contact Information – Privacy Official If you have any questions about this Privacy Policy or would like to exercise your rights, please contact: Jessica Smith MD Esthetics Woburn 103 Commerce Way C, Woburn, MA 01801 Phone: (781) 933-9339 Email: mdestheticswoburn@gmail.com