Notice of Privacy Practices (HIPAA)

Effective Date: February 20, 2026

This Notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Our Responsibilities

PURE Medical Spa is required by law to maintain the privacy and security of your protected health information (“PHI”). We will notify you if a breach occurs that may have compromised the privacy or security of your information. We must follow the duties and privacy practices described in this Notice and give you a copy of it. We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

1. How We May Use and Disclose Your Health Information

The following describes the ways we may use and disclose health information that identifies you (“Health Information”). Except for the purposes described below, we will use and disclose Health Information only with your written permission. You may revoke such permission at any time by writing to our Privacy Officer.

Treatment

We may use and disclose your Health Information to provide, coordinate, or manage your health care and related services. This includes sharing information with other health care providers involved in your treatment.

Payment

We may use and disclose your Health Information to obtain payment for services we provide to you, including billing, insurance verification, and collections as permitted by law.

Health Care Operations

We may use and disclose your Health Information in connection with our health care operations, including quality assessment, staff training, accreditation, licensing, and other business management activities.

As Required by Law

We will disclose your Health Information when required to do so by federal, state, or local law, including for public health activities, reporting abuse or neglect, judicial and administrative proceedings, and law enforcement purposes.

Business Associates

We may share your Health Information with third-party “business associates” that perform services on our behalf (e.g., billing services, IT providers). We require these business associates to appropriately safeguard your information.

Any other use or disclosure of your Health Information not described in this Notice will be made only with your written authorization.

2. Your Rights Regarding Your Health Information

You have the following rights with respect to your Health Information. To exercise any of these rights, please submit a written request to our Privacy Officer (contact information below).

Right to Access: You may request to inspect or obtain a copy of your health records in paper or electronic form, as permitted by law.
Right to Request Amendment: If you believe your Health Information is incorrect or incomplete, you may request an amendment. If we deny your request, you may submit a written statement of disagreement.
Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your Health Information during a specified time period.
Right to Request Restrictions: You may request restrictions on how we use or disclose your Health Information for treatment, payment, or health care operations. We are not required to agree to your request except in limited circumstances required by law.
Right to Request Confidential Communications: You may ask us to contact you in a specific way or at a specific location. We will accommodate all reasonable requests.
Right to a Copy of This Notice: You may request a paper or electronic copy of this Notice at any time.
Right to Choose: You have the right to decide not to receive certain communications from us, including for treatment alternatives or health-related benefits and services.

3. Our Legal Duties

We are required by law to:

Maintain the privacy and security of your protected health information.
Provide you with this Notice of our legal duties and privacy practices with respect to your health information.
Notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
Follow the terms of the Notice currently in effect.

We reserve the right to change our privacy practices and the terms of this Notice at any time, provided such changes are permitted by applicable law. Before we make a significant change in our privacy practices, we will change this Notice and post the new Notice clearly on our website and in our office, and we will provide you with a copy upon request.

4. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you in any way for filing a complaint.

To file a complaint with us or to ask questions about this Notice, please contact our Privacy Officer:

Practice Name: PURE Medical Spa
Address: 3969 E. Overland Rd., Meridian, Idaho 83642
Phone: (208) 853-7873
Email: hello@puremedicalspaidaho.com

To file a complaint with the U.S. Department of Health and Human Services:
Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
Toll-free: 1-877-696-6775
Website: www.hhs.gov/ocr/privacy/hipaa/complaints

This Notice is effective as of February 20, 2026. PURE Medical Spa reserves the right to change this Notice and to make the revised or changed Notice effective for medical information we already have about you as well as any information we receive in the future.