NOTICE OF PRIVACY PRACTICES

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Introduction

Novuskin Denver is a medical spa providing aesthetics treatment and care in Greenwood Village, Colorado. Each health care provider at our location may share health information with the doctors and other health care providers who care for you, for treatment, payment, and health care operations. Those operations may include quality improvement, risk management, financial and billing services, and health information exchanges.

This notice uses the words "protected health information (PHI)" or "health information." Those words are defined in the HIPAA regulations. In simple terms, your protected health information is information about you and your healthcare that we use and disclose for your treatment and payment for your care, and for our healthcare operational purposes. It includes basic identifying information like your name, address, age, race, phone number, as well as information in your medical records and billing records. PHI can be oral, or in paper or electronic formats.

Who must follow this notice?

We provide you, the patient, with health care by working with doctors and many other health care providers (referred to as we, our or us). This is a joint notice of our information privacy practices. The following people or groups will follow this notice:

  • All Novuskin Denver members, including clinics, back office services, agencies, and outpatient services.

  • Any health care provider who comes to our location to care for you. These professionals include doctors, nurses, technicians, and physician assistants.

  • All departments and units of our organization.

  • Our employees, students and volunteers.

Our pledge to you

We understand that your protected health information is private and personal. We are committed to protecting it. Clinics, doctors and staff members make a record each time you visit. This notice applies to all of the records of your care at the facility, whether created by staff members or your doctor. Your doctor and other health care providers may have different practices or notices about their use and sharing of protected health information in their own offices or clinics that are not affiliated with Novuskin Denver. We will gladly explain this notice to you or your family member.

We pledge to:

  • Keep your protected health information private.

  • Give you this notice describing our legal duties and privacy practices for your protected health information.

  • Notify you as outlined in state and federal law if a breach of your unsecured protected health information has occurred.

  • Follow the terms of the notice that is currently in effect.

How we may use and share your protected health information

This section of our notice tells how we may use and share your protected health information, including sharing electronically. In situations not covered by this notice or otherwise allowed by law and regulation, we will get a separate written permission from you before we use or share your protected health information. You can later cancel your permission by notifying us in writing.

We will protect your protected health information as much as we can under the law. Sometimes state law gives more protection to your information than federal law. Sometimes federal law gives more protection than state law. In each case, we will apply the laws that protect your information the most.

Treatment. We will use and share your protected health information, both internally and externally, to provide you with health care treatment and to coordinate or manage your treatment with other health care providers. An example is sending medical information about you to your doctor or to a specialist as part of a referral. We may also share your information with other types of health care providers after you leave our facility, such as pharmacies, home health agencies, specialty hospitals, or long-term care facilities.

Payment. We will use and share your protected health information so we can be paid for treating you. An example is giving information about you to your health plan or to Medicare. We may also need to give information to your health plan to get approval for certain services or to find out if your plan will pay for certain treatment. We may also share your health information with other health care providers involved in your healthcare, such as your personal physician, anesthesiologist, or ambulance services, so that they may receive payment for their services. We may also give your healthcare information to individuals who are responsible for payment for your treatments, such as the named family or friend or your treatment/health insurance payer.

Health Care Operations. We will use and share your medical information for our health care operations. A few examples are using information about you for:

  • Improving the quality of care we give you.

  • Disease management, wellness, or population health programs.

  • Patient surveys.

  • Training students.

  • Business planning and administration.

  • Resolving patient complaints.

  • Getting or keeping our accreditation.

  • Compliance and legal services.

We may also share your protected health information with people or companies (called business associates) we use to help us with our operations.

Family Members, Personal Representatives, and Others Involved in Your Care. Unless you tell us otherwise, we may share your protected health information with your friends, family members, or others you have named who help with your care or who can make decisions on your behalf about your health care. Also, if you cannot agree due to an emergency, we may share needed protected health information with your family or friends who are involved in your care, based on professional judgment of what is in your best interest. In rare instances, even without your permission, we may share your information with others if the physician or health care provider feels it is in your best interest.

Electronic Sharing and Pooling of Your Information. We may take part in or make possible the electronic sharing or pooling of healthcare information. The most common way we do this is through local or regional health information exchanges (HIEs). Two other types of HIEs we participate in are described in the next two sections. HIEs help doctors, hospitals and other healthcare providers within a geographic area or community provide quality care to you. If you travel and need medical treatment, HIEs allow other doctors or hospitals to electronically contact us about you. All of this helps us manage your care when more than one doctor is involved. It also helps us to keep your health bills lower (avoid repeating lab tests). And finally, it helps us to improve the overall quality of care provided to you and others. We are involved in national health reform efforts and may use and share information as permitted to achieve regional or national goals, including regional or nationally approved population health management or wellness initiatives.

State-Based Health Information Exchange. This facility may participate in statewide internet-based HIE. As permitted by law, your health information will be shared through the HIE to provide faster access, better coordination of care, and to assist healthcare providers, health plans, and public health officials in making more informed decisions. To opt in or out of the HIE, you must notify the HIE yourself. To obtain the HIE contact information, please contact the facility director.

Research. We may use and share your protected health information for research projects, such as studying the effectiveness of a treatment you received. We will usually get your written permission to use or share your information for research. Under certain circumstances, we may share your protected health information without your written permission. These research projects, however, will be approved by a special committee that protects the confidentiality of your medical information.

Appointment Reminders. We may contact you by phone, email or text messaging with appointment reminders.

Internet Based Products and Services. Working with third parties, we may share your health information so we can offer you internet-based products or services. Using the products or services, you can:

  • Schedule appointments.

  • Reduce wait times in our rooms.

  • Find a physician or get access to your medical information through a portal.

Treatment Options and Health-Related Benefits and Services. We may contact you about possible treatment options, health-related benefits or services that we offer.

Health Education and Health Programs. We may send you newsletters or brochures or contact you about health-related information, disease management programs, wellness programs, or other local programs that you might want.

[ADDITIONAL SECTIONS REQUIRED — see notes. A complete Notice of Privacy Practices must also include: uses and disclosures requiring your written authorization (marketing, sale of PHI, psychotherapy notes); disclosures required or permitted by law (public health, law enforcement, court orders, workers' compensation, abuse or neglect reporting, coroners, organ donation, military and national security); Your Rights (access, amendment, accounting of disclosures, request restrictions, confidential communications, paper copy, right to be notified of a breach); Changes to This Notice; and Complaints, including contact information for the practice and for the U.S. Department of Health and Human Services.]

Contact

Novuskin Denver 8200 E Belleview Ave Ste 100E Greenwood Village, CO 80111 (720) 779-3392

PRIVACY POLICY

This privacy policy ("Policy") describes how Novuskin Denver ("Novuskin Denver," "we," "us" or "our") collects, protects and uses the personally identifiable information ("Personal Information") you ("User," "you" or "your") may provide on the novuskindenver.com website and any of its products or services (collectively, "Website" or "Services"). It also describes the choices available to you regarding our use of your Personal Information and how you can access and update this information. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

Collection of personal information

We receive and store any information you knowingly provide to us when you fill out any online forms on the Website. You can choose not to provide us with certain information, but then you may not be able to take advantage of some of the Website's features. Users who are uncertain about what information is mandatory are welcome to contact us.

Automatic collection of information

When you visit the Website our servers automatically record information that your browser sends. This data may include information such as your device's IP address, browser type and version, operating system type and version, language preferences or the webpage you were visiting before you came to our Website, pages of our Website that you visit, the time spent on those pages, information you search for on our Website, access times and dates, and other statistics.

Use of collected information

Any of the information we collect from you may be used to personalize your experience; improve our Website; improve customer service and respond to queries and emails of our customers; run and operate our Website and Services. Non-Personal Information collected is used only to identify potential cases of abuse and establish statistical information regarding Website usage. This statistical information is not otherwise aggregated in such a way that would identify any particular user of the system.

Privacy of children

We do not knowingly collect any Personal Information from children under the age of 13. If you are under the age of 13, please do not submit any Personal Information through our Website or Service. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide Personal Information through our Website or Service without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Information to us through our Website or Service, please contact us. You must also be old enough to consent to the processing of your personal data in your country (in some countries we may allow your parent or guardian to do so on your behalf).

How we share your information

We do not sell your Personal Information. We share it only in the following circumstances:

Service providers. We work with companies that perform services on our behalf, such as website hosting, appointment scheduling and patient records, payment processing, email and text message delivery, and marketing and analytics. These companies receive only the information they need to perform their function and are not permitted to use it for their own purposes.

Advertising and analytics partners. We use third-party advertising and measurement services to understand how our Website is used and to show our ads to people who may be interested in our services. See "Cookies and tracking technologies" below.

Legal and safety. We may disclose information when required by law, subpoena, or court order; to protect our rights, property, or safety, or that of our patients or the public; or in connection with an investigation of suspected fraud or illegal activity.

Business transfers. If Novuskin Denver is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

Protected health information is handled separately. Health information you provide as a patient is governed by our Notice of Privacy Practices and applicable federal and state health privacy law, not by this Policy.

Cookies and tracking technologies

Our Website uses cookies and similar technologies — including pixels, tags, and local storage — to operate the site, remember your preferences, measure how the site performs, and deliver and measure advertising.

We currently use the following:

Essential and functional. Set by our website platform (Squarespace) and our booking system (Zenoti). These are required for the site to function, to keep your session secure, and to let you schedule an appointment. They cannot be turned off.

Analytics. Google Analytics 4. Tells us how many people visit the site, which pages they view, how they arrived, and where they leave. Used in aggregate to improve the site.

Advertising and measurement. Google Ads and the Meta Pixel (Facebook and Instagram). These allow us to measure whether an ad led to a website visit or a booking, to avoid showing ads to people who have already booked, and to show relevant ads to people who have visited our Website. Information collected may include your IP address, device and browser information, the pages you viewed on our site, and actions you took, such as clicking to book.

We do not send your name, contact information, medical history, treatment details, or any other protected health information to advertising or analytics partners.

Your choices. Most browsers let you block or delete cookies through their settings. Blocking essential cookies may prevent parts of the Website, including online booking, from working. You can also opt out of interest-based advertising directly:

Global Privacy Control. Our Website recognizes and honors the Global Privacy Control (GPC) signal. If your browser or extension sends a GPC signal, we will treat it as a request to opt out of the sale or sharing of your Personal Information for targeted advertising.

Data retention

We keep Personal Information only as long as needed for the purposes described in this Policy, or as required by law. Patient medical records are retained in accordance with Colorado and federal record retention requirements.

Data security

We use commercially reasonable administrative, technical, and physical safeguards to protect your Personal Information against loss, misuse, and unauthorized access or disclosure. This includes encrypted transmission of information submitted through our Website and restricted access to systems containing personal or health information.

No method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. If we learn of a security breach affecting your information, we will notify you as required by applicable law.

Links to other websites

Our Website may contain links to other websites we do not own or control, including our booking system, patient portal, and social media pages. This Policy does not apply to those websites. We encourage you to review the privacy policy of any site you visit through a link from ours.

Your rights and choices

You may:

  • Request access to the Personal Information we hold about you.

  • Request that we correct information that is inaccurate.

  • Request that we delete your Personal Information, subject to any legal obligation we have to retain it.

  • Opt out of the processing of your Personal Information for targeted advertising.

  • Unsubscribe from marketing email at any time using the link in any message, or from marketing text messages by replying STOP.

Colorado residents may have additional rights under the Colorado Privacy Act, including the right to appeal a denied request. To exercise any of these rights, contact us using the information below. We will respond within the timeframe required by law. We will not discriminate against you for exercising these rights.

Requests relating to your medical records or other protected health information are handled under our Notice of Privacy Practices rather than this Policy.

Changes to this policy

We may update this Policy from time to time. When we do, we will revise the effective date at the top of this page. If we make material changes, we will provide additional notice, such as posting a notice on our Website. Your continued use of the Website after changes take effect means you accept the revised Policy.

Contact

If you have questions about this Policy, or want to exercise any of the rights described above:

Novuskin Denver 8200 E Belleview Ave Ste 100E Greenwood Village, CO 80111 (720) 779-3392