Skip to main content

Patient Privacy

HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Effective Date
May 20, 2026
Last Updated
May 20, 2026

Premier Med Spa of Lake Oswego provides this Notice in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, as amended.

Contact Privacy Officer

Premier Med Spa of Lake Oswego

Effective Date: May 20, 2026
Last Updated: May 20, 2026

1. Our Commitment to Your Privacy

Premier Med Spa of Lake Oswego ("we," "us," or "our"), located at 8 N State St, Lake Oswego, OR 97034, is committed to protecting the privacy and security of your health information. This Notice of Privacy Practices ("Notice") describes how we may use and disclose your protected health information ("PHI") to carry out treatment, payment, and health care operations, and for other purposes that are permitted or required by law. It also describes your rights regarding your PHI and certain obligations we have regarding its use and disclosure.

"Protected health information" means individually identifiable information that relates to your past, present, or future physical or mental health or condition, the provision of health care to you, or the payment for that care, and that we create or receive in connection with providing services to you.

We are required by law to:

  • Maintain the privacy of your protected health information;
  • Provide you with this Notice of our legal duties and privacy practices with respect to your PHI;
  • Notify affected individuals following a breach of unsecured PHI; and
  • Abide by the terms of the Notice that is currently in effect.

This Notice applies to all records containing your PHI that we create, receive, or maintain.

2. How We May Use and Disclose Your Health Information

The following categories describe the ways we may use and disclose your PHI. Not every use or disclosure in a category is listed, but the uses and disclosures we are permitted to make will fall within one of these categories.

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your care and any related services. This includes sharing your PHI among the practitioners, technicians, staff, and other personnel who are involved in your care, and with other health care providers we may consult regarding your treatment. For example, we may use your PHI to document the services and products provided to you, to record your treatment history, and to communicate with another provider involved in your care.

Payment

We may use and disclose your PHI so that the treatment and services you receive may be billed and payment may be collected. For example, we may use your PHI to issue invoices and process payments, to verify a method of payment, to manage your account, and - where applicable - to determine eligibility or coverage, obtain prior authorization, or submit claims and supporting information to a health plan or other payer responsible for payment.

Health Care Operations

We may use and disclose your PHI in connection with our business operations. For example, we may use your PHI for quality assessment and improvement, to evaluate the performance of our staff, for training purposes, for licensing, accreditation, certification, and credentialing activities, for business planning and administration, for legal and auditing functions, and to resolve internal grievances.

Appointment Reminders, Treatment Alternatives, and Health-Related Services

We may use and disclose your PHI to contact you as a reminder that you have an appointment, including by phone call, voicemail, text message, email, or mailed notice. We may also contact you to tell you about or recommend possible treatment options or alternatives, or about health-related products, services, or benefits that may be of interest to you.

Individuals Involved in Your Care

Unless you object, we may disclose to a family member, relative, friend, or other person you identify the PHI that is directly relevant to that person's involvement in your care or in payment for your care. We may also use or disclose your PHI to notify, or assist in notifying, such a person of your location, general condition, or in an emergency.

Business Associates

We may disclose your PHI to third parties - called "business associates" - that perform services on our behalf, such as billing, IT, data hosting, recordkeeping, or administrative support. We require our business associates to appropriately safeguard your PHI through a written agreement before any PHI is shared with them.

3. Uses and Disclosures We May Make Without Your Authorization

We may use or disclose your PHI without your authorization in the following circumstances, subject to the requirements and limitations of applicable law:

  • As Required by Law. When the use or disclosure is required by federal, state, or local law.
  • Public Health Activities. To public health authorities for purposes such as preventing or controlling disease, injury, or disability; reporting adverse events, product defects, or problems with regulated products; and similar public health functions.
  • Victims of Abuse, Neglect, or Domestic Violence. To the appropriate government authority if we reasonably believe a person is a victim of abuse, neglect, or domestic violence, as permitted or required by law.
  • Health Oversight Activities. To a health oversight agency for activities authorized by law, including audits, investigations, inspections, and licensure actions.
  • Judicial and Administrative Proceedings. In response to a court or administrative order, subpoena, discovery request, or other lawful process, in accordance with applicable law.
  • Law Enforcement. To a law enforcement official for purposes permitted by law, such as responding to a lawful request, identifying or locating a suspect or witness, or reporting certain crimes.
  • Coroners, Medical Examiners, and Funeral Directors. As necessary to assist these parties in carrying out their duties.
  • Organ and Tissue Donation. To organizations that handle organ, eye, or tissue procurement or transplantation, where applicable.
  • Research. For research purposes when permitted by law, subject to a special approval process or other safeguards required by law.
  • To Avert a Serious Threat to Health or Safety. When necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
  • Specialized Government Functions.For activities such as military and veterans' activities, national security and intelligence activities, and protective services for the President and others.
  • Workers' Compensation.As authorized by and to the extent necessary to comply with laws relating to workers' compensation or similar programs.
  • Inmates. To a correctional institution or law enforcement official if you are an inmate, where permitted by law.

4. Uses and Disclosures That Require Your Written Authorization

Other than the uses and disclosures described in this Notice, we will not use or disclose your PHI without your written authorization. In particular, the following uses and disclosures require your written authorization:

  • Marketing. Most uses and disclosures of PHI for marketing purposes, as defined under HIPAA.
  • Sale of PHI. Any disclosure of your PHI that constitutes a sale of PHI.
  • Psychotherapy Notes. Most uses and disclosures of psychotherapy notes, to the extent we maintain any such notes.
  • Other Uses. Any other use or disclosure of your PHI not described in this Notice.

If you provide us with an authorization, you may revoke it in writing at any time, except to the extent we have already taken action in reliance on it. We will honor a revocation as required by law.

5. Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI. To exercise any of these rights, please submit your request in writing to our Privacy Officer using the contact information at the end of this Notice.

Right to Inspect and Copy

You have the right to inspect and obtain a copy of the PHI we maintain about you in a designated record set, including the right to request an electronic copy of electronically maintained records. We may charge a reasonable, cost-based fee as permitted by law. In limited circumstances, we may deny your request, and you may have the right to have certain denials reviewed.

Right to Request an Amendment

If you believe that PHI we maintain about you is incorrect or incomplete, you have the right to request that we amend it for as long as the information is kept by us. We may deny your request under certain circumstances, and we will provide you with a written explanation of the reason for any denial.

Right to an Accounting of Disclosures

You have the right to request an accounting of certain disclosures of your PHI made by us, as required by law. Your request must state a time period, which may not be longer than six years prior to the date of the request.

Right to Request Restrictions

You have the right to request a restriction or limitation on the PHI we use or disclose for treatment, payment, or health care operations, or to a person involved in your care. We are not required to agree to your request, except that we must agree to a request to restrict disclosure of PHI to a health plan for purposes of carrying out payment or health care operations if you (or someone other than the health plan on your behalf) have paid for the item or service in full out of pocket and the disclosure is not otherwise required by law.

Right to Request Confidential Communications

You have the right to request that we communicate with you about your PHI in a certain way or at a certain location - for example, by mail to a specified address or by phone at a specified number. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You have the right to obtain a paper copy of this Notice upon request, even if you have agreed to receive it electronically.

Right to Be Notified of a Breach

You have the right to be notified following a breach of your unsecured PHI, as required by law.

6. Our Duties

We are required by law to maintain the privacy and security of your PHI, to provide you with this Notice of our legal duties and privacy practices, to notify affected individuals following a breach of unsecured PHI, and to abide by the terms of the Notice that is currently in effect.

We reserve the right to change this Notice and to make the revised Notice effective for all PHI we maintain, including PHI we created or received before the change. If we make a material change to this Notice, we will post the revised Notice on our website and make a copy available upon request at our location.

7. Changes to This Notice

We reserve the right to change the terms of this Notice at any time. The Notice currently in effect will be posted at our website, https://go2medspa.com/, and a copy will be available at our office. The effective date of the current Notice is shown at the top of this page.

8. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer using the information below. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights.

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Toll-free: 1-877-696-6775
Online: https://www.hhs.gov/ocr/privacy/hipaa/complaints/

You will not be penalized or retaliated against in any way for filing a complaint.

9. This Notice, Our Website, and Online Technologies

This Notice governs protected health information that we create, receive, or maintain in our capacity as a health care provider. It does not govern the general operation of our public website at https://go2medspa.com/.

Our public website may use analytics and, in the future, advertising or marketing technologies (such as web analytics, conversion tracking, and similar tools) to help us understand and improve how our website is used. We do not use these technologies to collect your protected health information, and we do not knowingly disclose protected health information to analytics or advertising vendors. To the extent any online service we offer collects health information directly from you, that information is handled in accordance with this Notice and applicable law.

Information about cookies, analytics, advertising technologies, and the personal information we collect through our website generally will be addressed in our separate Privacy Policy and Cookie Policy.

10. State Law

Where applicable state law, including the laws of the State of Oregon, provides individuals with greater privacy protections or greater rights with respect to their health information than this Notice or federal law, we will comply with the more protective requirements of that state law.

11. For More Information or to Exercise Your Rights

If you have questions about this Notice, wish to exercise any of your rights, or would like to file a complaint, please contact our Privacy Officer:

Premier Med Spa of Lake Oswego - Privacy Officer
8 N State St
Lake Oswego, OR 97034
Phone: (503) 697-9777
Contact: https://go2medspa.com/contact

This Notice of Privacy Practices is provided in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, as amended.