Privacy Policy

This privacy policy describes how medical information about you can be used and disclosed, and how you can get access to this information. Please review carefully, and if you have any questions about this privacy policy, please contact us.

Who will follow this Privacy Policy

This section describes Austin Face & Body’s practices and how we share your information with others for treatment, payment, and health care operations purposes.

• Any health care professional authorized to enter information into your facility chart
• All departments and units of Austin Face & Body
• Any member of a volunteer group allowed to help you while you are at Austin Face & Body
• All employees, staff, agents, and other Austin Face & Body personnel
• Health care providers and their authorized representatives who are members of Austin Face & Body’s organized health care arrangement. These health care providers and their authorized representatives will be operationally and/or clinically integrated with Austin Face & Body, or will otherwise be permitted by law to receive your information. For example, to the extent permitted by law and in accordance with our policies, Austin Face & Body will share your medical information with doctors who are members of the Austin Face & Body medical staff, even if the doctor is not employed by Austin Face & Body
• All entities, sites, and locations within Austin Face & Body’s system will follow the terms of this privacy policy. They also may share medical information with each other for treatment, payment, and health care operations purposes

Our pledge regarding medical information

We understand that medical information about you and your health care is personal. We are committed to protecting medical information about you. A record is created of the care and services you receive at Austin Face & Body. This record is needed to provide the necessary care and to comply with legal requirements. This privacy policy applies to all of the records of your care generated by Austin Face & Body. Your personal doctor may have different policies or notices regarding the doctor’s use and disclosure of your medical information in the doctor’s office or clinic.

This privacy policy will tell about the ways in which Austin Face & Body may use and disclose medical information about you. Also described are your rights and certain obligations we have regarding the use and disclosure of medical information.

The law requires Austin Face & Body to:

• Make sure that medical information that identifies you is kept private
• Inform you of our legal duties and privacy practices with respect to medical information about you

How Austin Face & Body may use and disclose your medical information

Except with respect to highly-confidential information (described below), we are permitted to use your health information for the following purposes:

• Treatment. Your medical information may be used to provide you with medical treatment or services. This medical information may be disclosed to doctors, nurses, technicians, and others involved in your care at Austin Face & Body, including employees, volunteers, students, and interns at our facility. This includes using and disclosing your information to treat your condition, to contact you to provide appointment reminders, or to give you information about treatment options or other health-related benefits and services that may interest you.
  
  
• Payment. Your medical information may be used and disclosed so that the treatment and services received at Austin Face & Body may be billed and payment may be collected from you, your insurance company, and/or a third party. Please note that we will comply with your request not to disclose your health information to your insurance company if the information relates solely to a health care item or service for which you have paid out-of-pocket and in full to us. This restriction does not apply to the use or disclosure of your health information for your medical treatment.
  
  
• Health care operations. Your medical information may be used and disclosed for purposes of furthering day-to-day facility operations. These uses and disclosures are necessary to run Austin Face & Body, and to monitor the quality of care our patients receive. For example, subject to any limitations described in this notice, your medical information may be:

1. Reviewed to evaluate the treatment and services performed by our staff in caring for you.
2. Combined with that of other facility patients to decide what additional services Austin Face & Body should offer, what services are not needed, and whether certain new treatments are effective.
3. Disclosed to doctors, nurses, technicians, and other agents of Austin Face & Body for review and learning purposes.
4. Disclosed to healthcare students, interns, and residents.
5. Combined with information from other facilities to compare how we are doing and see where we can improve the care and services offered. Information that identifies you in this set of medical information may be removed so others may use it to study health care and health care delivery without knowing who the specific patients are.

• Individuals involved in your care. With your permission, your medical information may be released to a family member, guardian, or other individuals involved in your care. They may also be told about your condition, unless you have requested additional restrictions. In addition, your medical information may be disclosed to an entity assisting in a disaster relief effort so your family can be notified about your condition, status, and location.
  
  
• Research. Under certain circumstances, your medical information may be used and disclosed for research purposes. For example: A research project may involve comparing the health and recovery of all patients who received one medication to those who received another, for the same conditions. All research projects, however, are subject to a special approval process. This process evaluates a proposed research project and its use of medical information, balancing the research needs with the patient’s need for privacy of his or her medical information. Your medical information may be disclosed to people preparing to conduct a research project. For example, helping them look for patients with specific medical needs, so long as the medical information they review does not leave Austin Face & Body. We will almost always ask for your specific permission if the researcher will have access to your name, address, or other information that reveals who you are, or will be involved in your care at Austin Face & Body.
  
  
• Marketing activities. We may, without obtaining your authorization and so long as we do not receive payment from a third party for doing so, 1) provide you with marketing materials in a face-to-face encounter, 2) give you a promotional gift of nominal value, or 3) tell you about our own health care products and services. We will ask your permission to use your health information for any other marketing activities.
  
  
• Appointment reminders. Your medical information may be used to contact you as a reminder of an appointment you have for treatment or medical care at Austin Face & Body.
  
  
• Treatment alternatives. Your medical information may be used to tell you about, or recommend, possible treatment options or alternatives that may be of interest to you.
  
  
• Health-related benefits and services. Your medical information may be used to tell you about health-related benefits or services that may be of interest to you.
  
  
• Participation in health information exchanges. We may participate in one or more health information exchanges (HIEs), and may electronically share your health information for treatment, payment, and permitted healthcare operations purposes with other participants in the HIE, including entities that may not be listed under “Who Will Follow This Privacy Policy” on the first page of this policy. Depending on state law requirements, you may be asked to opt-in in order to share your information with HIEs, or you may be provided the opportunity to opt-out of HIE participation. HIEs allow your health care providers to efficiently access and use your pertinent medical information necessary for treatment and other lawful purposes. We will not share your information with an HIE unless both the HIE and its participants are subject to HIPAA’s privacy and security requirements.
  
  
• As required by law. Your medical information will be disclosed when required to do so by federal, state, or local authorities, laws, rules and/or regulations.
  
  
• Lawsuits and disputes. If you are involved in a lawsuit or a dispute, your medical information will be disclosed in response to a court or administration order, subpoena, discovery request, or other lawful process by someone else involved in the dispute when we are legally required to respond.
  
  
• Law enforcement. Your medical information will be released if requested by a law enforcement official:

1. In response to a court order, subpoena, warrant, summons, or similar process
2. To identify or locate a suspect, fugitive, material witness, or missing person
3. About the victim of a crime if, under certain limited circumstances, we are unable to obtain the person’s agreement
4. About a death we believe may be the result of criminal conduct
5. In emergency circumstances to report a crime, the location of the crime or victims, or the identity, description, or location of the person who committed the crime

• National security and intelligence activities. Your medical information will be released to authorized federal officials for intelligence, counter-intelligence, and other national security activities authorized by law.
  
  
• Protective services for the President and others. Your medical information may be disclosed to authorized federal officials so they may provide protection to the President, other authorized persons or foreign heads of state, or conduct special investigations.
  
  
• To alert a serious threat to health or safety. Your medical information may be used and disclosed when necessary to prevent a serious threat to your health and safety and that of the public or another person. Any disclosure, however, would only be to someone able to help prevent the threat.
  
  
• Health oversight activities. Your medical information may be disclosed to a health oversight facility for activities authorized by law. These oversight activities include, for example, audits, investigations, inspections, and licensure. These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws.

Special Situations

• Organ and tissue donation. If you are an organ or tissue donor, your medical information may be released to organizations that handle organ procurement or organ, eye, and tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.
  
  
• Military and veterans. If you are a member of the armed forces, your medical information may be released as required by military command authorities. If you are a member of the foreign military personnel, your medical information may be released to the appropriate foreign military authority.
  
  
• Workers’ compensation. If you seek treatment for a work-related illness or injury, we must provide full information in accordance with state-specific laws regarding workers’ compensation claims. Once state-specific requirements are met and an appropriate written request is received, only the records pertaining to the work-related illness or injury may be disclosed.
  
  
• Public health risk. Your medical information may be used and disclosed for public health activities. These activities generally include the following:

1. To prevent or control disease, injury, or disability
2. To report births and deaths
3. To report child abuse or neglect
4. To report reactions to medications or problems with products
5. To notify people of recalls of products they may be using
6. To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition
7. To notify the appropriate government authority if we believe a patient has been the victim of abuse, neglect, or domestic violence (we will only make this disclosure if you agree or when required or authorized by law)

• Coroners, medical examiners, and funeral directors. Your medical information may be released to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also release medical information about patients of Austin Face & Body to funeral directors as necessary to carry out their duties.
  
  
• Inmates. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release medical information about you to the correctional institution or law enforcement official. This release would be necessary for the following reasons:

1. For the institution to provide you with health care
2. To protect the health and safety of you and others
3. For the safety and security of the correctional institution

Highly-confidential information

Federal and/or state law requires special privacy protections for certain highly-confidential information about you, including your health information that is maintained in psychotherapy notes. Similarly, Federal and/or state law may provide greater protections for the following types of information than HIPAA, in which case we will comply with the law that provides your information with the greatest protection and you with the greatest privacy rights: (1) mental health and developmental disabilities, (2) alcohol and drug abuse prevention, treatment and referral, (3) HIV/AIDS testing, diagnosis or treatment, (4) communicable diseases, (5) genetic testing, (6) child abuse and neglect, (7) domestic or elder abuse, and/or (8) sexual assault. In order for your highly-confidential information to be disclosed for a purpose other than those permitted by law, your written authorization is required.

Your written authorization

We will first obtain your written authorization before using or disclosing your protected health information for any purpose not described above, including disclosures that constitute the sale of protected health information or for marketing communications paid for by a third party (excluding refill reminders, which the law permits without your authorization). If you provide Austin Face & Body permission to use or disclose your medical information, you may revoke that permission, in writing, at any time. If you revoke your permission, we will no longer use or disclose your medical information for the reasons covered in your written authorization. You understand that we are unable to take back any disclosures already made with your permission, and that we are required to retain our records of the care that Austin Face & Body provided to you.

Additional information concerning this Privacy Policy

• Changes to this Privacy Policy: We reserve the right to change this privacy policy and make the revised or changed policy effective for medical information we already have about you, as well as any information we receive in the future. We will post a current copy of the privacy policy with the effective date. In addition, each time you register at or are admitted to Austin Face & Body for treatment or health care services as an inpatient or outpatient, we will offer you a copy of the current notice in effect.
  
  
• Complaints: You will not be penalized for filing a complaint. If you believe your privacy rights have been violated, you may file a complaint with Austin Face & Body or with the Secretary of the Department of Health and Human Services. Some states may allow you to file a complaint with State’s Attorney General, Office of Consumer Affairs, or other state agency as specified by applicable state law. To file a complaint with Austin Face & Body, submit your complaint to Austin Face & Body’s Privacy Officer in writing. The Privacy Officer can provide you with contact information for the Secretary of the Department of Health and Human Services, as well as the state agency or agencies authorized to accept your complaints.

Your rights regarding your medical information

You have the following rights regarding medical information Austin Face & Body maintains about you. Please note that all requests must be submitted in writing to Austin Face & Body.

• Right to request access to your health information. You have the right to timely inspect and copy medical information that may be used to make decisions about your care. Such access will be granted by Austin Face & Body in accordance with applicable law. To inspect and copy medical information or to receive an electronic copy of the medical information that may be used to make decisions about you, you must submit a written request. If you request a paper copy of your information, we may charge a fee for the cost of copying, mailing, or other supplies associated with your request. If Austin Face & Body uses or maintains an electronic health record with respect to your medical information, you have the right to obtain an electronic copy of the information if you so choose.

1. You may direct Austin Face & Body to transmit the copy to another entity or person that you designate provided the choice is clear, conspicuous, and specific.
2. Austin Face & Body may charge a fee equal to its labor cost in providing the electronic copy (e.g., costs may include the cost of a flash drive, if that is how you request a copy of your information be produced). If you request an electronic copy of your information, we will provide the information in the format requested if it is feasible to do so.

We may deny your request to inspect and copy in some limited circumstances. If you  are denied access to medical information, you may request that the denial be reviewed. Another licensed health care professional, other than the person who denied your request, will be chosen by Austin Face & Body to review your request and the denial. We will comply with the outcome of the review.

1. A licensed health care professional has determined, in the exercise of professional judgment, that the access requested is reasonably likely to endanger the life or physical safety of the individual or another person.
2. The protected health information makes reference to another person (unless such other person is a health care provider) and a licensed health care professional has determined, in the exercise of professional judgment, that the access requested is reasonably likely to cause substantial harm to such other person.
3. The request for access is made by the individual’s personal representative, and a licensed health care professional has determined, in the exercise of professional judgment, that the provision of access to such personal representative is reasonably likely to cause substantial harm to the individual or another person. 

• Right to amend. If you feel that any medical information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment to information kept by or for Austin Face & Body. Except where individual state laws are more stringent, Austin Face & Body has a minimum of 60 days to act on your request. To request an amendment, you must submit a written request. You must also provide a reason that supports your request. Your request for an amendment may be denied if:

1. Your request is not in writing or does not include a reason to support the request
2. The medical information was not created by us, unless the person or entity that created the information is no longer available to make the amendment
3. The medical information is not part of the medical information kept by or for Austin Face & Body
4. The medical information is not part of the information you would be permitted to inspect and copy
5. The medical information is accurate and complete

• Right to an accounting of disclosures. You have the right to request an “accounting of disclosures”. This is a list of the disclosures we made of your medical information for purposes other than treatment, payment, and health care operations. Except where individual state laws are more stringent, Austin Face & Body has a minimum of 60 days to act on your request. To request this list or accounting of disclosures:

1. You must submit your request in writing
2. Your request must state a time period, which may not be longer than six years and may not include dates before January 1, 2020
3. Your request should indicate in what form you want the list (for example, on paper, electronically).

The first list you request within a 12-month period will be free. For additional lists, we may charge you for the costs of providing the list. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time, before any costs are incurred.

• Right to request restrictions. You have a right to request a restriction or limitation on the medical information we use or disclose about you for treatment, payment, or health care operations. You also have the right to request a limit on the medical information we disclose about you to someone who is involved in your care or the payment for your care, such as a family member. To request restrictions, you must make your request in writing. In your request, you must tell us:

1. What information you want to limit
2. Whether you want to limit our use, disclosure, or both
3. To whom you want the limits to apply; for example, disclosures to your spouse

You also have a right to request that a health care item or service not be disclosed to your health plan for payment purposes or health care operations. We are required to honor your request if the health care item or service is paid out-of-pocket and in full. This restriction does not apply to use or disclosure of your health information related to your medical treatment.

• Right to request confidential communication. You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you can ask that we only contact you at work or by mail. To request confidential communications, you must make your request in writing. We will not ask you the reason for your request. We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted.
  
  
• Right to be notified of breach. We will notify you if we discover a breach of your unsecured protected health information.
  
  
• Right to a paper copy of this Privacy Policy. You have the right to a copy of this notice. You may ask us to give you a copy at any time. Even if you have agreed to receive this notice electronically, you are still entitled to a paper copy of this notice.

Privacy Policy for austinfaceandbody.com

Your privacy is important to us. It is Austin Face & Body’s policy to respect your privacy regarding any information we may collect from you across our website, austinfaceandbody.com, and any other sites we own and operate.

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.

We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use, or modification.

We don’t share any personally identifying information publicly or with third-parties, except when required to by law.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.

You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us.

This policy is effective as of January 1, 2020.