Policies

Purpose
At Bare Bliss Laser and Electrolysis, we are committed to maintaining the privacy and confidentiality of all client information, including health and personal details. As a healthcare provider and med spa, we are required to comply with the Health Insurance Portability and Accountability Act (HIPAA) to protect your sensitive data.

This policy outlines the practices we follow to ensure that all personal health information (PHI) is handled in accordance with HIPAA regulations.

1. Definition of Protected Health Information (PHI)
Protected Health Information (PHI) refers to any information that relates to a client’s physical or mental health, treatment, or payment for services received at Bare Bliss Laser and Electrolysis, and that can be used to identify the individual. This includes, but is not limited to:

• Personal details such as name, address, phone number, email, and date of birth
• Medical history, diagnosis, and treatment plans
• Payment details for services rendered

2. Privacy and Confidentiality
We ensure that your PHI is kept confidential by implementing the following:

• PHI is stored securely and only accessible to authorized personnel.
• All employees are trained on HIPAA compliance and the importance of confidentiality.
• Access to PHI is granted based on the "need to know" principle to ensure that only necessary staff members are privy to this information.
• Paper records containing PHI are stored in locked, secure areas. Electronic records are stored in password-protected systems with encryption.

3. Client Consent and Authorization
Before any treatment is provided, clients will be required to sign a consent form that outlines how their PHI will be used and disclosed. Clients may also provide written authorization for specific disclosures of their PHI to third parties (such as insurance providers or referring physicians) as necessary for treatment or billing purposes.

4. Use and Disclosure of PHI
PHI may be used or disclosed for the following purposes:

• Treatment: To provide and manage services, including sharing information with other healthcare providers involved in your care.
• Payment: For billing and insurance purposes, including submitting claims to insurance providers for covered services.
• Healthcare Operations: To improve the quality of our services, perform administrative tasks, and assess treatment outcomes.
• Legal Requirements: If required by law, PHI may be disclosed to governmental agencies or other entities as mandated by federal or state laws.

5. Safeguarding PHI
We employ physical, administrative, and technical safeguards to protect PHI, including:

• Secure and encrypted communication methods (email, phone, and online forms).
• Password protection and secure login protocols for any electronic records systems.
• Training programs for all staff on how to handle and protect PHI.

6. Client Rights Under HIPAA
As a client, you have the following rights regarding your PHI:

• Right to Access: You have the right to inspect and obtain a copy of your PHI held by us.
• Right to Amend: You have the right to request corrections to any inaccurate or incomplete PHI.
• Right to Restrict: You can request restrictions on how your PHI is used or disclosed, though certain restrictions may not be granted depending on legal or operational limitations.
• Right to Confidential Communication: You can request that we communicate with you in a specific manner or at an alternative location.
• Right to an Accounting of Disclosures: You may request a record of any disclosures of your PHI made outside of routine treatment, payment, or healthcare operations.

7. Breach Notification
In the event of a breach of PHI, we will notify affected clients as soon as possible, in compliance with HIPAA's breach notification requirements. Affected individuals will be informed of the nature of the breach and any actions they may need to take.

8. Contacting Us for Privacy Concerns
If you have questions or concerns about our privacy practices, or if you wish to exercise your rights under HIPAA, please contact us directly at:

Bare Bliss Laser and Electrolysis
Barebliss25@gmail.com 

(513) 917-5940

9. Changes to This Policy
We may update this policy from time to time to reflect changes in our privacy practices or legal requirements. Any changes to this policy will be communicated to clients, and a revised version will be available upon request.

By following these policies, we aim to ensure that your personal health information is protected while providing you with the highest quality of care. Thank you for choosing Bare Bliss Laser and Electrolysis!