HIPAA Notice of Privacy Practices

Conveniently located to serve San Ramon, Pleasanton, and surrounding areas

BlossomMD Medical Spa
Effective Date: January 1, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Protecting Your Health Information

BlossomMD understands that medical information about you and your health is personal. We are committed to protecting your Protected Health Information (PHI) and maintaining the privacy and security of your medical records while providing high-quality care.

Protected Health Information includes any information that:

• Identifies you
• Relates to your past, present, or future physical or mental health condition
• Relates to healthcare services provided to you
• Relates to payment for healthcare services

BlossomMD is required by law to:

• Maintain the privacy and security of your protected health information
• Provide you with this notice of our legal duties and privacy practices
• Follow the terms of the notice currently in effect
• Notify you if a breach occurs that may compromise your health information

How We May Use and Disclose Your Health Information

Your protected health information may be used and disclosed for the following purposes.

Treatment

We may use and share your health information to provide, coordinate, or manage your medical care.

Examples include:

• Reviewing your medical history before treatment
• Consulting with other medical professionals
• Referring you to another healthcare provider

Payment

We may use and disclose your information to obtain payment for healthcare services.

Examples include:

• Processing payments for services
• Submitting claims to insurance providers when applicable
• Billing and collection activities

Healthcare Operations

We may use your information for operational purposes necessary to run our practice.

Examples include:

• Quality improvement
• Staff training and credentialing
• Licensing or accreditation activities
• Administrative and business management

Appointment Reminders and Electronic Communication

We may contact you by phone, text message, email, or other electronic communication for purposes such as:

• Appointment reminders
• Treatment preparation instructions
• Follow-up care information
• Billing notifications
• Practice updates, promotions, special offers, educational content, or other marketing communications related to our services

You may opt out of promotional emails at any time by using the unsubscribe link included in the message. You may opt out of marketing text messages by replying STOP.

Standard messaging rates may apply depending on your mobile carrier. If you prefer to receive communications in a different way, please notify our office.

Clinical Photography

BlossomMD may photograph treatment areas for clinical documentation purposes. These images become part of your medical record and are protected under HIPAA.

Photographs used for marketing, educational, or promotional purposes will only be used with your written authorization.

Uses and Disclosures Required or Permitted by Law

We may disclose your protected health information when required or permitted by law, including:

• Public health activities
• Health oversight and regulatory audits
• Reporting abuse or neglect
• Legal proceedings such as court orders or subpoenas
• Law enforcement purposes
• Workers’ compensation claims
• Preventing serious threats to health or safety

Breach Notification

If a breach occurs involving your unsecured protected health information, BlossomMD will notify you as required by federal law.

Your Rights Regarding Your Health Information

You have the right to:

Access Your Records
You may request to inspect or obtain a copy of your health records.

Request Corrections
If you believe information in your record is incorrect or incomplete, you may request an amendment.

Request Restrictions
You may request limits on how your information is used or shared.

Request Confidential Communications
You may request that we contact you in a specific way (for example, by email only).

Receive an Accounting of Disclosures
You may request a list of certain disclosures of your health information.

Receive a Paper Copy of This Notice
You may request a printed copy of this notice at any time.

Changes to This Notice

BlossomMD reserves the right to update this Notice of Privacy Practices at any time. Updated versions will be posted on our website.

Complaints or Questions

If you believe your privacy rights have been violated or if you have questions about this notice, you may contact:

BlossomMD Medical Spa
Office Manager
21001 San Ramon Valley Blvd Unit D-4 Suite 126, 117
San Ramon, CA 94583

Email: [email protected]

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights:

https://www.hhs.gov/ocr/privacy/hipaa/complaints/

You will not be penalized or retaliated against for filing a complaint.