Privacy Policy at Contour Medical Spa in Northridge, Los Angeles, CA

Contour Medical Spa
SMS opt-in consent and phone numbers for the purpose of SMS are not being shared with any third parties under any circumstances.

HIPAA and California Privacy Policy
At Contour Medical Spa, we respect your privacy and are committed to safeguarding the confidentiality of your personal and medical information. This Privacy Policy describes how we collect, use, protect, and share your personal information, including Protected Health Information (PHI), in compliance with the Health Insurance Portability and Accountability Act (HIPAA), the California Consumer Privacy Act (CCPA), and the California Privacy Rights Act (CPRA).

1. Introduction
As a medical spa, we provide both medical and aesthetic services, which means we collect and maintain sensitive personal health information (PHI). We comply with federal and state laws to protect your information, and we are committed to ensuring that your rights are respected. This policy explains how we handle your data, how we protect your privacy, and how you can exercise your rights.

2. Information We Collect
We collect the following categories of personal information:

A. Protected Health Information (PHI)
PHI includes any information related to your health or the provision of healthcare services, including:

Medical records (health history, diagnoses, treatments, and test results).
Appointment details (scheduled treatments, follow-ups, and care plans).
Payment information (billing details and insurance claims).

B. Personal Information Under CCPA/CPRA
In addition to PHI, we may also collect personal information, including:

Identifiers: Name, address, phone number, email address.
Demographic Information: Age, gender, etc.
Payment Information: Credit card number, billing address, and payment history.
Internet or Network Activity: Browsing history, search history, and interactions with our website or app.
We will only collect the minimum amount of information necessary for the purposes outlined in this Privacy Policy.

3. How We Use and Disclose Your Information
We may use and disclose your information for the following purposes:

A. Treatment
We use your PHI to provide you with medical services, including consultations, treatments, and follow-up care. We may share your PHI with other healthcare providers involved in your care.

B. Payment
We use your PHI for billing, payment, and collection purposes, including working with your insurance provider.

C. Healthcare Operations
We may use your information for administrative purposes such as audits, quality assessments, training, and business management.

D. Legal and Regulatory Compliance
We may use or disclose your PHI to comply with applicable laws and regulations, including responding to subpoenas, court orders, or health investigations.

E. Marketing
If you have opted in to receive marketing communications, we may use your contact information for promotional purposes. We will not sell or share your information for marketing purposes without your explicit consent.

F. Third-Party Service Providers
We will not share your information with third-party service providers (such as billing services, IT providers, or cloud storage vendors). At Contour Medical Spa, we value your trust and are committed to safeguarding your personal information. We have a strict policy in place to ensure that any information you provide to us remains private and secure.

• No Sharing of Data: We do not share, sell, rent, or trade your personal information with any third-party service providers or external organizations.
• Use of Information: Any information you provide is used solely to deliver our services, manage appointments, and communicate with you directly.
• Data Security: Your data is stored securely using industry-standard encryption and security measures to prevent unauthorized access.

We believe in transparency and take pride in maintaining your confidence by upholding the highest privacy standards. Should you have any questions about our policy, feel free to contact us at info@contourmedspa.com 310.893.0552.

SMS opt-in consent or phone numbers for SMS purposes will NOT be shared with third parties and affiliates for marketing purposes. You can opt out of receiving SMS messages at any time. To do so, simply reply “STOP” to any SMS message you receive. Alternatively, you can contact us directly to request removal from our messaging list. 7- Help: If you are experiencing any issues, you can reply with the keyword HELP. Or, you can get help directly from us at (we need a help page under contact).

4. Your Rights Regarding Your Information
Under HIPAA and California privacy laws, you have several important rights regarding your personal information:

A. Right to Access
You have the right to request access to your PHI and to obtain copies of your medical records. We will provide this information within 15 days of your request, as required by HIPAA.

B. Right to Correct
You have the right to request corrections or amendments to your PHI if you believe that any information is inaccurate or incomplete.

C. Right to Request Restrictions
You can request that we restrict the use or disclosure of your PHI for certain purposes. We are not required to agree to all requests, but we will consider them and inform you of our decision.

D. Right to Confidential Communications
You have the right to request that we communicate with you in a certain way, such as through encrypted email or secure phone lines, if you have concerns about the privacy of communication.

E. Right to Opt-Out of Marketing Communications
You have the right to opt-out of receiving marketing communications. If you no longer wish to receive these communications, you can unsubscribe from email marketing or notify us directly.

F. Right to Delete
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the right to request that we delete your personal information, subject to certain exceptions (e.g., if the information is required for medical or legal purposes).

G. Right to an Accounting of Disclosures
You can request a list of all disclosures of your PHI made by us for purposes other than treatment, payment, and healthcare operations.

H. Right to File a Complaint
If you believe we have violated your privacy rights, you can file a complaint with us or with the U.S. Department of Health and Human Services or the California Attorney General.

5. How We Protect Your Information
We take the protection of your PHI and personal information seriously. We have implemented the following safeguards:

Physical Safeguards: Secured premises and restricted access to areas where PHI is stored.
Technical Safeguards: Use of encryption, secure servers, and audit logs to track access to electronic PHI.
Administrative Safeguards: Staff training, policies, and procedures to ensure compliance with HIPAA and California privacy laws.

6. Data Retention and Deletion
We retain your personal and health information for as long as needed to fulfill the purposes outlined in this Privacy Policy and in compliance with applicable laws, such as the retention of medical records for a minimum of 7 years under California law. After this period, your information will be securely disposed of, in accordance with HIPAA and California data privacy laws.

7. Business Associate Agreements (BAAs)
We ensure that third-party vendors who handle PHI on our behalf sign a Business Associate Agreement (BAA). These agreements require our service providers to maintain the privacy and security of your PHI in compliance with HIPAA and state laws.

8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, HIPAA regulations, or California privacy laws. Any updates will be posted on our website, and we will notify you of material changes. You can always view the latest version of this policy by visiting our website.

9. Contact Information
If you have any questions about this Privacy Policy or wish to exercise any of your rights under HIPAA, the CCPA, or the CPRA, please contact us at:

Contour Medical Spa
Email: info@contourmedspa.com
Phone: 310-893-0552
Address: 18641 Devonshire St Northridge CA 91324
Website: https://contourmedspa.com
California Attorney General
Website: https://oag.ca.gov/privacy
Phone: 1-800-952-5225

10. Complaints
If you believe that we have violated your privacy rights, you can file a complaint with us or the U.S. Department of Health and Human Services:

U.S. Department of Health and Human Services
Office for Civil Rights
Phone: 1-800-368-1019
Website: www.hhs.gov/ocr

Terms of Use

This practice website is offered to you conditioned on your acceptance without modification of the terms, conditions, and notices contained herein. Your use of this practice website constitutes your agreement to all such terms, conditions, and notices.

Collection of your Personal Information

We do not share any mobile device information with third parties or affiliates for marketing or promotional purposes.

We are committed to protecting your privacy and developing technology that gives you safe online experience. This Statement of Privacy applies to our practice’s website and governs data collection and usage. By using this website, you consent to the data practices described in this statement.

Modification of These Terms of Use

This practice reserves the right to change the terms, conditions, and notices under which this practice website is offered, including but not limited to the charges associated with the use of this practice website.

Links to Third Party Sites

This practice website may contain links to other websites (“Linked Sites”). The Linked Sites are not under the control of this practice and this practice is not responsible for the contents of any Linked Site, including without limitation any link contained in a Linked Site, or any changes or updates to a Linked Site. This practice is not responsible for webcasting or any other form of transmission received from any Linked Site. This practice is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by this practice of the site or any association with its operators.

No Unlawful or Prohibited Use

As a condition of your use of this practice website, you warrant to this practice that you will not use this practice website for any purpose that is unlawful or prohibited by these terms, conditions, and notices. You may not use this practice website in any manner which could damage, disable, overburden, or impair this practice website or interfere with any other party’s use and enjoyment of this practice website. You may not obtain or attempt to obtain any materials or information through any means not intentionally made available or provided for through this practice website.

Use of Communication Services

This practice website may contain bulletin board services, chat areas, news groups, forums, texts/SMS, instant messaging, ChatBot, communities, personal web pages, calendars, and/or other message or communication facilities designed to enable you to communicate with the public at large or with a group (collectively, “Communication Services”), you agree to use the Communication Services only to post, send and receive messages and material that are proper and related to the particular Communication Service. By way of example, and not as a limitation, you agree that when using a Communication Service, you will not:

• Defame, abuse, harass, stalk, threaten or otherwise violate the legal rights (such as rights of privacy and publicity) of others.- Publish, post, upload, distribute or disseminate any inappropriate, profane, defamatory, infringing, obscene, indecent or unlawful topic, name, material or information.

• Upload files that contain software or other material protected by intellectual property laws (or by rights of privacy of publicity) unless you own or control the rights thereto or have received all necessary consents.- Upload files that contain viruses, corrupted files, or any other similar software or programs that may damage the operation of another’s computer.

• Advertise or offer to sell or buy any goods or services for any business purpose, unless such Communication Service specifically allows such messages.- Conduct or forward surveys, contests, pyramid schemes or chain letters.

• Download any file posted by another user of a Communication Service that you know, or reasonably should know, cannot be legally distributed in such manner.- Falsify or delete any author attributions, legal or other proper notices or proprietary designations or labels of the origin or source of software or other material contained in a file that is uploaded.- Restrict or inhibit any other user from using and enjoying the Communication Services.

• Violate any code of conduct or other guidelines which may be applicable for any particular Communication Service.- Harvest or otherwise collect information about others, including e-mail addresses, without their consent.- Violate any applicable laws or regulations.

This practice has no obligation to monitor the Communication Services. However, this practice reserves the right to review materials posted to a Communication Service and to remove any materials in its sole discretion. This practice reserves the right to terminate your access to any or all of the Communication Services at any time without notice for any reason whatsoever. Materials uploaded to a Communication Service may be subject to posted limitations on usage, reproduction and/or dissemination. You are responsible for adhering to such limitations if you download the materials.

Liability Disclaimer

THE INFORMATION, SOFTWARE, PRODUCTS, AND SERVICES INCLUDED IN OR AVAILABLE THROUGH THIS PRACTICE WEB SITE MAY INCLUDE INACCURACIES OR TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN. THIS PRACTICE AND/OR ITS SUPPLIERS , WEBSITE MANAGEMENT COMPANY, MAY MAKE IMPROVEMENTS AND/OR CHANGES IN THIS PRACTICE WEB SITE AT ANY TIME. ADVICE RECEIVED VIA THIS PRACTICE WEB SITE SHOULD NOT BE RELIED UPON FOR PERSONAL, MEDICAL, LEGAL OR FINANCIAL DECISIONS AND YOU SHOULD CONSULT AN APPROPRIATE PROFESSIONAL FOR SPECIFIC ADVICE TAILORED TO YOUR SITUATION. THIS PRACTICE AND/OR ITS SUPPLIERS MAKE NO REPRESENTATIONS ABOUT THE SUITABILITY, RELIABILITY, AVAILABILITY, TIMELINESS, AND ACCURACY OF THE INFORMATION, SOFTWARE, PRODUCTS, SERVICES AND RELATED GRAPHICS CONTAINED ON This Practice WEB SITE FOR ANY PURPOSE. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ALL SUCH INFORMATION, SOFTWARE, PRODUCTS, SERVICES AND RELATED GRAPHICS ARE PROVIDED “AS IS” WITHOUT WARRANTY OR CONDITION OF ANY KIND. THIS PRACTICE AND/OR ITS SUPPLIERS HEREBY DISCLAIM ALL WARRANTIES AND CONDITIONS WITH REGARD TO THIS INFORMATION, SOFTWARE, PRODUCTS, SERVICES AND RELATED GRAPHICS, INCLUDING ALL IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THIS PRACTICE AND/OR ITS SUPPLIERS BE LIABLE FOR ANY DIRECT, INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF USE, DATA OR PROFITS, ARISING OUT OF OR IN ANY WAY CONNECTED WITH THE USE OR PERFORMANCE OF THIS PRACTICE WEB SITE, WITH THE DELAY OR INABILITY TO USE THIS PRACTICE WEB SITE OR RELATED SERVICES, THE PROVISION OF OR FAILURE TO PROVIDE SERVICES, OR FOR ANY INFORMATION, SOFTWARE, PRODUCTS, SERVICES AND RELATED GRAPHICS OBTAINED THROUGH THIS PRACTICE WEB SITE, OR OTHERWISE ARISING OUT OF THE USE OF THIS PRACTICE WEB SITE, WHETHER BASED ON CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE, EVEN IF THIS PRACTICE OR ANY OF ITS SUPPLIERS HAS BEEN ADVISED OF THE POSSIBILITY OF DAMAGES. BECAUSE SOME STATES/JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU. IF YOU ARE DISSATISFIED WITH ANY PORTION OF THIS PRACTICE WEB SITE, OR WITH ANY OF THESE TERMS OF USE, YOUR SOLE AND EXCLUSIVE REMEDY IS TO DISCONTINUE USING THIS PRACTICE WEB SITE.

Legal Notices

All contents or any work-product of this website are owned by respective owners and any 3^rd party is not authorized to copy the content or any work-product.

The names of actual companies and products mentioned herein may be the trademarks of their respective owners. The example companies, organizations, products, people and events depicted herein are fictitious. No association with any real company, organization, product, person, or event is intended or should be inferred. Any rights not expressly granted herein are reserved.

Notices

Should you have any questions or concerns regarding our terms & conditions, please contact us:
by phone at (310) 893-0552 or by registered mail at 18641 Devonshire Street Northridge, CA 91324.

*In case of a life threatening emergency, immediately call 911.

**For any medical procedures, clients may respond to treatment differently, each client’s results may vary.

***Information on this site is not intended or implied to be a substitute for professional medical advice, diagnosis, or treatment. All content contained on or available through this site is for general information purposes only.

****By using this website and sending us your information, you are giving us permission to contact you by electronic and non-electronic means. We also track the conversions and collect user data to improve marketing.

*****If you are vision-impaired or have some other impairment covered by the Americans with Disabilities Act or a similar law, and you wish to discuss potential accommodations related to using this website, please contact us.