HIPAA

Notice of Privacy Practices

Effective: June 24, 2026

The Vitality & Aesthetics Institute, PLLC ("TVAAI," "we," "us") is required by law to maintain the privacy of your protected health information ("PHI"), to give you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect.

How we may use and disclose your health information

Treatment

We use and disclose your PHI to provide, coordinate, and manage your care — for example, sharing information with providers, nurses, laboratories, and the pharmacies (including Revive Rx and other licensed pharmacies) that prepare and dispense your medications.

Payment

We use and disclose your PHI to obtain payment for services — for example, to process payments through our payment processor, to support patient financing you apply for, and to document services rendered.

Health care operations

We use and disclose your PHI for operations such as quality assessment, staff training, scheduling, business management, and contacting you about appointments and care.

Business associates

We may share PHI with third parties ("business associates") that perform services for us — such as our practice-management platform (Prospyr), IT and hosting providers, and dispensing pharmacies — under written agreements requiring them to protect your information.

Appointment reminders and communications

We may contact you by phone, text, or email with appointment reminders and information about treatment options or health-related services. With your consent, we may also send promotional messages; you may opt out of these at any time (reply STOP to texts, or use the unsubscribe link in emails).

As required or permitted by law

We may use or disclose your PHI when required by law; for public health and safety activities; to health oversight agencies; for judicial and law-enforcement purposes as permitted; for workers' compensation; and to avert a serious threat to health or safety. Most other uses — including most marketing and any sale of PHI — require your written authorization, which you may revoke at any time.

Your rights regarding your health information

• Access and copies. You may inspect and obtain a copy of your PHI, including an electronic copy of electronic records.
• Amendment. You may request that we correct PHI you believe is inaccurate or incomplete.
• Accounting of disclosures. You may request a list of certain disclosures we have made.
• Restrictions. You may request limits on how we use or disclose your PHI. You may also request that we not share information with your health plan about care you paid for in full out of pocket, and we will honor that request as required by law.
• Confidential communications. You may ask us to contact you in a specific way or at a specific location.
• Paper copy. You may obtain a paper copy of this Notice at any time.
• Breach notification. You have the right to be notified following a breach of unsecured PHI.

To exercise any of these rights, contact our Privacy Officer using the information below.

Our duties

We are required to maintain the privacy of your PHI, provide this Notice, follow its terms, and notify you of breaches of unsecured PHI. We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have and for information we receive in the future. The current Notice will be posted on our websites and available at our office.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr. We will not retaliate against you for filing a complaint.