Jeuje Aesthetics & Wellness
HIPAA Compliance & Patient Privacy Policy

Purpose

Jeuje Aesthetics & Wellness is committed to maintaining the privacy and confidentiality of your protected health information (PHI)…

1. Patient Rights Under HIPAA
   Patients have the right to access, request corrections, receive notice of privacy practices, request restrictions, request confidential communications, and file complaints.
2. What is Protected Health Information (PHI)?
   PHI includes any health information that can identify you…
3. How We Use and Disclose PHI
   Your PHI may be used or disclosed for treatment, payment, operations, legal compliance, emergencies, and public health, never for marketing without consent.
4. HIPAA Compliance for In-Person Appointments
   Check-ins are private, records are securely stored in Aesthetic Record, physical security is enforced, and photo use requires consent.
5. HIPAA Compliance for Telemedicine Appointments
   Telehealth uses HIPAA-compliant platforms via Aesthetic Record, location and identity are verified, and all communications are encrypted.
6. Administrative Safeguards
   Role-based access, EHR audits, and mandatory staff HIPAA training.
7. Physical Safeguards
   Secured devices, locked storage, and restricted office access.
8. Technical Safeguards
   Encrypted EHR, secure email, and encrypted telehealth communications.
9. Data Breach Notification
   Patients and HHS are notified within 60 days of a breach.
10. Patient Acknowledgment and Consent
    Patients review and sign our Notice of Privacy Practices and authorize PHI use as described.
11. Complaints and Contact Information
    Complaints may be submitted to our Privacy Officer or the HHS OCR.
12. Policy Review and Updates
    Policy is reviewed and updated annually for compliance.