Pitch. by Bonfire | A Duda Website Template

NOTICE OF PRIVACY PRACTICES

Effective Date: August 25, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Rimi Med & Aesthetics, PLLC is committed to protecting the privacy and security of your protected health information ("PHI"). PHI includes information that identifies you and relates to your past, present, or future physical or mental health condition, healthcare services, or payment for healthcare.

We are required by law to maintain the privacy and security of your PHI, provide you with this Notice of our legal duties and privacy practices, notify you following certain breaches of unsecured PHI, and follow the terms of the Notice currently in effect.

YOUR RIGHTS

You have certain rights regarding your health information.

Get an Electronic or Paper Copy of Your Medical Record

You may ask to see or obtain an electronic or paper copy of your medical record and other health information we maintain about you.

We generally will provide a copy or summary within the time required by applicable law. We may charge a reasonable, cost-based fee as permitted by law.

Ask Us to Correct Your Medical Record

You may ask us to amend health information about you that you believe is incorrect or incomplete.

We may deny your request in certain circumstances, but if we do, we will provide you with a written explanation as required by law.

Request Confidential Communications

You may ask us to contact you in a specific manner or at a specific location, such as calling a particular telephone number or sending correspondence to a different address.

We will accommodate reasonable requests as required by law.

Ask Us to Limit What We Use or Share

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

We generally are not required to agree to every requested restriction. However, if we agree, we will comply with the restriction except as otherwise permitted or required by law.

If you pay for a healthcare service or item completely out of pocket, you may ask us not to disclose information about that service to your health plan for payment or healthcare operations. We will honor that request unless disclosure is required by law.

Receive an Accounting of Certain Disclosures

You may request a list of certain disclosures of your PHI made during the six years before the date of your request.

The accounting will not include certain disclosures, including many disclosures made for treatment, payment, healthcare operations, or disclosures made pursuant to your authorization.

We will provide one accounting in a 12-month period without charge. We may charge a reasonable, cost-based fee for additional requests within the same 12-month period.

Get a Copy of This Notice

You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

This Notice is also available on our website at:

https://www.rimimed.com/privacy

Choose Someone to Act for You

If you have given someone medical power of attorney, if someone is your legal guardian, or if another person is legally authorized to act on your behalf, that person may exercise your privacy rights as permitted by law.

We may verify that person's authority before acting on a request.

File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with Rimi Med & Aesthetics using the contact information below.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

Rimi Med & Aesthetics will not retaliate against you for filing a privacy complaint.

YOUR CHOICES

For certain types of health information, you may tell us your preferences regarding what we disclose.

You may tell us whether or how you want us to:

Share information with family members, friends, caregivers, or others involved in your care or payment for your care.
Share information during a disaster-relief situation.
Communicate with individuals involved in your healthcare when appropriate.

If you are unable to communicate your preference, such as during an emergency, we may disclose information when we believe doing so is in your best interest and is permitted by law.

We may also disclose information when necessary to prevent or lessen a serious and imminent threat to health or safety.

Uses Requiring Written Authorization

Except where otherwise permitted by law, we will obtain your written authorization before:

Using your PHI for certain marketing purposes.
Selling your PHI.
Disclosing most psychotherapy notes, if applicable.

We will not use patient photographs, treatment images, testimonials, before-and-after photographs, or other identifiable patient information for advertising, social media, or promotional purposes unless we have obtained an appropriate authorization when required.

If you provide written authorization, you generally may revoke it in writing at any time. Revocation will not affect actions already taken in reliance on your authorization.

HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

We may use and disclose your PHI without your written authorization when permitted or required by law.

Treatment

We may use and disclose your health information to provide, coordinate, or manage your healthcare.

For example, we may share relevant information with:

Physicians
Pharmacies
Laboratories
Imaging facilities
Specialists
Hospitals
Other healthcare professionals involved in your treatment

We may also use your information for telehealth, medication management, care coordination, treatment planning, clinical documentation, and follow-up care.

Healthcare Operations

We may use and disclose your health information to operate our practice and improve the quality of care we provide.

Examples may include:

Quality assessment and improvement
Patient safety
Staff training
Credentialing
Compliance activities
Auditing
Legal and professional services
Technology and electronic health record operations
Secure clinical documentation systems
Business management and administrative activities

We may use qualified vendors and business associates to assist us with these activities. When HIPAA requires a Business Associate Agreement, we require the business associate to appropriately safeguard PHI.

Payment and Financial Activities

Rimi Med & Aesthetics generally operates as a cash-pay practice and does not routinely bill health insurance directly.

However, we may use or disclose PHI for permitted payment-related purposes, including:

Processing payments
Maintaining billing records
Collecting outstanding balances
Preparing superbills or reimbursement documentation requested by patients
Coordinating permitted payment-related activities

Appointment Reminders and Healthcare Communications

We may contact you regarding:

Appointments
Follow-up care
Laboratory results
Medication-related matters
Treatment recommendations
Administrative matters related to your care

Communications will be handled according to our communication policies and applicable privacy and security requirements.

OTHER USES AND DISCLOSURES PERMITTED OR REQUIRED BY LAW

We may use or disclose PHI in other circumstances permitted or required by law.

Public Health and Safety

We may disclose information for certain public-health and safety activities, including:

Preventing or controlling disease
Reporting adverse reactions to medications or products
Assisting with product recalls
Reporting suspected abuse, neglect, or domestic violence when authorized or required by law
Preventing or reducing a serious threat to health or safety

Health Oversight Activities

We may disclose PHI to health oversight agencies for activities authorized by law, including audits, investigations, inspections, licensure activities, and compliance reviews.

Research

We may use or disclose health information for research when permitted by applicable law and appropriate safeguards or approvals are in place.

Required by Law

We may disclose health information when federal, state, or local law requires us to do so.

If applicable state law provides greater privacy protection than HIPAA, we will follow the more protective law.

Judicial and Administrative Proceedings

We may disclose PHI in response to certain court orders, administrative orders, subpoenas, discovery requests, or other lawful legal processes, subject to applicable legal protections.

Law Enforcement

We may disclose PHI for certain law-enforcement purposes when permitted or required by law.

Workers' Compensation

We may disclose PHI as authorized by and to the extent necessary to comply with workers' compensation laws or similar programs.

Coroners, Medical Examiners, and Funeral Directors

We may disclose PHI to coroners, medical examiners, and funeral directors when permitted or required by law.

Organ and Tissue Donation

We may disclose health information to organizations involved in organ, eye, or tissue donation and transplantation when applicable.

Special Government Functions

We may disclose health information for certain authorized government functions, including military, veterans' activities, national security, protective services, and other functions permitted by law.

SUBSTANCE USE DISORDER RECORDS

To the extent Rimi Med & Aesthetics receives or maintains substance use disorder patient records that are protected by 42 CFR Part 2, additional federal confidentiality protections may apply.

Such Part 2 records generally may not be used or disclosed in civil, criminal, administrative, or legislative investigations or proceedings against the patient based on the content of those records without the patient's written consent or an appropriate court order and subpoena as required by applicable law.

When Part 2 protections apply, Rimi Med & Aesthetics will handle those records in accordance with applicable federal requirements.

MINORS AND PERSONAL REPRESENTATIVES

A parent, legal guardian, or other legally authorized representative may exercise privacy rights on behalf of a minor or another individual when permitted by applicable law.

There are circumstances in which applicable state or federal law may allow a minor to consent to specific healthcare services or may restrict a parent's or representative's access to certain health information. Rimi Med & Aesthetics will follow applicable law in determining access.

ELECTRONIC HEALTH INFORMATION AND PATIENT PORTAL

Rimi Med & Aesthetics may maintain health information electronically through our electronic medical record and other approved healthcare technology systems.

Patients may be given access to secure electronic communication or a patient portal.

Patients should use the secure patient portal or other practice-approved secure method for communications containing medical information whenever possible.

General website contact forms are not intended for the transmission of PHI or detailed medical information.

BREACH NOTIFICATION

We are required by law to notify you following a breach of unsecured protected health information when notification is required under applicable law.

OUR RESPONSIBILITIES

Rimi Med & Aesthetics:

Is required by law to maintain the privacy and security of your PHI.
Will notify affected individuals following breaches when notification is legally required.
Must follow the privacy practices described in the Notice currently in effect.
Will not use or disclose your information other than as described in this Notice unless you authorize us in writing or another use or disclosure is permitted or required by law.
Will comply with applicable federal and state privacy requirements.

CHANGES TO THIS NOTICE

We reserve the right to change the terms of this Notice and our privacy practices.

Changes may apply to PHI we already maintain as well as information we receive in the future.

When we make a material change, the revised Notice will be available upon request, in our office, and on our website.

QUESTIONS OR COMPLAINTS

For questions regarding this Notice, your privacy rights, or to file a complaint with Rimi Med & Aesthetics, please contact:

Privacy Officer:
Madeleine Nicole Rodriguez, MSN, APRN, FNP-C
Rimi Med & Aesthetics, PLLC
3101 Clays Mill Rd, Suite 104
Lexington, KY 40503
Phone: 859-838-1537
Email: info@rimimed.com
Website: www.rimimed.com

You may also submit a complaint to the:

U.S. Department of Health and Human Services
Office for Civil Rights

Rimi Med & Aesthetics will not retaliate against any individual for exercising privacy rights or filing a complaint.

2. PATIENT ACKNOWLEDGMENT/LINKING

The acknowledgment itself will be completed electronically through our patient consent/EMR, but I am including the language below so you understand how this website page will be used:

ACKNOWLEDGMENT OF RECEIPT OF NOTICE OF PRIVACY PRACTICES

I acknowledge that I have received or been provided electronic access to Rimi Med & Aesthetics, PLLC's Notice of Privacy Practices at: