Effective Date: 10/26/2025

 

Introduction

 

Lade’ Med Spa, LLC (“we,” “us,” or “our”) respects and protects the privacy of our clients.  

ThisPrivacy Policy explains how we collect, use, disclose, and safeguard your personal and health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA)and other applicable privacy laws.

 

By using our website or services, you acknowledge and agree to the terms described herein.

 

Information We Collect

 

We may collect the following types of information from you when you visit our spa, schedule services, or use our online platforms:

 

Personal and Contact Information:

• Full name, address, phone number, email address

• Date of birth and emergency contact details

 

Health Information (Protected Health Information – PHI):

• Medical history, allergies, medications, and skincare details

• Treatment notes, photos, and consent forms

 

Financial and Technical Information:

• Payment details (processed through secure third-party systems)

• Website usage data such as IP address, browser type, and cookies.

 

Use of Information

 

We collect and use your information to:

• Schedule and manage your appointments

• Provide safe, personalized, and effective aesthetic treatments

• Maintain accurate medical and service records

• Process payments and issue receipts

• Communicate with you about your care, promotions, or updates

• Comply with federal, state, and professional regulatory requirements

 

HIPAA Compliance and Confidentiality

 

Lade’ Med Spa, LLC strictly adheres to HIPAA Privacy and Security Rules to ensure that allProtected Health Information (PHI) is handled securely and confidentially.

 

We will only use or disclose your PHI for the following purposes:

• Treatment: Sharing information with other healthcare providers involved in your care(with your written consent when required).

• Payment: Submitting claims or verifying benefits with insurance companies or payment processors.

• Healthcare Operations: Quality assurance, staff training, or business audits necessary for service improvement.

 

All staff members are trained on HIPAA regulations and are required to maintain confidentialityat all times. Unauthorized disclosure of patient information is strictly prohibited.

 

Forwarding of Records and Information

●      At your request, we may forward or release your treatment records, images, or consultation notes to another provider or entity.

This will only be done when:

• You complete and sign a HIPAA-compliant Release of Information form

• The recipient is verified

• The transfer is conducted securely (via encrypted email, secure fax, or sealed documentation).

 

We may also forward records when required by law, such as by court order or for public health reporting.

 

Data Security

 

We use administrative, technical, and physical safeguards to protect your information, including:

• Secure encrypted systems for digital records

• Password-protected software and user authentication

• Locked filing systems for paper documents

• Routine monitoring for unauthorized access

 

Although no system is 100% secure, we take every reasonable step to maintain the confidentiality and integrity of your information.

 

Retention of Information

 

We retain your personal and medical records for as long as required by law and for legitimate business purposes. Once retention requirements are met, records are destroyed safely and permanently.

 

Your Rights Under HIPAA

 

You have the right to:

• Request access to or a copy of your records

• Request amendments or corrections to your records

• Receive a list of disclosures of your PHI

• Request restrictions on how your PHI is used or disclosed

• Request communications through specific methods (e.g., email or phone)

• File a complaint if you believe your privacy rights have been violated

 

To exercise these rights, please contact us using the information below.

 

Cook and Online Data

Our website may use cookies and analytics tools to enhance user experience and track website performance. You can disable cookies in your browser settings, though some features may not function as intended.

 

Children’s Privacy

Our services are intended for adults (18 years and older). We do not knowingly collect personalor medical information from minors without parental or guardian consent.

 

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legalobligations. Any updates will be posted on our website with the new effective date.

 

Contact Us

If you have questions or concerns about this Privacy Policy or your HIPAA rights, please contact us: Lade’ Med Spa, LLC657 E Golf Road. Suite #305Arlington Heights, IL 60005

Email: Info@lademedspa.comPhone: 847-309-6467Website: www.lademedspa.com