Privacy policy

Novoskin Aesthetic Medicine

Effective Date: August 13, 2026
Last Updated: August 13, 2026

Novoskin Aesthetic Medicine ("Novoskin," "we," "our," or "us") is committed to protecting the privacy, confidentiality, and security of the personal and health information entrusted to us.

This Privacy Policy explains how we collect, use, maintain, protect, and disclose information obtained through our website, electronic communications, appointment systems, patient interactions, and other services.

As a medical practice, Novoskin is committed to complying, when applicable, with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), the Health Information Technology for Economic and Clinical Health Act ("HITECH"), and applicable federal and Puerto Rico privacy and healthcare laws.

1. INFORMATION WE MAY COLLECT

Depending on how you interact with Novoskin, we may collect information including:

Personal Information

·       Name

·       Date of birth

·       Mailing address

·       Email address

·       Telephone number

·       Emergency contact information

·       Appointment information

·       Payment and billing information

·       Communication preferences

Health and Medical Information

·       Medical history

·       Current and previous medications

·       Allergies

·       Diagnoses

·       Treatment history

·       Clinical notes

·       Photographs used for medical documentation

·       Treatment plans

·       Procedure information

·       Laboratory or diagnostic information, when applicable

·       Information necessary to evaluate whether a treatment or procedure is appropriate for you

Website and Technical Information

·       IP address

·       Browser and device type

·       Pages visited

·       Date and time of visits

·       Referring website

·       General interaction with our website

Certain individually identifiable health information may constitute Protected Health Information ("PHI") under HIPAA.

2. HOW WE USE YOUR INFORMATION

We may use information for the purposes listed below. When HIPAA applies, PHI is used or disclosed only as permitted or required by law.

·       Scheduling and managing appointments

·       Providing medical and aesthetic services

·       Evaluating treatment options

·       Maintaining medical records

·       Communicating regarding your care

·       Appointment confirmations and reminders

·       Processing payments

·       Responding to inquiries

·       Coordinating care

·       Operating and improving our practice

·       Maintaining patient safety

·       Legal, regulatory, and compliance requirements

·       Protecting system security

·       Other lawful purposes

3. HIPAA AND PROTECTED HEALTH INFORMATION

Novoskin protects the confidentiality of Protected Health Information (PHI). We may use or disclose PHI without separate authorization for treatment, payment, healthcare operations, and other purposes permitted or required by law. Other uses generally require written authorization unless otherwise permitted by law.

Treatment

·       Providing, coordinating, or managing your care.

Payment

·       Processing billing and payment for services.

Healthcare Operations

·       Quality improvement, training, compliance, auditing, and administration.

Legal Requirements

·       Public health, legal, regulatory, or emergency situations.

4. PATIENT RIGHTS UNDER HIPAA

When applicable, patients may have the following rights. Some rights may be subject to limitations or exceptions permitted by law.

·       Access medical records

·       Request corrections

·       Request restrictions

·       Request confidential communications

·       Request accounting of disclosures

·       Obtain the Notice of Privacy Practices

·       File complaints without retaliation

5. ELECTRONIC PROTECTED HEALTH INFORMATION (ePHI)

We implement reasonable administrative, physical, and technical safeguards designed to protect ePHI. These may include:

·       Access controls

·       Authentication systems

·       Encryption where appropriate

·       Secure storage

·       Monitoring systems

·       Staff training

·       Incident response procedures

No electronic system can be guaranteed to be completely secure.

6. BUSINESS ASSOCIATES

We may use third-party vendors for services including the following. When required by HIPAA, appropriate Business Associate Agreements (BAAs) are executed to protect PHI.

·       EMR systems

·       Scheduling

·       Billing

·       IT services

·       Cloud storage

·       Payment processing

7. ELECTRONIC COMMUNICATIONS

We may communicate regarding appointments and care through the following channels. Patients should avoid sending highly sensitive information through unsecured channels.

·       Email

·       Text messages

·       Phone

8. MARKETING COMMUNICATIONS

With consent where required, we may send the following. You may opt out at any time. We do not sell PHI in violation of HIPAA.

·       Practice updates

·       Educational content

·       Promotions

9. PHOTOGRAPHS AND MEDIA

Clinical photographs may be obtained and used for treatment documentation. Promotional use of identifiable photographs, videos, testimonials, or before-and-after images requires separate authorization when applicable. Refusal to authorize promotional use will not affect treatment.

10. WEBSITE FORMS

Website submissions are not always appropriate for sensitive medical information. A general website inquiry does not establish a physician-patient relationship. Medical emergencies should not be communicated through the website or social media.

11. SOCIAL MEDIA

Social media is not a secure channel for confidential medical communication. Patients should not submit PHI through public comments or other non-secure social media channels.

12. COOKIES AND TRACKING

We may use cookies, analytics tools, pixels, or similar technologies to improve website performance and understand visitor interaction. We do not intentionally disclose PHI to advertising or analytics platforms in a manner prohibited by HIPAA.

13. PAYMENT INFORMATION

Payments may be processed through third-party providers. Novoskin does not necessarily store complete payment-card information on its own systems.

14. INFORMATION SECURITY

We maintain reasonable safeguards designed to protect information against the following risks. Access to patient information is limited to authorized personnel with an appropriate need for access.

·       Unauthorized access

·       Loss

·       Misuse

·       Disclosure

·       Alteration

15. DATA BREACHES

We will investigate suspected or confirmed privacy and security incidents. If a breach involving unsecured PHI occurs, Novoskin will provide notifications to affected individuals, the U.S. Department of Health and Human Services, and other parties when required by applicable law.

16. RETENTION OF INFORMATION

Records are retained for periods required by applicable federal and Puerto Rico laws and regulations and according to legitimate clinical and business needs, then disposed of using reasonable methods designed to protect confidentiality.

17. CHILDREN AND MINORS

We comply with applicable federal and Puerto Rico laws regarding minors' health information, consent, confidentiality, and parental or legal guardian access.

18. THIRD-PARTY WEBSITES

Our website may contain links to independent third-party websites. Novoskin is not responsible for their privacy practices, content, or security.

19. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Revisions will be reflected by a new "Last Updated" date and material changes may be communicated through other appropriate means.

20. PRIVACY QUESTIONS OR COMPLAINTS

Questions or complaints regarding privacy practices or the handling of personal or health information may be directed to the Novoskin Privacy Officer. When applicable, patients may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). Novoskin will not retaliate against an individual for exercising privacy rights or filing a complaint.

Privacy Officer
Novoskin Aesthetic Medicine
Escorial Building One, Suite 270
Carolina, Puerto Rico
Phone: 939-365-4933
Website: www.novoskinpr.com

21. NOTICE OF PRIVACY PRACTICES

This website Privacy Policy supplements, but does not replace, Novoskin's HIPAA Notice of Privacy Practices (NPP). The NPP provides additional information about uses and disclosures of PHI and patient rights under HIPAA and is available upon request.

22. CONTACT INFORMATION

Novoskin Aesthetic Medicine
Escorial Building One, Suite 270
Carolina, Puerto Rico
Phone: 939-365-4933
Website: www.novoskinpr.com

 

Effective Date: August 13, 2026