Notice of Privacy Practices.

Effective Date: November 2025

Issued by: The Well Med Spa

Address: 2216 Newport Blvd, Costa Mesa, CA 92627

Phone: (949) 847-4442

Email: info@thewellspaoc.com

Your Privacy Rights

You have the right to:

- Get a copy of your health and billing records.

- Ask us to correct information you believe is wrong or incomplete.

- Request confidential communication (for example, by email, phone, or mail).

- Ask us to limit what information we share.

- Get a list of who we've shared your information with for certain purposes.

- Get a copy of this privacy notice at any time.

- Choose someone to act for you if you have a medical power of attorney.

- File a complaint if you believe your privacy rights have been violated.

Our Uses and Disclosures

We typically use or share your health information in the following ways:

1. Treatment

We may use and share your health information to provide and coordinate your care with your medical provider, nurse, or licensed aesthetic professional.

2. Payment

We may use and share your information to bill for services and collect payment from you or your health plan.

3. Health Care Operations

We may use and share information to run our business, improve your care, and contact you when necessary (for example, for appointment reminders, test results, or follow-ups).

Other Ways We May Use or Share Your Information

We are allowed or required to share your information in other ways-usually for the public good-such as:

- Reporting to public health authorities ( disease prevention, product recalls, etc.).

- Reporting suspected abuse, neglect, or domestic violence.

- Responding to legal requests, court orders, or law enforcement.

- Working with medical examiners or funeral directors if needed.

- Complying with health oversight agencies for audits, inspections, or licensing.

- Addressing workers' compensation, law enforcement, or national security situations

We will never sell your personal health information or use it for marketing without your written authorization.

Our Responsibilities

- We are required by law to maintain the privacy and security of your protected health information (PHI).

- We will notify you promptly if a breach occurs that may have compromised your information.

- We must follow the duties and privacy practices described in this notice.

- We will not use or share your information other than as described here unless you give us written permission.

Your Choices

For certain information, you can tell us your choices about what we share. For example:

- Marketing communications and promotions.

- Sharing your information with family, friends, or others involved in your care.

- Posting photos or testimonials on our website or social media (we will obtain written consent before doing so).

Electronic Communications

Emails, text messages, or contact forms sent through our website may not be fully secure unless sent through our encrypted patient portal. By using electronic communication, you acknowledge and accept this risk.

Questions or Complaints

If you have questions or wish to file a complaint, please contact:

Phone: (949) 847-4442

Email: info@thewellspaoc.com

Mail: 2216 Newport Blvd, Costa Mesa, CA 92627

You can also file a complaint directly with:

U.S. Department of Health & Human Services Office for Civil Rights

200 Independence Avenue, S.W.

Washington, D.C. 20201

Phone: (877) 696-6775

Website: https://www.hhs.gov/ocr /privacy /hipaa/complaints/

We will not retaliate against you for filing a complaint.

Acknowledgment of Receipt

You will be asked to sign a separate form acknowledging that you have received and reviewed this Notice of Privacy Practices.