Effective Date: 10/05/2025
Last Updated: 9/01/2026

Overview

Joyful Beauty NP (“we,” “our,” or “us”) is committed to protecting the privacy and confidentiality of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our practice, use our services, or interact with our website.

As a healthcare provider, we are required to comply with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy laws. This policy outlines your rights regarding your protected health information (PHI) and our legal obligations.

Information We Collect

Medical Information

• Personal identification information (name, address, phone number, email, date of birth, Social Security number)
• Medical history and current health status
• Treatment records and clinical notes
• Photographs (before/after treatment photos, with your written consent)
• Insurance information and billing records
• Emergency contact information

Website and Digital Information

• IP address and browser information
• Website usage data and cookies
• Online appointment requests and form submissions
• Email communications
• SMS/text messages
• Social media interactions (if you choose to connect with us)

How We Use Your Information

Medical Care and Treatment

• Providing medical and aesthetic treatments
• Coordinating care with other healthcare providers
• Monitoring your response to treatments
• Managing follow-up care and appointments

Practice Operations

• Scheduling appointments and sending reminders
• Billing and insurance processing
• Quality improvement and patient safety initiatives
• Staff training and practice management
• Legal and regulatory compliance

Marketing and Communications (With Your Consent)

• Sending information about new services or treatments
• Educational materials about aesthetic procedures
• Practice newsletters and updates
• Special offers and promotions
• Before/after photos for marketing (only with explicit written consent)

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We do not sell, rent, transfer, or otherwise disclose SMS consent, mobile opt-in information, or text messaging originator data to third parties or affiliates for their marketing or promotional purposes.

This restriction applies specifically to mobile numbers, SMS opt-in information, and messaging consent and takes precedence over any general information-sharing provisions elsewhere in this Privacy Policy.

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may disclose certain personal information to service providers or other parties as described below when necessary to provide services, operate our practice, comply with legal obligations, or with your authorization.

Notwithstanding anything else in this Privacy Policy, mobile information, SMS opt-in data, and text messaging consent will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be sold, rented, transferred, or shared with any third parties, except as expressly permitted for subcontractors that provide services supporting our messaging program.

With Your Written Authorization

• Sharing treatment photos for marketing purposes
• Coordinating care with other healthcare providers you specify
• Any other use not covered by this policy

Required by Law

• Court orders or legal proceedings
• Public health reporting requirements
• Medical emergencies where disclosure is necessary to protect your health
• Law enforcement investigations when legally required

Service Providers and Business Associates

We may use third-party service providers to support our practice operations, including:

• Medical laboratories
• Billing and payment processing providers
• Scheduling and communication platforms
• Information technology and hosting providers
• Legal and accounting professionals
• Other vendors that provide operational or administrative services

Where required by HIPAA, we enter into appropriate Business Associate Agreements and require applicable service providers to safeguard protected health information.

Mobile information, SMS opt-in data, and SMS consent are not shared with these parties for their own marketing or promotional purposes.

Your Privacy Rights

Under HIPAA and other applicable laws, you have the right to:

Access Your Records

• Request copies of your medical records
• Review your treatment history and billing information
• Receive an electronic copy if we maintain records electronically

Request Amendments

• Ask us to correct inaccurate information in your records
• Add clarifying information to your file

Request Restrictions

• Ask us to limit how we use or share your information
• Request restrictions on communications to certain phone numbers or addresses

Request Confidential Communications

• Ask that we contact you at a specific phone number or address
• Request communications in a particular format

File Complaints

• Complain to us if you believe your privacy rights have been violated
• File complaints with the U.S. Department of Health and Human Services
• No retaliation for filing complaints

Receive This Notice

• Obtain a paper copy of this privacy notice at any time
• Receive notification of any material changes to this policy

Website Privacy and Cookies

Cookies and Tracking

Our website may use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Improve user experience and site functionality
• Provide relevant content and advertisements

You can control cookie settings through your browser preferences.

Third-Party Services

Our website may integrate with third-party services such as:

• Google Analytics for website analytics
• Social media platforms
• Online scheduling systems
• Payment processing services

These services have their own privacy policies, and we encourage you to review them.

Data Security

We implement appropriate physical, electronic, and administrative safeguards to protect your information:

Physical Safeguards

• Locked filing cabinets for paper records
• Restricted access to medical records areas
• Secure disposal of documents containing PHI

Electronic Safeguards

• Encrypted data transmission and storage
• Secure passwords and user authentication
• Regular software updates and security patches
• Firewall and antivirus protection

Administrative Safeguards

• HIPAA training for all staff members
• Regular security risk assessments
• Written policies and procedures
• Incident response procedures

Data Retention

We retain your medical records and personal information in accordance with:

• New Hampshire state law requirements
• Professional medical standards
• HIPAA regulations
• Business and legal requirements

We retain medical records and other personal information for the periods required by applicable federal and New Hampshire law, professional standards, and legitimate business or legal requirements.

Marketing Communications

Opt-In Policy

We will only send you marketing communications if you have opted in to receive them. This includes:

• Email newsletters
• Treatment information and educational content
• Special offers and promotions
• Event invitations

Opt-Out Options

You can opt out of marketing communications at any time by:

• Replying STOP to SMS/text messages
• Clicking “unsubscribe” in marketing emails
• Contacting our office directly
• Updating your preferences during appointments

Opting out of marketing communications does not necessarily prevent communications that are necessary or otherwise permitted regarding appointments, treatment, accounts, safety, or other non-marketing matters.

Photography and Social Media

Before/After Photos

• We will only use your photos for marketing with explicit written consent
• You can revoke consent for future use at any time
• Photos are stored securely and shared only as authorized
• Your identity will be protected unless you specifically consent otherwise

Social Media Policy

• We may feature general practice information on social media
• Patient-specific information is never shared without written consent
• Comments and interactions on social media are subject to this privacy policy

Children’s Privacy

Our services are generally provided to adults (18 years and older). When treating minors:

• We obtain appropriate parental/guardian consent
• We follow all applicable laws regarding minors’ privacy rights
• We maintain the same security standards for all patient information

Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time. When we make changes:

• We will post the updated policy on our website
• We will notify patients of significant changes during their next visit
• The effective date will be updated to reflect when changes take effect
• We will maintain prior versions for our records

International Visitors

If you are visiting from outside the United States, please note that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

Contact Information

Privacy Officer

For questions about this privacy policy or to exercise your privacy rights, contact:

Joy DeRoche, NP
Privacy Officer

Address: 155 Main Street, Plaistow, NH 03865

Phone: (978) 702-3736

Email: joyfulbeautynp@gmail.com

Website: www.joyfulbeautymedspa.com

Filing Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

Our Practice:
Contact our Privacy Officer using the information above

U.S. Department of Health and Human Services:
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Website: www.hhs.gov/ocr/privacy/hipaa/complaints/

Acknowledgment

By receiving services at Joyful Beauty NP, you acknowledge that you have received and understand this Privacy Policy. If you have questions or concerns, please don’t hesitate to discuss them with our team.