HIPAA Policy

Last updated June 2026 · Opening Summer 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: August 4, 2026

1. Our Commitment to Your Privacy

At SENSA, we understand that information about you and your health is personal. We are committed to protecting the privacy of your health information, known as Protected Health Information (PHI). This Notice of Privacy Practices ("Notice") describes how we may use and disclose your PHI to carry out treatment, payment, or health care operations and for other purposes that are permitted or required by law. It also describes your rights to access and control your PHI.

We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state laws to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices with respect to your PHI, and to notify you following a breach of unsecured PHI. We must follow the terms of this Notice that are currently in effect.

2. How We May Use and Disclose Your Protected Health Information

We may use and disclose your PHI for the following purposes:

For Treatment: We may use your PHI to provide, coordinate, or manage your health care and any related services. For example, your health information may be shared with our medical director, nurses, estheticians, or other personnel involved in providing your IV therapy, peptide therapy, or medspa services.

For Payment: We may use and disclose your PHI so that the treatment and services you receive may be billed to and payment may be collected from you, an insurance company, or a third party. (Note: SENSA primarily operates on a self-pay/membership basis, but this applies if any third-party billing occurs.)

For Health Care Operations: We may use or disclose your PHI in order to support the business activities of our medspa. These activities include, but are not limited to, quality assessment activities, employee review activities, licensing, and conducting or arranging for other business activities.

Appointment Reminders and Treatment Alternatives: We may use and disclose your PHI to contact you as a reminder that you have an appointment for treatment or services at SENSA. We may also use your PHI to tell you about or recommend possible treatment options or health-related benefits and services that may be of interest to you.

3. Other Permitted and Required Uses and Disclosures

We may also use and disclose your PHI without your written authorization in the following situations:

• As Required By Law: We will disclose your PHI when required to do so by federal, state, or local law.
• Public Health Risks: We may disclose your PHI for public health activities, such as preventing or controlling disease, injury, or disability.
• Health Oversight Activities: We may disclose PHI to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure.
• Lawsuits and Disputes: If you are involved in a lawsuit or a dispute, we may disclose your PHI in response to a court or administrative order, or in response to a subpoena, discovery request, or other lawful process.
• Law Enforcement: We may release PHI if asked to do so by a law enforcement official in response to a court order, subpoena, warrant, summons, or similar process.
• To Avert a Serious Threat to Health or Safety: We may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.

4. Uses and Disclosures Requiring Your Written Authorization

Other uses and disclosures of your PHI not covered by this Notice or the laws that apply to us will be made only with your written authorization. Specifically, we must obtain your authorization for:

• Most uses and disclosures of psychotherapy notes (if applicable).
• Uses and disclosures of your PHI for marketing purposes.
• Disclosures that constitute a sale of your PHI.

If you provide us authorization to use or disclose your PHI, you may revoke that authorization, in writing, at any time. If you revoke your authorization, we will no longer use or disclose your PHI for the reasons covered by your written authorization, except to the extent that we have already taken action in reliance on your authorization.

5. Your Rights Regarding Your Health Information

You have the following rights regarding the PHI we maintain about you:

Right to Inspect and Copy: You have the right to inspect and copy your PHI that may be used to make decisions about your care. Usually, this includes medical and billing records. To inspect and copy your PHI, you must submit your request in writing. We may charge a reasonable, cost-based fee for the costs of copying, mailing, or other supplies associated with your request.

Right to Amend: If you feel that the PHI we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for SENSA. To request an amendment, your request must be made in writing and provide a reason that supports your request.

Right to an Accounting of Disclosures: You have the right to request an "accounting of disclosures." This is a list of the disclosures we made of your PHI, except for those made for treatment, payment, health care operations, and certain other exceptions.

Right to Request Restrictions: You have the right to request a restriction or limitation on the PHI we use or disclose about you for treatment, payment, or health care operations. You also have the right to request a limit on the PHI we disclose about you to someone who is involved in your care or the payment for your care, like a family member or friend. We are not required to agree to your request, unless the request is to restrict disclosure of PHI to a health plan for purposes of carrying out payment or health care operations, and the PHI pertains solely to a health care item or service for which you have paid us out-of-pocket in full.

Right to Request Confidential Communications: You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you can ask that we only contact you at work or by mail. We will accommodate all reasonable requests.

Right to a Paper Copy of This Notice: You have the right to a paper copy of this Notice. You may ask us to give you a copy of this Notice at any time. Even if you have agreed to receive this Notice electronically, you are still entitled to a paper copy.

6. Changes to This Notice

We reserve the right to change this Notice. We reserve the right to make the revised or changed Notice effective for PHI we already have about you as well as any information we receive in the future. We will post a copy of the current Notice on our website (www.sensaspas.com) and in our facility.

7. Complaints

If you believe your privacy rights have been violated, you may file a complaint with SENSA or with the Secretary of the Department of Health and Human Services. To file a complaint with SENSA, contact our Privacy Officer at the contact information provided below. All complaints must be submitted in writing. You will not be penalized for filing a complaint.

8. Contact Information

If you have any questions about this Notice or wish to exercise any of your rights, please contact:

SENSA Privacy Officer — Amy Plumstead
2830 NW 5th Avenue, Miami, FL 33127
Email: amy@sensaspas.com
Phone: (773) 851-9780