THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Understanding Your Health Record and Information
This notice describes the practices of Thrive Aesthetics and Wellness LLC and its staff (collectively, “Practice”), and that of any provider with staff privileges with respect to your protected health information created while you are a patient at the Practice. The Practice, providers with staff privileges, and personnel authorized to have access to your medical chart are subject to this notice. In addition, the Practice and providers with staff privileges may share medical information with each other for treatment, payment, or health care operations described in this notice.
We create a record of the care and services you receive at the Practice. We understand that medical information about you and your health is personal. We are committed to protecting medical information about you. This notice applies to all the records of your care at the Practice.
This notice describes the ways in which we may use and disclose medical information about you. It also describes your rights and certain obligations we have regarding the use and disclosure of medical information.
Your Health Information Rights
Although your health record is the physical property of the Practice, the information belongs to you. You have the right to:
-
Request a restriction on certain uses and disclosures of your information for treatment, payment, and health care operations, and as to disclosures permitted to persons, including family members involved with your care and as provided by law. However, we are not required by law to agree to a requested restriction, unless the request relates to a restriction on disclosures to your health insurer regarding health care items or services for which you have paid out of pocket and in full.
-
Obtain a paper copy of this Notice of Privacy Practices.
-
Inspect and request a copy of your health record as provided by law.
-
Request that we amend your health record as provided by law. We will notify you if we are unable to grant your request to amend your health record.
-
Obtain an accounting of disclosures of your health information as provided by law.
-
Request communication of your health information by alternative means or at alternative locations. We will accommodate reasonable requests.
You may exercise your rights set forth in this notice by providing a written request to Thrive Aesthetics and Wellness LLC, 6405 S 3000 E, Suite 100 Room 10, Holladay, UT 84121.
Our Responsibilities
In addition to the responsibilities set forth above, we are also required to:
-
Maintain the privacy of your health information.
-
Subject to certain exceptions under the law, provide notice of any unauthorized acquisition, access, use, or disclosure of your protected health information, to the extent it was not otherwise secured.
-
Provide you with a notice as to our legal duties and privacy practices with respect to information we maintain about you.
-
Abide by the terms of this notice.
-
Notify you if we are unable to agree to a requested restriction on certain uses and disclosures.
We reserve the right to change our practices and to make the new provisions effective for all protected health information we maintain, including information created or received before the change. Should our information practices change, we are not required to notify you, but we will have the revised notice available upon your request at the Practice.
Uses and Disclosures of Medical Information That Do Not Require Your Authorization
The following categories describe different ways that we may use and disclose medical information without your authorization. We will explain what we mean for each category of uses or disclosures, but not every use or disclosure in a category will be listed. However, all the ways we are permitted to use and disclose information without your authorization should fall within one of the categories.
Treatment
We will use your health information for treatment. For example, we may disclose medical information about you to providers, nurses, technicians, or other personnel who are involved in taking care of you. We may share medical information about you in order to coordinate different treatments, such as prescriptions, laboratory work, or diagnostic services. We may also provide your primary care provider or a subsequent health care provider with copies of various reports to assist in treating you once you are discharged from care at the Practice.
Payment
We will use your health information for payment. For example, a bill may be sent to you or a third-party payer. The information on or accompanying the bill may include information that identifies you, as well as your diagnosis, procedures, and supplies used. The Practice is primarily a cash-pay practice; when third-party payment is used (for example, HSA or FSA reimbursement), your information may be shared to the extent necessary to substantiate the claim.
Health Care Operations
We will use your health information for regular health care operations. For example, we may use the information in your health record to assess the care and outcome in your case and others like it. This information will then be used in an effort to continually improve the quality and effectiveness of the health care and services we provide.
Other Uses and Disclosures Allowed by Law
We may use and disclose your health information as otherwise allowed by law. Examples of those uses and disclosures follow.
-
Business Associates. There are some services provided to the Practice through agreements with business associates. Examples include the Practice’s electronic medical record vendor, cloud storage, appointment reminder services, and communication platforms. To protect your health information, we require business associates to appropriately safeguard your information.
-
Notification. Unless you object, we may use or disclose information to notify or assist in notifying a family member, a personal representative, or another person responsible for your care about your location and general condition.
-
Individuals Involved in Your Care. Unless you object, we may disclose to a family member, another relative, a close personal friend, or another person you identify the health information that is directly relevant to that person’s involvement in your health care or payment for your health care. If you are not able to agree or object to such disclosure, we may disclose the information as necessary if we determine it is in your best interest in our professional judgment.
-
Disaster Relief. We may use or disclose your health information to public or private disaster relief organizations to coordinate your care or to notify your family or friends of your location or condition in a disaster. We will provide you with an opportunity to agree or object to these disclosures when practical.
-
Research. We may disclose information to researchers when their research has been approved by an institutional review board that has established protocols to protect the privacy of your health.
-
Communications Regarding Treatment Alternatives and Appointment Reminders. We may contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you.
-
Food and Drug Administration. We may disclose to the FDA health information relative to adverse events with respect to medications, devices, supplements, or products, or post-marketing surveillance information to enable product recalls, repairs, or replacement.
-
Workers’ Compensation. We may disclose health information to the extent authorized by and to the extent necessary to comply with laws relating to workers’ compensation or other similar programs established by law.
-
Public Health. As required by law, we may disclose your health information to public health or legal authorities charged with preventing or controlling disease, injury, or disability.
-
Abuse, Neglect, or Domestic Violence. As required by law, we may disclose health information to a governmental representative authorized by law to receive reports of abuse, neglect, or domestic violence.
-
Judicial, Administrative, and Law Enforcement Purposes. Consistent with applicable law, we may disclose health information about you for judicial, administrative, and law enforcement purposes.
-
Health Oversight Activities. We may disclose health information to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure.
-
Threats to Health or Safety. We may use or disclose health information as allowed by law if we believe in good faith that it is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, or for law enforcement authorities to identify or apprehend an individual involved in a crime.
-
Special Government Functions. We may disclose health information to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law. If you are a member of the military, we may disclose health information to military authorities under some circumstances. If you are an inmate of a correctional facility or in the custody of law enforcement personnel, we may disclose health information necessary to maintain your health and the health and safety of others.
-
Required or Allowed by Law. We will disclose medical information about you when required or allowed to do so by federal, state, or local law.
-
Electronic Health Information Exchange. The Practice uses a third-party vendor (Boulevard) to maintain our practice management and electronic medical records. The Practice monitors who can view your electronic health information and requires the vendor to safeguard it under a signed business associate agreement.
Uses and Disclosures That Do Require Your Written Authorization
We will not use or disclose your health information without your written authorization, except as described in this notice. The following uses and disclosures require your written authorization:
-
Most uses and disclosures of psychotherapy notes.
-
Uses and disclosures for marketing purposes, except in limited circumstances.
-
Disclosures that constitute a sale of your health information.
-
Other uses and disclosures not described in this notice.
You may revoke a written authorization at any time by submitting a written revocation to the Practice, except to the extent the Practice has already taken action in reliance on your authorization.
Special Considerations Regarding Photography and Before-and-After Images
As an aesthetic and wellness practice, we routinely take photographs to document your treatment progress. Standard clinical photographs (documenting your treatment progress for your medical record) do not require additional authorization beyond your consent to treatment. Use of your before-and-after images on the Practice’s marketing materials, social media, website, or in any external communication requires a separately signed Patient Photo and Image Release. You may withdraw a photo release at any time in writing, and we will remove images from future use, though we cannot recall images already published.
Special Considerations Regarding Communications
The Practice may communicate with you by text message, email, phone call, or through the patient portal. If you provide us with a cell phone number, you consent to receive appointment reminders, care follow-ups, and Practice communications by text message. Standard messaging rates may apply. You may opt out at any time by replying STOP or by notifying us in writing.
Notice Effective Date and Changes
Effective date of this notice: July 20, 2026
We may change our policies and this notice at any time and have those revised policies apply to all the protected health information we maintain. If or when we change our notice, we will post the new notice at the office where it can be seen and make the revised notice available upon request.
For More Information or to Report a Problem
If you have questions and would like additional information, you may contact the Practice at 801-209-7299.
If you believe your privacy rights have been violated, you may send a complaint in writing to:
-
Lauren Muir, NP-C, Owner and Privacy Officer, Thrive Aesthetics and Wellness LLC, 6405 S 3000 E, Suite 100 Room 10, Holladay, UT 84121, lauren@thriveut.com
-
The Secretary, U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, DC 20201, or online at hhs.gov/hipaa/filing-a-complaint
There will be no retaliation for filing a complaint.