Bare Necessities Spa + MedSpa Notice of Privacy Practices

Effective November 1, 2025

This notice describes how medical information about you may be used and disclosed and how you can access this information. Please review it carefully.

⸻

Who Will Follow This Notice

This notice describes the privacy practices of Bare Necessities Spa + MedSpa, its affiliates (BN MedSpa Management LLC, Bare Necessities Spa & Boutique – Upper Kirby, Bare Necessities Spa & Boutique – Tanglewood), and all workforce members who handle your protected health information (PHI).

Our supervising physician, Dr. Lindsay Fowler Dragos, MD, oversees compliance and medical direction for all MedSpa services provided through Bare Necessities Spa + MedSpa.

⸻

Our Commitment to Your Privacy

Bare Necessities Spa + MedSpa understands that your medical and health-related information is personal. We are committed to protecting it. We maintain your records and conduct our services in accordance with applicable state and federal law, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

This notice applies to all records of your care created or received by Bare Necessities Spa + MedSpa. Other medical professionals or clinics not affiliated with us may have their own privacy practices.

⸻

How We May Use and Disclose Your Health Information

By receiving services from Bare Necessities Spa + MedSpa, you consent to the use and disclosure of your PHI for purposes of treatment, payment, and healthcare operations (TPO). Examples include:
• Treatment: Sharing information with other providers involved in your care or referrals.
• Payment: Submitting information to your insurance or financing provider for payment.
• Healthcare Operations: Quality assurance, staff training, auditing, and compliance activities.

⸻

Other Permitted Uses and Disclosures

We may also use or disclose your PHI without additional authorization in the following cases:
• Appointment reminders and follow-ups.
• To family or friends involved in your care, when appropriate.
• In emergencies, when necessary for your treatment.
• To comply with laws or regulations, such as public health reporting, FDA requirements, or court orders.
• For health oversight activities, such as audits or inspections.
• To report abuse, neglect, or domestic violence, when legally required.
• To law enforcement officials when required by law.
• For workers’ compensation claims, if applicable.
• To coroners, medical examiners, or funeral directors, as necessary.
• For research purposes, only when approved under strict privacy safeguards.

We will only share the minimum amount of information required for each purpose, as permitted by law.

⸻

Your Rights Regarding Your Protected Health Information

You have specific rights regarding your medical information:
1. Right to Inspect and Copy: You may request to review or obtain a copy of your medical or billing records. A reasonable fee may apply.
2. Right to Request Restrictions: You may ask us to limit how we use or share your PHI. While we are not required to agree, we will accommodate reasonable requests when possible.
3. Right to Confidential Communications: You may request that we contact you only at a specific address, phone number, or by alternate means.
4. Right to Amend: If you believe information in your record is incorrect, you may request an amendment in writing.
5. Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI.
6. Right to a Paper or Digital Copy: You may request a copy of this notice at any time.

All requests should be submitted in writing to:
Bare Necessities Spa + MedSpa Privacy Officer
3800 Southwest Freeway, Suite 108, Houston, TX 77027
Phone: (713) 522-6929
Email: sales@bnwax.com

⸻

Changes to This Notice

We reserve the right to revise this Notice of Privacy Practices at any time. Any revised notice will apply to all PHI we maintain and will be posted in our offices and on our website at https://bnwax.com/. The effective date will always appear at the top of the notice.

⸻

Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

Privacy Officer
Bare Necessities Spa + MedSpa
3800 Southwest Freeway, Suite 108, Houston, TX 77027
Phone: (713) 522-6929

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at www.hhs.gov/ocr/privacy/hipaa/complaints.
You will not be penalized for filing a complaint.

⸻

Questions

For questions regarding this notice or your rights under HIPAA, please contact our Privacy Officer at sales@bnwax.com or (713) 522-6929.