Heinz Aesthetics LLC

Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Effective October 27, 2026. Heinz Aesthetics LLC, 760 Currency Circle, Suite B, Lake Mary, FL 32746.

Who this notice covers

This notice describes the privacy practices of Heinz Aesthetics LLC (“Heinz Aesthetics,” “we,” “us”) for protected health information created or received while we provide care. That includes in-person visits at the Lake Mary studio and virtual visits with Scott Heinz, PA-C.

Scott Heinz, PA-C, Florida PA License # PA9117797. Supervising physician: Stanley John Mathew, MD, Florida License ME172759.

Our website and text-message practices are also described in the Privacy Policy and SMS Terms & Conditions. Those pages do not replace this notice for medical information.

Our duty

We are required by law to maintain the privacy of protected health information, to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice that is currently in effect. We may change this notice. A change applies to information we already have and to information we receive later. The current notice will be posted at heinzaesthetics.com/hipaa-notice and will be available at the studio. You may ask for a paper copy at any visit, or by calling or emailing us.

How we may use and disclose information

The law allows us to use and share health information for treatment, payment, and health care operations without a separate written authorization. Other uses are described below.

Treatment

We use health information to provide, coordinate, and manage your care. Scott may review your history, order labs, prescribe medication when it is clinically appropriate, and share relevant information with a laboratory, a pharmacy, or another provider who is treating you. A virtual visit is still treatment. We do not prescribe because someone filled out a form or paid a fee.

Payment

We may use and share information to bill you, or a person who is responsible for your bill, for a visit, a lab, or a medication you agreed to. Heinz Aesthetics is a self-pay practice unless you are told otherwise at the visit.

Health care operations

We may use information to run the practice: scheduling, quality review, training, licensing, and customer service. We do not use medical information for advertising a product or service to you without an authorization when the law requires one.

Appointment reminders and texts

We may contact you with appointment reminders and follow-ups about care you requested. Text messages are sent only if you opt in, under the SMS Terms. Those texts are appointment reminders, confirmations, follow-ups, and customer care. Texts are not a secure way to discuss symptoms, results, or medications. Do not send detailed medical information by text.

People involved in your care

If you agree, or in an emergency when you cannot agree, we may share relevant information with a family member or other person involved in your care or payment. You may ask us not to.

Business associates

Companies that handle health information for us must agree to protect it. We use Pabau for booking, charting, and patient messages. Labs and compounding pharmacies receive information when Scott orders a test or writes a prescription.

Other uses the law allows

• Required by law. We share information when a law requires it.
• Public health and health oversight. We may report to public health authorities and to agencies that license or oversee the practice, including the Florida Department of Health.
• Judicial and administrative proceedings, and law enforcement. We may disclose information in response to a valid court order, and otherwise only as federal and Florida law allow.
• To avert a serious threat. We may share information when it is necessary to prevent a serious and imminent threat to a person or the public.
• Workers’ compensation. We may disclose information as authorized by workers’ compensation law.
• Coroners and funeral directors. We may disclose information to a coroner, medical examiner, or funeral director as allowed by law.
• Research. We do not use your information for research unless the law allows it and, when required, you have authorized it.
• Specialized government functions and organ donation. These are uncommon for this practice. If they apply, we follow the law.

Uses that need your written authorization

Other uses and disclosures of protected health information not described in this notice are made only with your written authorization. You may revoke an authorization in writing. We cannot take back a disclosure that already happened, and we must keep records of care we have already provided.

• Sale of health information. We do not sell protected health information.
• Marketing. We do not use or disclose protected health information for marketing, as HIPAA defines it, without your written authorization when one is required.
• Psychotherapy notes. This practice does not create psychotherapy notes.

Your rights

• Access. You may ask to see or get a copy of health information used to make decisions about you. Ask in writing at the address below. We may charge a reasonable, cost-based fee allowed by law. We may deny the request in limited cases, and you may ask for a review of some denials. Florida law also gives patients rights to copies of medical records.
• Amendment. You may ask us to amend information you believe is incorrect or incomplete. We may say no, and we will tell you why in writing. You may add a statement of disagreement.
• Accounting. You may ask for a list of certain disclosures we made in the six years before the request. The list does not include treatment, payment, operations, and certain other disclosures the law excludes.
• Restrictions. You may ask us to limit how we use or share information for treatment, payment, or operations. We are not required to agree, except that we must agree to a request not to share information with a health plan when you, or someone on your behalf, paid in full out of pocket for that item or service, and the disclosure is for payment or operations and not otherwise required by law.
• Confidential communications. You may ask us to contact you at a different address or phone number. You do not have to tell us why. We will agree when the request is reasonable.
• A paper copy. You may ask for a paper copy of this notice at any time, even if you agreed to receive it electronically.
• Breach notice. You will be notified if a breach of your unsecured protected health information occurs, as the law requires.

To use these rights, call (407) 279-1789 or email info@heinzaesthetics.com, or write to the address below.

Complaints

If you believe your privacy rights have been violated, you may complain to us or to the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201, or at hhs.gov/hipaa/filing-a-complaint. We will not retaliate against you for filing a complaint.

Privacy requests go to the practice contacts below.

Contact