Privacy Policy

Effective Date: 1/1/2025
Last Updated: 7/1/2025

Introduction

Espe Aesthetics (“we,” “our,” or “us”) is committed to protecting your privacy and maintaining the confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any way.

Information We Collect

Personal Information

We may collect the following types of personal information:

• Name, address, phone number, and email address
• Date of birth and age
• Emergency contact information
• Insurance information (if applicable)
• Payment and billing information
• Driver’s license or other identification

Health Information

As a healthcare provider, we collect protected health information (PHI) including:

• Medical history and current medications
• Treatment records and progress notes
• Before and after photographs (with your consent)
• Allergies and medical conditions
• Treatment preferences and goals

Website Information

When you visit our website, we may automatically collect:

• IP address and browser information
• Pages visited and time spent on our site
• Referring website information
• Device and operating system information

How We Use Your Information

We use your information for the following purposes:

Treatment and Care

• Providing aesthetic treatments and services
• Maintaining treatment records
• Communicating about your care
• Scheduling appointments and sending reminders

Business Operations

• Processing payments and billing
• Improving our services and patient experience
• Training staff and quality assurance
• Complying with legal and regulatory requirements

Marketing and Communications

• Sending appointment reminders and follow-up care instructions
• Providing information about new services or promotions (with your consent)
• Responding to your inquiries and requests

How We Share Your Information

We may share your information in the following limited circumstances:

Healthcare Operations

• With other healthcare providers involved in your care
• With insurance companies for payment purposes
• With business associates who assist with our operations (under confidentiality agreements)

Legal Requirements

• When required by law or legal process
• To protect the safety of patients, staff, or the public
• In response to lawful requests from government authorities

With Your Consent

• When you specifically authorize us to share your information
• For marketing purposes (you may opt out at any time)

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Correction

• Request access to your personal and health information
• Request corrections to inaccurate information
• Obtain copies of your medical records

Communication Preferences

• Opt out of marketing communications
• Request confidential communications
• Choose how we contact you

Restrictions

• Request restrictions on how we use or disclose your information
• Withdraw consent for certain uses (where consent is required)

Data Security

We implement appropriate technical, administrative, and physical safeguards to protect your information:

Technical Safeguards

• Encrypted data transmission and storage
• Secure servers and firewalls
• Regular security updates and monitoring
• Access controls and authentication measures

Administrative Safeguards

• Staff training on privacy and security
• Background checks for employees
• Incident response procedures
• Regular privacy and security assessments

Physical Safeguards

• Locked filing cabinets and secure storage
• Controlled access to facilities
• Proper disposal of confidential information

Website Privacy

Cookies and Tracking

Our website may use cookies and similar technologies to:

• Improve website functionality and user experience
• Analyze website traffic and usage patterns
• Remember your preferences and settings

You can control cookie settings through your browser preferences.

Third-Party Services

Our website may contain links to third-party websites or use third-party services. We are not responsible for the privacy practices of these external sites or services.

Data Retention

We retain your information for as long as necessary to:

• Provide ongoing care and services
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements

Medical records are typically retained for a minimum of seven (7) years after your last visit, or longer as required by law.

Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children without appropriate parental consent and involvement.

HIPAA Compliance

As a healthcare provider, we comply with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy laws. You will receive a separate Notice of Privacy Practices that provides additional details about how we protect your health information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending notice to your email address on file
• Providing notice during your next visit

Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Espe Aesthetics
Inside Novel Eye Care
1800 State Street
Nashville, TN 37203
Phone: (615) 669-2052
Email: [Insert Email Address]

For HIPAA-related concerns, you may also contact:

• Our Privacy Officer at the above address
• The U.S. Department of Health and Human Services Office for Civil Rights

Effective Date

This Privacy Policy is effective as of the date listed above and applies to all information collected by Espe Aesthetics.

---

This Privacy Policy is designed to comply with applicable federal and state privacy laws, including HIPAA. However, it should be reviewed by your legal counsel to ensure compliance with all applicable laws and regulations in your jurisdiction.