Privacy Policy

Effective Date: 1/1/2026

Alani Skin MD (“Alani Skin MD,” “we,” “us,” or “our”) is committed to protecting the privacy, security, and confidentiality of our patients’ personal information and health information. This Privacy Policy explains how we collect, use, disclose, safeguard, and manage your information, including Protected Health Information (PHI) and Health/History of Present Illness (HPI), in compliance with applicable state and federal laws, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

1. Scope of This Privacy Policy

This Website Privacy Policy applies to information collected through:

  • Our website(s)

  • Online scheduling, intake, and contact forms

  • Patient portals or third-party booking platforms linked through our website

  • Electronic communications initiated through the website

This policy governs website-related data practices and supplements (but does not replace) in-office HIPAA notices provided at the time of treatment.

2. Information We Collect

A. Personal Information

We may collect personal identifying information, including but not limited to:

  • Name, address, email address, and phone number

  • Date of birth

  • Emergency contact information

  • Payment and billing information

  • Government-issued identification (when required)

B. Health Information (PHI & HPI)

We collect and maintain health-related information necessary to provide safe, appropriate, and compliant medical and aesthetic care, including:

  • Medical history

  • Medications and allergies

  • Past procedures and treatments

  • Health History / History of Present Illness (HPI)

  • Treatment plans and clinical notes

  • Before-and-after photographs (with consent)

  • Communications related to your care

This information is considered Protected Health Information (PHI) under HIPAA.

3. How We Use Your Information

We use your information for purposes including, but not limited to:

Treatment

  • Evaluating, diagnosing, and treating patients

  • Developing and updating individualized treatment plans

  • Documenting clinical encounters and outcomes

Payment

  • Processing payments for services rendered

  • Billing, invoicing, and accounting

  • Verifying eligibility or benefits when applicable

Healthcare Operations

  • Quality assurance and internal audits

  • Training and supervision of providers

  • Compliance with legal, regulatory, and accreditation requirements

  • Practice management and administrative operations

Communication

  • Appointment reminders and scheduling

  • Post-treatment instructions and follow-ups

  • Important updates related to your care

Communications may occur via phone, email, text message, or patient portal, based on your preferences and consent.

4. HIPAA Notice of Privacy Practices

Alani Skin MD complies fully with HIPAA and applicable state privacy laws.

Under HIPAA, you have the right to:

  • Access and obtain a copy of your medical records

  • Request amendments to your medical records

  • Request restrictions on certain uses or disclosures

  • Request confidential communications

  • Receive an accounting of disclosures

  • Receive a paper or electronic copy of this Privacy Policy

  • File a complaint without fear of retaliation

We are required by law to:

  • Maintain the privacy and security of your PHI

  • Provide you with notice of our legal duties and privacy practices

  • Follow the terms of this Privacy Policy

  • Notify you following a breach of unsecured PHI

5. How We Protect Your Information

We implement administrative, physical, and technical safeguards to protect your information, including:

  • Secure electronic medical records (EMR/EHR) systems

  • Role-based access controls for staff

  • Password-protected systems and encrypted platforms

  • Secure storage of physical records

  • Staff training on HIPAA and privacy compliance

Access to PHI and HPI is limited strictly to authorized personnel who require access to perform their job duties.

6. Disclosure of Information

We may disclose your information only as permitted or required by law, including:

  • To healthcare providers involved in your care

  • To business associates who perform services on our behalf (with HIPAA-compliant agreements)

  • To comply with legal obligations, court orders, or subpoenas

  • To public health authorities as required by law

  • To avert a serious threat to health or safety

We do not sell, rent, or trade your PHI or personal information.

7. Use of Photographs

Medical photographs may be taken for:

  • Clinical documentation

  • Treatment planning

  • Progress tracking

  • Medical education

Use of photographs for marketing, advertising, or public display requires separate written authorization, which you may decline or revoke at any time.

8. Electronic Communications & Website Use

By submitting information through our website, you consent to receive communications related to your inquiry, appointment, or care. Communications may occur via email, text message, phone call, or patient portal.

While we use reasonable safeguards, no website, email transmission, or electronic storage system can be guaranteed to be 100% secure. You submit information at your own risk.

You may request alternative communication methods or opt out of non-essential communications at any time.

9. Data Retention

Information submitted through our website is retained in accordance with:

  • HIPAA requirements

  • Arizona state laws

  • Medical record retention standards

Information submitted through website forms may be integrated into your medical record when applicable. Records are securely destroyed when no longer required to be retained.

10. Your Choices and Rights

You may:

  • Request access to your records

  • Request corrections or amendments

  • Withdraw consent for certain uses (when permitted by law)

  • Opt out of non-essential communications

Requests must be submitted in writing and may require identity verification.

11. Breach Notification

In the event of a data breach involving unsecured PHI, Alani Skin MD will:

  • Conduct a prompt investigation

  • Notify affected individuals as required by HIPAA

  • Notify appropriate regulatory authorities

  • Take corrective actions to prevent future incidents

12. Changes to This Website Privacy Policy

We reserve the right to update this Privacy Policy at any time. Updates will be posted on our website and made available upon request. The effective date will reflect the most recent revision.

13. Website Privacy Contact Information

If you have questions about this Privacy Policy or your privacy rights, please contact:

Alani Skin MD
info@alaniskinmd.com

You may also file a complaint with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.

Acknowledgment By visiting this website or receiving services from Alani Skin MD, you acknowledge that you have been provided access to this Privacy Policy.