Effective August 25, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, HOW YOU MAY ACCESS IT, AND WHOM TO CONTACT.

This Notice applies to protected health information (“PHI”) created or maintained by GentleDraw Spa LLC in connection with care, payment, and healthcare operations where HIPAA and other applicable privacy laws apply.

OUR RESPONSIBILITIES

GentleDraw Spa protects the privacy and security of applicable PHI, provides this Notice, follows the Notice currently in effect, and provides breach notice when required. We use administrative, technical, and physical safeguards appropriate to the information involved.

PERMITTED USES AND DISCLOSURES

We may use or disclose PHI as permitted or required for treatment, payment, healthcare operations, care coordination, scheduling, billing, quality and safety activities, legal compliance, and through service providers required to protect it. Law may also permit or require disclosure for public health, abuse or neglect reporting, health oversight, judicial proceedings, certain law-enforcement purposes, workers’ compensation, research meeting legal requirements, averting a serious and imminent threat, and other legally required purposes.

Marketing, sale of PHI, or another use not otherwise permitted requires authorization when the law requires it. You may revoke an authorization in writing except for action already taken in reliance on it.