Privacy Policy

Northeast Georgia Gynecology DBA Luminous Med Spa & Gynaesthetics, Gainesville, GA 30501

As Required by the Privacy Standards of the Health Insurance Portability and Accountability Act of 1996 (HIPAA)



Northeast Georgia Gynecology DBA Luminous Med Spa & Gynaesthetics, Gainesville, GA 30501 (the Practice) is committed to maintaining the privacy of your protected health information (PHI). As we provide treatment and services to you, we create records that contain your medical and personal information, referred to as protected health information, or PHI. We need these records to provide you with quality care and to comply with various legal requirements. The terms of this Privacy Notice apply to all records containing your PHI that are created or retained by our Practice. We are required by federal and state law to maintain the privacy of your PHI maintained in such records. We are also required by law to provide you with this Privacy Notice of our legal duties and the privacy practices that we maintain in our Practice concerning your PHI. We must follow the terms of the Privacy Notice that we have in effect at the time.


We reserve the right to revise or amend this Privacy Notice. Any revision or amendment to this Privacy Notice will be effective for all of your records that our Practice has created or maintained in the past, and for any of your records that we may create or maintain in the future. We will post a copy of our current Notice in our offices in a visible location at all times, and you may request a copy of our most current Notice at any time.


The following categories describe and give some examples of the different ways in which we may use and disclose your PHI. Not every use or disclosure in a category will be listed. However, all of the ways we are permitted to use and disclose PHI will fall within one of the categories listed below.


We may use your PHI to treat you. For example, we may suggest that you have diagnostic tests, and we may use the results to help us reach a diagnosis. Your PHI may be disclosed to the facility at which you have your diagnostic tests in order for the healthcare providers at such diagnostic facility to provide services to you. We might disclose your PHI to a pharmacy when we order a prescription for you.

We may use and disclose your PHI in order to bill and collect payment from you, an insurance company, or other designated third party payor, for the treatment and services we provide to you. For example, we may contact your health plan to certify that you are eligible for benefits, and we may provide your plan with details regarding your treatment to determine if the plan will cover, or pay for, your treatment.

Healthcare Operations.
We may use and disclose your PHI to operate our business.
For example, our Practice may use your PHI to conduct quality assessment and improvement activities, review the performance of our healthcare professionals, or for general management or business planning for our Practice. We may also remove identifying information from your health information so that it might be used by others to study healthcare without learning who specific patients are.

Appointment Reminders.
We may use and disclose your PHI to contact you and remind you of an appointment.

Treatment Options.
We may use and disclose your PHI to provide information to you about treatment options or alternatives.

Health-Related Benefits and Services. We may use and disclose your PHI to inform you of health-related benefits or services that may be of interest to you.


The following categories describe special situations in which we may use or disclose your PHI:

As Required by Law.
We will disclose PHI when required to do so by federal, state or local law.

Public Health Risks.
We will disclose your PHI to public health or government authorities that are authorized by law to collect information for purposes such as, but not limited to, the following:

Maintaining vital records, such as births and deaths.
Reporting child abuse or neglect.
Preventing or controlling disease, injury or disability.
Notifying a person regarding potential exposure to a communicable disease.
Notifying a person regarding a potential risk for spreading or contracting a disease or condition.
Reporting reactions to drugs or problems with products or devices.
Notifying individuals if a product or device they may be using has been recalled.
Notifying appropriate government agencies and authorities regarding the potential abuse or neglect of an adult patient (including domestic violence); however we will only disclose this information if the patient agrees or we are required or authorized by law to disclose this information.
Notifying your employer under limited circumstances required by law primarily relating to workplace injury or illness or medical surveillance.
Reporting to a disease registry.

Health Oversight Activities.
We may disclose your PHI to a health oversight agency for oversight activities authorized by law.Oversight activities can include, for example, investigations, inspections, audits, surveys, lisensure and disciplinary actions, or other activities necessary for the government to monitor government programs, compliance with civil rights laws and the healthcare system in general. Lawsuits and Similar Proceedings. We may use and disclose your PHI in response to a court or administrative order, if you are involved in a lawsuit or similar proceeding. We also may disclose your PHI in response to a discovery request, subpoena, or other lawful process by another party involved in the dispute, but only if the requesting party has made an effort to inform you of the request or to obtain a qualified protection order protecting the information the party has requested.Law Enforcement. We may release PHI if asked to do so by law enforcement. For example:

Reporting certain types of wounds and physical injuries, as required by law.
Regarding a person believed to be crime victim in certain situations.
Concerning a death the healthcare professional suspects has resulted from criminal conduct.
Regarding reasonably suspected criminal conduct at our offices.
In response to a warrant, summons, court order, subpoena or similar legal process.
To identify/locate a suspect, material witness, fugitive or missing person.
In an emergency, to report a crime (including the location or victim(s) of the crime, or the description, identity or location of the perpetrator).

Coroners, Medical Examiners, and Funeral Directors.
We may release PHI to a medical examiner or coroner to identify a deceased individual or to identify the cause of death. If necessary, we also may release information in order for funeral directors to perform their services.

Organ and Tissue Donation.
If you are an organ donor, we may release PHI to organizations that handle organ or tissue procurement or transplantation, including organ donation banks, as necessary to facilitate organ or tissue donation and transplantation.

Serious Threats to Health or Safety.
We may use and disclose your PHI when necessary to reduce or prevent a serious threat to your health and safety or the health and safety of another individual or the public. Under these circumstances, we will only make disclosures to a person or organization able to prevent the threat.

If you are a member (or veteran) of U.S. or foreign military forces, we may release your PHI as required by the appropriate authorities.

National Security.
We may disclose your PHI to federal officials for intelligence and national security activities authorized by law. We also may disclose your PHI to federal officials in order to protect the President, other officials or foreign heads of state, or to conduct investigations.

If you are an inmate of a correctional institution, or under the custody of law enforcement officials, we may disclose your PHI
to such correctional institutions of law enforcement officials. Disclosure for these purposes would be necessary:
(a) for the institution to provide healthcare services to you, (b) for the safety and security of the institution, and/or (c) to protect your health and safety or the health and safety of other individuals

Workers Compensation.
We may disclose your PHI for workers compensation and similar programs, as required by applicable


You have the following rights regarding the PHI that we maintain about you:

Requesting Restrictions. You have the right to request a restriction on our use or disclosure of your PHI for treatment, payment or healthcare operations. Additionally, you have the right to request that we restrict our disclosure of your PHI to only certain individuals involved in your care or the payment for your care, such as family members and friends. We are not required to agree to your request. However, if we do agree, we are bound by our agreement, except when otherwise required or permitted by law, or when the restricted information is necessary to treat you in an emergency. In order to request a restriction on our use or disclosure of your PHI, you must make your request in writing to Administrator at Northeast Georgia Gynecology DBA Luminous Med Spa & Gynaesthetics, Gainesville, GA 30501, in accordance with our practice’s policies. Your request must be in writing and describe in a clear and concise fashion:

a. The information you wish restricted and how you want it restricted:
b. Whether you are requesting to limit our Practice’s use, disclosure or both; and
c. To whom you want the limits to apply.

Confidential Communications. You have the right to request that our Practice communicate with you about your health and
related issues in a particular manner or at a certain location. For instance, you may ask that we contact you at home, rather than work,
or by mail, rather than telephone. We will accommodate reasonable requests, but we are not required to accommodate all requests. In
order to request a type of confidential communication, you must make a written request to your attending physician at Northeast Georgia Gynecology DBA Luminous Med Spa & Gynaesthetics, Gainesville, GA 30501, specifying the requested method of contact, or the location where you wish to be contacted. You do not need to give a reason for your request.

Access and Copies.
You have the right to inspect and obtain a copy of the PHI that we maintain about you, including patient medical records and billing records, but not including psychotherapy notes or certain other information that may be restricted by law or pursuant to a legal or administrative process or proceeding. You must submit your request in writing to Medical Records Department at:
Northeast Georgia Gynecology DBA Luminous Med Spa & Gynaesthetics, Gainesville, GA 30501, in order to inspect and/or obtain a copy of your PHI. Our Practice may charge a fee for the costs of copying, mailing, labor and supplies associated with your request in accordance with Georgia law. Please contact the person named above for information about such fees. We may deny your request to inspect and/or copy some or all of your PHI in certain limited circumstances; however, you may request a review of our denial. A licensed healthcare professional, who was not involved in the denial, will be chosen by us to conduct reviews of denials. We will comply with the outcome of the review.

Right to Amend.
If you feel that PHI we have about you is incorrect or incomplete, you may ask to amend this information. You have the right to request an amendment for as long as the information is kept by or for this Practice. To request an amendment, your request must be made in writing and submitted to Administrator at Northeast Georgia Gynecology DBA Luminous Med Spa & Gynaesthetics, Gainesville, GA 30501.  In addition, you must provide a reason that supports your request for the amendment. We may deny your request for an amendment if it is not in writing or if it does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that that:

Was not created by us, unless the person or entity that created the information is no longer available to make the amendment;
Is not part of the medical information kept by or for the Practice;
Is not part of the information you would be permitted to inspect and copy; or
Is accurate and complete.

Accounting of Disclosures. You have the right to request an “accounting of disclosures.” An “accounting of disclosures” is a list of
certain non-routine disclosures our Practice has made of your PHI for non-treatment or operations purposes. We are not required to
provide you with an accounting of the following disclosures:

a. Disclosures for treatment, payment or the healthcare operations of our Practice;
b. Disclosures to you;
c. Disclosures incident to uses or disclosures of your information for permitted purposes;
d. Disclosures that you have authorized us to make;
e. Disclosures to others involved in your care; or for notifying your family member or personal representative about your general
condition, location, or death when you have had the opportunity to agree to such disclosures (or they were otherwise permitted);
f. Disclosures for national security or law enforcement;
g. Disclosures that were part of a “Limited Data Set” (which is a set of information containing only limited amounts of identifiable
information, as permitted by the HIPAA Privacy Rules); or
h. Disclosures that occurred prior to April 14, 2003.

In order to obtain an accounting of disclosures, you must submit your request in writing to Administrator at Northeast Georgia Gynecology DBA Luminous Med Spa & Gynaesthetics, Gainesville, GA 30501.  All requests for an “accounting of disclosures” must state a time period, which may be no longer than six (6) years form the date of disclosure and may not include dates before April 14, 2003. The first list you request within a 12 – month period is free of charge, but our Practice may charge you for additional lists within the same 12 – month period. Our Practice will notify you of the costs involved with additional requests, and you may withdraw or modify your request before you incur any costs.

Right to a Paper Copy of This Notice.
You are entitled to receive a paper copy of our notice of privacy practices. You may ask us to give you a copy of this notice at any time. To obtain a paper copy of this notice, contact the front desk at Northeast Georgia Gynecology DBA Luminous Med Spa & Gynaesthetics, Gainesville, GA 30501.
Right to File a Complaint. If you believe your privacy rights have been violated by our Practice or an employee of our Practice, you
may file a complaint with our Practice or with the Secretary of the Department of Health and Human Services. Because we are always
interested in improving the quality of services provided to you, we would encourage you to contact the Administrator at Northeast Georgia Gynecology DBA Luminous Med Spa & Gynaesthetics, Gainesville, GA 30501, with our Practice first. All complaints must be submitted in writing. You will not be penalized for filing a complaint. Right to Provide an Authorization for Other Uses and Disclosures. We will obtain your written authorization for uses and disclosures that are not identified by this Notice or permitted or required by applicable law. Any authorization you provide to us regarding the use and disclosure of your PHI may be revoked at any time in writing. After you revoke your authorization, we will no longer use or disclose your PHI for the reasons described in the authorization.
Practice Administrators
Northeast Georgia Gynecology DBA Luminous Med Spa & Gynaesthetics, 440 Washington Street SE, Gainesville, GA 30501