Legal
Notice of Privacy Practices
Effective October 28, 2026
This notice applies to health information created or received by The Standard Aesthetics in connection with your care. It explains your rights, your choices, and our legal responsibilities. It is based on the federal HIPAA Privacy Rule and applicable Texas medical-privacy law.
Practice and Privacy Contact
- Practice
- The Standard Aesthetics
- Privacy Official
- Paige Spillers
- Address
- 301 W. Main Street, Suite 163, Midlothian, Texas 76065
- Phone
- 469-336-6676
Please use the secure patient portal, mail, or an in-person request for medical information. Ordinary email and text messages may not be secure.
Your Rights
When it comes to your health information, you have certain rights. This section explains those rights and some of our responsibilities.
Get an electronic or paper copy of your medical record
- You may ask to see or receive an electronic or paper copy of your medical record and other health information we maintain about you.
- To request records, submit a written request through the secure patient portal, by mail, or in person at the practice address. You may contact us first to request a records-request form.
- When Texas law applies and our electronic records system can fulfill the request, we generally provide requested records no later than the 15th business day after receiving a proper written request. Other time limits may apply in particular circumstances.
- We may charge a reasonable, cost-based fee permitted by law. In limited situations, we may deny access; if so, we will explain the denial and any review rights available to you.
Ask us to correct your medical record
- You may ask us in writing to correct health information that you believe is incorrect or incomplete.
- We may deny the request in some circumstances, but we will explain the decision in writing within the time required by law. You may submit a statement of disagreement for inclusion in the record when permitted.
Request confidential communications
- You may ask us to contact you in a particular way, such as only by telephone, patient portal, or mail, or to send communications to a different address.
- We will agree to reasonable requests. Tell us if leaving a voicemail, sending a text, or emailing you could create a privacy concern.
Ask us to limit what we use or share
- You may ask us not to use or share certain health information for treatment, payment, or health-care operations. We are not always required to agree, and we may deny a request if it could affect your care or if law permits the use or disclosure.
- If we agree, we may still disclose the information when needed for emergency treatment or when required by law.
- If you pay for an item or service out of pocket in full, you may ask us not to share information about that item or service with your health plan for payment or health-care operations. We will agree unless the law requires us to share it.
Get a list of disclosures
- You may request an accounting of certain disclosures made during the six years before your request, including who received the information and why.
- The accounting will not include disclosures for treatment, payment, health-care operations, disclosures you authorized or requested, and certain other disclosures excluded by law.
- We will provide one accounting in a 12-month period without charge. We may charge a reasonable, cost-based fee for an additional accounting during that period after telling you the cost and giving you an opportunity to withdraw or modify the request.
Get a copy of this notice
You may request a paper copy of this notice at any time, even if you agreed to receive it electronically. It is also available on our website and at our office.
Choose someone to act for you
If a personal representative has legal authority to act for you, such as under a medical power of attorney or guardianship, that person may exercise your rights and make choices about your health information. We will verify the person’s authority before acting.
File a complaint
- You may complain to our Privacy Official using the contact information at the beginning of this notice.
- You may file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at 200 Independence Avenue SW, Washington, DC 20201; by calling 1-877-696-6775; or online at https://www.hhs.gov/hipaa/filing-a-complaint/.
- You may file a medical-privacy complaint with the Texas Attorney General Consumer Protection Division at https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint or by calling 800-621-0508.
- Complaints about nursing practice may be submitted to the Texas Board of Nursing at https://bon.texas.gov/discipline_and_complaints_policies_and_guidelines_filecomplaint.asp.html, by calling 512-305-6838 or 800-821-3205, or by mailing Texas Board of Nursing, Enforcement, 1801 Congress Avenue, Suite 10-200, Austin, Texas 78701.
- Complaints about a physician or another Texas Medical Board licensee may be submitted at https://www.tmb.state.tx.us/resources/for-the-public/complaint-about-licensee or by calling 800-201-9353.
- We will not retaliate against you for filing a complaint or exercising a privacy right.
Your Choices
For certain information, you may tell us your preferences about what we share. Tell us what you want us to do, and we will follow your instructions when the law allows.
Family friends and others involved in your care
You may tell us whether to share information with family members, close friends, or others involved in your care or payment for care. If you cannot tell us your preference, we may share limited information when we reasonably believe it is in your best interest or when needed to reduce a serious and imminent threat to health or safety.
Marketing photographs testimonials and social media
- We will obtain your written authorization before using identifiable before-and-after photographs, videos, testimonials, or protected health information for advertising, marketing, training open to the public, or social media, unless a specific legal exception applies.
- You may refuse a marketing or photography authorization without affecting your treatment or payment.
- You may revoke an authorization in writing at any time, except to the extent we already relied on it. Revocation cannot require us or others to remove material already lawfully distributed, copied, or shared before the revocation.
- We will not sell your protected health information without your written authorization, except as permitted by law.
Fundraising
We do not currently conduct fundraising using patient health information. If this changes, you will have the right to opt out of future fundraising communications.
How We Use and Share Health Information
We typically use or share health information in the following ways without obtaining a separate authorization, as permitted by law.
Treat you
We may use your information and share it with physicians, advanced practice registered nurses, nurses, pharmacists, laboratories, consultants, medical directors, and other professionals involved in your care. For example, we may discuss relevant medical history with a consulting clinician when coordinating a treatment plan or managing a complication.
Run our practice
We may use and share information to operate the practice, improve quality and safety, train workforce members, conduct audits, manage scheduling and inventory, review outcomes, and contact you about your care. Clinical photographs may be used internally for treatment planning, documentation, quality review, and lawful health-care operations.
Obtain payment
We may use and share information to collect payment, process transactions, verify benefits when applicable, address financing or billing questions, and coordinate with payment or billing service providers. We will disclose only the information reasonably necessary for the purpose.
Communicate with you
We may use contact information to send appointment reminders, pre-care and aftercare instructions, refill or follow-up messages, safety information, and other communications related to your care. You may request a different reasonable communication method.
Work with business associates
We may share protected health information with vendors that perform services for us, such as electronic health-record, patient-portal, secure communications, billing, storage, legal, accounting, or technology services. When required, these vendors must contractually safeguard the information and use it only for permitted purposes.
Other Uses and Disclosures Allowed or Required by Law
We may also use or disclose information for the following purposes after meeting applicable legal conditions:
- Public health and safety. Preventing or controlling disease; reporting adverse events, product problems, or recalls; reporting suspected abuse, neglect, or domestic violence; and preventing or reducing a serious threat to health or safety.
- Health oversight. Audits, inspections, investigations, licensure, disciplinary proceedings, and other activities authorized by law.
- Compliance with law. Disclosures required by federal, state, or local law, including disclosures to the U.S. Department of Health and Human Services to demonstrate compliance with federal privacy law.
- Research. Research approved or otherwise permitted under applicable privacy requirements.
- Workers compensation. Workers’ compensation and similar programs as authorized by law.
- Law enforcement and government functions. Disclosures for lawful law-enforcement requests, correctional institutions, military and national-security functions, protective services, or other government activities authorized by law.
- Legal proceedings. Responses to a court or administrative order, subpoena, discovery request, or other lawful process, subject to applicable safeguards.
- Decedents and donation. Disclosures to coroners, medical examiners, funeral directors, and organ or tissue donation organizations as permitted by law.
Additional Protections Under Texas Law
Texas law may provide protections that are more restrictive than federal law. We will follow the law that gives your information greater protection when it applies.
- The Standard Aesthetics will not use or disclose protected health information for marketing without clear and unambiguous permission when Texas law requires it.
- We will not disclose protected health information in exchange for direct or indirect payment except as authorized by state or federal law.
- Your protected health information may be subject to electronic disclosure for treatment, payment, health-care operations, secure recordkeeping, coordination with service providers, and other lawful purposes. We will provide notice and obtain a separate authorization for an electronic disclosure when Texas law requires one.
- We will provide access to records within the time required by applicable Texas or federal law. Instructions for requesting records and filing complaints appear in this notice and on our website.
Substance Use Disorder Records
The Standard Aesthetics is not a federally assisted substance use disorder treatment program. However, if we receive substance use disorder patient records protected by 42 C.F.R. Part 2, we will not use or disclose those records in a civil, criminal, administrative, or legislative investigation or proceeding against you without your written consent or a qualifying court order and subpoena, as required by law.
Our Responsibilities
- We are required by law to maintain the privacy and security of protected health information.
- We will notify affected individuals promptly if a breach occurs that may have compromised the privacy or security of their information, as required by law.
- We must follow the duties and privacy practices described in the notice currently in effect and provide a copy upon request.
- We will not use or disclose information for a purpose not described in this notice unless you authorize it in writing or the law otherwise permits or requires the use or disclosure.
- If you give written authorization, you may revoke it in writing at any time, except to the extent that we have already relied on it.
Changes to This Notice
We may change the terms of this notice, and the changes may apply to all health information we maintain, including information created or received before the change. A revised notice will be available upon request, at our office, and on our website. The revised notice will state its effective date.
Questions and Requests
For questions, privacy complaints, requests for records, amendments, confidential communications, restrictions, accountings of disclosures, or a paper copy of this notice, contact the Privacy Official listed at the beginning of this notice. Please do not send detailed medical information through ordinary email or text message. We will provide a secure method when needed.