LEGAL & POLICIES

Notice of Privacy Practices

Effective Date: August 31, 2026

Covered Entity: Pravan Health LLC

Your Information. Your Rights. Our Responsibilities.

This Notice of Privacy Practices describes how medical information about you may be used and disclosed, how you may access that information, and the rights you have regarding your protected health information.

Please review it carefully.

Pravan Esthetics operates under Pravan Health LLC. This notice applies to protected health information created, received, maintained, or transmitted in connection with services offered by Pravan Health LLC, including services offered under Pravan Esthetics.

Who Will Follow This Notice

This notice describes the privacy practices of Pravan Health LLC and the people and operations that support services offered under Pravan Health and Pravan Esthetics.

This may include:

Healthcare professionals involved in your care
Employees and staff
Contractors and service providers whose work involves protected health information
Volunteers and other authorized personnel
Administrative, billing, scheduling, compliance, and support teams
Other individuals legally authorized to participate in your care or healthcare operations

These individuals and operations may use or disclose protected health information for treatment, payment, healthcare operations, and other purposes permitted or required by law.

A healthcare professional may follow a separate Notice of Privacy Practices for services provided outside Pravan Health LLC.

Our Commitment to Your Medical Information

Pravan Health LLC understands that medical information about you and your health is personal.

We are committed to protecting health information that we create, receive, maintain, or transmit in connection with your care and services.

Protected health information may include information that identifies you and relates to:

Your past, present, or future physical or mental health
Healthcare services provided to you
Treatment recommendations or clinical documentation
Payment for healthcare services
Appointments and communications related to your care

We maintain records of the services you receive as necessary for treatment, payment, healthcare operations, professional responsibilities, and compliance with applicable law.

Your Rights

You have certain rights regarding your health information. This section explains those rights and how you may exercise them.

Get a Copy of Your Medical Record

You may ask to see or receive an electronic or paper copy of your medical record and other health information we maintain about you.

We will provide access, a copy, or a summary within the time required by law.

We may charge a reasonable, cost-based fee when permitted.

Ask Us to Correct Your Medical Record

You may ask us to correct health information that you believe is inaccurate or incomplete.

We may deny your request in certain circumstances. If we do, we will explain the reason in writing within the time required by law.

Request Confidential Communications

You may ask us to contact you in a particular way or at a different location.

For example, you may ask us to:

Call a specific telephone number
Avoid leaving detailed voicemail messages
Use a particular email address
Send correspondence to another address
Use an approved application or communication method

We will accommodate reasonable requests.

Ask Us to Limit What We Use or Share

You may ask us not to use or share certain health information for treatment, payment, or healthcare operations.

We are not always required to agree to the request.

If we agree to a restriction, we will follow it unless the information is needed for emergency treatment or another legal exception applies.

Ask Us Not to Share Information With a Health Plan

If you pay in full, out of pocket, for a healthcare service or item, you may ask us not to share information about that service or item with your health plan for payment or healthcare operations.

We will agree unless the disclosure is required by law.

Get a List of Certain Disclosures

You may ask for a list showing certain disclosures of your health information. This is known as an accounting of disclosures.

The list generally covers the six years before your request.

It does not include every use or disclosure, such as disclosures made for treatment, payment, healthcare operations, or disclosures you authorized.

We will provide one accounting during a 12-month period at no charge. We may charge a reasonable, cost-based fee for additional requests during the same period.

Get a Copy of This Notice

You may request a paper or electronic copy of this notice at any time, even if you previously agreed to receive it electronically.

Choose Someone to Act for You

If another person has legal authority to act as your personal representative, that person may exercise your privacy rights and make decisions about your health information.

We will verify that person’s authority before taking action.

Request a Transfer or Disclosure of Records

You may request that we send your medical records or other health information to another healthcare professional or authorized recipient.

We may require a valid written authorization or another legally permitted form of approval before transferring records.

Requests will be handled according to applicable law, identity-verification requirements, and applicable record-release procedures.

File a Privacy Complaint

You may file a complaint if you believe your privacy rights have been violated.

You may contact the privacy representative listed at the end of this notice.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

We will not penalize or retaliate against you for filing a complaint or exercising your privacy rights.

Your Choices

For certain health information, you may tell us what you prefer.

People Involved in Your Care

You may tell us whether we may share relevant information with a family member, close friend, caregiver, personal representative, or another person involved in your care or payment for your care.

If you cannot communicate your preference, we may share limited information when we believe the disclosure is in your best interest and is permitted by law.

We may also share information when necessary and legally permitted to reduce a serious and immediate threat to health or safety.

Disaster Relief

We may share limited information with an authorized disaster-relief organization when permitted by law and reasonably necessary to help locate or notify people involved in your care.

Marketing and Fundraising

We will obtain written authorization before using or disclosing protected health information for marketing when required by law.

Certain communications about your treatment, care options, or health-related services may be permitted without authorization.

If we contact you about fundraising activities, you may ask us not to contact you again for that purpose.

Sale of Health Information

We will not sell protected health information without your written authorization when authorization is required by law.

Psychotherapy Notes

Most uses and disclosures of psychotherapy notes require written authorization when those records are maintained and the applicable legal requirements apply.

How We May Use or Share Health Information

We may use or share protected health information without written authorization for the purposes described below, subject to applicable law.

Treatment

We may use and share your health information to provide, coordinate, or manage your care.

For example, a member of your care team may share relevant information with another healthcare professional involved in your treatment.

We may also share records with another healthcare professional or facility when needed to coordinate or continue your care, subject to applicable law and authorization requirements.

Payment

We may use and share health information to:

Bill for services
Process payments
Collect amounts due
Maintain transaction records
Communicate with a health plan or another payer when applicable
Resolve payment or billing questions

Healthcare Operations

We may use and share health information to operate the practice and support activities such as:

Managing services
Reviewing quality of care
Evaluating staff or contractor performance
Training team members
Maintaining records
Conducting audits
Supporting licensing and compliance
Responding to grievances or legal matters
Meeting contractual and administrative obligations
Improving practice operations

Appointment and Care Communications

We may use your contact information to send:

Appointment confirmations
Reminders
Scheduling messages
Follow-up communications
Information related to your care
Information about treatment alternatives or health-related services

Depending on the circumstances and your communication preferences, we may communicate through:

Telephone
Email
Text message
An approved application or patient communication platform
Postal mail
Fax
Another legally permitted method

Electronic communications may present privacy or security risks. We use approved methods and reasonable safeguards appropriate to the information and purpose of the communication.

Other Uses and Disclosures Permitted or Required by Law

We may use or disclose health information for other purposes permitted or required by law.

Public Health and Safety

We may disclose information for authorized public-health and safety activities, including:

Preventing or controlling disease, injury, or disability
Reporting deaths when required
Reporting adverse events or product problems
Supporting product recalls
Reporting suspected abuse, neglect, or domestic violence
Notifying people who may have been exposed to a disease
Preventing or reducing a serious threat to health or safety

Health Oversight

We may disclose information to authorized agencies for:

Audits
Inspections
Investigations
Licensing
Disciplinary proceedings
Compliance reviews
Other legally authorized oversight activities

Compliance With the Law

We will disclose health information when federal or Puerto Rico law requires us to do so.

We may also disclose information to the U.S. Department of Health and Human Services when necessary to demonstrate compliance with federal privacy requirements.

Legal and Law-Enforcement Matters

We may disclose health information in response to:

A valid court order
A subpoena
An administrative proceeding
A discovery request
Another lawful request

We will do so only when the applicable legal requirements have been satisfied.

We may also disclose health information for law-enforcement purposes permitted or required by law, including identifying or locating a person, reporting certain crimes, or responding to authorized requests.

Workers’ Compensation

We may disclose health information as permitted or required for workers’ compensation matters or similar programs.

Research

We may use or disclose health information for research when the required legal standards and approvals have been satisfied.

This may include research involving information that does not directly identify you or research approved through an appropriate review process.

Organ and Tissue Donation

We may disclose health information to authorized organizations involved in organ, eye, or tissue donation and transplantation when applicable.

Coroners, Medical Examiners, and Funeral Directors

We may disclose health information to coroners, medical examiners, and funeral directors when permitted by law and necessary for them to perform their duties.

Government Functions

We may disclose health information for certain legally authorized government functions, including:

Military activities
National security
Protective services
Intelligence activities
Correctional activities
Matters involving individuals in lawful custody

Serious Threats to Health or Safety

We may disclose health information when necessary and legally permitted to prevent or reduce a serious threat to your health and safety or the health and safety of another person.

The disclosure will be limited to information relevant to that purpose.

Uses and Disclosures Requiring Authorization

Uses or disclosures not described in this notice generally require your written authorization.

If you authorize us to use or disclose your health information, you may revoke that authorization in writing at any time.

The revocation will not affect information already used or disclosed based on your authorization before we received the revocation.

We may be required to retain records of the care or services provided to you even after an authorization has been revoked.

Additional Protection for Certain Records

Some federal or Puerto Rico laws may provide additional protection for specific types of health information.

This may include information related to:

Mental health services
Psychotherapy notes
HIV status or related testing
Substance use disorder treatment
Genetic information
Sexual or reproductive health information
Other categories protected by applicable law

When another law provides greater protection or places stricter limits on disclosure, we will follow that law.

Certain substance use disorder patient records may receive additional protection under 42 CFR Part 2\\.

When those requirements apply, such records generally may not be used against a patient in a civil, criminal, administrative, or legislative proceeding without the patient’s written consent or a qualifying court order.

Our Responsibilities

We are required by law to:

Maintain the privacy and security of protected health information
Follow the duties and privacy practices described in this notice
Provide you with a copy of this notice
Notify affected individuals when a breach may have compromised the privacy or security of their protected health information
Follow restrictions or confidential communication requests that we have agreed to
Obtain written authorization for uses and disclosures when required
Maintain appropriate records of our privacy practices and activities
Apply additional protections when required by federal or Puerto Rico law

We will not use or share your health information except as described in this notice or as otherwise permitted or required by law.

Changes to This Notice

We may change the terms of this notice and make the revised notice apply to all health information we maintain, including information created or received before the change.

The current version will be available:

Upon request
At the applicable Pravan location
On the website
Through other methods required by law

The notice will display its current effective date.

Privacy Questions, Requests, and Complaints

For questions, privacy requests, medical-record requests, or complaints, contact:

Pravan Health LLC

Privacy and Compliance Contact:

Lyann Rosas

Address:

1509 Ave. de la Constitución, Suite 3

San Juan, Puerto Rico 00909

Phone:

787-339-2639

Email:

info@pravanhealth.com