HIPAA Notice of Privacy Practices

Effective Date: July 22, 2026

This Notice of Privacy Practices describes how your medical information may be used and disclosed and how you can access this information. Please review it carefully.

At X-Tat, we are committed to protecting the privacy and confidentiality of your health information. Federal law requires us to maintain the privacy of your Protected Health Information (PHI), provide you with this notice of our legal duties and privacy practices, and follow the terms of the notice currently in effect.

Our Commitment to Your Privacy

Your health information is personal. We are dedicated to safeguarding your medical records and maintaining the confidentiality of your Protected Health Information in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable federal and Florida privacy laws.


Protected Health Information (PHI) includes information that identifies you and relates to your past, present, or future physical or mental health condition, the healthcare services you receive, or payment for those services.

How We May Use and Disclose Your Health Information
The following categories describe the ways we may use or disclose your health information without requiring your written authorization.
Treatment

We may use and share your health information to provide, coordinate, and manage your tattoo removal treatment.

Examples include:

  • Reviewing your medical history
  • Evaluating skin type and tattoo characteristics
  • Assessing treatment eligibility
  • Developing a personalized laser tattoo removal treatment plan
  • Coordinating care with other healthcare providers, when appropriate
  • Documenting treatment progress
  • Taking clinical photographs for your medical record
Payment

We may use and disclose your information as necessary to obtain payment for services provided.

Examples include:

  • Processing payments
  • Providing receipts or invoices
  • Collecting outstanding balances
  • Providing documentation related to billing, when necessary
Healthcare Operations

We may use your information to support our business operations and improve patient care.

Examples include:

  • Quality assurance activities
  • Staff education and training
  • Compliance reviews
  • Licensing and accreditation requirements
  • Internal audits
  • Risk management
  • Administrative operations
Appointment Reminders

We may contact you regarding:

  • Upcoming appointments
  • Follow-up visits
  • Scheduling changes
  • Recommended treatment intervals
  • Missed appointments

Communications may be sent by:

  • Phone
  • Voicemail
  • Email
  • Text message
  • Patient communication platforms
Health-Related Communications

We may contact you regarding services or information related to your care, including:

  • Laser tattoo removal education
  • Pre-treatment instructions
  • Post-treatment care
  • Healing recommendations
  • New treatment options
  • Practice updates
Individuals Involved in Your Care

Unless you object, we may share relevant health information with family members, caregivers, or other individuals involved in your care or payment for your care.

Public Health and Legal Requirements

We may disclose your health information when required or permitted by law, including:

  • Public health reporting
  • Health oversight activities
  • Government investigations
  • Court orders
  • Law enforcement requests
  • Regulatory compliance
  • Preventing serious threats to health or safety
Business Associates

We may share information with trusted third-party vendors who perform services on our behalf, including:

  • Electronic medical record providers
  • Appointment scheduling software
  • Payment processors
  • Secure cloud storage providers
  • Technology vendors
  • Practice management software providers

These organizations are required by law to safeguard your information.

Uses and Disclosures Requiring Your Authorization

Certain uses and disclosures of your Protected Health Information require your written
authorization.

Examples include:

  • Marketing activities not otherwise permitted under HIPAA
  • Releasing medical records to third parties at your request
  • Certain research activities
  • Uses not specifically described in this Notice

You may revoke your authorization at any time in writing, except where action has already been taken in reliance upon your authorization.

Your Rights Regarding Your Health Information

You have the following rights regarding your Protected Health Information.

Right to Access Your Records
You have the right to inspect and obtain a copy of your medical records, subject to applicable legal requirements.
Right to Request Corrections
If you believe information contained in your medical record is incorrect or incomplete, you may request an amendment.
Right to Request Restrictions
You may request limitations on how we use or disclose your information. While we will consider every request, we are not required to agree to all requested restrictions.
Right to Request Confidential Communications

You may request that we communicate with you using specific methods or at specific locations.

Examples include:

  • Alternate mailing addresses
  • Specific phone numbers
  • Email communications
Right to Receive an Accounting of Disclosures

You may request a record of certain disclosures we have made regarding your Protected Health Information.

Right to Receive a Copy of This Notice
You may request a paper copy of this Notice at any time, even if you have agreed to receive it electronically.

Our Responsibilities

X-Tat is required by law to:

  • Maintain the privacy and security of your Protected Health Information
  • Provide you with this Notice of Privacy Practices
  • Notify you if a breach involving unsecured Protected Health Information occurs, when required by law
  • Follow the privacy practices described in this Notice

We reserve the right to revise this Notice at any time. Any changes will apply to all Protected Health Information maintained by our practice. Updated versions will be posted on our website and made available upon request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with X-Tat or with the U.S. Department of Health and Human Services.

You will not be retaliated against for filing a complaint.

To submit a privacy concern or complaint, please contact our office using the information below.

Contact Information

X-Tat
Phone: (561) 930-9828 · (561) 930-XTAT
Email:l info@x-tat.com
Address: 2401 N Federal Highway, Unit B, Boca Raton, FL 33431