What’s included
Who needs this form
Every med spa and cash-pay clinic that handles patient information — which is all of them. Built for clinics that need a compliant privacy policy set without paying for custom drafting.
Why this beats the free forms
Many clinics copy a privacy policy from another site that doesn’t match their services or the PHI they actually handle, including before-and-after photos. This pack is scoped to a cash-pay clinic.
How you’ll use it
Download the editable Word files, add your clinic details, post the NPP, and have patients acknowledge it at intake. PDFs included.
Frequently asked questions
Do med spas have to be HIPAA compliant? ▾
If you handle protected health information — which includes patient records and clinical photos — HIPAA obligations generally apply.
What’s in the pack? ▾
A privacy policy, a Notice of Privacy Practices, a patient acknowledgment, photo/media guidance and a staff confidentiality acknowledgment.
Does it cover patient photos? ▾
Yes, photo and media handling guidance is included.
Can I edit it for my clinic? ▾
Yes — everything is editable Word, with PDFs included.
