Privacy Policy
Overview
GENEVA Primary Care & Med Spa (“GENEVA,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of our patients and website visitors. This Privacy Policy explains how we collect, use, protect, and disclose personal information in connection with our medical services, aesthetic treatments, and digital platforms.
This policy applies to all individuals who interact with our practice, including patients, prospective patients, website visitors, and anyone who uses our online services or communicates with us electronically.
By using our services or visiting our website, you acknowledge that you have read and understood this Privacy Policy.
Types of Information We Collect
Patient Health Information
As a healthcare provider, we collect and maintain protected health information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA). This includes:
- Medical history and current health conditions
- Treatment records and clinical notes
- Diagnostic test results and imaging
- Prescription and medication information
- Billing and payment records
- Before-and-after treatment photographs (with consent)
- Physical characteristics relevant to treatment planning
Personal Contact Information
We collect basic identifying information necessary for patient care and communication:
- Full name and preferred name
- Date of birth and age
- Home address and mailing address
- Phone numbers (mobile and landline)
- Email addresses
- Emergency contact information
- Preferred communication methods
Financial and Payment Data
GENEVA is a self pay practice. We do not bill health insurance and we do not submit claims on your behalf. If you intend to seek reimbursement yourself, you may ask our team for an itemised receipt. For billing and payment processing, we may collect:
- Credit card and payment method information
- Billing addresses
- Financial assistance or payment plan information
- Transaction history and payment records
Website and Digital Information
When you visit our website or use our digital services, we automatically collect:
- IP address and geographic location
- Browser type and operating system
- Device information and screen resolution
- Pages visited and time spent on site
- Referral sources and exit pages
- Cookie and tracking data
Communication Records
We maintain records of all communications, including:
- Phone call logs and voicemail messages
- Email correspondence
- Text messages and secure messaging
- Appointment scheduling communications
- Survey responses and feedback
How We Use Your Information
Primary Care and Medical Services
- Providing medical diagnosis, treatment, and ongoing care
- Coordinating care with specialists and other healthcare providers
- Maintaining accurate medical records
- Prescription management and medication monitoring
- Scheduling appointments and sending reminders
Aesthetic and Spa Services
- Conducting consultations and treatment planning
- Documenting treatment progress with photographs
- Recommending appropriate aesthetic procedures
- Following up on treatment outcomes
- Managing aesthetic treatment schedules
Administrative Operations
- Processing payments and issuing receipts
- Managing patient accounts and payments
- Responding to patient inquiries and concerns
- Maintaining facility security and safety
Quality Improvement
- Analyzing treatment outcomes and patient satisfaction
- Improving our services and patient experience
- Training staff and maintaining clinical standards
- Conducting internal audits and assessments
Legal and Regulatory Compliance
- Meeting HIPAA and state privacy requirements
- Responding to legal requests and court orders
- Reporting required public health information
- Maintaining records as required by law
Information Sharing and Disclosure
Healthcare-Related Sharing
We may share your health information with:
- Treatment Partners: Other healthcare providers involved in your care
- Business Associates: Third-party vendors who help us provide healthcare services
- Family Members: With your written authorization or in emergency situations
- Specialists: For referrals and coordinated care
Required Disclosures
We may disclose information when required by law:
- Public health authorities for disease reporting
- Government agencies during audits or investigations
- Law enforcement in specific circumstances
- Courts pursuant to valid legal orders
- Workers’ compensation programs when applicable
Marketing and Communications
With your consent, we may use your information for:
- Appointment reminders and follow-up care
- Health education and wellness tips
- Information about new services and treatments
- Special offers and promotions
- Patient satisfaction surveys
We do not sell your personal information to third parties.
Photographs and Marketing Use
We photograph treatment areas as part of your clinical record. That is how your provider tracks change over time, and it is part of your care.
Whether those photographs may also be used publicly, for example on our website, in a before and after gallery, or on social media, is a separate decision and it is yours. You make that choice on the intake forms you complete at your visit, where you may agree or decline. Declining does not affect your care or your treatment options in any way.
You can change your decision at any time by telling any member of our team or writing to careteam@geneva-med.com. If you withdraw permission we will stop using the photographs going forward, though we may be unable to recover material that has already been printed or shared by others. Where you have not agreed, your photographs are used for your clinical record only.
Your Privacy Rights
Access and Review
You have the right to:
- Review and obtain copies of your medical records
- Request corrections to inaccurate information
- Receive an accounting of disclosures we have made
- Request restrictions on how we use your information
Communication Preferences
You may:
- Choose how we contact you (phone, email, mail, text)
- Opt out of marketing communications
- Request confidential communications
- Designate someone to receive information on your behalf
How to Exercise Your Rights
To exercise any privacy rights:
- In Person: Visit our office during business hours (Monday to Friday, 9:00 am to 5:00 pm; Saturday, 9:00 am to 4:00 pm)
- By Phone: Call us at (470) 704-9687
- By Email: Send a written request to careteam@geneva-med.com
- By Mail: Write to us at 3275 North Point Pkwy #204, Alpharetta, GA 30005
We will respond to your request within 30 days and may require identity verification.
Data Security and Protection
Physical Safeguards
- Secured facility with restricted access
- Locked filing cabinets for paper records
- Private consultation and treatment rooms
- Controlled access to medical areas
Technical Safeguards
- Encrypted electronic health records systems
- Secure data transmission protocols
- Regular software updates and security patches
- Multi-factor authentication for staff access
- Automatic logoff and screen locks
Administrative Safeguards
- HIPAA-compliant policies and procedures
- Regular staff training on privacy practices
- Background checks for all employees
- Incident response and breach notification procedures
- Regular security risk assessments
Website Privacy and Cookies
Cookie Usage
Our website uses cookies to:
- Remember your preferences and settings
- Analyze website traffic and usage patterns
- Improve site functionality and user experience
- Provide relevant content and services
You can control cookie settings through your browser preferences.
Analytics and Advertising
Our website uses analytics and advertising technologies provided by third parties:
- Google Analytics 4: to understand how visitors find and use our website
- Google Ads: to measure the performance of our search and display advertising
- Meta advertising (Facebook and Instagram): to measure and target our advertising
- TikTok advertising: to measure and target our advertising
These technologies use cookies and similar identifiers to collect device, location and browsing information, and they may be used to show you our advertising after you leave our website. They do not receive your medical records or any protected health information.
You can limit this tracking through your browser cookie settings, through the ad and privacy settings offered by Google, Meta and TikTok, and through browser level privacy signals where they are supported.
Other Third-Party Services
Our website may also include:
- Appointment Scheduling: For online booking
- Payment Processing: For secure transactions
- Communication Tools: For patient messaging
These services have their own privacy policies, which we encourage you to review.
Text Messaging
We use text messaging for appointment reminders, care follow up, results notifications and practice updates. Consent to receive text messages from us is given on the intake forms you complete at your visit.
You can withdraw that consent at any time by replying STOP to any message, by telling any member of our team, or by writing to careteam@geneva-med.com. Withdrawing consent to marketing messages does not stop essential communications about your care, and it does not affect your treatment. Message and data rates may apply.
Text messaging is not a secure channel. Please do not use it for urgent medical concerns or to send detailed health information.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
Data Retention
We retain your information as long as necessary for:
- Providing ongoing medical care
- Meeting legal and regulatory requirements
- Defending against potential legal claims
- Billing and payment purposes
Medical records are typically retained for a minimum of 10 years after your last visit, or longer as required by Georgia state law.
Children’s Privacy
We provide medical services to patients of all ages. For patients under 18:
- Parents or guardians must provide consent for treatment
- We follow Georgia laws regarding minor consent
- Certain sensitive health information may be kept confidential from parents when legally permitted
- We limit collection of personal information to what is necessary for medical care
Changes to This Policy
We may update this Privacy Policy to reflect:
- Changes in our practices or services
- New legal or regulatory requirements
- Improvements to our privacy protections
- Updates to technology we use
We will notify you of material changes by:
- Posting updates on our website
- Sending email notifications to current patients
- Providing written notice at your next appointment
Contact Information
For questions about this Privacy Policy or our privacy practices:
GENEVA Primary Care & Med Spa
3275 North Point Pkwy #204
Alpharetta, Georgia 30005
Phone: (470) 704-9687
Email: careteam@geneva-med.com
Website: geneva-med.com
Privacy Officer: Megha Jerath
Email: megha@geneva-med.com
HIPAA Notice of Privacy Practices
This Privacy Policy supplements our HIPAA Notice of Privacy Practices, which provides additional details about how we protect your health information. You may request a copy of our complete HIPAA notice at any time.
Compliance and Complaints
If you believe your privacy rights have been violated, you may:
- File a complaint with our Privacy Officer
- Contact the Georgia Department of Public Health
- File a complaint with the U.S. Department of Health and Human Services
We will not retaliate against you for filing a privacy complaint.
This Privacy Policy is designed to comply with HIPAA, Georgia state privacy laws, and applicable federal regulations.