Privacy Policy
Updated October 15, 2026
This policy explains information practices for Aevua Medical Spa at 449 W Mt Pleasant Ave, Suite 1, Livingston, NJ 07039 and www.aevua.com. Contact our Privacy Contact at contact@aevua.com or (973) 313-5601. The full Notice of Privacy Practices below governs protected clinical information. This website policy is a notice, not consent to treatment, marketing, or disclosure of medical records.
Information and purposes
We collect information you provide when contacting us, booking, purchasing, enrolling, or receiving care: contact and identity details, appointment information, payment and membership records, communications and consent preferences. Clinical records may include health history, allergies, medications, assessments, treatment details, clinical photographs and follow-up. Payment providers process payment information. Website systems may collect IP addresses, device and browser information, pages visited, referral information and cookie identifiers.
We use information to respond to requests, deliver and document care, schedule appointments, process authorized payments, administer memberships, maintain security, meet legal obligations and improve services. Marketing communications and optional tracking are subject to the choices and consent required by law. A website visit or contact inquiry does not authorize unrelated automated marketing or public use of your health information.
Sharing and safeguards
We use providers for scheduling, records, communications, payments, hosting and other support. They may process information as needed for those services, with appropriate contractual safeguards and business associate agreements where required. Clinical information is disclosed only as permitted by the notice below and applicable law. A subpoena or informal request does not automatically authorize disclosure. Any lawful business transfer remains subject to applicable privacy duties and required notices or consent.
We use safeguards appropriate to the information and retain records for applicable legal, clinical and business retention periods. No system can guarantee absolute security. Required breach notices will be provided within applicable deadlines; HIPAA individual notices, when required, are provided without unreasonable delay and no later than 60 days after discovery. A deletion request does not require destruction of records we must lawfully retain.
Cookies, analytics and advertising choices
Necessary technologies support site operation and security. Optional analytics and advertising technologies may process browsing activity and identifiers to measure usage or advertising and deliver relevant advertising. Such data is not necessarily anonymous. Certain advertising disclosures may count as a sale or sharing under applicable privacy law even when no money is exchanged.
Use the website cookie preferences to accept or decline optional categories and change your choice. Browser settings may also block cookies, although some functions may stop working. Contact our Privacy Contact to request an opt-out of targeted advertising or any sale or sharing. Where applicable law requires recognition of a universal opt-out signal, such as Global Privacy Control, that signal must be honored. A browser's older Do Not Track setting is distinct from those legally recognized signals. Consent to cookies is not permission to disclose protected medical information for advertising.
Communication preferences
Our patient contact form distinguishes care and account communications from marketing. Providing a number or email alone is not a general marketing authorization. Marketing SMS requires separate affirmative consent where required; it is optional and not a condition of purchase. Message frequency varies and message and data rates may apply. Reply STOP to opt out, HELP for assistance, or call/email us. We honor reasonable revocation requests within the applicable deadline, no later than 10 business days where that rule applies. A permitted confirmation may follow. Contact us to re-enroll; a new marketing consent may be needed.
We do not sell or share mobile opt-in consent information with third parties for their own marketing. Messaging vendors may process it to deliver our messages. Email marketing has an unsubscribe option. Ask for a preferred contact method or confidential communications. Ordinary email and SMS may be intercepted, misdirected or viewed by others; choosing them does not waive privacy rights or excuse our duties. Ask us for an appropriate secure channel before sending medical details. Do not use website forms, email or SMS for emergencies; call 911.
Your rights and requests
Contact contact@aevua.com or (973) 313-5601 to request access, correction, deletion, a portable copy, or an applicable advertising opt-out. We may verify identity or an authorized agent's authority using proportionate information. Please do not send an identity document or medical history through ordinary email unless we arrange an appropriate method.
Where the New Jersey Data Privacy Act applies to our processing and your information, eligible consumers may access, correct, delete and obtain portable data, and opt out of sale, targeted advertising and specified consequential profiling. Sensitive data receives the consent protections required by law. Statutory exemptions, including for certain regulated health information, may apply. We respond within 45 days, with a permitted additional 45 days explained within the initial period. If we decline a request, you may appeal by contacting us with “Privacy Appeal”; we explain the outcome and any available complaint route within the applicable legal deadline.
Where another law, including California privacy law or the EU/UK GDPR, applies, we honor the rights and deadlines it provides, including applicable access, correction, deletion, portability, restriction, objection, withdrawal of consent, sale/sharing opt-outs and regulator complaints. Exercising a protected privacy right will not result in unlawful discrimination. These laws do not apply solely because a person visits the site from a particular location.
Requests for clinical records follow the specific rights and deadlines in the Notice of Privacy Practices below rather than the general 45-day website-request period. Declining an optional authorization does not waive access to care. Consent withdrawal acts prospectively and does not undo lawful earlier processing.
Children, external sites and changes
The public website is intended for adults arranging services, not for children under 13 to submit information. Contact us if a child has submitted information through a general website form. We will address it as required by law while preserving records that must be retained. Minor-patient consent, representative access and confidentiality are determined by applicable law and the proposed service, not simply by website use.
External websites have their own practices. We update this page when practices change and provide any additional notice or consent required by law. Continued browsing is not a new health-information authorization or marketing consent. You may request a paper copy or complain without retaliation.
Notice of Privacy Practices
Effective October 13, 2026. Aevua Medical Spa, 449 West Mount Pleasant Avenue, Suite 1, Livingston, NJ 07039. Privacy Contact: contact@aevua.com | (973) 313-5601. This notice applies to health information maintained by Aevua for care at this location. Independent providers may give you a separate notice for records they maintain.
Please review this notice carefully
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
Your privacy rights
Contact our Privacy Contact to exercise the rights below, ask questions, request a paper copy, or make a complaint. We may verify your identity or a representative’s authority. Please do not send medical details in ordinary email; ask us for a secure way to provide them.
Access to your records
You may inspect or request an electronic or paper copy of medical and billing records and other information used to make decisions about you, subject to limited legal exceptions. We generally respond within 30 days, or sooner when law requires. If a permitted extension is needed, we explain the reason and deadline in writing. Any copy fee will be reasonable, cost-based, and permitted by law. If access is denied, we explain the reason and any available review rights.
Corrections
You may ask us to amend information you believe is incorrect or incomplete and explain why. We generally respond within 60 days. If we deny the request, we explain in writing and tell you how to submit a statement of disagreement. We will notify you of any extension allowed by law.
Private communications and restrictions
You may request reasonable alternative ways or locations for communications, such as a different telephone number or mailing address. We accommodate reasonable requests. You may also ask us to limit uses or disclosures for treatment, payment, or operations. We need not agree to every restriction, but must follow those we accept, subject to legal exceptions. If you pay in full out of pocket for an item or service and ask us not to disclose related information to your health plan for payment or operations, we will honor that request unless disclosure is required by law.
Accounting, copies, and representatives
You may request an accounting of certain disclosures during the previous six years. This excludes treatment, payment, operations, authorized disclosures, and other legally excluded disclosures. One accounting in any 12-month period is free; we will explain any permitted charge for additional requests in advance. You can obtain a paper copy of this notice promptly even if you accepted it electronically. A legally authorized personal representative may exercise your rights, subject to applicable law; we verify that authority.
How we use and disclose health information
We may use or disclose health information for the following purposes only as permitted by applicable law. Where New Jersey or another applicable law requires consent or provides stronger protection, we follow that rule.
Treatment, payment, and practice operations
Treatment: We use information to evaluate your suitability for care, plan treatment, provide aftercare, and coordinate with professionals involved in your care. For example, a treating clinician reviews your allergies before treatment. Payment: We use information to prepare bills, collect payment, and resolve billing questions; where applicable and permitted, this can include a health plan or other payer. Operations: We use information to administer the practice, review quality, train authorized personnel, and manage services. Vendors handling protected information on our behalf must have the safeguards and agreements required by law. We may contact you about appointments, care, treatment alternatives, or health-related services as permitted by law.
Family, caregivers, and emergencies
You may tell us whether information relevant to your care or payment may be shared with family, friends, or others involved. We give you an opportunity to agree or object when practicable. If you cannot express a preference, we may make limited disclosures based on professional judgment and your best interests, where law permits. Similar rules may apply to disaster-relief notifications.
Other permitted or required disclosures
Subject to legal conditions, information may be used or disclosed for public health reporting; reporting adverse reactions and product recalls; suspected abuse, neglect, or domestic violence; preventing a serious and imminent threat; approved or otherwise legally permitted research; health oversight; workers’ compensation; organ or tissue donation; and coroners, medical examiners, or funeral directors. Disclosure may also be permitted or required for law enforcement, court or administrative proceedings, and authorized military, national-security, or protective functions. A request or subpoena alone does not override required protections. We assess applicable consent, notice, court-order, and other requirements before disclosure. We disclose information to HHS when required to assess compliance.
Specially protected information
Additional federal or New Jersey protections may apply to HIV/AIDS, genetic, mental-health, reproductive-health, and substance-use-disorder records. We obtain any additional consent required and limit disclosure to what the applicable law allows. If we receive substance-use-disorder records protected by 42 CFR Part 2, we will not use or disclose those records in civil, criminal, administrative, or legislative investigations or proceedings against you without your written consent or a qualifying court order and a subpoena or comparable legal mandate, as required by Part 2. These protections apply even when another disclosure described above would otherwise be allowed.
Uses requiring written authorization
Uses or disclosures not described in this notice require your written authorization unless otherwise permitted or required by law. Most uses or disclosures of psychotherapy notes, marketing uses that require authorization, and a sale of protected health information require a separate authorization. Using identifiable treatment photographs or testimonials for publicity requires separate written permission; signing a treatment form or this notice’s receipt acknowledgment is not that permission. You may revoke an authorization in writing through our Privacy Contact. Revocation applies going forward and does not undo actions already taken in reliance on a valid authorization.
Fundraising choices
If we contact you for fundraising, you may opt out of future fundraising communications without affecting treatment or payment. If protected Part 2 information is involved, we provide clear advance notice and a choice not to receive those communications, as required by law.
Our duties
We are required to protect the privacy of protected health information, provide this notice, and follow the notice currently in effect. We maintain safeguards required by applicable law and notify affected individuals after a breach of unsecured protected health information as required by law. Information disclosed to a recipient may be redisclosed and may no longer be protected by HIPAA, although other laws, including Part 2 where applicable, may continue to protect it. We do not treat a website visit or general contact-form submission as authorization to disclose your medical records.
Questions and complaints
Contact Aevua’s Privacy Contact at contact@aevua.com, (973) 313-5601, or by mail at the address above, Attention: Privacy Contact. You may also complain to the U.S. Department of Health and Human Services, Office for Civil Rights, at https://www.hhs.gov/hipaa/filing-a-complaint/index.html, by calling 1-877-696-6775, or by writing to 200 Independence Avenue SW, Washington, DC 20201. We will not retaliate or deny care because you make a privacy complaint.
Changes and acknowledgment
We may change this notice and apply the revised terms to information we already maintain and information received later, as permitted by law. The current notice is available on our website, at the practice, and on request; revisions show their effective date. We ask you to acknowledge receiving the notice. Signing acknowledges receipt only: it does not waive rights, authorize marketing or photographs, or authorize additional disclosures. You may decline to sign and still receive care. Staff will document the attempt to provide the notice and the reason an acknowledgment could not be obtained, if known.