Last updated: June 14, 2026
This Consumer Health Data Privacy Policy describes how Aurevia Skincare collects, uses, and shares consumer health data as defined under Washington's My Health My Data Act and similar state laws, and how it relates to health information collected in our Irvine clinic.
What Is Consumer Health Data?
Consumer health data includes personal information linked or reasonably linkable to a consumer that identifies the consumer's past, present, or future physical or mental health status. At Aurevia, this may include:
- Medical history and intake forms
- Treatment records, photos, and progress notes
- Information about aesthetic concerns, allergies, medications, and contraindications
- Biometric or diagnostic data collected during assessment when applicable
How We Collect Health Data
We collect health data directly from you during consultations, treatment visits, forms, and communications. We may also receive information from referring providers if you authorize disclosure.
How We Use Health Data
- Evaluate candidacy and deliver safe, appropriate treatments
- Maintain clinical records and provide follow-up care
- Bill for services and comply with insurance or regulatory requirements where applicable
- Improve clinical protocols and train staff (using de-identified data where possible)
We do not use consumer health data for targeted advertising without your separate consent where required by law.
How We Share Health Data
We may share consumer health data with:
- Providers and staff involved in your care
- Business associates and service providers under confidentiality agreements (e.g., secure record storage, payment processing)
- Regulators, courts, or law enforcement when required by law
- Other parties with your written authorization
We do not sell consumer health data.
Your Rights
Where applicable, you may have the right to confirm whether we are collecting or sharing your consumer health data, access your data, withdraw consent for certain processing, and request deletion, subject to legal and clinical record retention requirements.
Submit requests to msavoia62@gmail.com with subject line "Health Data Request".
HIPAA Notice
Some information may also be protected under the Health Insurance Portability and Accountability Act (HIPAA) when Aurevia acts as a covered entity or business associate. Where HIPAA applies, HIPAA governs to the extent of any conflict with state consumer health data laws.