Effective Date: 6/25/2025

Who We Are

Our website address is: https://taichegriffin.com.

Taiche Professional Medical Services (also known as TPMS Medical Aesthetics) is committed to protecting your privacy and ensuring the security of your personal and health-related information in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable laws.

Information We Collect

When visitors interact with our website or patient portal, we may collect:

  • Information you provide (e.g., name, email, comments, account details)

  • Device/browser data (e.g., IP address, user agent, cookies)

  • Uploaded media or documents

  • Protected Health Information (PHI) when using our patient portal or booking medical services

Comments

When visitors leave comments, we collect the data shown in the comment form, along with the visitor’s IP address and browser user agent string for spam detection. An anonymized string (hash) may be shared with Gravatar to check for a user image. Gravatar’s privacy policy is available at: https://automattic.com/privacy/.

Media

If you upload images to the website, please avoid including location data (EXIF GPS), as visitors may be able to extract such information.

Cookies

We use cookies to improve user experience. This includes saving your login information and preferences when you comment or log in. These cookies may persist for up to one year. No personal data is stored in cookies without your consent.

Embedded Content from Other Websites

Our articles may include embedded content (e.g., videos, images, forms). These third-party sites may collect data, use cookies, and track your interaction as if you visited them directly.

Who We Share Your Data With

We do not sell your data. If you request a password reset, your IP address is included in the reset email. Certain data may be processed through HIPAA-compliant third-party platforms (e.g., Aesthetic Record) for appointment management and patient records.

How Long We Retain Your Data

Comments and related metadata are stored indefinitely. User profiles created on the site retain the personal data provided during registration. Users can view, edit, or delete their data anytime, except for usernames. Website admins can also view/edit data.

Your Rights Over Your Data

If you have an account or have left comments, you may request an exported file of the personal data we hold. You may also request deletion of your personal data, except for information required by law or for security and administrative purposes.

Where Your Data Is Sent

Visitor comments may be scanned through an automated spam detection service. Patient medical records submitted through our portal are stored securely within a HIPAA-compliant electronic health record system (Aesthetic Record).

HIPAA Notice of Privacy Practices

TPMS Medical Aesthetics is committed to protecting your medical information and operates in compliance with HIPAA. This section outlines your rights, our duties, and how we use your Protected Health Information (PHI).

How We Use and Disclose PHI

We may use or disclose your PHI for:

  • Treatment: Sharing information with medical providers, pharmacists, or labs to coordinate your care.

  • Payment: Billing you or your insurance provider for services rendered.

  • Healthcare Operations: Quality assurance, staff training, compliance activities, and business management.

  • As Required by Law: Public health reporting, subpoenas, or regulatory authorities.

We will not use or share your information for marketing, research, or fundraising without your written authorization.

Your Rights Regarding Your PHI

You have the right to:

  • Access your records: Request a copy of your health information.

  • Request corrections: If you believe your record is incorrect or incomplete.

  • Request restrictions: Limit how we use or disclose certain information.

  • Request confidential communications: Receive information at an alternative address or phone number.

  • Request an accounting of disclosures: See when and why your PHI was shared (outside of treatment, payment, or operations).

  • File a complaint: If you believe your privacy rights have been violated, you may contact our privacy officer or file a complaint with the U.S. Department of Health and Human Services (HHS).

To exercise any of these rights, please contact our Privacy Official listed below.

Our Legal Duties

  • We are required by law to maintain the privacy and security of your protected health information.

  • We will notify you if a breach occurs that may have compromised your PHI.

  • We must follow the duties and privacy practices described in this notice.

  • We will not share your PHI without your written permission, except as described above.

Privacy Official Contact

If you have any questions about this privacy policy or your rights under HIPAA, please contact:

Privacy Official:
Taiche Griffin, MSN, FNP-C
Email: reception@taichegriffin.com
Phone: 407-440-3560
Address: 595 W Church Street, Suite F, Orlando, FL 32805

Changes to This Policy

We reserve the right to update this privacy policy at any time. All updates will be posted on this page with a revised effective date.

Last Updated: 6/25/2025