IMPORTANT: PLEASE READ CAREFULLY – INFORMATION ABOUT YOUR PRIVACY
Last Updated: November 2025
Who is covered by this notice
This notice applies to Folk Plastic Surgery, including Dr. Stacey Folk, Dr. Dami Lee, and all affiliated providers, staff, and programs who deliver services at our practice location(s).
Our commitment to your privacy
We understand that your medical information is personal, and we are committed to protecting it. We create and maintain records of the care and services you receive, which are essential for quality care and compliance with federal and state law. This notice explains how we may use and disclose your Protected Health Information (PHI) and describes your rights and our legal obligations regarding that information.
Our legal duties
We are required by law to:
- Maintain the privacy and security of your protected health information.
- Provide you with this notice explaining our legal duties and privacy practices.
- Follow the terms of this notice currently in effect.
- Notify you promptly if a breach occurs that may have compromised your information.
How we may use and disclose your information
Treatment
We may use and share your PHI to provide, coordinate, or manage your care with other healthcare providers involved in your treatment. This may include sharing information with hospitals, specialists, or other providers involved in your ongoing care.
Payment
We may use and share your PHI to bill and collect payment for the services we provide. This includes contacting your health plan for prior authorizations, verifying benefits, and processing claims.
Healthcare operations
We may use and disclose your PHI to operate our practice, improve quality, and support our day-to-day business functions. This includes internal quality review, staff training, accreditation, compliance, and patient satisfaction activities.
Appointment reminders and follow-ups
We may contact you by phone, text, email, or mail to remind you of upcoming appointments, follow-up care, or to provide information about health-related services that may benefit you.
Secure communication via Klara
To help ensure patient confidentiality, Folk Plastic Surgery uses Klara, a secure, HIPAA-compliant messaging service, for communication related to appointments, medical questions, photos, and follow-up care.
We encourage all patients to use Klara instead of regular email or text messaging when sharing any personal or medical information.
If you message us through other platforms (such as standard email or our contact form), we will limit our responses to general or administrative matters and may direct you to continue the conversation through Klara for your protection.
Business associates
We may share your PHI with trusted third-party service providers (“business associates”) who perform services for us, such as billing, IT, or record storage. All business associates are required by law and contract to safeguard your information.
Other uses and disclosures permitted or required by law
We may also use or disclose your PHI:
- For public health activities (e.g., disease prevention, reporting adverse events, product recalls).
- To report suspected child abuse, neglect, or domestic violence.
- To health oversight agencies for audits, investigations, and inspections.
- To comply with court orders, subpoenas, or other lawful processes.
- To law enforcement when required by law.
- To medical examiners, coroners, or funeral directors (as applicable).
- For organ or tissue donation purposes (if applicable).
- For workers’ compensation and similar programs.
- To avert a serious threat to health or safety.
- For national security or specialized government functions, as permitted by law.
Uses and disclosures requiring your written authorization
We will obtain your written authorization before we:
- Use or disclose before-and-after images or other identifiable photos or testimonials for marketing or educational purposes.
You may revoke an authorization at any time in writing, except to the extent that we have already acted in reliance on it.
Your rights
You have the right to:
- Inspect and obtain a copy of your medical records (paper or electronic). We will provide a copy or summary within 30 days of your request, as required by law.
- Request an amendment if you believe your record is incorrect or incomplete. We may deny certain requests; if we do, you can add a statement of disagreement to your record.
- Request restrictions on certain uses or disclosures for treatment, payment, or operations. We are not required to agree except in specific cases (for example, if you pay for a service out of pocket and ask us not to share it with your insurer).
- Request confidential communications by alternative means or at an alternate address (for example, home vs. work phone). We will accommodate reasonable requests.
- Receive an accounting of disclosures of your PHI other than for treatment, payment, and operations, or those made with your authorization. Fees may apply for additional requests.
- Receive a paper or electronic copy of this notice at any time, even if you agreed to receive it electronically.
- Choose someone to act for you—if you have given another person legal medical power of attorney or have a legal guardian, that person may exercise your rights on your behalf.
Our responsibilities
We are required by law to protect the privacy and security of your PHI.
We will notify you promptly if a breach occurs that may compromise your information.
We will not use or share your information for purposes other than those described here unless you give us written permission.
You may revoke that permission at any time.
Changes to this notice
We may revise this Notice at any time, and the revised version will apply to all PHI we maintain.
The current Notice will always be posted in our office and on our website at www.folkplasticsurgery.com, with the date of the most recent update clearly displayed at the top.
Colorado notice (data-breach timing)
If a breach affects Colorado residents, we will notify impacted individuals no later than 30 days after determining that a breach occurred, consistent with state law and measures to restore system integrity.
We will also notify the Colorado Attorney General when required.
Questions or complaints
If you have questions, want to exercise your rights, or believe your privacy rights have been violated, you may contact our Privacy Officer:
Folk Plastic Surgery (Privacy Officer)
4700 Hale Parkway, Suite 520
Denver, CO 80220
(303) 321-6608
contact@folkplasticsurgery.com
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights:
200 Independence Avenue, SW, Washington, D.C. 20201
Toll-Free: (877) 696-6775
www.hhs.gov/ocr/privacy/hipaa/complaints/
We will not retaliate against you for filing a complaint.
Acknowledgment
Patients may be asked to sign or check a box confirming they have received or reviewed this Notice during check-in or electronically through online forms.
