LEGAL INFORMATION
At Kassis Salameh Plastic Surgery, patient confidentiality, medical ethics, and personal data protection remain fundamental to our clinical practice. This policy outlines how your health records and digital information are collected, secured, and handled.
Effective Date: September 14, 2026. This Privacy Policy details how Kassis Salameh Plastic Surgery collects, utilizes, safeguards, and processes patient and website visitor information across our digital platforms and clinical intake systems.
Kassis Salameh Plastic Surgery utilizes specialized clinical intake and communication software to streamline consultation scheduling, patient inquiries, and administrative workflows. When you submit inquiries via our digital contact forms, schedule consultations, or engage with our chat widgets, our systems collect identifying information including your full legal name, telephone number, email address, physical address, and general consultation interest.
As a medical practice operating under the laws of the Commonwealth of Kentucky and federal healthcare standards, all Protected Health Information (PHI) is handled strictly pursuant to the Health Insurance Portability and Accountability Act (HIPAA). Preliminary web inquiries do not constitute a formal physician-patient relationship. Once an in-person or virtual consultation occurs, detailed medical history, surgical records, and clinical photography are preserved within our HIPAA-compliant Electronic Health Record (EHR) system, fully isolated from commercial marketing databases.
By opting into SMS updates through our contact or booking modules, you grant express consent for Kassis Salameh Plastic Surgery to send appointment confirmations, pre-procedure directions, follow-up messages, and practice notifications. Mobile subscriber information and SMS opt-in data will never be sold, rented, leased, or shared with third parties or affiliates for promotional or marketing objectives. You may revoke SMS authorization at any time by replying STOP to any automated dispatch.
| Category | Examples Collected | Primary Purpose | Legal Basis |
|---|---|---|---|
| Direct Identifiers | Full name, phone number, email address, residential zip code | Consultation scheduling, inbound inquiry response, appointment logistics | Express Patient Consent |
| Medical Records (PHI) | Clinical questionnaires, health history, surgical records, consultation notes | Medical evaluation, procedural planning, ongoing patient care | HIPAA / Healthcare Treatment |
| Technical Telemetry | IP address, browser specification, session duration, referral source | Site security verification, system optimization, navigation analytics | Legitimate Practice Interests |
| SMS Communication Data | Opt-in timestamps, confirmation logs, message delivery status | Delivery of transactional appointment alerts and care reminders | Direct SMS Opt-In Consent |
In accordance with Kentucky Administrative Regulations (KAR) regarding medical record retention, surgical and patient health records are maintained for a mandatory minimum term following the last clinical encounter. Routine web inquiries that do not result in clinical care are purged in accordance with our administrative data retention schedule.
Patients and website visitors hold defined legal entitlements regarding their personal data, including the right to request an accounting of disclosures, inspect their medical records, request amendments to erroneous clinical documentation, and revoke commercial communication preferences. For all privacy inquiries, HIPAA compliance verification, or formal record requests, contact our designated privacy officer directly.