This working policy must be reviewed by qualified privacy and healthcare counsel before publication and updated to reflect Prime Point Health’s final clinical, technology, analytics, payment, pharmacy, laboratory, and communications vendors.
1. Scope and acceptance
This Privacy Policy applies to websites, forms, accounts, communications, scheduling experiences, checkout experiences, and other online services operated by or for Prime Point Health that link to this policy (collectively, the “Services”). It does not replace a healthcare provider’s Notice of Privacy Practices or the separate privacy terms of an independent laboratory, pharmacy, payment processor, scheduling service, or other third party.
By accessing or using the Services, you acknowledge the practices described in the current version of this policy. If you use the Services for another person, you represent that you have authority to provide their information and act on their behalf.
2. Health information and clinical partners
Information submitted for clinical review may include symptoms, goals, medical history, medications, allergies, laboratory information, treatment preferences, photographs, identity documentation, and communications with a provider. Depending on who receives the information and how it is used, some of it may be protected by the Health Insurance Portability and Accountability Act (“HIPAA”) or other federal or state health-privacy laws.
HIPAA applies only to organizations that meet the legal definition of a covered entity or business associate. Licensed providers, affiliated clinical entities, laboratories, and pharmacies may provide separate privacy notices that govern protected health information within their systems. Where another privacy notice applies to particular clinical information, that notice controls for the information within its scope.
Account-registration, general website, shopping, and marketing information may not be protected health information even when it relates to a health-focused service. Such information remains subject to this policy and applicable privacy laws.
3. Information we collect
Information you provide directly
- Contact and account information: name, email address, telephone number, username, password credentials, and communication preferences.
- Demographic and identity information: date of birth, sex or gender information, state, postal code, government-issued identification, and photographs submitted for identity verification.
- Intake and health information: health history, current conditions, medications, allergies, goals, symptoms, prior treatments, laboratory information, and answers to medical questionnaires.
- Transaction information: services selected, order history, payment status, billing information, shipping information, and transaction identifiers. Full payment-card details may be collected directly by a payment processor rather than Prime Point Health.
- Content and communications: messages, support requests, feedback, uploaded documents, photographs, videos, and other content you choose to provide.
- Scheduling information: appointment preferences, confirmed consultation times, time zone, and information needed to coordinate care.
Information collected automatically
When you use the Services, we and service providers may automatically receive device and usage information, such as IP address, browser type, operating system, device identifiers, referring pages, pages viewed, links selected, approximate location derived from IP address, access times, errors, and interactions with site features.
Information from other sources
We may receive information from providers, clinical entities, laboratories, pharmacies, payment processors, scheduling platforms, identity-verification vendors, shipping providers, account-authentication services, and other service providers when needed to deliver a requested service or maintain accurate records. We may also receive information when you connect a third-party service or authorize another person to provide information for you.
4. Sensitive personal information
Some information handled through the Services may be considered sensitive under applicable law, including health information, government identification, account credentials, payment information, precise location if enabled, biometric identifiers if a disclosed identity-verification service uses them, and information concerning sex life or sexual health when relevant to an intake.
Prime Point Health will process sensitive information only for purposes reasonably necessary to provide requested Services, verify identity, support clinical review, maintain safety and security, comply with law, or for other purposes disclosed when the information is collected. The final production experience should identify and obtain any consent required for a specific sensitive-data practice.
5. How we use information
We may use personal information to:
- provide, personalize, and administer the Services;
- create and secure accounts, authenticate users, and verify identity;
- support intake, eligibility review, consultations, scheduling, and care coordination;
- facilitate laboratory, pharmacy, fulfillment, shipping, and provider services when applicable;
- process transactions, maintain order records, prevent fraud, and provide customer support;
- send operational communications about accounts, appointments, orders, safety, or policy changes;
- maintain, troubleshoot, analyze, and improve site performance and user experience;
- protect the Services, users, providers, and others from misuse or unlawful activity;
- comply with legal, regulatory, licensing, reporting, and recordkeeping obligations; and
- use aggregated or de-identified information for analytics, planning, and service improvement where permitted by law.
Any future use of personal information for marketing, targeted advertising, automated decision-making, artificial-intelligence features, or research must be accurately disclosed and implemented with required permissions before launch. Protected health information will not be used for independent marketing in a manner prohibited by applicable law.
6. Communications
We may contact you by email, telephone, text message, portal message, or other channels you provide for service-related purposes. These may include account verification, appointment reminders, order updates, provider messages, security notices, and support responses. Message and data rates may apply to text messages.
If promotional communications are offered, you may opt out using the instructions in the message. Opting out of promotional messages does not prevent communications necessary to provide Services you requested or maintain your account.
7. How we disclose information
We may disclose information in the following circumstances:
- Providers and clinical organizations: to facilitate intake, clinical review, telehealth visits, care coordination, and provider communications.
- Laboratories, pharmacies, and fulfillment partners: when necessary for testing, prescription fulfillment, shipping, or related services that you request and a provider authorizes.
- Service providers: to vendors supporting hosting, security, communications, identity verification, scheduling, analytics, customer support, document management, and technical operations.
- Payment and financial services: to payment processors, financial institutions, and fraud-prevention providers as needed to complete and protect transactions.
- Legal and safety purposes: when reasonably necessary to comply with law or legal process, protect rights or safety, investigate fraud or security incidents, or enforce agreements.
- Business transactions: in connection with a financing, reorganization, merger, sale, or transfer of some or all business assets, subject to appropriate confidentiality protections.
- With direction or consent: when you request, authorize, or consent to the disclosure.
Prime Point Health does not disclose protected health information to advertising partners except as authorized or permitted by applicable law. The final policy should state whether Prime Point Health “sells” or “shares” personal information as those terms are defined by particular state laws after its analytics and advertising configuration is finalized.
9. Third-party services and links
The Services may link to or integrate with independent websites and platforms, including provider portals, scheduling systems, payment processors, pharmacies, laboratories, and social platforms. Prime Point Health does not control the privacy practices of independent third parties. Review their privacy notices before submitting information directly to them.
10. Data retention and security
We retain information for as long as reasonably necessary to provide Services, maintain business and transaction records, support clinical or legal obligations, resolve disputes, enforce agreements, and protect users and the Services. Retention periods may vary by data type, the relationship involved, and applicable medical, pharmacy, laboratory, tax, licensing, or recordkeeping requirements.
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No electronic transmission, website, or storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of account credentials and should notify us if you believe your account has been compromised.
11. Your choices and privacy rights
Depending on where you live and the type of information involved, you may have rights to request access, correction, deletion, portability, restriction, or withdrawal of consent, and to appeal a decision concerning a privacy request. You may also have rights concerning targeted advertising, sale or sharing of personal information, profiling, or certain uses of sensitive or consumer health data.
To submit a request, contact (Input Prime point Email). We may verify your identity and authority before acting on a request. Applicable law may permit or require us to retain certain information or decline part of a request. Authorized agents may submit requests where permitted by law, subject to verification.
Requests concerning protected health information held by a provider, clinical entity, laboratory, or pharmacy may need to be directed to that organization under its Notice of Privacy Practices.
12. Children
The Services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from a child under 13 through the general Services. Where an age restriction or parental authorization is required for a particular service, the applicable intake or clinical process will control.
13. United States processing
Prime Point Health operates its Services for users in the United States. Information may be processed and stored in the United States, where privacy laws may differ from those in other jurisdictions. Do not use the Services from a location where doing so would violate applicable law.
14. Changes to this policy
We may revise this Privacy Policy as our Services, vendors, or legal obligations change. The revised version will be posted on this page with a new “Last updated” date. Where required, we will provide additional notice or request consent before a material change takes effect.
15. Contact us
Questions, concerns, and privacy requests may be sent to:
Prime Point Health Privacy Team
(Input Prime point Email)
Prime Point Health currently provides online services and does not list a public storefront address in this policy.