Privacy

Privacy Policy

Last updated: 2026-06-29 · Effective date: 2026-06-29

PrevMed Health ("we," "us," "our") provides preventive-medicine education, telemedicine services, and related products through this website and our affiliated platforms. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. The HIPAA section near the end of this page describes how protected health information is handled in our clinical telemedicine services specifically.

If you have questions about this policy or want to exercise any of your privacy rights, see Contact Us at the bottom of this page.

1. Information We Collect

Information you provide directly

When you fill out a form on this site, sign up for the email list, schedule a consultation, or purchase a product, we collect the information you enter. That typically includes your name, email address, and any health-history details you choose to share in a free-form note. We do not require you to provide health information in order to use marketing pages of this site.

Information collected automatically

When you visit pages on this site, our privacy-focused analytics provider (Fathom Analytics) records aggregate, non-identifying information about which pages were viewed and from what general geographic region. Fathom does not use cookies and does not build personal profiles, so it runs without requiring consent. With your consent, we also use Google Analytics (GA4) to measure how the site is used; Google Analytics sets cookies and is loaded only after you accept our cookie banner. If you decline, Google Analytics is never loaded. You can change your choice at any time — see our Cookie Policy.

Information from third parties

If you purchase a product through our Shopify-powered storefront, Shopify collects and processes payment information directly. We receive order details (product, quantity, shipping address) but never your full credit card number. If you contact us through a third-party platform (e.g., YouTube comments, social media), the operator of that platform may share certain information with us per its own privacy policy.

2. How We Use Your Information

We use the information we collect to:

Respond to inquiries and provide the services you request (e.g., schedule a consultation, fulfill an order, answer a question).
Send email updates if you opted in. You can unsubscribe at any time using the link in any marketing email.
Improve site content and clinical educational materials based on aggregate usage patterns.
Comply with applicable laws, including healthcare regulations, tax reporting, and any subpoena or legal process.
Protect the security and integrity of the site (e.g., spam filtering on form submissions).

We do not sell your personal information to third parties. We do not use your information for behavioral advertising on or off this site.

3. How We Share Your Information

We share personal information only when necessary to provide the services you've requested, when required by law, or in the limited circumstances below:

Service providers

We use a small set of vendors to operate this site and deliver our services. These include our website host (Vercel), our email and CRM provider, our e-commerce processor (Shopify), and our analytics providers (Fathom and, with your consent, Google Analytics). Each vendor receives only the information needed to perform its function and is contractually obligated to handle data appropriately.

Healthcare providers and affiliates

If you become a PrevMed Health patient, your protected health information may be shared with licensed clinicians, our clinical operations team, and affiliated labs and pharmacies as necessary for your care. This is governed by the HIPAA section below.

Legal requirements

We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of PrevMed Health, our patients, or others. We will resist overly broad requests when we have a legal basis to do so.

Business transfers

If PrevMed Health is involved in a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction. Any successor entity will be bound by the privacy commitments described here.

4. Cookies and Tracking Technologies

This site uses a small number of technical cookies to remember your session preferences and to keep our shopping cart functional. We do not use third-party advertising cookies or cross-site tracking. For full details on what cookies are set, why, and how to disable them, see our Cookie Policy.

5. Your Rights and Choices

Depending on where you live, you may have specific rights regarding your personal information. These can include:

Access: the right to request a copy of the personal information we hold about you.
Correction: the right to ask us to correct information that is inaccurate.
Deletion: the right to ask us to delete your information, subject to retention requirements (especially clinical records, which are governed by medical record laws and may need to be retained for years).
Opt-out of marketing emails: available at any time via the unsubscribe link in our emails.
Do Not Sell or Share (California): we do not sell personal information. To formally exercise California Consumer Privacy Act (CCPA) rights, see Contact Us.

To exercise any of these rights, contact us using the information in the Contact section. We will respond within the timeframes required by applicable law.

6. HIPAA Notice — Protected Health Information

This section describes how protected health information ("PHI") about you may be used and disclosed by PrevMed Health's clinical telemedicine services, and how you can access this information. It applies to PHI collected as part of clinical care — not to the marketing forms on this website, which intentionally collect basic contact information only and are not designed to receive PHI.

Our duties

PrevMed Health is required by law to maintain the privacy of PHI, provide patients with notice of our legal duties and privacy practices, and follow the terms of the notice currently in effect.

How we use and disclose PHI

We may use and disclose PHI for treatment, payment, and healthcare operations without your specific authorization, as permitted by HIPAA:

Treatment: sharing your information with the clinicians, labs, and pharmacies involved in your care.
Payment: obtaining payment for the services we provide (e.g., processing direct payment, coordinating with health savings accounts).
Healthcare operations: activities necessary to run our practice, including quality assessment, training, and business management.

We may also use or disclose PHI without your authorization in the limited circumstances permitted or required by law (e.g., public health reporting, court orders, when required to prevent serious harm).

Uses requiring your authorization

Any uses or disclosures of PHI not described above — including most uses for marketing, the sale of PHI, and most uses of psychotherapy notes — require your written authorization. You may revoke an authorization at any time, in writing, except for actions already taken in reliance on it.

Your HIPAA rights

Inspect and copy your PHI.
Request amendments to PHI you believe is incorrect or incomplete.
Request an accounting of disclosures we have made.
Request restrictions on certain uses and disclosures (we will accommodate when feasible and required by law).
Request confidential communications by alternative means or at alternative locations.
Receive a paper copy of this notice at any time, even if you have agreed to receive it electronically.
File a complaint if you believe your privacy rights have been violated — with us, with the U.S. Department of Health and Human Services Office for Civil Rights, or both. You will not be retaliated against for filing a complaint.

Changes to this notice

We may update this HIPAA notice. The updated notice will apply to all PHI we maintain and will be posted on this page with a new effective date.

Marketing forms vs. clinical PHI

The forms on the public marketing pages of this website (e.g., the email signup at the bottom of every page, the consultation inquiry form) collect basic contact information only — not PHI. If you wish to share clinical information with a PrevMed Health clinician, please do so through the secure patient portal or during a scheduled telemedicine visit, not via the marketing forms.

7. Data Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information from unauthorized access, alteration, or destruction. These include encrypted connections (HTTPS) site-wide, access controls on systems handling personal information, and contractual commitments from our vendors. No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security.

8. Children's Privacy

This site and PrevMed Health's clinical services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through this site, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page, and — for substantive changes — by a notice on the site or via email if you've opted in. Your continued use of the site after a change indicates acceptance of the updated policy.

10. Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or to file a HIPAA complaint, please reach out:

PrevMed Health
Email: privacy@prevmedhealth.com

For complaints about how we handle protected health information, you may also contact the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr/privacy/hipaa/complaints.