Prime Standard Health — HIPAA Privacy Statement
Notice of Privacy Practices for Protected Health Information (PHI)
Effective Date: July 19, 2026
This Notice of Privacy Practices ("Notice") describes how Prime Standard Health ("we", "us", or "our") may use and disclose your Protected Health Information (PHI) to carry out treatment, payment, or healthcare operations and for other purposes that are permitted or required by law. This Notice also describes your rights regarding your PHI. We are required by law to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of this Notice.
Uses and Disclosures of PHI
We may use and disclose your PHI for the following purposes:
a. Treatment: We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This may include communication with other healthcare providers about your treatment and coordinating your care with other providers.
b. Payment: We may use and disclose your PHI to obtain payment for healthcare services provided to you. This may include contacting your insurance company to verify your coverage, billing and collection activities, and sharing PHI with other healthcare providers, insurance companies, or collection agencies.
c. Healthcare Operations: We may use and disclose your PHI for healthcare operations, including quality assessment, improvement activities, case management, accreditation, licensing, credentialing, and conducting or arranging for medical reviews, audits, or legal services.
d. As Required by Law: We may use and disclose your PHI when required to do so by federal, state, or local law.
e. Public Health and Safety: We may use and disclose your PHI to prevent or control disease, injury, or disability, to report child abuse or neglect, to report reactions to medications or problems with products, and to notify persons who may have been exposed to a communicable disease or may be at risk of spreading a disease or condition.
f. Health Oversight Activities: We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.
g. Judicial and Administrative Proceedings: We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.
h. Law Enforcement: We may disclose your PHI for law enforcement purposes, such as to report certain types of wounds or injuries, or to comply with a court order, warrant, or other legal process.
i. Research: We may use and disclose your PHI for research purposes when the research has been approved by an institutional review board and privacy protections are in place.
j. Organ and Tissue Donation: If you are an organ donor, we may disclose your PHI to organizations that handle organ procurement, transplantation, or donation.
k. Workers' Compensation: We may disclose your PHI for workers' compensation or similar programs that provide benefits for work-related injuries or illnesses.
l. Military and Veterans: If you are a member of the armed forces, we may disclose your PHI as required by military authorities.
m. Inmates: If you are an inmate, we may disclose your PHI to the correctional institution or law enforcement official having custody of you.
Your Rights Regarding PHI
You have the following rights with respect to your PHI:
a. Right to Inspect and Copy: You have the right to inspect and copy your PHI that we maintain, with certain exceptions. To request access, submit a written request to our Privacy Officer. We may charge a reasonable fee for the costs of copying, mailing, or other supplies associated with your request.
b. Right to Amend: You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. To request an amendment, submit a written request to our Privacy Officer, specifying the information you believe is incorrect and why. We may deny your request if we believe the information is accurate and complete, or if we did not create the information.
c. Right to an Accounting of Disclosures: You have the right to request an accounting of disclosures of your PHI made by us in the past six years, except for disclosures made for treatment, payment, or healthcare operations, and certain other disclosures. To request an accounting, submit a written request to our Privacy Officer.
d. Right to Request Restrictions: You have the right to request a restriction on our use or disclosure of your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request but will consider it. To request a restriction, submit a written request to our Privacy Officer, specifying the restriction you are requesting and to whom it applies.
e. Right to Request Confidential Communications: You have the right to request that we communicate with you about your PHI in a certain way or at a certain location. To request confidential communications, submit a written request to our Privacy Officer, specifying how or where you wish to be contacted.
f. Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically. To obtain a paper copy of this Notice, contact our Privacy Officer.
g. Right to be Notified of a Breach: You have the right to be notified in the event that we discover a breach of your PHI.
Transmission of PHI
We are committed to protecting the privacy of your PHI and will ensure that any electronic transmission of PHI complies with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule (45 CFR 164). This includes the use of Secure-Socket Layer (SSL) or equivalent technology for the transmission of PHI, as well as adherence to all applicable security standards for online transmissions of PHI.
Changes to This Notice
We reserve the right to change this Notice and the revised Notice will be effective for PHI we already have about you, as well as any information we receive in the future. We will post a copy of the current Notice on our website. The Notice will contain the effective date on the first page.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the Department of Health and Human Services. You will not be retaliated against for filing a complaint.
Contact Information
To exercise any of your rights, or if you have any questions about this Notice or our privacy practices, please contact our Privacy Officer at:
Prime Standard Health
1318 North Main Street #1271, Summerville, SC 29483
primestandardhealth.com
support@primestandardhealth.com
This Notice is provided in accordance with the Notice of Privacy Practices for Protected Health Information from the Department of Health and Human Services' Model and is applicable across all US states.
Rights of Specific Jurisdictions within the US
Certain states may have additional privacy protections that apply to your PHI. The following is an example of specific rights in the state of California. If you reside in a state with additional privacy protections, you may have additional rights related to your PHI.
California Residents:
a. Right to Access: In addition to the rights described above, California residents have the right to request access to their PHI in a readily usable electronic format, as well as any additional information required by California law. To request access, submit a written request to our Privacy Officer.
b. Right to Restrict Certain Disclosures: California residents have the right to request restrictions on certain disclosures of their PHI to health plans if they paid out-of-pocket for a specific healthcare item or service in full. To request such a restriction, submit a written request to our Privacy Officer.
c. Confidentiality of Medical Information Act (CMIA): California residents are protected by the Confidentiality of Medical Information Act (CMIA), which provides additional privacy protections for medical information. We are required to comply with CMIA in addition to HIPAA.
d. Marketing and Sale of PHI: California residents have the right to request that their PHI not be used for marketing purposes or sold to third parties without their authorization. To request a restriction on the use of your PHI for marketing or the sale of your PHI, submit a written request to our Privacy Officer.
e. Minor's Rights: If you are a minor (under the age of 18), you have the right to request that certain information related to certain sensitive services, such as reproductive health, mental health, or substance use disorder treatment, not be disclosed to your parent or guardian without your consent. To request a restriction on the disclosure of such information, submit a written request to our Privacy Officer.
If you reside in a state other than California, please consult your state's specific privacy laws for information about any additional rights you may have regarding your PHI. You may also contact our Privacy Officer for more information about your rights under specific state laws.
State-Specific Provisions
In addition to the privacy practices described in our Notice of Privacy Practices for Protected Health Information, we comply with applicable state-specific privacy laws related to PHI. The following are examples of a few states with additional privacy protections:
New York: For residents of New York, we comply with the New York State Confidentiality of Information Law, which provides additional privacy protections for HIV-related information, mental health records, and genetic testing results. We will obtain written consent before disclosing such information, even for treatment, payment, or healthcare operations.
Texas: For residents of Texas, we comply with the Texas Medical Privacy Act, which offers privacy protections beyond HIPAA, including requiring consent for certain disclosures of PHI, additional safeguards for electronic PHI, and specific requirements for the destruction of PHI. We also adhere to Texas's specific privacy protections for mental health records and substance use treatment records.
Florida: For residents of Florida, we comply with Florida's privacy laws, which offer additional protections for mental health records, HIV/AIDS-related information, and substance abuse treatment records. We will obtain written consent before disclosing such information, even for treatment, payment, or healthcare operations. We also implement specific security measures to protect electronic PHI, as required by Florida law.
Illinois: For residents of Illinois, we comply with Illinois's specific privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results. We will obtain written consent before disclosing such information, even for treatment, payment, or healthcare operations. In addition, we will notify patients of any unauthorized access to their electronic PHI, as required by Illinois law.
Massachusetts: For residents of Massachusetts, we comply with Massachusetts's specific privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results. We will obtain written consent before disclosing such information, even for treatment, payment, or healthcare operations. We also implement specific security measures to protect electronic PHI, as required by Massachusetts law.
California: For residents of California, we comply with the Confidentiality of Medical Information Act (CMIA), as well as California's specific privacy laws related to marketing, sale of PHI, and minors' rights. We will obtain written consent before disclosing certain information and adhere to additional privacy protections, as required by California law.
Website Privacy Policy
The Notice of Privacy Practices above governs Protected Health Information under HIPAA. This section describes how Prime Standard Health collects, uses, and shares other information through our websites and applications, including https://primestandardhealth.com and https://start.primestandardhealth.com (collectively, our "Services").
Information We Collect
We collect information you provide directly to us, information collected automatically when you use our Services, and information we receive from other sources.
Information you provide to us. We collect information when you register an account, place an order or request treatment, submit questions or feedback, participate in surveys, contact customer support, or apply for employment. Depending on how you use the Services, this may include your name, address, telephone number, date of birth, and email address; information about your medical conditions, treatment options, prescriptions, and related health information; log-in credentials; billing information such as shipping address and payment card details collected by our payment processors on our behalf; information about your purchases and customer service interactions; and demographic information such as your gender and age.
Information we collect automatically. When you use our Services we collect information such as your IP address, browser type and language, operating system, the state or country from which you accessed the Services, device identifiers, referring and exit pages and URLs, platform type, number of clicks, files downloaded, domain names, landing pages, pages viewed and the order of those pages, time spent on particular pages, search terms used, date and time of use, and error logs. We also collect general location information, such as the city, state, or postal code associated with your IP address. We will ask your permission before collecting precise GPS location information.
Information from other sources. If you interact with us on social media platforms, we may collect your name, email address, and any content you post that is relevant to us. We also work with third parties, including the physicians, medical professionals, and pharmacies with whom we partner, as well as technical subcontractors, analytics providers, and advertising networks, who may provide us with additional information about you.
How We Use Your Information
We use the information we collect to provide, improve, and manage the Services and to facilitate the provision of health care services to you by licensed physicians and other providers; to conduct internal research to understand and improve the effectiveness of our Services, which we publish only in de-identified and aggregate form; to communicate with you about the Services and your inquiries, and to send communications on behalf of the physicians and health care providers who use the Services; to communicate with you by email or postal mail about surveys, promotions, special events, and our products and Services; to provide technical support and customer service; to verify your identity, administer your account, process payments, and fulfill your orders; to present content in the most effective manner for your device and keep the Services safe and secure; to measure and understand the effectiveness of advertising and content; to comply with applicable laws and regulations; and to establish, exercise, or defend our legal rights.
We may combine information collected through the Services with information from other sources and use it in accordance with this Privacy Policy. We may also aggregate or de-identify information so that it can no longer be linked to you or your device, and use that aggregated or de-identified information for lawful business purposes.
Cookies and Tracking Technologies
We and our service providers use web server logs, cookies, tags, SDKs, tracking pixels, and similar technologies to collect the information described above. A cookie is a small text file placed on your device that allows us to recognize your device, store your preferences, understand which parts of the Services you have used, deliver and measure the effectiveness of content and advertising, perform analytics, and assist with security and administrative functions. Tracking pixels are small electronic tags embedded in websites, online ads, and email that collect usage information such as ad impressions, clicks, and email open rates.
You can change your browser settings to notify you when a cookie is being set or to block cookies altogether. Please consult the Help section of your browser for more information. If you block or disable cookies, some features of the Services may not be available to you. We do not currently respond to browser-initiated Do Not Track signals; we provide the opt-out mechanisms described below instead.
Analytics and Interest-Based Advertising
We use third-party web analytics services, such as Google Analytics, to collect and analyze usage information through cookies and similar tools, to conduct auditing, research, and reporting, to assist with fraud prevention, and to provide certain features. You can prevent Google from using your information for analytics by installing the Google Analytics Opt-out Browser Add-on.
The Services may integrate third-party advertising technologies, such as ad networks operated by Meta and Google, that use cookies and similar technologies to deliver relevant content and advertising on our Services and on other websites and applications you use. We may provide hashed, de-identified customer information, such as email addresses, to service providers who match it to cookies or advertising identifiers in order to show you more relevant ads. We never provide mobile phone numbers or SMS opt-in data for these purposes.
To opt out of interest-based advertising, you may visit the Network Advertising Initiative Consumer Opt-Out page, the Digital Advertising Alliance Consumer Opt-Out page, or Your Online Choices. These opt-outs are device- and browser-specific, so you will need to opt out on each device and browser you use. If you opt out you will still see advertising, but it will not be tailored to your online behavior.
How We Share Your Information
We share information with our affiliates and subsidiaries to deliver and improve our products and services; with health care providers to schedule and fulfill appointments, provide health care services, and for treatment, payment, and health care operations purposes including pharmacy services; and with service providers who perform services on our behalf, such as billing, marketing, advertising, analytics, customer service, shipping and fulfillment, data storage, IT and security, fraud prevention, payment processing, and legal and auditing services.
We may also disclose information when required by law, or when we believe in good faith that disclosure is reasonably necessary to comply with legal process, enforce our Terms of Use or this Privacy Policy, respond to claims, respond to your customer service requests, or protect the rights, property, or safety of Prime Standard Health, our users, or the public. If we are involved in a merger, acquisition, or sale of assets, user information may be among the transferred assets.
We do not sell information that identifies you, such as your name, email address, phone number, or postal address. We do not share your personal information with third parties for their own direct marketing purposes.
Your Rights and Choices
You may instruct us not to use your contact information to contact you by email or postal mail about products, services, promotions, and special events by contacting us using the details below. You can also opt out of commercial email by following the unsubscribe instructions at the bottom of those emails. You may opt out of text messages at any time by replying STOP. Please note that you may not opt out of operational messages that relate to our transactions or relationship with you, such as order and shipping notifications.
California residents. California law gives you the right to request that we inform you about the categories of personal information we collect and disclose, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it; to request access to or a copy of certain information we hold about you; and to request deletion of certain information. You also have the right not to be discriminated against for exercising these rights. Certain information may be exempt from these requests, and we will take reasonable steps to verify your identity before responding.
Because of the broad definition of sale under California law, making certain online identifiers available to advertising partners may be considered a sale. This never includes your mobile phone number or your SMS opt-in data. To opt out, please use the interest-based advertising opt-out links described above or contact us using the details below.
Nevada residents. Nevada law allows certain consumers to opt out of the sale of personally identifiable information for monetary consideration. We do not engage in such sales. If you are a Nevada resident who has purchased services from us, you may submit an opt-out request to support@primestandardhealth.com and we will maintain your request in the event our practices change.
To exercise any of these rights, email us at support@primestandardhealth.com or visit https://primestandardhealth.com/contact. Please include your full name, the email address and residential address associated with your use of the Services, and the rights you would like to exercise, so that we can process your request efficiently.
How We Protect Your Information
Prime Standard Health takes a variety of technical and organizational security measures to protect your information against accidental or unlawful destruction, accidental loss, alteration, and unauthorized disclosure or access. These measures include encryption of data in transit using Secure Sockets Layer or equivalent technology, access controls, and multi-factor authentication. However, no method of transmission over the Internet and no means of electronic or physical storage is completely secure, so we cannot guarantee the security of information transmitted to or through our Services.
If you have been given, or have chosen, a password that enables you to access the Services, you are responsible for keeping that password confidential and should not share it with anyone.
Retention of Your Information
We keep your information for no longer than necessary for the purposes for which it is processed. How long we retain information depends on the purposes for which we collected and use it, and on applicable legal requirements, including medical record retention laws.
Changes to This Privacy Policy
We may change this Privacy Policy at any time to reflect changes in the law, our data practices, the features of our Services, or advances in technology. We will make the revised Privacy Policy available through the Services, and the revision date appears at the top of this page. If we make a material change we will provide notice in accordance with legal requirements. Your continued use of the Services after such changes will be deemed acknowledgment of them.
Contact Us About This Policy
If you have questions about this Privacy Policy or our privacy practices, contact us at Prime Standard Health, 1318 North Main Street #1271, Summerville, SC 29483, or by email at support@primestandardhealth.com.
The following section governs mobile phone numbers and SMS opt-in data, and controls over any general statement elsewhere in this Privacy Policy.
Mobile Information and Text Messaging
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We do not sell or rent your mobile phone number or your SMS opt-in data. Text message opt-in data is collected when you affirmatively consent during account creation on our website, and is used solely to deliver the messages you consented to receive, such as order confirmations, shipping and delivery updates, provider review and prescription status, refill and care reminders, and support replies.
You may opt out of text messages at any time by replying STOP to any message. Reply HELP for assistance, or email us at care@primestandardhealth.com. Message frequency varies. Message and data rates may apply. Consent to receive text messages is not a condition of purchase. Full SMS program terms are available at https://primestandardhealth.com/sms-terms
Advertising and Analytics
Separately from text messaging, we may use hashed, de-identified information such as email addresses to measure advertising performance, build custom audiences, and exclude existing customers from certain campaigns on advertising platforms including Meta and Google. This never includes your mobile phone number, your SMS opt-in data, or your Protected Health Information. You may contact us at care@primestandardhealth.com to request that your information not be used for these purposes.
