Privacy policy and notice of privacy practices
How Prevsi collects, uses, shares and protects your information, including your health information, and the rights you have over it.
- Effective October 1, 2026
- Last updated October 1, 2026
Overview
This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.
Prevsi Health LLC ("Prevsi," "we," "us"), operating in the State of Florida (200 S Biscayne Blvd, Suite 2790, Miami, FL 33131; privacy@prevsi.com), offers sexual health care in Florida, including PrEP, at-home STI testing and long-term HIV care, through our website and patient account. Care is provided by licensed Florida health care providers ("providers").
Federal law (HIPAA) and Florida law protect information that identifies you and relates to your health or care. This is called protected health information, or PHI. We are required to keep your PHI private, to give you this notice, to follow it, and to tell you if a breach affects your unsecured PHI.
Information we collect and data minimization
We practice strict data minimization and collect only the information needed to deliver your care, operate your account and meet legal requirements:
- Account and contact details, such as your name, date of birth, email address, phone number and shipping address.
- Health information you share in the intake, such as your health history, medications, allergies and the services you request. Optional demographic questions include a "Prefer not to say" option, and your Social Security number is optional unless required by a partner laboratory to verify identity.
- Test results and records from labs, pharmacies and your providers, including prescriptions and care notes.
- Insurance and assistance-program details, if you choose to share them.
- Messages you send to your care team or our support team.
- Strictly necessary technical information, such as browser locale and session security state, plus optional analytics only if you explicitly turn it on.
How we protect your information
Your information is protected with TLS encryption when it is sent and AES-256 encryption when it is stored. Access is limited to the people and service providers who need it to support your care, and we monitor our systems for misuse.
No system is completely secure. If a breach affects your unsecured health information, we will notify you as the law requires.
Email, text messages and how to unsubscribe
If you choose to receive email or text notifications, they will say only that an update is waiting in your account. Standard email and text messages are not encrypted and could be seen by others, so we do not include test results or other health details in them.
Every newsletter or non-essential email includes a one-click unsubscribe link in the footer and email header. You can also unsubscribe on the Newsletter page or change your notification preferences in your account at any time.
Your rights over your health information
- See and get a copy of your records. We will respond within 30 days and may charge a reasonable, cost-based fee for copies.
- Ask us to correct information you believe is wrong or incomplete.
- Ask us to limit how we use or share your information. We are not always required to agree, but we must agree if you pay in full out of pocket and ask us not to share that service with your health plan.
- Ask us to contact you in a specific way or at a specific address.
- Get a list of certain disclosures we have made. One list every 12 months is free.
- Get a paper copy of this notice at any time.
- Choose someone to act for you, such as a legal guardian or a person with your medical power of attorney.
Data deletion requests and record retention
You can request deletion of your account and personal data at any time. Signed-in patients can start a self-service data deletion request in their account under Privacy & security, which immediately revokes active sessions and permanently purges eligible account data after a 7-day grace period (during which you can cancel the request).
Visitors and patients can also submit a deletion request on the Your privacy choices page or by emailing privacy@prevsi.com. We keep medical records for the period required by Florida law (at least 5 years from the last patient contact under Florida medical record retention rules) and delete all other personal, newsletter or waitlist data promptly upon request.
How to use your rights or contact us
To use any of these rights, or to ask a question about this notice, contact our Privacy Officer through the Contact page, by messaging us from your account, by emailing privacy@prevsi.com, or by mail at Prevsi Health LLC, Attn: Privacy Officer, 200 S Biscayne Blvd, Suite 2790, Miami, FL 33131. We may ask you to confirm your identity before we act on a request.
How to file a complaint
If you believe your privacy rights have been violated, you can file a complaint with our Privacy Officer, or with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr/complaints or 1-800-368-1019.
We will not retaliate against you for filing a complaint.
Age requirement and children’s privacy
Prevsi is strictly for adults 18 years of age and older. We verify age during intake and do not knowingly collect, use or store personal or health information from children under 13 (in compliance with COPPA) or from anyone younger than 18.
If you are a parent or legal guardian and believe a minor under 18 has submitted personal information to Prevsi without authorization, please contact privacy@prevsi.com or submit a Data deletion request on the Your privacy choices page so we can immediately delete the information and close the account.
Changes to this notice
We may change this notice, and changes will apply to all information we hold. When we make a material change, we will update the effective date, post the new version here, and tell you in your account.