Home / HIPAA Privacy
Privacy & Compliance

HIPAA privacy at Prism


Website privacy overview. Review with counsel before publication.

Prism Medical Products, LLC is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). Protecting the privacy and security of protected health information (PHI) is a legal obligation we take seriously and a design principle of how we operate, including how this website is built.

This website and your information

  • No PHI is collected on this website. There are no forms requesting health, prescription, insurance or identity information.
  • No third-party advertising trackers. This site does not use advertising pixels or social media tracking technologies.
  • Bill payment is external and encrypted. Payments are processed by PersonaPay over a secure connection; payment details never pass through this website.
  • Ordering happens through secure channels. Clinical orders move between your clinician, Prism and your ordering portal, not through this site.

How PHI is protected in our operations

Within our intake, fulfillment and billing operations, PHI is used and disclosed only as permitted under HIPAA: for treatment, payment and healthcare operations, and protected by administrative, physical and technical safeguards. Business associates who handle PHI on our behalf do so under signed Business Associate Agreements.

Your rights

You have rights over your health information, including the right to access your records, request corrections, request restrictions on certain uses and receive an accounting of certain disclosures. These rights, and how to exercise them, are described in full in our Notice of Privacy Practices.

Questions or concerns

To ask a privacy question, exercise a right or report a concern, call 888.244.6421 and ask for the Privacy Officer, or write to us at 112 Church St, Suite 101, Elkin, NC 28621. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. You will never face retaliation for raising a privacy concern.