Privacy Policy

Last updated: November 12, 2025

1. Our Commitment to Your Privacy

Welcome to PrEP Delivery ("we," "us," or "our"). We operate the website https://www.prepdelivery.org (the "Site").

We understand that the services and products we provide are of a highly sensitive and confidential nature. Protecting your privacy and personal data is a responsibility we take with the utmost seriousness. This Privacy Policy details how we collect, use, process, and safeguard your personal and health-related information.

By using our Site and services, you are consenting to the data practices described in this policy. If you do not agree with this policy, please do not use our Site or provide us with your information.

2. A Special Note on Sensitive Health Information

In the course of providing our services, we may collect information related to your health, specifically concerning your use of PrEP. This is defined as "Sensitive Personal Information" or "Special Category Data" under many data protection laws (like GDPR and CCPA).

We only collect and process this sensitive information based on your **explicit consent** and as strictly necessary to:

Fulfill your order for medication.
Comply with pharmaceutical and legal regulations.

We apply enhanced security measures to this data and will never use it for marketing purposes without your separate, explicit consent. All our staff are trained in handling sensitive health information and are bound by strict confidentiality agreements.

3. Information We Collect

We collect information to provide and improve our service to you. This information is collected in the following ways:

Information You Provide to Us

Account and Order Information: When you create an account or place an order, we collect personal identifiers such as your name, email address, phone number, shipping address, and billing address.
Health Information: As described above, we may collect prescription details or other information necessary to dispense your medication safely and legally.
Payment Information: We collect payment details to process your order. This information is typically processed directly by our secure third-party payment gateways (e.g., Stripe, PayPal). We do not store your full credit card number on our servers.
Communications: When you contact us via email, chat, or our contact form, we keep a record of that correspondence.

Information We Collect Automatically

Technical & Usage Data: When you visit our Site, we automatically collect technical information such as your IP address, browser type, device information, operating system, and how you navigate and interact with our Site (e.g., pages viewed, time spent).
Cookies: We use cookies and similar technologies to help our Site function, ensure security, and understand user behavior. For more details, please see our Cookie Policy.

4. How We Use Your Information (Legal Basis)

We use your information only for the following purposes and based on a valid legal ground:

To Fulfill Our Contract with You:
- To process and deliver your orders.
- To manage your account and subscriptions.
- To process payments.
- To provide customer support.
With Your Explicit Consent:
- To process your sensitive health information to fulfill your order.
- To send you marketing newsletters or promotional offers (which you can opt-out of at any time).
To Comply with Legal Obligations:
- To maintain required medical and pharmacy records.
- To comply with tax laws, fraud prevention, and other legal or regulatory requirements.
For Our Legitimate Interests:
- To secure our Site and prevent fraudulent activity.
- To analyze and improve our Site's performance and user experience (using aggregated, anonymized data where possible).

5. How We Share and Disclose Information

Your privacy is paramount. We **do not sell, rent, or trade** your personal or health information to any third party for marketing purposes.

We only share your information with the following trusted third parties who are bound by strict confidentiality and data protection agreements:

Payment Processors: To securely process your payments.
Shipping & Logistics Partners: To deliver your order. We provide only the information necessary for delivery (name, address, phone number). Our packaging is discreet to protect your confidentiality.
IT & Hosting Providers: The technology partners that host our Site and its data (e.g., Shopify, AWS, etc.). They are obligated to maintain the security and confidentiality of your data.
Legal & Regulatory Authorities: If required by law, subpoena, or other legal process, or to protect our rights or the safety of others. We will only disclose the minimum information necessary.

6. Data Security

We implement robust technical and organizational security measures to protect your personal information, especially your health data, from unauthorized access, alteration, disclosure, or destruction.

These measures include:

SSL/TLS Encryption: All data transmitted to and from our Site is encrypted.
Encryption at Rest: Sensitive data stored on our servers is encrypted.
Access Controls: Only authorized personnel who require access to your information to perform their job (and are bound by confidentiality) can access it.
Discreet Packaging: All our shipments are sent in plain, unmarked packaging to ensure the confidentiality of the contents.

However, no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

7. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to provide you with our service and to comply with our legal, medical, and financial obligations (e.g., retaining pharmacy records or transaction data for tax purposes).

8. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

Right to Access: You have the right to request a copy of the information we hold about you.
Right to Rectification: You have the right to correct any inaccurate or incomplete information.
Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete your personal information, subject to certain legal and medical record-keeping exceptions.
Right to Restrict Processing: You can ask us to limit the use of your data.
Right to Withdraw Consent: You can withdraw your consent at any time, especially for the processing of your health data (though this may prevent us from providing our service) or for marketing.
Right to Object: You have the right to object to us processing your data for our legitimate interests.
Right to Data Portability: You can request that we transfer your data to another service.

To exercise any of these rights, please contact us using the details below.

9. Children's Privacy

Our Site and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will post the updated policy on this page and change the "Last updated" date at the top. We encourage you to review this policy periodically.