1. Information we collect
We collect information you provide and information generated as you use the platform:
- Contact & identity details you submit during intake — such as name, date of birth, email address, phone number, and state of residence.
- Intake responses you choose to provide so a provider can review your information and determine appropriate next steps.
- Payment-related details needed to process the one-time intake and onboarding fee (handled by our payment processor — see Section 4).
- Technical & usage data such as IP address, device/browser type, and pages viewed, collected automatically.
2. How we use information
- To operate the intake process and coordinate a referral to licensed third-party providers.
- To process the one-time intake and onboarding fee and send related confirmations.
- To communicate with you about your intake, account, and support requests by email, SMS, or phone.
- To maintain security, prevent fraud and abuse, and comply with legal obligations.
- To improve the reliability, usability, and performance of the platform.
3. Third-party healthcare provider disclosure
To coordinate care, we share relevant intake information with the independent, licensed third-party providers, clinics, pharmacies, or laboratories involved in reviewing your information. These providers are separate organizations responsible for their own clinical decisions and for handling your information under their own privacy practices and applicable law, including their own HIPAA obligations where they apply.
4. Payment processing disclosure
Payments for the one-time intake and onboarding fee are processed by our third-party payment processor, Stripe, Inc. Your payment card details are submitted directly to Stripe and handled under Stripe's privacy policy and PCI-DSS security standards. NextPrep does not store your full payment card number. We receive limited confirmation details (such as payment status and the last four digits) to associate a payment with your intake.
5. Cookies, analytics & advertising measurement
We and our service providers use cookies and similar technologies to keep the site functioning, remember preferences, and understand aggregate usage so we can improve the experience.
Analytics. We use website analytics — including Google Analytics (GA4) — to understand site traffic, page usage, and campaign measurement, and to improve the site. We do not intentionally send your intake responses, form entries, health information, payment details, names, email addresses, or phone numbers to these analytics tools.
Advertising measurement. On our public marketing pages, we also use advertising-measurement tools, including the Meta (Facebook) Pixel, to understand the performance of our advertising campaigns and improve the relevance of our marketing. These tools are not used on our intake, checkout, or payment-gated pages, and we do not intentionally send health, intake, or payment information to them.
Sensitive information. We design our analytics and advertising measurement to avoid sensitive information: we do not intentionally transmit medical, health, intake, or payment details through these tools, and pages that handle sensitive steps are kept free of these analytics and advertising trackers.
You can control cookies through your browser settings, and you can manage advertising preferences through the ad-settings controls offered by platforms such as Google and Meta; disabling some cookies may affect functionality. We do not sell your personal information. Depending on the privacy laws that apply to you, the use of the advertising-measurement tools described above may be considered "sharing" of certain online identifiers for advertising or measurement purposes; where that applies, we aim to honor the choices and controls described in this policy.
6. Data security
We use industry-standard administrative, technical, and physical safeguards — including encryption in transit, access controls, and least-privilege practices — designed to protect your information throughout the process. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. HIPAA-conscious handling
NextPrep is a technology and coordination platform, not a healthcare provider. We apply HIPAA-aligned safeguards to the information we handle and work toward appropriate agreements with the vendors and providers in our workflow. Where information is shared with licensed third-party providers, that information becomes subject to those providers' HIPAA obligations. NextPrep does not claim to be "HIPAA certified."
8. Data retention
We retain information for as long as needed to provide the service, complete the intake and referral, meet legal and accounting obligations, and resolve disputes. When no longer required, information is deleted or de-identified.
9. Your choices
- You may request access to, correction of, or deletion of your personal information, subject to legal limits.
- You may opt out of non-essential communications at any time (for SMS, reply STOP).
- You can manage cookies through your browser settings and control advertising preferences through the ad-settings tools offered by platforms such as Google and Meta (see Section 5).
- You may contact us with any privacy question using the details below.
10. Children's privacy
The platform is intended for adults and is not directed to children. We do not knowingly collect information from anyone under the age required by applicable law.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.
12. Contact us
Questions about this Privacy Policy or your information? Email support@nextprep.health.