Who we are
Last Updated March 23, 2026
This Privacy Policy explains how Lowcountry AIDS Services, Inc., doing business as Palmetto Community Care and operating Truesdale Medical Center, LLC (“we,” “us,” or “our”) collects, uses, and protects your information when you use our websites and our TelePrEP services.
We are a nonprofit organization committed to protecting your privacy and providing respectful, confidential care. This policy applies to the websites palmettocare.org, chsprep.org, and truesdalemedical.org.
1. Information We Collect
We collect information to provide you with care and support.
Information You Give Us
- Your name, email address, phone number, and mailing address
- Your date of birth and basic demographic information
- Health information you share in forms, questionnaires, or appointments
- Identity verification documents (such as a government-issued photo ID) submitted through our intake platform
- Insurance information, if you choose to provide it
- Messages you send us through contact forms, chat, text, or email
Information Collected Automatically
When you visit our website, we may collect:
- Your IP address and device type
- Browser information
- Pages you visit and how you use our site
Information Collected Through Third-Party Platforms
We use third-party platforms to deliver our services securely. These include:
- Yosi Health — our patient intake platform, used to collect eligibility questionnaires, demographic information, identity documents, and informed consent. Yosi is HIPAA-compliant and operates under a Business Associate Agreement (BAA) with us.
- Athena EMR — our electronic health records system, used to store clinical records, schedule appointments, and facilitate secure messaging between patients and providers. Athena is HIPAA-compliant and operates under a BAA with us.
We do not use third-party advertising trackers, social media pixels, or behavioral advertising tools on our clinical service websites. Our websites may use standard analytics tools (such as Google Analytics) solely to understand site traffic and improve user experience. No health or personally identifiable information is shared with analytics providers.
2. How We Use Your Information
We use your information to:
- Provide TelePrEP services and clinical care
- Schedule appointments and communicate with you
- Verify your eligibility and identity before and during telehealth visits
- Coordinate laboratory testing, prescription processing, and medication delivery
- Transmit prescription information to Avita Pharmacy or another licensed pharmacy solely for the purpose of dispensing your medication
- Improve our website and services
- Meet legal, medical, and nonprofit reporting requirements
We use your information only for care, operations, or improving our services. We do not sell your personal information.
3. Health Information & HIPAA
Some of the information you share with us is considered Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). This includes clinical data generated through telehealth visits, laboratory results, prescription records, and any other information that identifies you in connection with your health care.
- We protect your health information as required by HIPAA and the HITECH Act
- We only share PHI when necessary to provide care, for healthcare operations, or when legally required
- Prescription data is shared with your dispensing pharmacy solely for the purpose of filling your prescription
- Telehealth session data — including visit notes and clinical assessments — is stored in Athena EMR and is not shared with third parties except as described in this policy or your Notice of Privacy Practices
- You will receive a separate Notice of Privacy Practices (NPP) that explains your full HIPAA rights, including the right to access, amend, and request restrictions on your health information
Breach Notification: In the event of a data breach affecting your protected health information, we will notify you as required by the HIPAA Breach Notification Rule (45 CFR Part 164, Subpart D) and applicable state law. We will also notify the U.S. Department of Health and Human Services as required.
4. Who We Share Information With
We may share your information only when necessary, including with:
- Licensed healthcare providers involved in your care at Truesdale Medical Center or Palmetto Community Care
- Laboratories performing diagnostic testing ordered by your provider
- Avita Pharmacy or another licensed dispensing pharmacy, for the sole purpose of filling your prescription
- Yosi Health and Athena EMR, as described in Section 1, under executed HIPAA Business Associate Agreements
- Other trusted service providers (such as secure website hosting or encrypted messaging tools) under confidentiality agreements
- Government agencies, public health authorities, or law enforcement when required by law
We do not sell your personal information to any third party, including data brokers, advertisers, or marketing companies.
5. How We Protect Your Information
We use administrative, technical, and physical safeguards to protect your information, including:
- Role-based access controls — staff can only access information necessary for their job function
- Unique individual login credentials for all platforms — shared credentials are prohibited
- Encrypted data transmission for all telehealth sessions and clinical communications
- HIPAA-compliant vendors with executed Business Associate Agreements
- Periodic access audits to ensure only authorized personnel have system access
- Staff training on HIPAA privacy and security requirements at onboarding and annually
No system is completely secure. In the event of a breach affecting your information, we will notify you as described in Section 3.
6. Cookies & Website Tracking
Our websites may use cookies and similar technologies to:
- Make sure the site works properly
- Understand how visitors use the site
- Improve performance and content
We do not use cookies or tracking technologies for advertising purposes or to build behavioral profiles of our visitors. We do not use social media tracking pixels (such as Meta Pixel or TikTok Pixel) on our clinical service websites.
You can control or disable cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of our websites.
7. Your Privacy Rights
You have the right to:
- Ask what information we have about you
- Request corrections to your information
- Request deletion of certain information (when allowed by law)
- Opt out of non-essential communications
- Receive a copy of your health information under HIPAA
California residents may have additional rights under the California Consumer Privacy Act (CCPA). To make a request, contact us using the information in Section 12.
8. How Long We Keep Information
We keep your information only as long as needed to:
- Provide care and services
- Comply with medical records retention requirements under South Carolina law (minimum 10 years for adult patient records)
- Meet federal grant reporting and audit requirements as a Ryan White and HRSA grantee
- Fulfill legal, regulatory, and nonprofit compliance obligations
When information is no longer needed, we dispose of it securely and in accordance with HIPAA requirements.
9. Minors
TelePrEP services delivered via chsprep.org are available only to patients aged 18 and older. We do not knowingly collect information from individuals under 18 through our TelePrEP platform.
In-person PrEP and HIV prevention services at Palmetto Community Care may be available to individuals under 18 in certain circumstances under South Carolina law (SC Code § 44-29-35), which permits minors to consent to STI and HIV prevention services without parental involvement. In those cases, we maintain the confidentiality of the minor’s health information consistent with applicable law.
If you believe we have inadvertently collected information from a minor in connection with TelePrEP services, please contact us immediately using the information in Section 12.
10. Links to Other Websites
Our websites may contain links to third-party websites, including partner organizations, laboratories, or pharmacy resources. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any third-party site you visit.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or privacy practices. Any updates will be posted on this page with a revised “Last Updated” date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a privacy concern, please contact us:
Palmetto Community Care / Lowcountry AIDS Services, Inc.
5064 Rivers Ave., North Charleston, SC 29406
information@palmettocare.org
843-747-8386
For HIPAA-specific requests, please indicate “HIPAA Privacy Request” in your subject line or message.