California Privacy Notice | MelMedic

California Privacy Notice

Effective date: August 20, 2026

This notice is for residents of California and supplements our Privacy Policy. It is provided under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA"), and it applies to the melmedic.com website only.

1. Your health information is covered by HIPAA, not by this notice

The CCPA does not apply to protected health information held by a covered entity or business associate under HIPAA, or to medical information governed by the California Confidentiality of Medical Information Act. Your clinical records are handled under those laws. How we treat them is described in our HIPAA Notice of Privacy Practices.

What follows is about ordinary website information: what you type into a form, and what your browser reports when you load a page.

2. Categories of personal information we collect

  • Identifiers: name, email address, postal address, phone number, IP address.
  • Customer records: the contact and billing details you give us when you book a visit or start a membership.
  • Commercial information: the visits and memberships you have booked or purchased.
  • Internet and network activity: pages viewed, referring page, browser and device type.
  • Geolocation data: approximate location inferred from your IP address. We do not collect precise location from your device.
  • Inferences: general interest in a service, drawn from the above.

We do not ask for sensitive personal information through this website, and we do not use what we hold to infer characteristics about you.

3. Where it comes from

  • Directly from you, when you fill in a form, book a visit, buy something, or email us.
  • Automatically from your browser or device when you use the website.
  • From the service providers who host the website and process payments for us.

4. Why we collect it

  • To respond to you, and to provide the visit or product you asked for.
  • To take payment and keep the records a business is required to keep.
  • To send you email you have asked to receive, which you can stop at any time.
  • To keep the website working, secure, and free of abuse.
  • To meet our legal and professional obligations.

5. Who we disclose it to

We disclose personal information for business purposes to service providers who act on our instructions and are contractually restricted from using it for anything else. Those are our website and CRM platform, GoHighLevel, and our payment processor, Stripe. We may also disclose information where the law requires it.

We do not disclose personal information to third parties for their own marketing.

6. Sale and sharing of personal information

We do not sell personal information for money.

We use the Meta Pixel on our marketing pages to measure how our advertising performs. Under the CCPA, the use of an advertising pixel can constitute "sharing" for cross-context behavioral advertising even though no money changes hands. You may opt out of this sharing using the Do Not Sell or Share My Personal Information link in our website footer.

We have not installed the Meta Pixel or other advertising tracking technology within our patient portal, booking flow, or clinical intake environment.

We do not knowingly sell or share the personal information of anyone under 16.

7. How long we keep it

We keep personal information for as long as it is needed for the purpose it was collected for, and then for any period the law requires. Business and payment records are kept for the period required of a business in Kansas and under federal law.

8. Your rights

If you are a California resident you have the right to:

  • Know what personal information we have collected about you, where it came from, why, and who we disclosed it to.
  • Delete the personal information we hold about you, subject to the exceptions the law allows.
  • Correct personal information about you that is inaccurate.
  • Opt out of any sale or sharing. As set out above, we do neither.
  • Limit our use of sensitive personal information.
  • Not be discriminated against for exercising any of these rights. We will not deny you care, charge you a different price, or give you a lower quality of service because you asked.

These rights cover the website information described here. Rights over your medical records come from HIPAA and California medical privacy law instead, and are described in our HIPAA Notice.

9. How to exercise your rights

Email [email protected] or call (877) 942-8808 and tell us which right you want to exercise.

We will verify who you are before we act, which normally means matching what you tell us against what we already hold. We will not ask for more information than we need to do that, and we will not use it for anything else. We respond within 45 days, and will tell you if we need the extension the law allows.

An authorized agent may make a request for you if they give us written permission signed by you, and we may still contact you to confirm it.

10. Contact us

MelMedic LLC
P.O. Box 512, Bonner Springs, KS 66012
Email: [email protected]
Phone: (877) 942-8808