UK and EU Privacy Notice | MelMedic

UK and EU Privacy Notice

Effective date: August 20, 2026

This notice supplements our Privacy Policy for people in the United Kingdom and the European Economic Area.

1. Whether the GDPR applies to us

In our assessment it does not, and it is worth being plain about why rather than implying otherwise.

MelMedic LLC is a United States practice. MelMedic provides care only to patients located in those states. Melanie Miller, MSN, APRN, FNP-BC is licensed in Arizona, Colorado, Delaware, Florida, Hawaii, Iowa, Kansas, Massachusetts, New Jersey, New Mexico, New York, Oregon and Washington, You must be physically located in one of those states at the time of your appointment. We hold no license to provide care outside the United States, we do not offer our services to people in the UK or the EEA, and we do not monitor anyone's behavior there. The UK and EU GDPR apply to organizations that do one of those things, so they are not generally engaged by what we do. For the same reason we are not required to appoint a representative in the UK or the EU under Article 27.

What follows is offered to UK and EEA visitors to this website as a courtesy, and describes how we would handle a request from you.

2. Who is responsible for your information

MelMedic LLC
P.O. Box 512, Bonner Springs, KS 66012
Email: [email protected]
Phone: (877) 942-8808

3. What we collect from website visitors

  • Details you give us: name, email address, phone number, postal address, and anything you write in a message.
  • What your device reports: IP address, browser and device type, pages viewed, and the page that referred you.
  • Transaction details if you buy something, handled by our payment processor. We do not store your full card number.

This website is not where clinical care happens and it is not the right place to send us health information. Please do not put medical details in a website form.

4. Why we use it, and on what basis

  • Consent: for marketing email. You can withdraw it at any time, and doing so does not affect anything done before you did.
  • Contract: to provide a visit or product you have asked for, and to take payment for it.
  • Legitimate interests: to keep the website secure and working, and to answer your enquiry. We do not rely on this basis for marketing email.
  • Legal obligation: where a law requires us to keep or produce records.

5. Who we share it with

Our website and CRM platform, GoHighLevel, and our payment processor, Stripe. Both process personal data only on our instructions. We do not sell your personal data and we do not share it with third parties for their own marketing.

We use the Meta Pixel on our marketing pages to measure how our advertising performs. Information about your visit to those pages is passed to Meta. We have not installed the Meta Pixel or other advertising tracking technology within our patient portal, booking flow, or clinical intake environment.

6. Where your information is held

MelMedic operates in the United States and personal data reaches our systems there. We do not target our services at the UK or the EEA, so we do not rely on a transfer mechanism such as the Standard Contractual Clauses; information arrives because you chose to contact a United States practice.

7. How long we keep it

Enquiries are kept for as long as needed to deal with them and for a reasonable period afterwards. Customer and payment records are kept for the period required of a United States business. Marketing consent records are kept while you are subscribed and for a period afterwards so that we can show the consent existed.

8. The rights we will honor

If you are in the UK or the EEA and you contact us, we will handle your request as though these rights applied:

  • Access to the personal data we hold about you, and a copy of it.
  • Rectification of data that is inaccurate or incomplete.
  • Erasure of your data, where no law requires us to keep it.
  • Restriction of our processing while a concern is resolved.
  • Portability: the data you gave us, in a machine-readable form.
  • Objection to processing based on legitimate interests, and to direct marketing at any time, which we will always honor.
  • Withdrawal of consent at any time where consent is the basis we rely on.

We do not make decisions about you by automated means that produce legal or similarly significant effects, and we do not profile you.

9. How to ask

Email [email protected]. We will verify your identity before we act, and aim to respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

10. Complaints

Please tell us first so we can put it right. If you believe the GDPR does apply to your dealings with us and you are not satisfied, you may complain to a supervisory authority: in the United Kingdom the Information Commissioner's Office at ico.org.uk, and in the EEA the authority for the country where you live or work.

11. Changes to this notice

If our position changes, for example if we ever offer services to people in the UK or the EEA, we will update this notice and the date at the top of the page before doing so.