For California Residents

Identifiers (name, email, phone, address, IP); commercial information (orders, subscriptions); internet activity (pages viewed, interactions); approximate — never precise — geolocation inferred from IP; audio/electronic information you send us (messages); inferences for service personalization; and sensitive personal information limited to health information you choose to submit and account sign-in codes.

We collect this information directly from you, automatically from your device, and from the clinicians, pharmacies and service providers involved in delivering your care. Purposes match our Privacy Policy: providing the service, care coordination, payments, support, security, analytics and legally required record-keeping.

In the preceding 12 months we disclosed, for business purposes only, the categories above to: medical groups and pharmacies (care), payment processors (payments), and platform service providers (hosting, communications, analytics) — each bound by contract to use the data solely for our purposes. We do not sell personal information, and we do not share it for cross-context behavioral advertising without an opt-out; we honor the Global Privacy Control signal.

Health information you submit is used only to deliver the services you request, for security, and as required by law — purposes permitted without a right-to-limit under the CPRA. We do not use sensitive personal information to infer characteristics for advertising.

You may request: what we collect, use and disclose (with a portable copy); correction of inaccurate information; deletion (subject to legal exceptions such as completing your transactions, security, and legal compliance); and limits on sensitive personal information use. Exercising your rights never results in discrimination in price or service.

Email privacy@medabol.example or use the request option in your patient portal. We verify requests against your account details, respond within 45 days (extendable to 90 with notice), and accept requests from authorized agents with written permission or power of attorney. You may make a rights request without creating an account.