California Privacy Rights

Last Updated: November 3, 2026

Scope

This notice supplements our Privacy Policy and applies solely to California residents. It describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), and how to exercise them.

Categories of Personal Information We Collect

Identifiers: name, email address, phone number, mailing address, IP address, date of birth
Customer records: billing information, transaction history (payment card details are processed by our payment processors and not stored by us)
Commercial information: products or services purchased or considered
Internet activity: browsing history on our site, pages visited, interactions with our website (a limited set of this information and a browser or device identifier may be shared with advertising platforms, as described below)
Sensitive personal information: health intake responses you choose to submit, which are transmitted to independent licensed clinical partners subject to HIPAA

How We Use and Disclose Personal Information

We collect and use personal information for the business purposes described in our Privacy Policy: facilitating provider review, processing payments, communicating with you, improving our platform, security and fraud prevention, and legal compliance. We disclose personal information to service providers and partners under contractual restrictions.

We do not sell your personal information. On our marketing pages, we share limited browsing information (such as the pages you viewed and a browser or device identifier) with advertising platforms, including Meta, TikTok and Google, for targeted advertising. California law may treat this as "sharing" for cross-context behavioral advertising. We do not share your health intake responses for advertising, and we do not place advertising tags on pages where health information is collected. You can opt out of this sharing at any time using Global Privacy Control or by email, as described below. We use sensitive personal information only for purposes permitted by the CCPA/CPRA, such as providing the services you request.

Your Rights

Right to Know: request the categories and specific pieces of personal information we have collected about you, the sources, purposes, and third parties to whom it was disclosed
Right to Delete: request deletion of personal information we have collected, subject to legal exceptions
Right to Correct: request correction of inaccurate personal information
Right to Opt Out: opt out of the sale or sharing of personal information (we do not sell personal information; you can opt out of sharing using Global Privacy Control or by email, as described below)
Right to Limit: limit the use of sensitive personal information to permitted purposes
Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights

How to Exercise Your Rights

Submit a request by emailing care@prescrybe.health with the subject line "Privacy Request." We will verify your identity before fulfilling the request and respond within 45 days (extendable by an additional 45 days where reasonably necessary). You may designate an authorized agent to submit requests on your behalf; we will require proof of authorization and verification of your identity.

Opting out of sharing. We honor the Global Privacy Control (GPC) signal as a valid opt-out of sale/sharing: when your browser or extension sends GPC, we do not load advertising tags and do not share information about your visit with advertising platforms. We process opt-out preference signals in a frictionless manner. GPC applies to the browser and device you are using, so you need to enable it in each browser you use; instructions are at globalprivacycontrol.org. You can also opt out without GPC by emailing care@prescrybe.health with the subject line "Privacy Request."

Retention

We retain each category of personal information for as long as necessary for the purposes described in our Privacy Policy, to comply with legal obligations, resolve disputes, and enforce agreements.

Contact

Questions about this notice or our privacy practices: care@prescrybe.health