California Privacy Rights

Last Updated: July 28, 2026

Scope

This notice supplements our Privacy Policy and applies solely to California residents. It describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), and how to exercise them.

Categories of Personal Information We Collect

Identifiers: name, email address, phone number, mailing address, IP address, date of birth
Customer records: billing information, transaction history (payment card details are processed by our payment processors and not stored by us)
Commercial information: products or services purchased or considered
Internet activity: browsing history on our site, pages visited, interactions with our website
Sensitive personal information: health intake responses you choose to submit, which are transmitted to independent licensed clinical partners subject to HIPAA

How We Use and Disclose Personal Information

We collect and use personal information for the business purposes described in our Privacy Policy: facilitating provider review, processing payments, communicating with you, improving our platform, security and fraud prevention, and legal compliance. We disclose personal information to service providers and partners under contractual restrictions.

We do not sell your personal information, and we do not share personal information for cross-context behavioral advertising in health-related contexts. We use sensitive personal information only for purposes permitted by the CCPA/CPRA, such as providing the services you request.

Your Rights

Right to Know: request the categories and specific pieces of personal information we have collected about you, the sources, purposes, and third parties to whom it was disclosed
Right to Delete: request deletion of personal information we have collected, subject to legal exceptions
Right to Correct: request correction of inaccurate personal information
Right to Opt Out: opt out of the sale or sharing of personal information (we do not sell personal information)
Right to Limit: limit the use of sensitive personal information to permitted purposes
Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights

How to Exercise Your Rights

Submit a request by emailing care@prescrybe.health with the subject line "California Privacy Request." We will verify your identity before fulfilling the request and respond within 45 days (extendable by an additional 45 days where reasonably necessary). You may designate an authorized agent to submit requests on your behalf; we will require proof of authorization and verification of your identity.

We honor Global Privacy Control (GPC) browser signals as a valid opt-out of sale/sharing where required by law.

Retention

We retain each category of personal information for as long as necessary for the purposes described in our Privacy Policy, to comply with legal obligations, resolve disputes, and enforce agreements.

Contact

Questions about this notice or our privacy practices: care@prescrybe.health