CALIFORNIA PRIVACY DISCLOSURE & COOKIE POLICY

Last Updated: February 9, 2026

Jurisdiction: California, USA (CCPA/CPRA Compliant)

1. NOTICE AT COLLECTION

This section serves as our "Notice at Collection" pursuant to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

We collect personal information through our website to provide a functional and optimized user experience.

Categories of Information Collected: Identifiers (IP address, unique device IDs), Internet or other electronic network activity (browsing history, interaction with our website).
Purpose of Collection: Technical site optimization, security, and internal traffic analytics.
Retention Period: We retain this data only as long as necessary to fulfill analytical reporting, typically not exceeding 24 months.
Sale or Sharing: We do not sell your personal information for money. However, the use of Webflow Analytics may be classified as "sharing" for cross-context behavioral analytics under California law.

2. DETAILED COOKIE DISCLOSURE

Cookies and similar technologies are small files and identifiers placed on your device that help us understand how visitors use our website. We use them only as described below.

When you first visit our website, we ask for your choice before setting any cookie that is not strictly necessary for the site to function. Analytics and session replay do not begin unless you select "Accept." You can change your choice at any time using the "Do Not Sell or Share My Personal Information" link in our website footer.

We also honor the Global Privacy Control (GPC) signal. If your browser or an extension transmits a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information, and non-essential tracking is not activated.

I. Categories of Cookies Used

Strictly necessary. Required for the website to operate, including page delivery, security, and remembering your cookie choice. These are set regardless of consent because the site cannot function without them.
Analytics and performance. Help us understand which pages visitors read and how they navigate the site, so we can improve it. Set only after you select "Accept."
Session replay. Records interaction data such as clicks, scrolling, and navigation patterns to help us identify usability problems. Set only after you select "Accept."

II. Specific Cookie Inventory

wf_id — Webflow, Inc. Distinguishes unique visitors for analytics. Retention: up to 2 years. Category: analytics.
wf_session — Webflow, Inc. Maintains user session state. Retention: session. Category: strictly necessary.
app_consent_v1 — First party, stored in your browser's local storage. Records your cookie choice so we do not ask again. Retention: until you clear it. Category: strictly necessary.
Google Tag Manager — Google LLC. Delivers and manages the measurement tags used on this site. The container itself sets no cookies; any tag it delivers is subject to the consent choice described above. Category: strictly necessary (container only).
_clck, _clsk — Microsoft Corporation. Microsoft Clarity session replay and usability analytics. Retention: up to 1 year and 1 day respectively. Category: session replay.

III. Third Parties Receiving Personal Information

When you consent to analytics and session replay, the following third parties receive personal information, typically your IP address, device and browser characteristics, and a record of your interactions with our website:

Webflow, Inc. — website hosting, form processing, and first-party analytics.
Google LLC — tag management and website measurement.
Microsoft Corporation — session replay and usability analytics.

We do not sell your personal information for money. Under California law, the use of analytics and session replay technologies of this kind may constitute "sharing" for cross-context behavioral advertising. You may opt out at any time using the "Do Not Sell or Share My Personal Information" link in our website footer, or by transmitting a Global Privacy Control signal.

IV. A Note on Health-Related Inquiries

Session replay technology is configured to mask text entered into form fields. Even so, we ask that you not include detailed medical history or health records in website forms. For clinical information, please contact our office directly or use the secure patient portal once your care relationship is established.

3. YOUR RIGHTS UNDER CALIFORNIA LAW

As a California resident, the CPRA grants you the following specific rights:

A. Right to Know and Access

You have the right to request a disclosure of the specific pieces of personal information we have collected about you, the categories of sources, and the business purpose for collecting that information.

B. Right to Delete

You have the right to request that we delete any personal information about you which we have collected. Note that some data may be retained for legal or security reasons.

C. Right to Opt-Out of Sharing

You have the right to direct us not to "share" your personal information with third parties (like Webflow) for the purpose of cross-context behavioral advertising or analytics.

D. Right to Correct

If you believe the data we have collected is inaccurate, you have the right to request a correction.

E. Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny goods or services or provide a different quality of service.

4. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights to access, delete, or opt-out, please use one of the following methods:

Global Privacy Control (GPC): Our website is configured to recognize GPC signals. If your browser sends a GPC signal, we will automatically treat it as a request to opt-out of "sharing" for analytics.
Opt-Out Link: Click the "Do Not Sell or Share My Personal Information" link located in our website footer.
Direct Request: Email us at admin@apersonalphysician.com with the subject line "CCPA/CPRA Request."}

5. INFORMATION COLLECTED VIA WEB FORMS

In addition to the automatic analytics described above, we collect personal information that you voluntarily provide through our contact and service request forms.

I. Categories of Information Collected

When you interact with our forms, we may collect:

Identifiers: Full name, email address, and phone number.

II. Purpose of Use

The information collected via forms is used strictly for:

Responding to your direct inquiries or service requests.
Scheduling consultations or appointments.
Maintaining a record of communication for customer service purposes.

III. Data Sharing & Third Parties

Data submitted via forms is processed through Webflow’s secure hosting environment.

We do not sell the information collected through our forms.
We do not share this information with third-party marketers.
We may share this data with authorized service providers (e.g., email notification systems) solely to fulfill your request.

IV. Data Security for Sensitive Inquiries

For users contacting us regarding medical or concierge services: Please be advised that while our website uses SSL (Secure Sockets Layer) encryption to protect data in transit, standard web forms are not intended for the transmission of highly sensitive medical records. We recommend using our secure patient portal for such information once established.

V. Your Rights to Form Data

Under CCPA/CPRA, you have the right to request the deletion of any communication records we hold. To request a copy of the data you have submitted or to ask for its removal from our Webflow database, please contact admin@apersonalphysician.com.

6. DATA SECURITY & TRANSFER

We ensure that all data collected via Webflow scripts is encrypted in transit using SSL/TLS protocols. We do not collect "Sensitive Personal Information" (such as social security numbers or precise geolocation) through these analytics.

7. CONTACT INFORMATION

For questions regarding this policy or our privacy practices, please contact:

admin@apersonalphysician.com

858-209-3717

‍