Privacy Policy
Last updated: 2025-06-23
1. Who We Are
EverHeal Medical (“EverHeal,” “we,” “us,” or “our”) is a primary-care and wellness clinic located at 1494 S. Robertson Blvd., Suite 100, Los Angeles, CA 90035.
Contact: info@everhealmedical.com • 844-202-2505
2. Scope & Statutory Notice
This Privacy Policy is drafted to satisfy:
- The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively “CCPA/CPRA”). After first mention, we use “CCPA.”
- The California Online Privacy Protection Act (“CalOPPA”).
- Cal. Civil Code §1798.83 (“Shine the Light”).
3. Information We Collect
| Category | Examples | Purpose | Sensitive?* |
|---|---|---|---|
| Identifiers | Name, address, email, phone, IP address | Create & manage patient accounts, appointments | Yes |
| Medical Data | Symptoms, diagnoses, lab results | Provide treatment & comply with HIPAA | Yes |
| Commercial Info | Purchased IV therapy packages | Internal accounting | No |
| Internet Activity | Pages visited, cookies | Site analytics, fraud prevention | No |
| Geolocation | City-level location | Display local content | No |
*“Sensitive” within the meaning of Cal. Civ. Code §1798.140.
4. How & Why We Use Your Data
We process personal information to:
- Schedule in-clinic or telehealth appointments.
- Deliver medically supervised weight-loss, IV therapy, and related services.
- Send SMS updates you have opted into (see § 11).
- Improve our website, detect security incidents, and comply with legal obligations.
5. Your CCPA Rights (California Residents)
You may, twice in any 12-month period, submit:
- Right to Know/Access – categories, sources, business purpose, and specific pieces of personal information.
- Right to Delete – we will erase covered data unless an exception applies (e.g., HIPAA recordkeeping).
- Right to Correct inaccurate data.
- Right to Opt-Out of “sale” or “sharing” of personal information (we do not “sell” data as defined by the CCPA).
- Right to Limit Use of Sensitive Data – we already limit to what is reasonably necessary.
Invoke any right at info@everhealmedical.com or 844-202-2505.
We will verify your request pursuant to Cal. Civ. Code §1798.130.
6. Do Not Track & Global Privacy Control
Our site recognises the Global Privacy Control (GPC) signal. If detected, optional cookies described in the Cookie Policy are auto-blocked. We do not respond to browser-specific “Do Not Track” headers.
7. Minors
We do not knowingly collect data from anyone under 13 (15 under COPPA if AR try-on is added). Parents may email us for deletion.
8. Data Retention
Medical records: 7 years (Cal. Bus. & Prof. Code § 4990.18).
Marketing records: until you opt out or 2 years after last interaction.
9. Security
We employ TLS encryption, HIPAA-compliant EHR, and annual PCI scans for any payment pages. No system is 100 % secure.
10. Disclosures
We share personal information only with:
- HIPAA-covered entities (labs, pharmacies).
- Service providers under written contract (e.g., web-hosting, SMS gateways).
- Law enforcement when legally required.
We do not share SMS numbers beyond our gateway vendor.
11. TCPA-Compliant SMS Texting
When you consent, we may send appointment reminders and promotions via SMS. Message frequency varies. Msg & data rates may apply.
- Opt-Out: Text STOP to (310) 692-9889.
- Help: Text HELP or call (310) 692-9889.
- Your number is used only for EverHeal communications; see § 3.
12. Changes
We will post any substantive change here and update the “Last Updated” date.