Privacy Policy
Last updated: July 2026
This Privacy Policy explains how we ("we", "us") collect, use, and protect personal information when you visit our site or contact us. We are the data controller under GDPR and the "business" under CCPA/CPRA.
1. Information we collect
- Information you give us. When you submit the contact form, we collect your name, email, practice type, and message.
- Technical data. Our hosting provider logs limited info (IP, browser, pages, timestamps) to deliver and secure the site.
We do not use advertising or analytics tracking cookies. See our Cookie Policy.
2. How we use your information
- To respond to your enquiry and provide requested services.
- To operate, secure, and maintain the website.
- To comply with legal obligations.
3. Legal bases (GDPR)
- Consent and/or steps prior to entering a contract.
- Legitimate interests — to operate, secure the site, and respond to enquiries.
- Legal obligation — where we must retain or disclose data.
4. Who we share data with
We use trusted service providers ("processors") acting on our instructions:
- Cloudflare, Inc. — hosting, CDN, and security.
- Resend (Plus Five Five, Inc.) — contact-form email delivery.
- Google LLC — web font delivery.
- Cal.com, Inc. — appointment scheduling.
We do not sell or share your personal information for cross-context behavioral advertising.
5. International transfers
We operate from the EU and serve US clients, so your data may be processed in the EU and US. Transfers rely on safeguards like EU Standard Contractual Clauses where required.
6. Data retention
We keep contact-form submissions only as long as needed, then delete or anonymize them.
7. Your rights (GDPR)
If you are in the EU/EEA or UK, you have the right to access, rectify, erase, restrict, or object to processing of your data, and the right to data portability. You may also lodge a complaint with your local supervisory authority.
8. Your rights (California — CCPA/CPRA)
California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information. We will not discriminate against you for exercising these rights.
9. How to exercise your rights
Email us at info@medikaweb.com; we will respond within legally required timeframes.
10. Changes to this policy
We may update this policy. The "last updated" date reflects the latest version.
11. Contact
Smart Digital Asset S.r.l. — info@medikaweb.com