Privacy Policy
Last updated: July 2026
This Privacy Policy explains how we ("we", "us") collect, use, and protect personal information when you visit our site or contact us. We are the data controller under GDPR and the "business" under CCPA/CPRA.
1. Information we collect
- Information you give us. When you submit the contact form, we collect your name, email, practice type, and message.
- Technical data. Our hosting provider logs limited info (IP, browser, pages, timestamps) to deliver and secure the site.
We do not use advertising or analytics tracking cookies. See our Cookie Policy.
2. How we use your information
- To respond to your enquiry and provide requested services.
- To operate, secure, and maintain the website.
- To comply with legal obligations.
3. Legal bases (GDPR)
- Consent and/or pre-contract steps — when you contact us.
- Legitimate interests — to operate, secure our site, and respond to enquiries.
- Legal obligation — where we must retain or disclose data by law.
4. Who we share data with
We use trusted service providers ("processors") who act on our instructions:
- Cloudflare, Inc. — hosting, CDN, and security.
- Resend (Plus Five Five, Inc.) — contact-form email delivery.
- Google LLC — web font delivery (Google Fonts).
- Cal.com, Inc. — appointment scheduling (booking calendar only).
We do not sell or share your personal information for cross-context behavioral advertising.
5. International transfers
We operate from the EU and serve US clients, so your data may be processed in the EU and US. Transfers rely on safeguards like EU Standard Contractual Clauses where required.
6. Data retention
We keep contact-form submissions only as long as needed, then delete or anonymize them.
7. Your rights (GDPR)
If you are in the EU/EEA or UK, you have rights to access, rectify, erase, restrict, or object to processing, and to data portability. You may also lodge a complaint with your local authority.
8. Your rights (California — CCPA/CPRA)
California residents have the right to know what personal information we collect, request deletion, correct inaccuracies, and opt out of "sale" or "sharing." We do not sell or share personal information and will not discriminate for exercising these rights.
9. How to exercise your rights
Email us at info@medikaweb.com; we will respond within legal timeframes.
10. Changes to this policy
We may update this policy. The "last updated" date reflects the latest version.
11. Contact
Smart Digital Asset S.r.l. — info@medikaweb.com