California Privacy Notice
This notice supplements our Privacy Policy for California residents, under the California Consumer Privacy Act as amended by the California Privacy Rights Act. It covers information this website collects.
One scope note that matters. The CCPA does not apply to protected health information held by a covered entity under HIPAA, or to medical information under California's Confidentiality of Medical Information Act. This website does not collect health information at all, so nothing here is in that excluded category — but once you are a member, the health information your clinician holds is governed by those laws and by our Notice of Privacy Practices instead of this notice.
What we collect, and why
| CCPA category | What that means here | Why we collect it |
|---|---|---|
| Identifiers | Name, email address, phone number, city and state; IP address and a random analytics identifier stored in your browser. | To answer your enquiry, route it to a clinician licensed in your state, and operate the site. |
| Protected classification characteristics | An age range (never a date of birth), and a programme track you select. | To confirm you are 18 or over and to describe the right programme. |
| Commercial information | Which protocol categories interest you, the outcomes you want, your timeline and your preference for telehealth or in person. | To answer your enquiry and to decide, in aggregate, which protocols and locations to open first. |
| Internet or network activity | Pages viewed, how far you got through a form, and referring site. | To see which pages work and where forms lose people. |
| Professional information | Only from business enquiries: practice or business name, role, website, licensed states. | To evaluate a partnership or clinician enquiry. |
| Inferences | Which category you appear most interested in, derived from your own selections. | To prioritise what we build and where we open. |
We collect this directly from you when you complete a form, and automatically as you browse. We do not buy personal information from data brokers.
Sensitive personal information
The CPRA treats some categories as sensitive, including information about health and sex life. We do not ask for health information on this website. We do ask which protocol categories interest you, and one of the eight is Sexual Health — so a selection could imply something about an interest of yours. We treat those selections carefully: we use them only to answer your enquiry and to plan what to offer, we do not sell or share them, and we do not use them to infer characteristics about you. Because we use this information only for the purposes the CPRA permits without a separate request — answering your enquiry and providing the service you asked about — no “limit the use of my sensitive personal information” link is required, and there is none to click. If that ever changes, this notice changes with it.
Who we disclose it to
For business purposes only: Corevia Health LLC, which provides our clinical technology platform and operates the infrastructure receiving enquiries; Salesforce, our customer relationship management system, which holds enquiries so we can follow up and which we use to send our own email; Amazon Web Services for hosting and storage in the United States; other service providers who help us operate the site; and the clinicians or partner lounges you ask us to connect you with. Also where the law requires, and in a merger or sale of the business.
We do not sell or share your personal information
In the twelve months before this notice, we have not sold personal information, and we have not shared it for cross-context behavioural advertising, as the CCPA defines those terms. There are no advertising trackers on this site. Because we do neither, there is no “Do Not Sell or Share My Personal Information” link — the answer is simply no. We have not sold or shared the personal information of anyone under 16.
How long we keep it
Enquiries are retained until you ask us to delete them or they are no longer useful for the purpose above; we do not currently apply an automatic expiry. Analytics records expire after 90 days.
Your rights
- Know what we have collected about you, the categories, sources, purposes and recipients — and get a copy of the specific pieces.
- Delete what we hold, subject to the narrow exceptions the law allows.
- Correct inaccurate information.
- Opt out of sale or sharing — not applicable, since we do neither.
- Limit the use of sensitive personal information — we already use it only for the purposes the law permits without a separate request.
- Not be discriminated against for exercising any of these. We will not refuse you service, charge you differently, or give you a lesser experience.
How to exercise them
Email info@thepeptidelounge.com with what you would like. To protect you, we will verify your identity before acting — usually by matching the email address or phone number you gave us, and we may ask one or two further questions. We respond within 45 days, and will tell you if we need the extension the law allows.
An authorised agent may act for you if they provide your signed permission, and we may still contact you to confirm it directly.
The Peptide Lounge, LLC · 3943 Irvine Blvd, Ste 241, Irvine, CA 92602