Privacy Policy
Last updated: July 2026
This Privacy Policy explains how we collect, use, and protect your personal information when you visit our site or contact us. We are the data controller under GDPR and the "business" under CCPA/CPRA.
1. Information we collect
- Information you provide: name, email, practice type, and message via the contact form.
- Technical data: our host logs IP, browser, pages visited, and timestamps to secure the site.
No advertising or analytics cookies are used. See our Cookie Policy.
2. How we use your information
- To respond to your enquiry and provide requested services.
- To operate, secure, and maintain the site.
- To comply with legal obligations.
3. Legal bases (GDPR)
- Consent and/or pre-contract steps when you contact us.
- Legitimate interests: site operation, security, and responding to enquiries.
- Legal obligation: retaining/disclosing data as required by law.
4. Who we share data with
Trusted processors act on our instructions:
- Cloudflare: hosting, CDN, and security.
- Resend: delivers contact-form emails to us.
- Google: web font delivery.
- Cal.com: appointment scheduling (booking calendar only).
We do not sell or share data for cross-context behavioral advertising.
5. International transfers
We serve clients in the US from the EU; data may be processed in both. Transfers rely on EU SCCs where required.
6. Data retention
Contact-form data is kept only as long as needed, then deleted or anonymized.
7. Your rights (GDPR)
EU/EEA/UK residents: access, rectify, erase, restrict, object, or port your data. You may lodge a complaint with your local authority.
8. Your rights (California — CCPA/CPRA)
California residents: know, delete, or correct your data. We do not sell or share it. No discrimination for exercising rights.
9. How to exercise your rights
Email info@medikaweb.com; we’ll respond within legal timeframes.
10. Changes to this policy
This policy may be updated. The date above reflects the latest version.
11. Contact
Smart Digital Asset S.r.l. — info@medikaweb.com