Privacy Policy
Last updated: July 2026
This Privacy Policy explains how we collect, use, and protect personal information when you visit our site or contact us. We are the data controller under GDPR and the 'business' under CCPA/CPRA.
1. Information we collect
- Information you provide: name, email, practice type, and message via contact form.
- Technical data: our host logs IP, browser, pages, and timestamps to deliver and secure the site.
We do not use tracking cookies. See our Cookie Policy.
2. How we use your information
- To respond to your enquiry and provide requested services.
- To operate, secure, and maintain the website.
- To comply with legal obligations.
3. Legal bases (GDPR)
- Consent and/or pre-contract steps when you contact us.
- Legitimate interests: site operation, security, and responding to enquiries.
- Legal obligation: required data retention or disclosure.
4. Who we share data with
We use trusted processors acting on our instructions:
- Cloudflare — hosting, CDN, and security.
- Resend — delivery of contact-form emails.
- Google LLC — web font delivery.
- Cal.com — appointment scheduling.
We do not sell or share data for behavioral advertising.
5. International transfers
We operate from the EU, serving US clients. Transfers rely on safeguards like EU SCCs where required.
6. Data retention
Contact-form data is kept only as long as needed, then deleted or anonymized.
7. Your rights (GDPR)
EU/EEA/UK residents: access, rectify, erase, restrict, object, or port data. Complaints to local authorities.
8. Your rights (California — CCPA/CPRA)
California residents: know, delete, correct data. We do not sell/share data. No discrimination for exercising rights.
9. How to exercise your rights
Email info@medikaweb.com for a response within legal timeframes.
10. Changes to this policy
This policy may be updated. The 'last updated' date reflects the latest version.
11. Contact
Smart Digital Asset S.r.l. — info@medikaweb.com