Privacy Policy

Last updated: May 26, 2026

This Privacy Policy explains how Medplaza, Inc. (“Medplaza,” “we,” “us”) collects, uses, and discloses information when you visit medplaza.com(the “Site”). The Site is an informational marketing website for Medplaza and its products. The Site itself does not process protected health information (PHI). PHI is handled by our individual product platforms under separate terms and Business Associate Agreements.

1. Information We Collect

We collect a limited set of information through the Site:

• Contact form submissions. When you submit our contact form, we collect your name, email address, optional company name, and the contents of your message.
• Server and request logs. Our hosting provider records standard request metadata including IP address, user agent, requested URL, referrer, and timestamp. This data is used for security, diagnostics, and abuse prevention.

We do not collect health information or any other special-category personal data through the Site.

2. How We Use Your Information

• To respond to inquiries you submit through the contact form.
• To route partnership, investor, press, and product questions to the appropriate team.
• To operate, secure, and improve the Site.
• To comply with legal obligations and enforce our terms.

We do not use contact-form data for advertising, profiling, or automated decision-making.

3. Data Processing & Infrastructure

The Site is hosted on Vercel infrastructure in United States regions. All traffic to and from the Site is encrypted in transit using TLS 1.2 or higher. The Site does not store or process protected health information; PHI workloads are isolated to our product platforms.

4. Service Providers and Subprocessors

We use the following service providers to operate the Site. We do not sell personal information.

5. Cookies

The Site currently uses only essential cookies required to operate. See our Cookies Policy for details on what is set, how to manage settings, and our approach to Global Privacy Control.

6. Your Rights Under GDPR

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data, subject to applicable law:

• Access. Request a copy of the personal data we hold about you.
• Rectification. Ask us to correct inaccurate or incomplete data.
• Erasure. Ask us to delete your personal data.
• Restriction. Ask us to restrict our processing in certain circumstances.
• Portability. Receive your data in a structured, machine-readable format.
• Objection. Object to processing based on legitimate interests.
• Withdraw consent. Withdraw any consent you previously provided, without affecting the lawfulness of prior processing.

To exercise these rights, submit a request via our contact form. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the following rights:

• Right to know. Request the categories and specific pieces of personal information we have collected about you.
• Right to delete. Request that we delete personal information we collected from you.
• Right to correct. Request that we correct inaccurate personal information.
• Right to opt out. Opt out of any sale or sharing of personal information for cross-context behavioral advertising. We do not sell or share personal information for this purpose.
• Right to limit. Limit the use and disclosure of sensitive personal information. We do not use sensitive personal information for purposes that would require this right.
• Right to non-discrimination. Exercise any of these rights without receiving discriminatory treatment.

To submit a verifiable consumer request, use our contact formand include “California Privacy Request” in your message. We will respond within 45 days. An authorized agent may submit a request on your behalf with written authorization that we can verify.

8. Data Retention

We retain contact-form submissions for up to 24 months from the date of submission to maintain a record of our communications, unless you request earlier deletion. Server logs are retained for a shorter period consistent with our hosting provider’s defaults and security needs.

9. Data Sharing

We do not sell personal information and we do not share personal information for cross-context behavioral advertising. We disclose information only to the subprocessors listed above, to comply with legal obligations, to enforce our terms, or to protect the rights and safety of Medplaza, our users, or the public.

10. Security

We protect information collected through the Site using industry practices including encryption in transit, role-based access controls, audit logging, and least-privilege provisioning. For details about our broader security posture, see our Security overview.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected on the Site; we encourage you to review this page periodically.

12. Contact

Questions about this Privacy Policy or our privacy practices? Use our contact form.