Privacy Policy
Last updated: July 2026
This Privacy Policy explains how we collect, use, and protect personal information when you visit our site or contact us. We are the data controller under GDPR and the "business" under CCPA/CPRA.
1. Information we collect
- Information you give us. When you submit the contact form, we collect your name, email, practice type, and message.
- Technical data. Our hosting provider logs limited info (IP, browser, pages, timestamps) to deliver and secure the site.
We do not use advertising or analytics tracking cookies. See our Cookie Policy.
2. How we use your information
- To respond to your enquiry and provide requested services.
- To operate, secure, and maintain the website.
- To comply with legal obligations.
3. Legal bases (GDPR)
- Consent and/or steps prior to entering a contract — when you contact us.
- Legitimate interests — to operate, secure our site, and respond to enquiries.
- Legal obligation — where we must retain or disclose data by law.
4. Who we share data with
We use trusted service providers ("processors") who act on our instructions:
- Cloudflare — website hosting, CDN, and security.
- Resend — delivery of contact-form emails to us.
- Google LLC — web font delivery (Google Fonts).
- Cal.com — appointment scheduling (only when opening the calendar).
We do not sell or share your personal information for cross-context behavioral advertising.
5. International transfers
We operate from the EU and serve US clients, so your data may be processed in the EU and US. Transfers rely on safeguards like EU Standard Contractual Clauses where required.
6. Data retention
We keep contact-form submissions only as long as needed, then delete or anonymize them.
7. Your rights (GDPR)
If you are in the EU/EEA or UK, you have the right to access, rectify, erase, restrict, or object to processing of your data, and the right to data portability. You may also lodge a complaint with your local supervisory authority.
8. Your rights (California — CCPA/CPRA)
California residents have the right to know what personal information we collect, to request deletion, to correct inaccuracies, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information and will not discriminate for exercising these rights.
9. How to exercise your rights
Email us at info@medikaweb.com; we will respond within legally required timeframes.
10. Changes to this policy
We may update this policy. The "last updated" date above reflects the latest version.
11. Contact
Smart Digital Asset S.r.l. — info@medikaweb.com