California Privacy Notice
Last Updated: September 26, 2026
This California Privacy Notice supplements, and is part of, the Privacy Policy of Regulate Inc.and its owners and affiliates (collectively, "we," "us," or "our"). It applies to personal information we collect online or offline from California residents ("you") under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). Medical information that is protected by the California Confidentiality of Medical Information Act or by HIPAA is governed by our HIPAA Notice of Privacy Practices and is exempt from parts of the CCPA.
Information we collect
In the last twelve (12) months, we have collected the following categories of personal information:
| Category | Examples |
|---|---|
| A. Identifiers and contact information | Your name, postal address, telephone number, email address, and account login. |
| B. Medical and financial information | Health information you provide in your intake and visits, prescriptions, and payment card details (processed by our payment processor). |
| C. Protected classifications | Age, sex or gender, and medical conditions. |
| D. Commercial information | Records of the products and services you have purchased. |
| E. Internet or other network activity | How you interact with our public website pages, collected through cookies and similar tools. |
| F. Geolocation data | Approximate location based on your IP address, and the state you are located in when you receive care. |
| G. Identity verification information | A government-issued photo ID and a photo of you, used to confirm your identity as state rules require. |
How we use personal information
We use personal information for one or more of these business purposes:
- To provide our services, including sending prescriptions to the pharmacy and fulfilling orders.
- To provide patient care and customer service, respond to your questions and requests, verify your identity, and maintain your account.
- To understand how our services are used and to improve them.
- For marketing, such as emails about our own services that may interest you.
- To keep our services and systems secure, including detecting security incidents and fraud.
- To keep our website working properly, including fixing errors.
- To comply with our legal obligations.
- To protect our rights, property, and safety, and those of others.
We do not sell your personal information or share it for cross-context behavioral advertising.
How we share personal information
We share personal information for business purposes with the pharmacy that fills your prescription, the healthcare providers involved in your care, and service providers that help us run our services, such as hosting, payment processing, communications, and identity verification companies. Our public website pages (but not our sign-up, login, or account pages) use Google Analytics to understand how visitors use the site; we do not use advertising cookies or advertising pixels. When we share personal information with a service provider, we require it to protect the information and to use it only to provide services to us and for other limited purposes the law allows, such as detecting security incidents and meeting its own legal obligations.
In the last twelve (12) months, we have shared these categories of personal information for a business purpose with these categories of third parties:
| Category | Categories of recipients |
|---|---|
| A. Identifiers and contact information | Service providers; pharmacies and healthcare providers involved in your care |
| B. Medical and financial information | Service providers; pharmacies and healthcare providers involved in your care |
| C. Protected classifications | Service providers; pharmacies and healthcare providers involved in your care |
| D. Commercial information | Service providers; pharmacies involved in your care |
| E. Internet or other network activity | Service providers, including our analytics provider |
| F. Geolocation data | Service providers, including our analytics provider |
| G. Identity verification information | Service providers; healthcare providers involved in your care |
Your rights and choices
As a California resident, you have the following rights, subject to certain exceptions.
Right to know
You may ask us to tell you, for the past 12 months:
- The categories of personal information we collected about you;
- The categories of sources of that information;
- Our business or commercial purpose for collecting it;
- The categories of personal information we shared for a business purpose; and
- The categories of third parties we shared it with.
You may also ask for a copy of the specific personal information we hold about you.
Right to delete
You may ask us to delete the personal information we collected from you. Some information, such as medical records and billing records, must be kept by law.
Right to correct
You may ask us to correct personal information about you that is inaccurate.
Right to opt out of the sale or sharing of personal information
You have the right to opt out of the sale of your personal information and its sharing for cross-context behavioral advertising. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Right to limit the use of sensitive personal information
We use sensitive personal information, such as health information and your photo ID, only to provide the services you request and for other purposes the CCPA allows.
Right to non-discrimination
We will not discriminate against you for exercising any of these rights.
How to submit a request
You can submit a request to know, delete, or correct by:
- Emailing us at support@regulate.care;
- Calling us at +1 (949) 208-9958; or
- Using the form on our Contact page.
To process your request, we must verify that you are the person the information is about, or someone authorized to act for that person. We will ask for information that lets us confirm your identity, such as your contact details, account information, or health information.
You may use an authorized agent to make a request for you. The agent must have your written permission, and in some cases we may ask you to verify your identity directly with us. We may deny a request from an agent who does not provide proof that you authorized them.
Our services are only for adults 21 and older, and we do not knowingly collect personal information from children.
You may make a request to know no more than twice in a 12-month period.
Response timing and format
We will confirm that we received your request within 10 business days and explain how we will process it, including how we will verify your identity and when you can expect a response. We will respond within 45 calendar days. If we need more time, up to another 45 days, we will tell you why.
Changes to this notice
We may update this notice from time to time and will change the "Last Updated" date when we do. We will not use personal information we have already collected for a new purpose that is materially different from the purposes described when we collected it without first getting your consent.
Contact information
If you have questions or concerns about this notice or our privacy practices, contact us:
Email: support@regulate.care
Phone: +1 (949) 208-9958
Mail: Regulate Inc., Attn: Privacy Team
24301 Paseo De Valencia, Suite R
Laguna Hills, CA 92653