Website Privacy Policy

Operator: Kaiser-Backert Medical Weight Loss Clinic, Inc., doing business as MEDY Weight Loss

Effective date: September 2, 2026
Last updated: September 3, 2026

Scope and relationship to MEDY’s clinical privacy notice

Kaiser-Backert Medical Weight Loss Clinic, Inc., doing business as MEDY Weight Loss (collectively, “MEDY,” “we,” “us,” or “our”), operates this public website and its associated online services.

This Website Privacy Policy explains how MEDY collects, uses, discloses, and protects information through the public website, website contact features, and website-connected services. It is intended to satisfy public-website transparency requirements, including the California Online Privacy Protection Act where applicable.

This policy is not MEDY’s HIPAA Notice of Privacy Practices. The HIPAA notice separately describes how MEDY may use and disclose protected health information in connection with patient care and how patients may exercise their health-information rights.

Information MEDY may collect

Information a visitor provides

MEDY may collect information a visitor chooses to provide, including:

Name
Email address
Telephone number
Preferred clinic or service area
New-patient or current-patient status
Appointment interest or scheduling selection
General messages or requests
Communication preferences and consent records
Information provided through a MEDY patient survey or testimonial-permission process

Visitors should not submit diagnoses, symptoms, medications, treatment history, insurance information, or other sensitive medical details through a general website contact form. MEDY may use separate patient-intake, telehealth, scheduling, or clinical systems for information connected with care.

Information collected automatically

Subject to a visitor’s privacy choices, MEDY and its service providers may collect:

IP address and approximate location derived from it
Browser, operating system, device type, and language
Referring website or campaign
Pages viewed and interactions with website features
Date, time, and duration of a visit
Scheduling-link, telephone-link, and form-success events
Cookie, tag, local-storage, and consent-preference identifiers
Advertising attribution information

MEDY does not intentionally configure public analytics or advertising events to transmit names, email addresses, telephone numbers, free-text messages, diagnoses, symptoms, medications, appointment reasons, or other patient information.

Information from other sources

MEDY may receive information from scheduling and communications providers, review platforms, advertising and analytics providers, referral sources, or other services a visitor chooses to use.

How MEDY may use information

MEDY may use information to:

Respond to inquiries and requests
Route a visitor to the appropriate clinic, telehealth option, or scheduling experience
Coordinate requested appointments and communications
Operate, secure, troubleshoot, and improve the website
Understand content performance and patient journeys
Measure MEDY’s own marketing and advertising campaigns
Maintain consent, opt-out, and communication-preference records
Detect misuse, fraud, or security incidents
Comply with legal and regulatory duties
Establish, exercise, or defend legal rights

MEDY will not use protected health information for advertising in a manner prohibited by HIPAA or other applicable law.

Cookies, analytics, and advertising technologies

Necessary technologies

Necessary technologies support security, accessibility, saved privacy choices, and essential website operation. These technologies remain active because the website cannot reliably provide those functions without them.

Analytics

With the visitor’s permission, MEDY uses Google Analytics 4 to understand website traffic and improve content and patient journeys.

Advertising measurement

With the visitor’s permission, MEDY may use advertising technologies to measure MEDY campaigns. MEDY does not place public-site analytics or advertising tags inside patient portals or other authenticated clinical systems through this website.

MEDY separately evaluates scheduling, registration, intake, telehealth, and confirmation pages. Consent through a cookie banner is not a HIPAA authorization and does not permit MEDY to disclose protected health information to a tracking vendor.

Privacy choices

The website allows visitors to accept available categories, reject nonessential categories, manage Analytics and Advertising separately, and reopen Privacy Preferences through the footer. Nonessential storage defaults to denied until a visitor chooses otherwise. The system uses Google Consent Mode and recognizes supported Global Privacy Control signals. When a Global Privacy Control signal is active, advertising data sharing remains disabled in the current implementation.

How information may be disclosed

MEDY may disclose information:

To service providers supporting hosting, security, scheduling, forms, communications, analytics, advertising measurement, maps, review display, and related operations
At a visitor’s direction or with consent
To professional advisers, auditors, insurers, or counterparties when reasonably necessary and legally permitted
To comply with law, court process, regulatory duties, or valid government requests
To protect MEDY, patients, visitors, or others from fraud, misuse, security threats, or harm
In connection with a merger, financing, acquisition, reorganization, or transfer of some or all business assets, subject to applicable privacy duties

MEDY requires a separate assessment before a vendor may receive protected health information. When a vendor is a HIPAA business associate, an appropriate business associate agreement and a permitted HIPAA purpose are required.

MEDY does not sell patient information and does not authorize disclosure of protected health information to advertising platforms through the public website.

California and other privacy laws may define some transfers of identifiers and website activity to advertising platforms as “sharing,” even when MEDY does not receive money for the information. The website keeps advertising technologies disabled unless permitted by the visitor and not overridden by an applicable Global Privacy Control signal. MEDY will provide any additional opt-out mechanism required by applicable law.

Health and medical information

Information connected with MEDY’s provision of healthcare may be protected by HIPAA, the California Confidentiality of Medical Information Act, or other law. MEDY’s Notice of Privacy Practices governs protected health information maintained by MEDY in its role as a healthcare provider.

Website analytics, advertising, and consent choices do not replace HIPAA authorizations, clinical consents, or patient privacy rights.

Data retention

MEDY retains information only for as long as reasonably necessary for the purpose for which it was collected, applicable legal and clinical-record obligations, security, dispute resolution, and enforcement of agreements.

Security

MEDY uses administrative, technical, and organizational safeguards intended to protect information based on its sensitivity and context. These may include access controls, secure transmission, vendor controls, logging, and separation of public analytics from clinical systems. No internet transmission or storage system can be guaranteed completely secure.

Visitors should not use ordinary email or the general website form to transmit urgent or sensitive medical information.

Visitor choices and requests

Depending on the circumstances and applicable law, a visitor may change cookie and tracking choices, use supported browser privacy signals, unsubscribe from marketing communications through the provided method, ask about information submitted through the website, or request access, correction, or deletion when applicable.

MEDY may need to verify a request and may retain information when permitted or required by law.

Children’s privacy

The public website is not directed to children under 13, and MEDY does not knowingly use it to collect personal information from children under 13 without appropriate authorization. MEDY’s clinical eligibility requirements are separate from this website statement.

External services and links

The website may link to or embed scheduling, maps, reviews, and other third-party services. Those services may have separate terms and privacy practices. Visitors should review the notices presented by the service being used.

Changes to this policy

MEDY may revise this policy as its services, technologies, vendors, and legal obligations change. The “Last updated” date identifies the most recent revision. MEDY will provide additional notice when required by law.

Contact MEDY

Kaiser-Backert Medical Weight Loss Clinic, Inc.
Doing business as MEDY Weight Loss

Privacy contact: MEDY Privacy Officer
Email: office@medyweightloss.com
Telephone: 209-299-4455
Mailing address: 15810 S Harlan Rd, Unit B, Lathrop, CA 95330