Privacy Policy

This Privacy Policy explains how Avita MD ("Avita MD," "we," "us") handles information in connection with this website (https://www.avitamd.com). This is an informational marketing website. It does not have patient accounts, contact forms, or a patient portal, and it does not collect medical or health information.

This policy covers only the website. It is separate from the practice's Notice of Privacy Practices, which governs protected health information (PHI) in the clinical setting under HIPAA and applicable California law and is provided to patients by the practice. When you book an appointment, you are taken to our third-party scheduling provider (Elation), which operates on its own platform under its own terms and privacy practices; any information you enter there is not collected by this website.

Information we collect

Information you provide: The website has no forms, sign-up, login, or checkout, so you do not submit personal information directly to it. If you choose to call us using a phone number on the site, that call is handled by our practice, not by the website.

Information collected automatically: Like most websites, when you visit we and our analytics and advertising providers automatically receive certain technical information through cookies and similar technologies, including your IP address, approximate location derived from it, device and browser type, the pages you view, links you click, and the website or search that referred you.

Cookies, analytics, and advertising

We use Google Analytics 4 and Google Ads, loaded directly through Google's gtag.js, to understand how visitors use the website and to measure and improve our advertising. These tools may set cookies and collect the technical information described above. This activity runs only on our production website; it does not run on staging or preview versions. We do not use the website to collect protected health information.

You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on, manage personalized advertising through Google My Ad Center and the Digital Advertising Alliance opt-out tool, and block or delete cookies in your browser settings. See also Google's Privacy Policy for how Google handles this data.

The technical information above includes the page paths you visit, which on this site can include health-topic pages (for example, pages under /conditions/). We do not collect any medical or health information you provide, and we do not knowingly use health-topic page views to build sensitive-category advertising profiles. This information is retained according to Google's data-retention settings: event-level data for 2 months and user-level data for 14 months (the shortest period Google Analytics permits for user-level data). Sending the Global Privacy Control signal (described below) opts you out of the sharing of this information for cross-context behavioral advertising.

How we use information

• To operate, maintain, and improve the website.
• To measure website traffic and understand how visitors use our pages.
• To measure the performance of, and to deliver, our advertising.
• To protect the security and integrity of the website and to comply with the law.

How we share information

We do not sell your personal information for money. We share the technical information described above with the service providers that make the website work, namely our analytics and advertising provider (Google) and our hosting provider (Cloudflare), and we may disclose information if required to comply with the law or to protect the rights, property, or safety of our patients, the public, or Avita MD. Use of Google advertising cookies may be considered "sharing" of personal information for cross-context behavioral advertising under California law (see your choices below).

Your California privacy choices

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to know what personal information we collect, to request access to, deletion of, or correction of that information, to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising, and not to be discriminated against for exercising these rights.

This section, together with the "Cookies, analytics, and advertising" section above, serves as our notice at collection: it describes, at the point you use the site, the categories of personal information collected, the purposes, and your choices. The categories of personal information the website collects are limited to identifiers (such as IP address and cookie identifiers), internet or other electronic network activity (such as the pages you view and how you interact with them), and coarse geolocation derived from your IP address. We retain this information per Google's retention settings (event-level data for 2 months and user-level data for 14 months) and do not use it to make decisions about you. This information is collected automatically from your device through the cookies and providers described above. We do not sell this information for money. We do use Google Analytics and Google advertising cookies, which California law may treat as "sharing" personal information for targeted advertising.

To exercise your rights, you can use the Google and Digital Advertising Alliance opt-out tools linked above, send the Global Privacy Control signal (described below), block or delete cookies in your browser, or contact us at (408) 495-5770 or privacyofficer@avitamd.com. Because the website does not maintain personal information in an identifiable account, we may not be able to associate a request with a specific individual; the most effective way to exercise these choices is through the opt-out signals and tools described here.

Global Privacy Control and Do Not Track

We recognize and honor the Global Privacy Control (GPC). If your browser or a browser extension sends a GPC signal, we automatically treat it as a request to opt out of the sharing of your personal information for cross-context behavioral advertising. Because there is no industry-wide standard for legacy "Do Not Track" (DNT) browser signals, the website does not respond separately to DNT; the GPC signal and the opt-out tools above are the supported mechanisms.

California Online Privacy Protection Act (CalOPPA)

• You may visit the website anonymously.
• This Privacy Policy is linked from the footer of every page, and the link includes the word "Privacy."
• Any changes to this Privacy Policy will be posted on this page with an updated "Last updated" date.

Children's privacy

Avita MD provides care to adults (18 and older). The website is not directed to children, and we do not knowingly collect personal information from children.

Data security

The website is served as static content over HTTPS through our hosting provider. Because the site has no forms, accounts, or payment processing, it does not store personal information you submit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Third-party links

The website may link to third-party sites and services (for example, our scheduling provider, Google Maps, or review platforms). Those sites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the privacy policy of any site you visit.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of the website after a change indicates your acceptance of the updated policy.

Contact us

If you have questions about this Privacy Policy, you can contact us at:

Avita MD
827 Altos Oaks Dr, Suite 4
Los Altos, CA 94024
Phone: (408) 495-5770
Email: privacyofficer@avitamd.com