Privacy policy

Last updated: October 1, 2026

This Privacy Policy describes how ClinAdvize (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from clinadvize.com or otherwise communicate with us (collectively, the “Services”). “You” and “your” means you as a user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected.

Please read this Privacy Policy carefully. This notice explains our privacy practices; visiting the Site does not constitute consent to optional analytics, marketing, or embedded media. You choose whether to enable these categories through the cookie banner or preferences.

Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy, update the “Last updated” date, and take any other steps required by applicable law.

What personal information we collect

The information we collect varies depending on how you interact with us and may include:

Basic contact details, including your name, address, phone number, and email.
Order information, including billing details, payment confirmation, email address, and phone number.
Account and shopping information, including account credentials and items you view or add to your cart.
Customer support information that you choose to include in communications with us.
Usage data, such as device, browser, network, IP address, and interaction information collected through cookies and similar technologies.

How we collect and use information

We collect information directly from you, automatically through cookies and similar technologies, and from vendors or service providers such as Shopify and payment processors. We use it to provide products and services, process payments and orders, manage accounts, communicate with you, provide customer support, improve the Services, conduct marketing with the required consent, prevent fraud, comply with legal obligations, and protect our rights and users.

Cookies

Optional cookies and embedded media are opt-in. Until you select “Accept” or enable a category in “Manage,” Analytics, Marketing, and Embedded media remain off. “Reject” keeps all optional categories off. Necessary services remain available to operate and secure the Site. Accept and Reject are presented with equal visual weight.

Use “Your Privacy Choices / Cookie Preferences” in the footer of any content page to reopen the same preferences and change or withdraw consent. We store your category choices, a decision timestamp, and a consent version in your browser’s localStorage under ca-cookie-consent. We ask again after 12 months or when the consent version changes. The shopping cart and theme preference also use first-party browser storage to provide the features you request; they are not analytics consent.

We honor Global Privacy Control (GPC) as an opt-out of Analytics and Marketing, including sale/sharing and targeted-advertising uses controlled by those categories. GPC overrides an earlier acceptance. On Analytics withdrawal, we stop analytics events and remove accessible _ga and _ga_* cookies. If an optional tracking SDK has already loaded, the page may reload to stop it completely. Withdrawal does not erase data already transmitted; you can request deletion as described below. Browser controls can also remove or block cookies, but blocking necessary storage may affect requested features.

The tools and resource providers used by this Site are:

Booking referral context: when your browser provides an external referring URL, we retain a cleaned version in first-party session storage so it can accompany a booking you submit, including in your Shopify customer profile as “Booking Source Link.” Query strings and fragments are removed. This does not load an analytics or advertising service, and an unavailable referral is not guessed. The session-storage context is limited to the current browsing session.
Google Analytics 4 (GA4), measurement ID G-655BNDFXVJ: Google’s remote analytics script and collection requests load only after Analytics consent. GA4 uses _ga and _ga_* cookies to measure page views and consented events, device/browser information, approximate location, and referral information. Consent Mode v2 starts with analytics_storage, ad_storage, ad_user_data, and ad_personalization denied. Analytics consent grants analytics storage; the three advertising signals are granted only with Marketing consent. We do not currently load a separate Google Ads tag.
Klaviyo: its onsite script for signup popups and personalized marketing loads only after Marketing consent. It may use cookies and similar identifiers when enabled. Newsletter and Playbook forms separately ask for email-marketing consent and submit to our own server; submitting those forms does not automatically enable onsite tracking.
Replit hosting analytics: our hosting provider supplies cookieless traffic and performance analytics based on network/request data, including IP traffic. These are separate from GA4 and remain active for hosting operations; rejecting optional cookies does not disable infrastructure logging.
Hosting and load-balancer cookies: where set by our hosting infrastructure, necessary cookies may support request routing, security, and reliable service. They are not enabled as advertising identifiers by our consent controls. First-party functionality and security can operate without optional consent.
unpkg CDN: serves React, ReactDOM, and Babel for the Site’s rendering runtime, and Three.js (including its font data), GSAP, and Matter.js for visual effects. These code/resource downloads are used for rendering and animation, not analytics or advertising, and may occur without optional consent. Like other resource providers, the CDN receives request information such as IP address and browser headers.
Google Fonts: Google’s font stylesheet and font-file services provide Cormorant Garamond and Hanken Grotesk. They load for typography, not analytics or advertising, and receive the network information needed to deliver these resources.
Google reCAPTCHA: its anti-abuse script is requested when you submit a booking or initiate checkout, rather than on an ordinary page view. It may process device/network signals and set security cookies to prevent automated abuse. It is treated as a necessary security service, not Analytics or Marketing.
Google reviews and Maps links: review text is served from our own cached API; the browser does not load a Google review widget or Maps embed to display that text. Google-hosted reviewer photos load only with Embedded media consent. Maps links open Google only when you follow them, and Google’s policies then apply.
Video: the current homepage background video and its poster are hosted with our Site, not embedded from YouTube or Vimeo. This local decorative video loads and plays independently of cookie choices and does not enable analytics or marketing. Visitors who prefer reduced motion see the poster instead. Embedded media consent still controls externally hosted reviewer photos. There are currently no third-party video players or map iframes.
Shopify: provides product information, product images (which may come from Shopify’s CDN), cart checkout, order processing, and payment-related services when you shop. Product images are requested to display the catalog; checkout may use necessary cookies under Shopify’s own controls. For details, see Shopify’s cookie policy. Our marketing-site preferences do not control a separate Shopify checkout’s cookies or other third-party sites reached through links.

Analytics (Google Analytics 4)

With your Analytics consent, we use GA4 to understand which pages are viewed, how visitors arrived, and which actions they take, such as starting a discovery-call booking. Without that consent, Google’s analytics script is not loaded, analytics events are not sent, and this Site does not set GA cookies. Rejecting optional cookies or sending GPC keeps GA4 off. You can withdraw through the footer preferences at any time.

How we disclose information

We may disclose personal information to vendors and service providers acting on our behalf, business and marketing partners, affiliates, parties you direct or consent to, or as needed for a business transaction, legal obligation, enforcement of terms, or protection of the Services and rights of users or others. We do not use or disclose sensitive personal information to infer characteristics about you.

Children’s data, security, and retention

The Services are not intended for children, and we do not knowingly collect their personal information. No security measure is perfect or impenetrable, and information sent over insecure channels may be at risk. Retention depends on our need to maintain accounts, provide Services, comply with legal obligations, resolve disputes, and enforce agreements.

Your rights and choices

Depending on your state of residence and whether the applicable law covers our processing, US state privacy laws may give you the following rights:

Know whether we process your personal information and access information about its collection, use, disclosure, and recipients.
Request correction of inaccurate personal information.
Request deletion of personal information, subject to legal exceptions.
Obtain a portable copy of personal information you provided.
Opt out of sale, sharing for cross-context behavioral advertising, targeted advertising, and certain profiling with legal or similarly significant effects.
Limit certain uses or disclosures of sensitive personal information, or withdraw consent where processing requires it.
Use an authorized agent where permitted, and appeal a denial of a privacy request where the law provides an appeal.

To exercise a right or appeal a decision, email support@clinadvize.com with “Privacy request” or “Privacy appeal” in the subject and enough information for us to identify the request. Do not send passwords or payment-card details. We will respond within the period required by applicable law and explain any applicable exception or appeal process. You may also opt out of promotional emails using their unsubscribe link.

We will not discriminate against you for exercising privacy rights. We may need to verify your identity or an authorized agent’s authority before responding.

California privacy rights (CCPA)

Where the CCPA, as amended by the CPRA, applies, California residents may request access to categories and specific pieces of personal information, correction and deletion, opt out of sale or sharing, and limit certain uses of sensitive personal information. Use the contact method above for requests; use the footer preferences or GPC for browser-level opt-outs. We will not discriminate against you for exercising these rights.

International users and GDPR rights

We may transfer, store, and process personal information outside your country, including in the United States. For transfers out of Europe, we rely on recognized transfer mechanisms where required. Users covered by the GDPR may have rights of access, rectification, erasure, restriction, objection, and data portability.

Contact

To ask about our privacy practices or exercise a privacy right, email support@clinadvize.com.