DRAFT — attorney review required before publishing. This page has not been reviewed by a lawyer. Statements marked [ATTORNEY] need confirmation before the page goes live.
California privacy notice (CCPA/CPRA) for ClinicRankPro
This notice tells California residents what personal information ClinicRankPro collects, where it comes from, why we use it, who receives it, and how to exercise your rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act. We do not sell personal information or share it for advertising. Texas residents have a section below.
Reviewed by [OWNER NAME], last reviewed 16 September 2026. Effective [DATE]. This notice supplements our Privacy Policy.
Does the CCPA apply to ClinicRankPro?
Probably not, but we act as if it does. The CCPA applies to businesses above certain revenue or data-volume thresholds. ClinicRankPro is a one-person Texas agency serving Texas clinics and, to our knowledge, falls below all of them. [ATTORNEY] Confirm the threshold analysis. We publish this notice and honor every right in it anyway, because it is the right way to treat people and because some clients ask.
What categories of personal information do we collect?
Five of the categories the CCPA lists, all of them ordinary business contact and usage data. We have collected these in the past 12 months and will for as long as this notice is in force.
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Identifiers | Name, email, phone, practice name, website URL | You, through forms and email | Reply, produce reports, deliver services, newsletter if opted in |
| Commercial information | Services requested, budget range, invoices, engagement history | You; our records | Proposals, billing, account management |
| Internet or other electronic network activity | Pages visited, referral source, device type, consent choices | Google Analytics 4 with consent; cookies | Understand site use, improve pages |
| Professional or employment-related information | Your role at the practice, clinic type, who manages your accounts | You, through forms | Tailor the report and proposal |
| Inferences | Whether a submission is spam; which service tier fits | Derived from your submission | Route and prioritize requests |
We do not collect sensitive personal information, precise geolocation, biometric data, or health information. We never collect patient data; see the HIPAA Statement. Retention periods are in the Privacy Policy: 12 months for prospects, the engagement term plus 24 months for clients.
Which categories of third parties receive it?
Service providers only, each bound to use the information for our purposes: our website host, email and newsletter provider, CRM, form plugin, payment processor, analytics provider, search data provider, and the AI model providers behind our private gateway, which receive public business data but never your contact details. The named list is in the Privacy Policy. We also disclose information when the law requires it.
Do we sell or share personal information?
No. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We have not done either in the past 12 months, and we have no actual knowledge that we collect personal information from anyone under 16. Because we do not sell or share, this notice does not carry a “Do Not Sell or Share My Personal Information” link; this statement replaces it. [ATTORNEY] Confirm that the analytics configuration and consent banner keep GA4 outside the definition of “sharing”.
What are your rights under the CCPA?
- Know. Ask what personal information we have collected about you, the categories, sources, purposes, and who received it, and get a copy.
- Delete. Ask us to delete it, subject to exceptions such as finishing a contract or keeping tax records.
- Correct. Ask us to fix inaccurate information.
- Opt out. Opt out of sale or sharing. We do none, so there is nothing to opt out of, but we honor the request and record it.
- Limit use of sensitive personal information. We collect none, so this right has no practical effect here.
- Non-discrimination. We never deny service, change prices or quality, or treat you differently for exercising a right.
How do you submit a request?
- Two ways. Email [EMAIL] with the subject line “Privacy request”, or use the form on the contact page and say which right you are exercising.
- Verification. We match your request to the email address we hold. If you write from a different address, we ask for two details from your original submission, such as the practice name and the date. We never ask for more than we need to verify you.
- Authorized agents. An agent may submit a request with your signed written permission or a power of attorney. We may ask you to confirm your identity directly.
- Timing. We confirm receipt within 10 business days and respond within 45 days. If we need longer, we tell you why and take up to 45 more days.
- Cost. Free, up to twice in 12 months.
Do you honor Global Privacy Control?
Yes. If your browser sends a Global Privacy Control signal, we treat it as a valid opt-out of sale and sharing and as a refusal of analytics cookies for that browser. You do not need to do anything else.
How many requests have you received?
Requests received in the past calendar year: [METRICS: know N, delete N, correct N, opt-out N; complied N, denied N; median response N days]. [ATTORNEY] Confirm whether metrics reporting applies to a business of our size; if not, this section can be removed.
What are your rights under the Texas TDPSA?
The Texas Data Privacy and Security Act (TDPSA, passed as Texas HB 4) gives Texas residents rights that mirror much of the CCPA. [ATTORNEY] Confirm whether ClinicRankPro qualifies as a small business exempt from most TDPSA duties; we honor the rights regardless. As a Texas resident you can:
- Confirm whether we process your personal data and access it
- Correct inaccuracies
- Delete personal data you provided or we obtained about you
- Get a portable copy
- Opt out of targeted advertising, sale of personal data, and profiling with legal or similarly significant effects. We do none of these.
Appeals. Submit a request as described above; we answer within 45 days. If we decline all or part of it, reply to our decision with “Appeal” in the subject line within 30 days. A different review of the file is made and you get a written answer within 60 days, with reasons. If the appeal is denied, you may submit a complaint to the Texas Attorney General through the consumer complaint process on the Attorney General’s website.
How do you contact us?
Email [EMAIL], write to [LEGAL ENTITY NAME], [BUSINESS ADDRESS], Georgetown, Texas, or use the contact page. Related pages: Privacy Policy, Terms and Conditions, AI Use Policy, Security.
Frequently asked questions
Do you sell or share my personal information?
No. We do not sell personal information and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. Because we do not, there is no Do Not Sell or Share link; this statement stands in for it.
How do I make a privacy request?
Email [EMAIL] with the subject line “Privacy request”, or use the contact form and say which right you are exercising. We confirm receipt within 10 business days and answer within 45 days. We verify you by matching the email address we hold, or by asking two details from your submission.
Can someone make a request for me?
Yes. An authorized agent can submit a request on your behalf if they provide your signed written permission, and we may ask you to confirm your identity directly. A power of attorney also works.
Do you honor Global Privacy Control?
Yes. If your browser sends a Global Privacy Control signal, we treat it as an opt-out of analytics cookies and of any sale or sharing. Since we do not sell or share, the practical effect is that analytics cookies are not set.
What rights do I have as a Texas resident?
Under the Texas Data Privacy and Security Act you can access, correct, delete and port your personal data, and opt out of targeted advertising, sale and profiling. We answer within 45 days. If we deny a request you can appeal, and if the appeal fails you can complain to the Texas Attorney General.