CALIFORNIA PRIVACY POLICY
CALIFORNIA PRIVACY POLICY SUPPLEMENT
Last Updated: 4.22.2026
This California Privacy Policy Supplement (“California Policy”) supplements the information contained in our general Privacy Policy (link to general privacy policy) and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this California Policy to comply with the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act (CPRA). Any terms defined in the CCPA/CPRA have the same meaning when used in this California Policy.
I. IMPORTANT NOTICE REGARDING PROTECTED HEALTH INFORMATION (PHI)
Our website (drworden.com) and our ecommerce platform (hosted via Shopify) are strictly separated from our patient Electronic Health Records (EHR) system. Our website does not collect, store, or utilize Protected Health Information (PHI) for medical treatment or diagnostic purposes, nor is it connected to our EHR system in any manner.
The only instance in which health-related information may be transmitted via our website is if a user voluntarily submits such information through our online contact forms (for example, when seeking care with Dr. Worden or requesting a free 10-minute consultation).
When you willingly provide information via these contact forms:
-
The information is transmitted directly to our staff via email so that we may contact you back.
-
The information is not stored on our website's servers.
-
The information is not stored in our Shopify ecommerce database.
-
The information is not visible to any other website visitors or third parties.
Any medical information formally collected for the purpose of diagnosis or treatment once you become a patient is considered PHI under the Health Insurance Portability and Accountability Act (HIPAA). PHI is strictly protected under federal law and is explicitly exempt from the CCPA. This California Policy applies only to non-PHI data collected through our general website, ecommerce store, and marketing channels.
II. PERSONAL INFORMATION WE COLLECT
For purposes of this California Policy, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information does not include de-identified or aggregate information, public information lawfully available from governmental records, or medical information (PHI) governed by HIPAA.
The following chart describes the categories of Personal Information that we may have collected from California consumers within the last twelve (12) months, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
We do not sell your personal information to third parties.
|
Categories of Consumers' Personal Information |
Categories of Sources |
Purpose(s) for Collection |
Categories of Third Parties With Which Personal Information Was Shared for a Business Purpose |
Categories of Third Parties To Which Personal Information Was Sold |
|---|---|---|---|---|
|
Personal Identifiers – such as name, postal address, Internet Protocol (IP) address, email address, or other similar identifiers |
Consumers directly (e.g., when making a purchase, joining the membership program, subscribing to newsletters, or submitting a contact form) |
Providing ecommerce products and membership services; Responding to consumer inquiries; Sending weekly marketing newsletters |
Service providers that assist us in providing services (e.g., email marketing platforms, payment processors, website hosting) |
None (We do not sell this information) |
|
Commercial Information – such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories |
Consumers directly |
Fulfilling orders; Managing memberships; Improving merchandise selections and customer service |
Service providers (e.g., ecommerce platforms like Shopify, shipping/fulfillment partners) |
None (We do not sell this information) |
|
Internet or Electronic Network Activity – including browsing history, search history, and interactions with our website |
Consumers, automatically when visiting our website |
Website functionality; Analytics; Marketing |
Service providers (e.g., website analytics tools) |
None (We do not sell this information) |
III. YOUR CALIFORNIA PRIVACY RIGHTS
The CCPA and CPRA provide California residents with specific rights regarding their Personal Information. This section describes your rights and explains how to exercise them.
1. Right to Know and Data Portability
You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
-
The categories of Personal Information we collected about you.
-
The categories of sources for the Personal Information we collected about you.
-
Our business or commercial purpose for collecting that Personal Information.
-
The categories of third parties with whom we share that Personal Information.
-
The specific pieces of Personal Information we collected about you (also called a data portability request).
2. Right to Delete
You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies. For example, we may deny your deletion request if retaining the information is necessary for us to complete a transaction (such as fulfilling a pending order), provide a good or service you requested, detect security incidents, or comply with a legal obligation. Please note that if you request deletion, you will no longer receive our weekly marketing newsletters.
3. Right to Correct
You have the right to request that we correct inaccurate Personal Information that we maintain about you, taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information.
4. Right to Opt-Out of the Sale or Sharing of Personal Information
We do not sell your Personal Information. Furthermore, we do not "share" your Personal Information for cross-context behavioral advertising as defined under California law. If our practices change in the future, we will update this California Policy and provide a "Do Not Sell or Share My Personal Information" link on our website.
5. Right to Limit the Use of Sensitive Personal Information
We do not collect or use "Sensitive Personal Information" (as defined by the CPRA) for purposes other than those reasonably expected by an average consumer to provide the requested goods or services. Therefore, the right to limit the use of Sensitive Personal Information is not applicable to our current data practices.
6. Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not deny you goods or services, charge you different prices or rates for goods or services, or provide you a different level or quality of goods or services.
7. California "Shine the Light" Law
California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please contact us using the information provided below.
IV. HOW TO EXERCISE YOUR RIGHTS
To exercise the access, data portability, correction, and deletion rights described above, please submit a verifiable consumer request to us by either:
-
Email: info@drworden.com
-
Mail: 3260 E Coconino Dr., Gilbert, AZ 85298
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.
To process your request, we must be able to verify your identity. Your request must:
-
Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information (e.g., matching your name and email address to our records).
-
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.
Response Timing and Format
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.
V. CHANGES TO OUR CALIFORNIA PRIVACY POLICY
We reserve the right to amend this California Policy at our discretion and at any time. When we make changes to this California Policy, we will post the updated notice on our website and update the "Last Updated" date.
VI. CONTACT INFORMATION
If you have any questions or comments about this California Privacy Policy, the ways in which we collect and use your information described here and in our general Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Email: info@drworden.com
Address: 3260 E Coconino Dr., Gilbert, AZ 85298