Privacy & Cookies

Privacy Policy

Effective September 26, 2026. This policy explains what information Medoxi, Inc. (“Medoxi Consulting”, “we”) collects through medoxi.net and when you write to us, why we collect it, who helps us process it, and the choices you have.

The short version: we collect what you send us so we can reply. With your permission we use Google Analytics to understand how the site is used. We don't run advertising and we don't sell your information.

Who we are

Medoxi, Inc., a California corporation based in Mission Viejo, California, operating as Medoxi Consulting, is responsible for the information described here (the “controller” under European data protection law). For any question or request about your information, email info@medoxi.net.

What we collect

Information you give us. Through the contact form: first and last name, work email address, phone number (optional), a description of the problem you want help with, how you found us, and whether you ticked the box asking for occasional updates. Through the unsubscribe form: the email address to remove and any note you add. When you email or work with us: your messages and the business contact details in them.

Information collected automatically. Like any website, our hosting provider receives standard technical data (IP address, browser type, the page requested, date and time) to deliver the site and keep it secure. The site’s font is served from our own website, not from a third party.

Analytics, only if you accept. If you click “Accept” in our cookie notice, Google Analytics records the pages you view, how you arrived (for example a search engine or a link), approximate location (city or country), device and browser type, and on-site actions such as sending the contact form. It records that the form was sent, not what you wrote. We don’t collect sensitive information, and we ask you not to include any in the form.

How we use it, and our legal basis

To reply to your inquiry, send an automatic confirmation email, and discuss a possible engagement: our legitimate interest in answering business inquiries, and steps you ask us to take before a contract.
To send occasional updates and insights, only if you ticked that box (your consent) or, where the law allows, to business contacts we already work with. Every such email has an unsubscribe option.
To understand which pages are useful and how visitors find us (Google Analytics): your consent, given through the cookie notice.
To run and secure the website, keep business records, and meet legal obligations: our legitimate interests and legal obligations.

We don’t use your information for automated decisions that have legal or similarly significant effects on you.

We don’t sell your personal information, and we don’t share it for advertising. We use these service providers to run the site and our email:

Google: Google Forms stores what you submit through our forms, a Google Apps Script passes each submission on for email, and Google Analytics provides site statistics (only with your consent).
Microsoft 365: our company email. It sends the notification of your submission to us and the confirmation email to you, and it is where your inquiry and our correspondence are kept.
Netlify: hosts the website.

We may also disclose information if the law requires it, to protect our rights, or to a successor if our business is reorganized or sold. No other third party collects information about your activity across different websites through our site.

Cookies and your choices

Our site stores one item in your browser (medoxi-consent-v2) that remembers whether you accepted or declined analytics. It never leaves your device, and we ask you again after 12 months.

If you click “Accept”, Google Analytics sets the cookies _ga and _ga_XN0CEB5F1M, which distinguish visits and last up to 13 months. If you decline, or don’t choose, Google Analytics isn’t loaded at all. We have turned off Google’s advertising features, including Google signals and ads personalization, and we keep analytics data for 14 months. Google Analytics doesn’t log or store the IP addresses of visitors from the EU, UK or Switzerland. Learn how Google uses information from sites that use its services.

You can change your choice at any time: Cookie settings. If you withdraw consent, the site deletes its analytics cookies. You can also block cookies in your browser settings or use Google’s opt-out browser add-on.

Do Not Track and Global Privacy Control. If your browser sends a Global Privacy Control or Do Not Track signal and you haven’t made a choice, we treat it as a decline and don’t load analytics. When you submit a form, Google Forms may set its own cookies. That happens only if you choose to submit, and Google’s privacy policy covers it.

How long we keep it

Inquiries and related correspondence: we keep these as business records indefinitely. You can ask us to delete yours at any time (see “Your rights”). Client records are kept as long as required for tax and legal purposes. Unsubscribe requests: we keep the email address on a do-not-contact list for as long as needed to honor the request. Analytics data: 14 months. Hosting logs: as set by our hosting provider.

Your rights

Wherever you live, you can ask us to tell you what information we hold about you, correct it, or delete it, and you can stop our updates at any time through the unsubscribe page or the link in any email. If you are in the European Economic Area, the UK or Switzerland, you also have the right to restrict or object to our processing, to data portability, to withdraw consent at any time (without affecting earlier processing), and to complain to your local data protection authority.

California residents. We don’t sell or share personal information for cross-context behavioral advertising. Medoxi is currently below the thresholds of the California Consumer Privacy Act, but we honor the requests above for everyone and won’t treat you differently for making one.

To make a request, email info@medoxi.net. We may need to confirm your identity, usually by replying to the address we hold, and we respond within 30 days.

International transfers and security

We are based in the United States, and our service providers may process information in the US and other countries. Where information comes from the EEA, UK or Switzerland, we rely on the providers’ certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) or on standard contractual clauses. We protect accounts with strong passwords and two-step verification and limit access to the people who need it. No system is perfectly secure, so please don’t send confidential business information through the website form.

Children and changes

This site is for business audiences and isn’t directed to children under 16. We don’t knowingly collect their information. If we change this policy, we’ll post the new version here and update the effective date at the top. If a change is significant, such as a new kind of tracking, we’ll ask for your cookie choice again.