Bright Medical Wellness (website url address: https://brightmedicalwellness.com/) appreciates your business and trust. We are a USA based company, providing services to enhance your well being. We are committed to protecting your privacy and providing a safe online experience. This Privacy Policy applies to our Practice’s website and governs our data collection and usage practices. By using this website, you consent to the data practices described in this Privacy Policy.
Data Collected
This Practice collects personally identifiable information provided by you, such as your e-mail address, name, home or work address or telephone number. This Practice also collects anonymous demographic information, which is not unique to you, such as your ZIP code, age, gender, preferences, interests, and favorites. There is also information about your computer hardware and software that is automatically collected by this website. This information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of this website. Please keep in mind that if you directly disclose personally identifiable information or personally sensitive data through public message boards, this information may be collected and used by others. This Practice encourages you to review the privacy statements of websites you choose to link to from the website so that you can understand how those websites collect, use and share your information. This Practice is not responsible for the privacy statements or other content on any other websites.
Registration Data
If you register on our website, we store your name, phone and your email address and any additional personal information added to your user profile. You can see, edit, or delete your personal information at any time. Website administrators can also see and edit this information.
Information submitted through the contact form on our site is sent to our company email.
These submissions are kept for customer service, appointment reminders, cancellations, and marketing purposes. They are never shared with third parties.
Google Analytics
We use Google Analytics on our site for anonymous reporting of site usage. So, no personalized data is stored. If you would like to opt-out of Google Analytics monitoring your behavior on our website please use this link: Google Analytics Opt-out.
Cases for Using the Personal Data
We use your personal information in the following cases:
Verification/identification of the user during website usage.
Providing Customer Assistance.
Sending updates to our patients with important information to inform about news/changes/updates.
Customize the website to make your experience more personal and engaging.
Appointment confirmation, cancellations, reminders.
New service and treatment updates, offers and promotions.
Consent for Messaging
By filling out a Facebook lead form, appointment or contact form on our website, you consent to receive messages via email and SMS from us. These messages are intended to provide you with important information about your appointments and our services.
Opting In and Opting Out
You opt-in to receive messages from us when you complete our Facebook lead form, or fill out a contact form on our website. If at any time you wish to stop receiving messages from us, you can opt-out by sending a text message with STOP or UNSUBSCRIBE request. We will process your opt-out request promptly and with no additional cost to you.
Pages on this site may include embedded content, like YouTube videos, for example. Embedded content from other websites behaves in the exact same way as if you visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. Below you can find a list of the services we use:
The Instagram plugin is used to display our Instagram timeline on our site. Instagram has its own cookie and privacy policies over which we have no control. There is no installation of cookies from Facebook and your IP is not sent to a Facebook server until you consent to it. See their privacy policy here: Facebook Privacy Policy .
Youtube
We use YouTube videos embedded on our site. YouTube has its own cookie and privacy policies over which we have no control. There is no installation of cookies from YouTube and your IP is not sent to a YouTube server until you consent to it. See their privacy policy here: YouTube Privacy Policy.
This site uses cookies – small text files that are placed on your machine to help the site provide a better user experience. In general, cookies are used to retain user preferences, store information for things like shopping carts, and provide anonymized tracking data to third party applications like Google Analytics. Cookies generally exist to make your browsing experience better. However, you may prefer to disable cookies on this site and on others. The most effective way to do this is to disable cookies in your browser. We suggest consulting the help section of your browser.
First-Party Tag Serving: To improve measurement accuracy and reduce reliance on third-party domains, certain Google Analytics and Google Ads measurement requests on our funnel pages (sales.brightmedicalwellness.com) are routed through our own domain rather than directly to Google. This is implemented using Google Tag Gateway and operated through our content delivery provider (Cloudflare).
This routing does not change what data is collected, who receives it, or how it is used. The same consent rules apply: no advertising or analytics data is transmitted unless you have given consent through our cookie banner. Visitors who decline consent or opt out via the “Do Not Sell or Share” link will not have measurement data sent, regardless of the routing path.
You may identify these requests in your browser’s developer tools as calls to brightmedicalwellness.com/sales paths beginning with /g/. They are functionally equivalent to standard Google measurement requests and serve the same purpose: measuring the effectiveness of our marketing and improving our website experience.
If you are not a registered patient, there is no personal information we can retain or view regarding yourself.
If you are a new patient who requested information or an appointment your personal information can be accessed by:
Our system administrators.
Our medical staff.
Bright Medical Wellness, LLC does not share personal information with third parties for marketing/promotional purposes.
When you submit a request for an appointment, book an appointment or contact us via our contact form, we retain your information until you decide to remove it.
We use the SSL/HTTPS HIPAA-compliant protocol throughout our site. This encrypts our user communications with the servers so that personally identifiable information is not captured/hijacked by third parties without authorization.
General Rights
If you have a submitted information on this website or have left comments, you can request an exported file of the personal data we retain, including any additional data you have provided to us.
You can also request that we erase any of the personal data we have stored. This does not include any data we are obliged to keep for administrative, legal, or security purposes. In short, we cannot erase data that is vital to you being an active customer (i.e. basic account information like an email address).
If you wish that all of your data is erased, we will no longer be able to offer any support or other service-related services to you.
Bright Medical Wellness may post links to third party websites on this website. These third party websites are not screened for privacy or security compliance by Bright Medical Wellness, and you release us from any liability for the conduct of these third party websites.
Please be aware that this Privacy Policy, and any other policies in place, in addition to any amendments, does not create rights enforceable by third parties or require disclosure of any personal information relating to members of the Service or Site. Bright Medical Wellness bears no responsibility for the information collected or used by any advertiser or third party website. Please review the privacy policy and terms of service for each site you visit through third party links.
At times it may become necessary or desirable to Bright Medical Wellness, for legal purposes, to release your information in response to a request from a government agency or a private litigant. You agree that we may disclose your information to a third party where we believe, in good faith, that it is desirable to do so for the purposes of a civil action, criminal investigation, or other legal matter. In the event that we receive a subpoena affecting your privacy, we may elect to notify you to give you an opportunity to file a motion to quash the subpoena, or we may attempt to quash it ourselves, but we are not obligated to do either. We may also proactively report you, and release your information to, third parties where we believe that it is prudent to do so for legal reasons, such as our belief that you have engaged in fraudulent activities. You release us from any damages that may arise from or relate to the release of your information to a request from law enforcement agencies or private litigants.
Any passing on of personal data for legal purposes will only be done in compliance with laws of the United States of America.
This section applies only to information you submit through our marketing and lead forms. It never applies to information received through Sign in with Google (see Section 13).
When you arrive at brightmedicalwellness.com from one of our ads, we do two things to understand whether our advertising is working:
We capture the click identifier that the ad network adds to the URL (for example, Google’s gclid or Meta’s fbclid), along with any campaign tags (utm_source, utm_medium, etc.). These identifiers are stored in a first-party cookie on your device for up to 90 days.
When you submit our qualification form, our server sends a “Lead” event back to the advertising platforms (Meta and, where applicable, Google Ads) so they can attribute the conversion to the correct ad. This is called server-side conversion tracking.
What Data we send to advertising platforms:
For each completed lead form submission, our server sends:
A one-way hashed (SHA-256) version of your email address, phone number, and first/last name. The advertising platforms compare these hashes to their own user database to confirm a match. They cannot reverse the hashes to recover your information from us.
The click identifier (e.g., fbclid, gclid) that brought you to our site.
Your IP address and browser type (these are technical fingerprints standard to all web requests).
A conversion event identifier (a random ID we generate) used solely for de-duplication.
A category label of "Lead" and a timestamp.
What we DO NOT send to advertising platforms:
We never share with Meta, Google, or any other advertising platform any of the following:
Your answers to the qualification quiz, including your weight loss goals, prior medication history, time-commitment preference, or coaching needs.
Whether our system internally classifies you as a “qualified” lead.
Any clinical, medical, treatment, prescription, lab result, or appointment information.
Any information you share with our care team after the initial form submission.
Any free-text descriptions you provide about your past experiences.
Limited Data Use (Meta) and Restricted Data Processing (Google):
Because Bright Medical Wellness operates in a health-adjacent category, we apply the most restrictive privacy modes that each advertising platform offers:
Meta — Limited Data Use (LDU): Every server-side conversion event we send to Meta is tagged with the LDU flag, which instructs Meta to limit how the data is used for personalized advertising and to apply enhanced privacy protections regardless of where you live.
Google Ads — Restricted Data Processing (RDP): Our Google Ads account has Restricted Data Processing enabled globally, which limits Google’s use of conversion data for personalized advertising and similar purposes.
Your choices:
Opt out of conversion sharing: You can prevent us from sharing your conversion event with advertising platforms by submitting a request at https://brightmedicalwellness.com/contact/. Because the sharing happens at the moment you submit the form, opting out is most effective if you contact us before submitting the form, but we will honor any subsequent request to delete previously shared events to the fullest extent the platforms support (Meta and Google both offer deletion APIs that we will use upon request).
Block tracking cookies: You can clear or block cookies in your browser. Doing so will not affect our ability to provide medical services, but may reduce the accuracy of our advertising measurement.
Disable ad personalization at the platform level:
Meta (Facebook/Instagram): Settings → Ads → Ad Preferences → Ad Settings → “Activity from ad partners”
Google: adssettings.google.com
CCPA/CPRA — California residents: You have the right to know, delete, and limit the sharing of your personal information. To exercise these rights, contact us at [email protected]. We do not “sell” personal information as defined by CCPA, and we treat the targeted advertising disclosure described above as a “share” subject to the CCPA opt-out — you may opt out via the methods above or by submitting a request through our contact form.
Your “Do Not Sell or Share My Personal Information” Right (California Residents)
California residents have the right to opt out of the “sale” or “sharing” of their personal information for cross-context behavioral advertising under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
To exercise this right, click the “Do Not Sell or Share My Personal Information” link in the footer of any page on this site. This will open our consent preferences, where you can disable advertising and analytics cookies at any time.
Your choice is stored in a first-party cookie on your device and is respected by our marketing partners — including Meta (Facebook/Instagram) and Google — through our consent management platform (CookieYes) and our customer data platform (CustomerLabs). Once you opt out, we will stop sharing your personal information with these advertising partners for behavioral advertising purposes.
You may revisit and change your preferences at any time using the same footer link. We do not require you to create an account or verify your identity to exercise this opt-out right.
HIPAA: Information collected through our marketing forms is not Protected Health Information (PHI) under HIPAA — PHI is only created once you become an established patient. The data we share with advertising platforms (hashed identifiers and click IDs) is collected before any treatment relationship begins and is never combined with PHI in our advertising data flows.
Service providers we use for advertising measurement:
Meta Platforms, Inc. — Conversions API for Lead event reporting under LDU.
Google LLC — Google Ads Enhanced Conversions for Leads under Restricted Data Processing (when applicable to your campaign).
Replit, Inc. — Hosting provider for our website and lead-capture API.
GoHighLevel (HighLevel, Inc.) — Customer relationship management. GoHighLevel acts as our business associate where applicable.
Our online patient account at begin.brightmedicalwellness.com lets you sign in with your Google account instead of creating a separate password. This section explains what we receive from Google when you choose that option and how we handle it.
What we receive from Google
When you choose “Sign in with Google,” Google shares only your basic profile information with us: your name, your email address, and your profile picture (the “openid,” “email,” and “profile” permissions). We do not receive your Google password, and we do not request access to your Gmail, Google Drive, Calendar, Contacts, or any other Google data.
How we use it
To create your patient account and confirm your identity each time you sign in.
To show your name in your account and to contact you at your email address about your account, intake, orders, and care.
We do not use information received from Google for advertising, we do not sell it, and we do not use it to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.
How it is stored and shared
Your patient account runs on the Bask Health telehealth platform (Bask Health, Inc.), which stores this information on our behalf using encrypted connections and access controls. We share it only with service providers that operate our systems and help provide your care, under agreements that limit their use to providing those services, or when required by law (see Section 11). We do not share information received from Google with advertisers.
How long we keep it and how to delete it
We keep your Google sign-in information for as long as your patient account is active. Medical records created during your care are kept as long as federal and state law require. You can disconnect our access at any time at myaccount.google.com/permissions. To ask us to delete your account information, email [email protected] or use our contact page.
Google API Services User Data Policy
Bright Medical Wellness’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Changes to how we use Google data
If we change how we access, use, store, or share information received from Google, we will update this policy, change the “Last updated” date, and notify affected patients by email or in their patient account before the change takes effect.
Last updated:
2026-10-11