Privacy Policy

This Privacy Policy explains how SC Medical Hunt CA PC, a California professional corporation doing business as Xcel Men's Wellness & TRT (FNP 561962) (“Xcel Men's Wellness,” “we,” “us”), collects, uses and shares information when you use xcelmenswellnesshb.com and trttreatment.xcelmenswellnesshb.com (the “websites”), call us, or text us.

Once you become a patient, your medical information is protected by federal law (HIPAA) and California's Confidentiality of Medical Information Act (CMIA), and is described in our Notice of Privacy Practices. Where this policy and that notice differ for your medical information, the notice and those laws control.

Information we collect

Information you give us

• Appointment requests: your first and last name, email address, mobile number, the time you pick, and the type of visit you choose (for example, an initial TRT labs and consult).
• Calls, texts and emails: what you tell us when you contact us.

Please don't send symptoms, medical history or other health details through the website. We'll ask what we need privately once we reach you.

Information collected automatically

• Our own visit logs: our servers record each page you view, the full address of the page you arrived on (including advertising and campaign parameters such as utm tags and click IDs), the referring website, your IP address, browser and device type, an approximate location based on your IP address, and the time of your visit.
• First-party cookies: to keep these logs, we set a visitor identifier that recognizes a returning browser (kept for up to 400 days and renewed when you visit) and a session identifier that expires after 30 minutes without activity.
• With an appointment request: we save these identifiers and the address you arrived on with your request. Our staff see how many times you visited before booking and that address, so we understand which pages and ads bring patients to us.

Analytics, advertising and call tracking

We use these service providers on the websites and our phone lines:

• Google Analytics and Google Ads (loaded through Google Tag Manager): measure visits and which ads lead to calls and appointment requests. Google receives the pages you view, your browser and device information, and your IP address. When a visit that started from a Google ad leads to a call or an appointment request, we tell Google Ads that it happened, using the ad click's identifier and the time; this helps Google show our ads to people more likely to book. We do not send Google your name, contact details, the visit type you choose, or anything you type into our forms. Google describes its use of this information at policies.google.com/technologies/partner-sites.
• Meta Pixel (Meta Platforms, Inc., the company behind Facebook and Instagram; loaded through Google Tag Manager): measures which Facebook and Instagram ads lead to appointment requests. Meta receives the address of each page you view, your browser and device information, your IP address, and Meta's own cookie identifiers, and, when you send an appointment request, the fact that one was sent. We do not send Meta your name, contact details, the visit type or time you choose, or anything you type into our forms. Because our websites are about men's health care, the pages you view may suggest an interest in that care. Meta may use this information to measure and deliver ads, as described in its privacy policy at facebook.com/privacy/policy.
• CallRail (call tracking): some of our phone numbers are tracking numbers. When you call one, CallRail records your phone number, the time and length of the call, and which website visit or ad led to the call.
• Google reviews: our pages show our Google rating and recent reviews from Google, without reviewers' names.

Calls may be recorded. Calls to our office may be recorded or monitored for quality and training. California law requires everyone on a call to agree to recording, so when a call is recorded you will hear a notice at the start of the call, and you may ask us not to record it.

How we use information

• To respond to you, schedule and confirm appointments, and send reminders.
• To provide care once you are a patient (see our Notice of Privacy Practices).
• To run, secure and improve the websites, and to measure which pages and ads work.
• To send you the calls and texts you agreed to (see our Text Terms).
• To comply with the law and protect our rights, our patients and the public.

How we share information

We do not sell your personal information for money. Our use of the Meta Pixel and Google Ads, described above, may count as “sharing” for cross-context behavioral advertising under California law; you can stop it with a Global Privacy Control signal (see Your choices).

We share information with service providers that work for us under contracts that limit how they use it, including: website hosting and security (Cloudflare); our database and appointment system (Supabase); scheduling and patient records (Jane); email (Google Workspace); text messaging; call tracking (CallRail); and analytics and advertising (Google and Meta, as described above). Service providers that handle patient health information sign business associate agreements as HIPAA requires.

We may also disclose information when the law requires it (for example, a court order), to protect anyone's safety, or as part of a sale or transfer of the practice, as allowed by law.

Your choices

• Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, our websites do not load Google Tag Manager, Google Analytics, Google Ads or the Meta Pixel on your visit. Our own visit logs still run because they are needed to operate the websites and the booking form.
• Do Not Track: our websites don't respond to “Do Not Track” browser signals, because there is no common standard for them. Please use GPC instead.
• Cookies: you can block or delete cookies in your browser settings. The websites still work; we just won't recognize a returning visit.
• Google: you can limit ad personalization at adssettings.google.com and opt out of Google Analytics with Google's browser add-on at tools.google.com/dlpage/gaoptout.
• Meta: you can control how Meta uses information from other websites for ads in your Facebook or Instagram settings, under Ad preferences (“Activity information from ad partners”).
• Texts and calls: reply STOP to any text, or ask us to stop calling. See our Text Terms.

Your California privacy rights

If you live in California, you may ask us to:

• tell you what personal information we have collected about you, where it came from, why we use it, and who we share it with;
• give you a copy of it;
• correct it if it's wrong;
• delete it, unless we must keep it (for example, medical records the law requires us to keep);
• stop any “sharing” of it for cross-context behavioral advertising. Sending a GPC signal does this automatically on our websites.

To make a request, call 657-655-4420 or email admin@xcelwell.com. We'll confirm your identity before acting on it and respond within 45 days. You may use an authorized agent. We will not treat you differently for using these rights. Medical information covered by HIPAA or the CMIA is handled under those laws and our Notice of Privacy Practices.

Shine the Light (California Civil Code §1798.83): we do not share personal information with third parties for their own direct marketing.

How long we keep information

We keep appointment requests and related contact details as long as needed to arrange and document your care and as required by law. Medical records are kept for the periods California law requires. Website visit logs are kept as long as they help us run and improve the websites and our advertising, and are deleted or anonymized when they no longer do.

Security

We use administrative, technical and physical safeguards to protect information, including encrypted connections, access limited to staff who need it, and vendors bound by confidentiality and, where required, HIPAA business associate agreements. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

Emergencies

Don't use the websites, email or texts for urgent or emergency medical needs. If you are having a medical emergency, call 911.

Children

Our services and websites are for adults 18 and older. We don't knowingly collect information from children under 18.

Links to other websites

The websites link to other sites, such as Google, Facebook, Instagram and LegitScript. Their own privacy policies apply when you visit them.

Changes to this policy

We'll post any changes here and update the effective date at the top. If we make a material change, we'll note it on our home page for at least 30 days.

Contact us