Effective Date: September 22, 2026

Scope

This California Consumer Privacy Notice describes Elyra Healthcare’s practices regarding personal information subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), to the extent the CCPA applies to Elyra Healthcare. Certain medical information governed by the California Confidentiality of Medical Information Act (CMIA) and protected health information collected, maintained, used, or disclosed by a HIPAA covered entity or business associate are exempt from the CCPA. Health information that constitutes PHI remains protected by HIPAA and other applicable health privacy laws.

Notice at Collection

Depending on how you use Elyra’s website and services, Elyra may collect the categories of personal information below. Elyra collects, uses, and retains personal information only as reasonably necessary and proportionate for the disclosed purposes and as required or permitted by law.

Identifiers and contact information. This may include your name, email address, telephone number, mailing address, and online identifiers. Elyra may collect and use this information to respond to inquiries, coordinate or schedule services, administer accounts, maintain security, and comply with legal obligations. Elyra retains this information only for as long as reasonably necessary for those purposes and applicable recordkeeping requirements. Elyra may disclose it to service providers or contractors that support these functions.

Internet or other electronic network activity. This may include IP address, browser and device information, pages viewed, referral information, and cookie or similar identifiers. Elyra may use this information to operate and secure the website, prevent fraud, troubleshoot technical issues, measure website performance, and understand general site usage. Retention depends on the applicable security, analytics, and vendor settings and is limited to the period reasonably necessary for those purposes.

Commercial, insurance, or transaction information. This may include insurance information, service inquiries, payment-related information, or billing information that you provide. Elyra may use this information to determine eligibility, coordinate payment, administer requested services, and maintain required records. When information becomes protected health information or medical information, HIPAA and applicable California health privacy laws govern its use and disclosure.

Sensitive personal information. This may include health-related information or other sensitive information you voluntarily provide when seeking care, including information submitted through Elyra’s admissions, insurance verification, or other care-related forms. Elyra uses such information to evaluate or respond to a request for care, verify insurance benefits or eligibility, coordinate services, protect safety, and comply with legal obligations. Elyra does not sell protected health information or medical information and does not use protected health information from secure clinical, intake, tele-health, or EHR systems for cross-context behavioral advertising.

Communications and submissions. This may include messages, general website form entries, appointment requests, and records of communications. Elyra may use this information to respond to requests, provide support, document communications, and maintain security and compliance records. Elyra retains it only as long as reasonably necessary for those purposes and any applicable legal, clinical, or record-retention requirement.

Sale or sharing of personal information. Elyra does not sell protected health information or medical information. If Elyra’s use of a non-PHI website technology constitutes a ‘sale’ or ‘sharing’ under the CCPA, Elyra will provide the notice and opt-out mechanism required by California law. Elyra does not knowingly sell or share the personal information of consumers under 16 years of age.

Retention. Elyra retains each category of personal information only for as long as reasonably necessary and proportionate to the purpose for which it was collected, to maintain appropriate business and clinical records, to protect security and prevent fraud, and to satisfy applicable legal, regulatory, contractual, or professional obligations.

Sale and Sharing of Personal Information

Elyra does not sell PHI or medical information. Elyra may use vendors that provide website hosting, security, analytics, communications, or advertising-related services for non-PHI website data. Under the CCPA, certain disclosures for cross-context behavioral advertising can constitute ‘sharing’ even when no money is exchanged. Where a disclosure is a sale or sharing under the CCPA and no exemption applies, California residents have the right to opt out. Elyra will not knowingly use PHI from secure clinical, intake, telehealth, or EHR systems for cross-context behavioral advertising.

Sensitive Personal Information

To the extent Elyra processes sensitive personal information that is subject to the CCPA, Elyra limits its use and disclosure to purposes reasonably necessary to provide requested services, protect security and safety, comply with law, and other purposes permitted by the CCPA. Medical information and PHI may be governed instead by CMIA and HIPAA.

Your California Privacy Rights

  • Right to know/access the personal information Elyra has collected about you and information about how it is used and disclosed.
  • Right to request deletion of personal information, subject to legal and other exceptions.
  • Right to request correction of inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information, when applicable.
  • Right to limit certain uses or disclosures of sensitive personal information, when applicable.
  • Right to non-discrimination for exercising CCPA rights.

How to Exercise CCPA Rights

To submit a California privacy request, contact Elyra Healthcare at info@elyrahealthcare.com or (951) 904-3342 and state that you are making a California privacy request. Elyra may request information reasonably necessary to verify your identity and the request. An authorized agent may submit a request on your behalf where permitted by law; Elyra may require proof of the agent’s authority and may verify your identity directly.

Where required by law, Elyra will honor legally recognized opt-out preference signals and provide applicable methods for California residents to exercise their rights regarding the sale or sharing of personal information, in accordance with California law.

No Retaliation or Discrimination

Elyra will not discriminate against you for exercising privacy rights provided by the CCPA.

Changes to This Notice

Elyra may update this California Consumer Privacy Notice from time to time to reflect changes in law, technology, or its practices. The current version will identify its effective or last-updated date.

Contact

Privacy Officer, Elyra Healthcare
Email: info@elyrahealthcare.com
Phone: (951) 904-3342
Website: elyrahealthcare.com