MECCA HEALTH WEBSITE PRIVACY POLICY
Ruvini Wijetilaka, MD PLLC, doing business as Mecca Health (“Mecca Health,” “we,” “our,” or “us”) values your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our landing page at care.meccahealth.co, request a discovery call through it, or otherwise contact us from it. Please read it carefully.
1. Information We Collect
Information you provide. Our landing page does not include forms that ask for your personal information. When you book a discovery call, you are taken to our patient portal, operated by our third-party provider Cerbo, where you choose a provider, appointment type and time and provide the contact details needed to confirm the appointment, such as your name, email address and telephone number. You may also provide information when you email or call us.
Interactive tools. Our landing page includes an interactive symptom selector and a self-assessment checklist. Your selections are processed only in your browser to change what is shown on the page. They are not sent to us, saved, or shared with analytics or advertising providers.
Information collected automatically. When you visit the landing page, our hosting provider, analytics and advertising tools may collect your IP address, device and browser details, referring URL, pages viewed, timestamps, and cookie or similar identifiers. If you arrive from an advertisement or campaign link, we store the campaign details from that link (such as UTM parameters and Google or Meta click identifiers) in your browser’s local storage for up to 30 days, together with a randomly generated session identifier, so we can understand which campaigns lead to booking requests.
Information about your interactions. We record when you click a button to book a discovery call or to view membership plans, including which button you clicked, where it appears on the page, and the membership tier associated with it (for example, Silver, Gold or Platinum). These records do not include your name, contact details or health information.
Information from service providers. We may receive information about the status of an appointment request from the platforms that help us operate the landing page and scheduling, subject to applicable law and our agreements with those providers.
2. How We Use Information
We use personal information to respond to inquiries; arrange and follow up on discovery calls; provide information you request about services and memberships; measure the performance of the landing page and our advertising campaigns; operate, maintain, secure, and improve the landing page; and comply with applicable legal requirements.
We may contact you with information needed to respond to your inquiry, schedule or confirm your discovery call, and follow up about the services you requested. Where required by applicable law, we will obtain appropriate consent or authorization before sending promotional marketing communications. You may unsubscribe from promotional emails using the link in the message or by contacting us. Appointment-related and other permitted service communications may continue as appropriate.
3. Appointment Requests
Discovery calls are booked through our patient portal, operated by Cerbo. Information you submit there is used to schedule and confirm your call, contact you, and help our team understand which service you are asking about. Booking a discovery call or using the landing page does not, by itself, establish a physician-patient relationship.
Do not use the landing page for emergencies. If you are experiencing a medical emergency, call 911. Please do not send detailed health information by general email or through website tools unless we have told you that the channel is appropriate and secure for it.
4. Health Information and HIPAA
Mecca Health maintains a separate Notice of Privacy Practices describing how protected health information may be used and disclosed and explaining patient rights. When HIPAA applies, that Notice and applicable law govern protected health information. This Website Privacy Policy does not replace that Notice. You may request a copy of the Notice of Privacy Practices by contacting info@meccahealth.co.
The landing page’s symptom selector and checklist are designed to process selections locally in your browser. Please do not submit sensitive medical information through general website communications. We seek to avoid sending health information to analytics or advertising providers.
5. Service Providers and Sharing
We use service providers to support website hosting, appointment scheduling (including Cerbo), email communications, customer relationship management, website analytics, and advertising measurement. We share information with these providers as necessary for the services they perform and as permitted by applicable law. Cerbo provides our patient booking portal, and Mecca Health maintains a business associate agreement with Cerbo. Where information is protected by HIPAA, we apply the requirements of HIPAA and applicable agreements to its use and disclosure. We do not authorize advertising providers to receive protected health information for impermissible purposes.
We may also disclose information if required by law, to protect rights and safety, or in connection with an organizational transaction as legally permitted.
6. Cookies, Local Storage and Analytics
Our landing page uses Google Tag Manager to load Google Analytics 4 (website analytics) and Google Ads conversion tracking (advertising measurement). These tools may set cookies or similar identifiers and receive information such as your IP address, device details, pages viewed, and the button-click events described in Section 1. We also use your browser’s local storage to keep campaign details for up to 30 days, as described above.
You can control cookies through your browser settings, clear local storage at any time, opt out of Google Analytics using Google’s browser add-on, and manage Google ad personalization in your Google account settings. Blocking cookies does not prevent you from using the landing page or booking a call.
7. Data Retention and Security
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this policy, maintain appropriate records, resolve disputes, and comply with legal obligations. Medical records and other regulated information may be subject to separate retention rules. Campaign information saved in browser local storage is intended to be retained for up to 30 days.
We use reasonable administrative, technical, and physical safeguards appropriate to the information we handle. No transmission or storage method is completely secure.
8. Your Choices and Privacy Rights
You may ask us to update your contact information, stop marketing communications, or tell you what personal information we maintain about you by contacting us at the address below. We provide care in New York, California, Florida, Virginia, Pennsylvania, and New Jersey. Depending on where you live, you may have additional rights to access, correct, delete, or limit certain uses of your personal information, subject to exceptions.
We respond to verifiable privacy requests as required by applicable law. Certain rights may be subject to legal exceptions.
9. Children
The landing page and our services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from children through the landing page. If you believe a child has provided information to us, please contact us.
10. Third-Party Websites
The landing page links to third-party websites and services, including our Cerbo patient portal. Their privacy practices are governed by their own policies. Please review those policies when you leave the landing page.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, technologies, or legal obligations. We will post the updated version and revise the Effective Date; where required, we will provide additional notice.
12. Contact Us
Ruvini Wijetilaka, MD PLLC (Mecca Health)
99 John St, Apt 2306, New York, NY 10038
Email: info@meccahealth.co