Effective Date: September 24, 2026

Misra Wellness ("Misra Wellness," "the Practice," "we," "us," or "our") is a physician-owned Direct Primary Care and Concierge Internal Medicine practice led by Sulagna Misra, MD, serving patients in California and New York. This Privacy Policy explains what information this website, www.misrawellness.com (the "Site"), collects, why, who receives it, and the choices you have. It covers the Site only. It does not apply to the medical records of established patients, which are governed separately (see "Protected Health Information & HIPAA" below).

Information we collect

What you send us. When you request a meet & greet or send us a message through the Site, we receive what you enter: your name, email address, phone number, state of residence, the service you are interested in, preferred call times, how you heard about us and any message you write. When you request a downloadable guide, we receive your first name, email address and, if you enter it, your practice name. When you email or call us, we receive what you choose to share.
How you found us. So we know which of our outreach helps patients find the Practice, your browser remembers the page where you arrived on the Site, the website that referred you and any campaign tag in the link (for example, utm_source). This is kept in your own browser, is not a cookie and is not sent to any third party; it reaches us only if you submit the request form, together with your request.
Analytics, only with your permission. If you choose “Allow analytics,” Google Analytics 4 measures which pages are visited, which buttons are pressed (for example, “Book a meet & greet” or a phone link) and whether a visit ended in a meet-and-greet request. Google Analytics never receives anything you type into a form. If you do not allow it, Google Analytics is not loaded at all. We do not use the Meta (Facebook) pixel or any other advertising tracker on this Site.
Basic site operation. Like any website, our servers log technical data such as IP address, browser type and the page requested, to keep the Site running and secure. Cloudflare protects the Site against abuse, and our request form may use Cloudflare Turnstile to tell people from bots.

Cookies and your privacy choices

The only cookie set without your permission records your privacy choice itself. Google Analytics cookies (named _ga) are set only after you select “Allow analytics.” You can change your answer at any time with the Your Privacy Choices link at the bottom of every page; if you withdraw permission, we delete those cookies and stop loading Google Analytics. We also honor the Global Privacy Control signal: if your browser sends it, we treat it as a “no.”

How we use your information

We use the information we collect to respond to your inquiry, coordinate a meet & greet, evaluate whether the Practice is a fit, send you a guide you requested, operate, secure and improve the Site, and comply with legal obligations. We do not sell your personal information, and we do not share it with advertisers for their own purposes.

Protected Health Information & HIPAA

Please do not submit protected health information (PHI), medical history, or confidential clinical details through website forms or general email — these channels are not intended for sensitive medical information. Once you become an established patient, your clinical information is maintained within our secure, HIPAA-aligned patient systems and is governed by our Notice of Privacy Practices, which is provided during onboarding. Submitting a form on this Site does not create a physician-patient relationship (see our Terms of Use).

Who we share it with

Service providers who help us run the Site and respond to you, under obligations that limit their use of your information: our website hosting provider, Cloudflare (security and content delivery), our email delivery provider, which carries form notifications to our office, and, only if you allow analytics, Google. We may also disclose information when the law requires it, to protect rights, safety and security, or at your direction.

Third-party services

Some features rely on third-party platforms that maintain their own privacy practices, including Fullscript (supplement dispensary), Thinkific and VuMedi (education), YouTube and Substack (media), and secure video platforms used for virtual visits. When you follow a link to, or interact with, those services, their privacy policies apply. We are not responsible for the content or privacy practices of third-party websites linked from this Site.

How long we keep it

Meet-and-greet requests and guide requests are kept as long as needed to follow up with you and for our business records, and then deleted. The “how you found us” details stay in your browser for up to 30 days unless you clear them. Google Analytics data, if you allowed it, is retained by Google according to our account’s retention setting.

Your privacy rights

California residents. Under the California Consumer Privacy Act (as amended by the CPRA), you may request to know what personal information we hold about you, and to have it corrected or deleted. You may also opt out of any “sale” or “sharing” of personal information; we do neither, and the Your Privacy Choices link lets you turn analytics off at any time. We will not discriminate against you for exercising these rights.

New York residents. New York patients are afforded protections under applicable New York State and federal law. You may contact us to review or correct the personal information we maintain about you.

To exercise any right, contact us using the details below. We may need to verify your identity before responding.

Data security

We use reasonable administrative, technical, and physical safeguards designed to protect the information we collect. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please avoid transmitting sensitive medical information through the Site.

Children's privacy

This Site is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the Effective Date above.

Contact us

Questions about this Privacy Policy or your information? Email [email protected] or call (818) 431-5511.