Effective Date: July 1, 2026

Misra Wellness ("Misra Wellness," "the Practice," "we," "us," or "our") is a physician-owned Direct Primary Care and Concierge Internal Medicine practice led by Sulagna Misra, MD, serving patients in California and New York. We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information collected through this website, www.misrawellness.com (the "Site"). It does not apply to the confidential medical records of established patients, which are governed separately (see "Protected Health Information & HIPAA" below).

Information we collect

Information you provide. When you submit a meet-and-greet request, contact form, course enrollment, or email, we collect the information you choose to provide — such as your name, email address, phone number, state of residence, preferred contact times, how you heard about us, and any details you include about your interest in the Practice.

Information collected automatically. Like most websites, we may automatically collect limited technical information such as your IP address, browser type, device information, referring pages, and pages viewed. This is used to operate, secure, and improve the Site.

Cookies & analytics. The Site may use cookies and similar technologies, including privacy-respecting analytics, to understand how the Site is used. You can control cookies through your browser settings. Where required, non-essential cookies load only after you consent.

How we use your information

We use the information we collect to respond to your inquiry, coordinate a meet & greet, evaluate whether the Practice is a fit, deliver educational content or courses you request, operate and improve the Site, and comply with legal obligations. We do not sell your personal information.

Protected Health Information & HIPAA

Please do not submit protected health information (PHI), medical history, or confidential clinical details through website forms or general email — these channels are not intended for sensitive medical information. Once you become an established patient, your clinical information is maintained within our secure, HIPAA-aligned patient systems and is governed by our Notice of Privacy Practices, which is provided during onboarding. Submitting a form on this Site does not create a physician-patient relationship (see our Terms of Use).

How we share information

We share personal information only as needed to operate the Practice: with trusted service providers who support our operations (for example, website hosting, secure email, scheduling, and analytics) under obligations of confidentiality; when required by law or to protect rights, safety, and security; and with your direction or consent. We do not sell or rent your personal information to third parties for their marketing.

Third-party services

Some features rely on third-party platforms that maintain their own privacy practices, including Fullscript (supplement dispensary), Thinkific and VuMedi (education), YouTube and Substack (media), and secure video platforms used for virtual visits. When you interact with those services, their privacy policies apply. We are not responsible for the content or privacy practices of third-party websites linked from this Site.

Your privacy rights

California residents. Under the California Consumer Privacy Act (as amended by the CPRA), you may request access to, correction of, or deletion of the personal information we hold about you, and you may opt out of any "sale" or "sharing" of personal information (we do not sell or share it as those terms are defined). We will not discriminate against you for exercising these rights.

New York residents. New York patients are afforded protections under applicable New York State and federal law. You may contact us to review or correct the personal information we maintain about you.

To exercise any right, contact us using the details below. We may need to verify your identity before responding.

Data security

We use reasonable administrative, technical, and physical safeguards designed to protect the information we collect. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please avoid transmitting sensitive medical information through the Site.

Children's privacy

This Site is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the Effective Date above. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

Contact us

Questions about this Privacy Policy or your information? Email [email protected] or call (818) 431-5511.

This Privacy Policy is provided as a physician-specific placeholder pending final review by legal counsel.