Legal
California privacy notice (CCPA)
Your rights over the personal information we hold, and how to exercise them.
Last updated 5 September 2026.
This notice explains how Limitless Alternative Medicine LLC (“Limitless”, “we”, “us”) collects, uses and discloses personal information about California residents, and the rights those residents have under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, “the CCPA”). It supplements our Privacy Policy and applies only to California residents.
Your medical information is not governed by this notice. We are a healthcare provider. Information created or received in the course of your care — your consultations, prescriptions, lab results and the records your provider keeps — is protected health information under HIPAA and medical information under California’s Confidentiality of Medical Information Act, and the CCPA expressly does not apply to it. Your rights over those records come from those laws instead, and are set out in our Notice of Privacy Practices. This notice covers the rest: the information we hold about you as a visitor to this website and as a customer.
Personal information we collect
In the last twelve months we have collected the following categories, outside your medical record:
- Identifiers — name, postal address, email address, telephone number, account username and IP address.
- Customer records — billing and shipping addresses and payment information. Card details are collected and processed by our payment provider; we do not store them.
- Commercial information — what you have ordered, your order history, subscriptions and correspondence with our support team.
- Internet and network activity — pages visited, the page that referred you, searches made on this site, and how you interact with our emails.
- Geolocation data — approximate location inferred from your IP address, used for tax and fraud checks. We do not collect precise location.
- Inferences — the treatments you appear interested in, drawn from the above, used to decide what to show or send you.
Where you answer questions on this site — the treatment quiz, an appointment request, a bloodwork request — those answers describe your health. We treat them as sensitive personal information and use them only to answer you, arrange your care and send you what you asked for. Once you become a patient, health information sits in your medical record and leaves this notice entirely.
We do not knowingly collect personal information from anyone under 18.
Where the information comes from
Directly from you, when you book a consultation, take the quiz, download a guide, create an account, subscribe to emails or contact us. Automatically from your device through cookies and similar technologies when you use this site. And from the providers who process our payments, deliver our email and text messages, host this site and measure our advertising.
Why we use it
To arrange consultations and answer enquiries; to take and fulfil orders, take payment and arrange delivery; to run your account; to send the guides, reminders and marketing you have asked for, and to measure how they perform; to detect and prevent fraud; to improve this site and what we offer; and to meet our legal, tax and professional obligations.
Who we disclose it to
To service providers acting on our instructions: our payment processor, our pharmacy and delivery partners, the laboratories that run your bloodwork, our customer relationship and messaging platforms, our website hosting and security providers, and our analytics and advertising providers. We also disclose information where the law requires it, and we may disclose it in connection with a merger, acquisition or sale of assets.
We do not disclose your medical information for marketing. Where a partner handles protected health information for us they do so under a business associate agreement, which is a stricter arrangement than a service provider contract under the CCPA.
Sale and sharing of personal information
We do not sell personal information for money, and we never sell or share medical information.
We do use advertising and analytics cookies that pass identifiers and browsing activity to advertising platforms so our ads can be targeted and measured on other sites. Under the CCPA that counts as “sharing” personal information for cross-context behavioural advertising, and on some readings as a “sale”. The categories involved are identifiers, internet and network activity, and inferences.
You can opt out at any time using the form below, or by turning on a Global Privacy Control signal in your browser, which we honour as an opt-out for that browser. You can also turn marketing email and text messages off from the notifications screen in your account.
How long we keep it
Order and payment records are kept as long as we need them to run the business and meet tax and consumer protection obligations, typically seven years. Marketing contacts are kept until you unsubscribe. Website analytics are kept for the shorter periods set by the platforms we use. Medical records are kept for the period the law and our professional obligations require, which is longer, and is governed by those rules rather than this notice.
Your rights
- Know — ask what categories and specific pieces of personal information we hold, where we got them, why we use them and who we disclose them to.
- Access — ask for a copy.
- Delete — ask us to delete what we collected from you, subject to the exceptions the law allows, such as completing a transaction or meeting a legal obligation.
- Correct — ask us to correct anything inaccurate.
- Opt out — tell us to stop selling or sharing your personal information.
- Limit — tell us to limit our use of sensitive personal information to what is needed to provide what you asked for.
- Non-discrimination — exercise any of these without being charged more or given a lesser service.
For your medical records, ask us instead under HIPAA and the Confidentiality of Medical Information Act — those rights are broader, and we will treat a request that reaches us either way as whichever gives you more.
How to make a request
Use the form below, or email [email protected] saying what you are asking for and the email address you use with us. You can also call us on 714-202-7169.
We verify requests before acting on them, normally by matching what you tell us against an order or account. For a request to delete, or for specific pieces of information, we may ask you to confirm again. An authorised agent may act for you with written permission, and we may contact you to confirm it.
We confirm receipt within 10 business days and answer within 45 days. If we need longer we will tell you why, and take up to a further 45 days.
Privacy request
Submit a request
For personal information held outside your medical record. To ask about your medical records, call the clinic or message your care team.
Contact
Limitless Alternative Medicine LLC
Serving Orange County, CA and nationwide
Mon to Fri, 7:00 am to 3:30 pm PST