California Privacy Notice
Effective 2026-07-24 · For California residents, under the CCPA as amended by the CPRA
The short version
We have never sold or shared personal information, and we do not engage in cross-context behavioural advertising. We collect no sensitive personal information. Because of that, the opt-out rights the CPRA gives you have nothing to act on here — not because we have exempted ourselves, but because the practices those rights exist to control are ones we do not carry out.
This notice supplements our Privacy Policy and applies to California residents. We extend the rights described below to every visitor, regardless of whether we meet the revenue and data-volume thresholds that determine which businesses the CCPA formally applies to.
1. Who this notice is from
Privacy requests go to privacy@glp1.healthcare.
2. Notice at collection
The CCPA requires that you be told, at or before the point of collection, what is collected and why. Delivering a web page unavoidably involves your browser sending a request to a server. Our host, Vercel Inc., processes that request on our behalf. Nothing else is collected: we set no cookies, run no analytics, serve no advertising, and operate no accounts or forms.
3. Categories of personal information
Below is every category enumerated by the CCPA, and whether we process it. We list the categories we do not collect as well, because a notice that only names what is collected leaves you unable to tell the difference between “not collected” and “not disclosed.”
| Category | Collected? | Detail |
|---|---|---|
| IdentifiersIP address | Yes | Received in server logs as a necessary part of delivering a page. Not used to identify you and not linked to anything else. |
| Internet or other electronic network activityPages requested, browser type and version, timestamp, referring page | Yes | Standard web-server request data, used to serve the site, keep it secure, and diagnose faults. |
| Personal information under Cal. Civ. Code §1798.80Name, address, telephone number, financial details | No | There are no forms, accounts, or payments on this site. |
| Protected classification characteristicsAge, race, sex, medical condition, disability | No | We never ask. Reading a page about a medication tells us nothing we retain about you. |
| Commercial informationProducts purchased or considered | No | We sell nothing and operate no store. |
| Biometric informationFingerprints, faceprints, voiceprints | No | Never collected. |
| Geolocation dataPrecise location | No | We do not request or store location. An IP address implies coarse regional origin but we do not derive, retain, or act on it. |
| Sensory dataAudio, electronic, visual information | No | No recording of any kind, including no session replay. |
| Professional or employment informationJob history | No | Never collected. |
| Education informationRecords covered by FERPA | No | Never collected. |
| Inferences drawn from other personal informationProfiles reflecting preferences, characteristics, behaviour | No | We build no profiles. This is the category most health publishers do populate, through advertising and analytics partners. We do not. |
| Sensitive personal informationHealth data, precise geolocation, account credentials, racial or ethnic origin | No | We do not collect sensitive personal information, so the CPRA right to limit its use and disclosure has nothing to act on here. |
4. Purposes, sources, and disclosures
- Source. The only source is you, indirectly, through your browser’s request to our server. We buy no data and receive none from data brokers.
- Business purpose. Serving the site, maintaining security and integrity, and diagnosing technical faults.
- Disclosure. Server request data is processed by our hosting provider, Vercel Inc., acting as a service provider under a contract that restricts use of that data to providing the service. We disclose personal information to no one else, except where legally compelled.
- Sale or sharing. None, ever. See Your Privacy Choices.
- Retention. Technical request data is retained only as long as needed for security and operational purposes. We set no retention period for personal information we do not hold.
5. Your California rights
- Right to know. Request the categories and specific pieces of personal information we have collected, the sources, the purposes, and any third parties involved.
- Right to delete. Request deletion of personal information we collected from you, subject to statutory exceptions.
- Right to correct. Request correction of inaccurate personal information.
- Right to opt out of sale or sharing. Available to you as a matter of right; as set out above, we do neither, so there is nothing to switch off.
- Right to limit use of sensitive personal information. We collect none.
- Right to non-discrimination. We will never charge you a different price, degrade the site, or deny you content for exercising any of these rights. Every page here is free and identical for every reader.
6. How to make a request
Email privacy@glp1.healthcare. We will acknowledge within 10 business days and respond substantively within 45 days, extendable once by a further 45 days where reasonably necessary, as the statute allows.
Verification. We must verify that a request comes from you. This is where our design creates an honest limitation: because we operate no accounts and hold no identifying information, we usually have nothing to match you against, and so may be unable to verify a request. In that case there is generally also nothing to disclose, correct, or delete — and we will tell you that plainly rather than ask you to send identity documents we would then have to store.
Authorised agents. An agent may submit a request on your behalf with written permission signed by you, subject to the same verification limits.
7. Global Privacy Control
We honour Global Privacy Control signals. In practice this changes nothing about how we treat you, because we do not sell or share personal information for any visitor, whether or not a signal is present.
8. Minors
We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of minors — or of anyone else.
9. Changes
If we ever introduce analytics, advertising, or any feature that would change the answers above, we will update this notice before that feature goes live and change the effective date. Our commercial commitments are in How We’re Funded.