Privacy Policy
- Introduction
CapitalMD ("we," "us," or "our") operates capitalmd.com. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit the Site and complete an application. This policy applies only to visitors located in the United States. If you do not agree with it, please do not use the Site.
- Information We Collect
Information you provide directly
Contact information: names, email addresses, phone numbers, LinkedIn profile/handle, and how you heard about us.
Clinical and professional background, non-clinical business activity and details
Information collected automatically
When you use the Site, we and our analytics providers automatically collect certain information through cookies and similar technologies, including your IP address, device and browser type, operating system, pages visited and time spent, referral source, approximate geographic location, and interaction patterns. We use Google Tag Manager and Google Analytics for this purpose.
- How We Use Your Information
We use the information we collect to:- Process and evaluate your application and determine eligibility;
- Communicate with you about your application, questions, or updates;
- Understand Site usage and improve user experience;
- Analyze trends to optimize our services and marketing;
- Comply with legal obligations and prevent fraud.
We do not sell your personal information. We may share aggregated, de-identified information that cannot reasonably identify you without restriction.
- Information Sharing and Disclosure
Service providers. We share information with trusted third-party providers who help us operate the Site and run our business, including, but not limited to, Vercel (web hosting) and Google (analytics via Google Tag Manager and Google Analytics), along with our email service provider for communications. These providers may use your information only as necessary to provide services to us and must keep it confidential.
Legal requirements. We may disclose information if required by law, subpoena, court order, or government request, or where we believe in good faith it is necessary to enforce our Terms, protect the rights, safety, or property of CapitalMD or others, or investigate possible wrongdoing.
Business transfers. If CapitalMD is involved in a merger, acquisition, financing, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
- Data Retention
- Application data: retained for a minimum of three (3) years for business and regulatory purposes, unless you request deletion.
- Analytics data: retained per our analytics providers' policies (typically up to 26 months for Google Analytics).
- Cookies: session cookies expire when you close your browser; persistent cookies expire per their settings (typically 1–2 years).
- Communication records: retained for the duration of your relationship with us plus up to one (1) year.
You may request deletion of your personal information at any time.
- Data Security
We use reasonable technical, administrative, and physical safeguards—including SSL/TLS encryption in transit, access controls, secure storage, and need-to-know access—to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
- Your Privacy Rights
California residents (CCPA/CPRA). You have the right to: know what personal information we collect, use, or disclose; delete your personal information (subject to exceptions); correct inaccurate information; limit use of sensitive personal information; opt out of any sale or sharing (note: we do not sell personal information); and not be discriminated against for exercising these rights.
Other states. If you reside in another U.S. state with applicable privacy laws, similar rights may apply.
Exercising your rights. Email [email protected]with "Privacy Request" in the subject line and tell us which right you wish to exercise. We will respond within thirty (30) days and may ask you to verify your identity first.
- Cookie Management
Most browsers let you block, delete, or be notified about cookies. Disabling cookies may limit some Site features. You can also opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
- Do Not Track
Our Site does not currently respond to browser "Do Not Track" signals. You may manage tracking through your browser settings or our analytics providers' opt-out tools.
- Children's Privacy
The Site is not intended for individuals under 18, and we do not knowingly collect information from them. If we learn that we have collected information from a child under 18, we will delete it.
- Third-Party Links
The Site may link to third-party websites we do not control. This policy does not apply to those sites, and we are not responsible for their practices. Review their privacy policies before providing information.
- Changes to This Policy
We may update this Privacy Policy from time to time. We will revise the "Last Updated" date and, for material changes, post a prominent notice on the Site or notify you by email. Continued use after changes constitutes acceptance.
- Contact Us
Last Updated: May 29, 2026