Privacy Policy

Introduction

Ketamine Clinics USA (“we,” “us,” or “our”) operates the website at ketamineclinicsusa.com (the “Site”). This Privacy Policy explains what personal information we collect, how we use it, and the choices you have regarding your data. By using the Site you agree to the practices described below.

Information We Collect

Information You Provide

• Inquiry forms — name, email address, phone number, insurance provider, and selected conditions or treatments when you submit a clinic inquiry.
• Newsletter subscriptions — email address when you sign up for educational content.
• Clinic owner accounts — email address and business information when you claim or manage a listing.
• Contact messages — any information you include when reaching out to us directly.

Information Collected Automatically

• Usage data — pages visited, referring URLs, time on page, and interaction events.
• Device data — browser type, operating system, screen resolution, and language preferences.
• Location data — approximate geographic location derived from your IP address, used to show nearby clinics.

How We Use Your Information

• To connect you with ketamine therapy clinics based on your inquiry.
• To send newsletters and educational content you opted in to receive.
• To operate, maintain, and improve the Site and its features.
• To detect and prevent fraud, spam, or abuse (including Turnstile verification on forms).
• To comply with legal obligations and protect our rights.

Data Sharing

We do not sell your personal information. We share data only in these limited circumstances:

• Clinic inquiries — when you submit an inquiry, we share your contact details and message with the selected clinic so they can respond to you.
• Service providers — we use trusted third-party services for email delivery (Resend), hosting (Vercel), database (Neon), and analytics. These providers process data on our behalf under strict agreements.
• Legal requirements — we may disclose information if required by law, court order, or to protect the safety of our users.

Data Security

We take the protection of your data seriously. All personally identifiable information submitted through inquiry forms is encrypted at rest using AES-256-GCM encryption. Data is transmitted over HTTPS. We conduct regular security reviews and limit access to personal data to authorized personnel only.

No method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Cookies & Tracking

We use the following types of cookies:

• Essential cookies — required for authentication sessions and form security (e.g., CSRF tokens, session cookies).
• Functional cookies — remember your preferences such as search filters or draft form data stored in localStorage.
• Analytics cookies — help us understand how visitors use the Site so we can improve the experience.

You can control cookies through your browser settings. Blocking essential cookies may affect Site functionality.

Data Retention

• Inquiry data — retained for up to 24 months, then automatically deleted unless required for legal compliance.
• Newsletter subscriptions — retained until you unsubscribe.
• Clinic owner accounts — retained for the duration of your account, plus 30 days after deletion.
• Analytics data — aggregated and anonymized after 26 months.

Your California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and share.
• Delete your personal information, subject to certain exceptions.
• Opt out of the sale of personal information. We do not sell personal information.
• Non-discrimination — we will not treat you differently for exercising your rights.

For inquiry leads, you can request deletion directly using the link provided in your confirmation email. For all other requests, contact us at the address below.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation:

• Access — request a copy of your personal data.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Restriction — request limited processing of your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.

Our legal basis for processing personal data is consent (for inquiry forms and newsletters) and legitimate interest (for site analytics and security). To exercise any of these rights, contact us at the address below.

Children’s Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated “Last updated” date. Continued use of the Site after changes constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: