The Basics

What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, or smartphone) when you visit a website. They are widely used to make websites work, improve their efficiency, and provide information to website owners.

In addition to cookies, websites may use similar tracking technologies including:

• Web beacons / pixels — small transparent images embedded in web pages or emails that track whether content was viewed or an action was taken
• Local storage — data stored in your browser that persists after the browser is closed, similar to cookies but with greater storage capacity
• Session storage — temporary data stored in your browser that is cleared when the browser session ends
• Device fingerprinting — collection of technical information about your device and browser to identify you across sessions

This policy covers all of the above tracking technologies collectively referred to as "cookies" unless otherwise specified.

What We Use

Cookies and Tracking Technologies We Use

We use cookies in the following categories. The table below describes each category, the specific cookies used, their purpose, and their duration.

Category 1 — Strictly Necessary Cookies

These cookies are essential for the website to function and cannot be switched off. They are usually set in response to actions you take, such as setting your privacy preferences, logging in, or filling in forms. You can set your browser to block these cookies, but some parts of the site may not function properly.

Category 2 — Functional Cookies

These cookies allow the website to provide enhanced functionality and personalization, such as remembering your preferences. They may be set by us or by third-party providers whose services we use.

Category 3 — Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously or pseudonymously. This helps us improve our website experience.

Category 4 — Third-Party and Marketing Cookies

These cookies may be set by third-party services present on our website, such as social media platforms, payment processors, or embedded content. They may track your browsing activity across other websites.

Our Platform

Shopify Platform Cookies

Our website is built on the Shopify e-commerce platform. Shopify places certain cookies on our site to enable core functionality including shopping cart management, customer account authentication, checkout processing, and internal analytics. These cookies are governed in part by Shopify's Privacy Policy.

We do not control the specific technical implementation of Shopify's essential cookies and cannot disable them without breaking core website functionality. Shopify's analytics data collected via these cookies is used by Shopify for its own service improvement purposes in addition to providing us with aggregate website analytics.

For more information about how Shopify uses data, please visit shopify.com/legal/privacy.

External Services

Third-Party Services and Tracking

Google Analytics

We may use Google Analytics to understand how visitors use our website. Google Analytics collects information about your device, browser, IP address (anonymized), pages visited, time spent on pages, and referring website. This data is processed by Google LLC and is subject to Google's Privacy Policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on.

Social Media (Meta / Instagram)

Our website includes links to our Facebook and Instagram pages. If social media tracking pixels are active on our site, Meta may collect information about your visit for advertising and analytics purposes. This is governed by Meta's Privacy Policy. You can manage your Meta ad preferences at facebook.com/ads/preferences.

Payment Processing

Payment transactions are processed through Shopify Payments and/or Stripe. These services use cookies and other technologies for fraud prevention, payment session management, and compliance purposes. No complete payment card information is stored on our servers. These services are governed by their respective privacy policies: Stripe Privacy Policy and Shopify Privacy Policy.

Important Note Regarding HIPAA

Your Controls

Your Cookie Choices and Controls

You have the following options for managing cookies on our website:

Cookie Preference Center

You can manage your cookie preferences below. Please note that disabling certain cookies may affect website functionality.

Browser Controls

You can control cookies directly through your browser settings. Most browsers allow you to view, delete, and block cookies. Note that blocking all cookies will prevent many websites — including this one — from functioning correctly.

• Google Chrome — Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data
• Apple Safari — Preferences → Privacy → Manage Website Data
• Microsoft Edge — Settings → Cookies and site permissions

Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal to websites. There is currently no universally agreed standard for how websites should respond to DNT signals. Our website does not currently alter its behavior in response to DNT signals, but we respect your right to opt out of analytics and marketing cookies using the controls above.

Opt-Out of Specific Services

• Google Analytics: Google Analytics Opt-Out Add-on or via Google's Ad Settings
• Meta / Facebook: Facebook Ad Preferences or via the Digital Advertising Alliance opt-out tool
• General advertising opt-out: Digital Advertising Alliance (DAA) | Network Advertising Initiative (NAI)

Minnesota Law

Your Rights Under the Minnesota Consumer Data Privacy Act

The Minnesota Consumer Data Privacy Act (MCDPA), effective July 31, 2025, grants Minnesota residents the following rights with respect to personal data collected through our website:

• Right to Access — You may request to know what personal data we have collected about you through this website.
• Right to Correct — You may request correction of inaccurate personal data we hold about you.
• Right to Delete — You may request deletion of personal data we have collected about you through this website, subject to certain exceptions.
• Right to Data Portability — You may request a portable copy of the personal data you have provided to us.
• Right to Opt Out of Targeted Advertising — You may opt out of the processing of your personal data for purposes of targeted advertising. Use our Cookie Preference Center above to manage these preferences.
• Right to Opt Out of Sale of Personal Data — Direct Pay Virtual Clinic does not sell personal data collected through this website.
• Right to Opt Out of Profiling — You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to Appeal — If we deny your request, you have the right to appeal our decision. If your appeal is denied, you may submit a complaint to the Minnesota Attorney General's Office.

To exercise any of these rights, please contact us at info@directpayvirtualclinic.org. We will respond to verifiable requests within 45 days, with a possible 45-day extension for complex requests. We will not discriminate against you for exercising these rights.

Note: These rights apply to personal data collected through our website. For rights relating to your protected health information collected during clinical care, please refer to our Notice of Privacy Practices.

Other Data

Other Website Data We Collect

Information You Provide

When you use our website contact form, scheduling system, or create an account, you may provide us with your name, email address, phone number, and other information. This information is used to respond to your inquiries, schedule appointments, and operate our services. It is not used for advertising purposes.

Automatically Collected Data

When you visit our website, we automatically collect certain technical information including your IP address (which may be anonymized), browser type and version, operating system, referring URL, pages visited, time spent on pages, and device type. This information is used for website analytics and security purposes only.

Log Files

Like most websites, our hosting provider (Shopify) maintains server log files that record website activity. These logs may include IP addresses, browser types, referring pages, and timestamps. Log files are used for security, troubleshooting, and performance monitoring. They are retained for a limited period consistent with operational needs.

What We Do NOT Collect Through This Website

• We do not collect protected health information (PHI) through standard website cookies or analytics tools
• We do not sell your personal data to third parties
• We do not use your personal data for targeted advertising without your consent
• We do not collect sensitive personal data such as Social Security numbers, financial account numbers, or biometric data through our website

Children's Privacy

Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 through our website without verifiable parental consent, consistent with the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. § 6501 et seq.).

If you believe we have inadvertently collected personal data from a child under 13, please contact us immediately at info@directpayvirtualclinic.org and we will promptly delete the information. For clinical services provided to minor patients, please refer to our Minor Patient Consent Policy.

Updates

Changes to This Policy

We may update this Cookie Policy and Website Privacy Notice from time to time to reflect changes in technology, law, or our business practices. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Your continued use of the website after changes become effective constitutes your acknowledgment of the updated policy.

Get in Touch

Contact Us

For questions about this Cookie Policy, to exercise your rights under the Minnesota Consumer Data Privacy Act, or to report a privacy concern related to our website, please contact us:

• Email: info@directpayvirtualclinic.org
• Website: Contact form at directpayvirtualclinic.com
• Minnesota Attorney General (MCDPA complaints): ag.state.mn.us | (651) 296-3353