Website Privacy Policy

Martha E. Wittenberg, MD, Inc. dba Thrive Health MD

Effective date: October 8, 2026

Martha E. Wittenberg, MD, Inc. dba Thrive Health MD ("we," "us," or "our") operates www.marthawittenbergmd.com and our online scheduling page at marthawittenbergmd.as.me (together, the "Site"). This Website Privacy Policy explains what information we collect when you visit or use the Site, how we use and share it, and the choices you have.

This Policy and Our Notice of Privacy Practices

Once you become a patient, the health information we create or receive in providing your care — medical records, lab results, treatment details, and billing information — is protected under the Health Insurance Portability and Accountability Act (HIPAA) and the California Confidentiality of Medical Information Act (CMIA). How we use and disclose that information is described in our Notice of Privacy Practices. If the two conflict, the Notice of Privacy Practices takes precedence. This policy covers information collected through the Site.

Please do not send medical information through the Site's contact or newsletter forms or by regular email. For medical questions, use our secure patient messaging or call (949) 464-8575. If you are experiencing a medical emergency, call 911.

Information We Collect

Information you provide

  • Newsletter sign-up: your name and email address.

  • Appointment booking: your name, email address, phone number, the appointment type, date, and time you select, answers to any questions on our booking forms, any files you upload, and payment information if a deposit or payment is required at booking.

  • Communications: information you include when you email, call, or message us.

Information collected automatically

When you visit the Site, we and our service providers automatically collect certain information, including:

  • Your IP address and approximate location derived from it

  • Browser, device, and operating system information

  • The web page you visited before coming to the Site

  • Pages you view, links you click, scrolling, searches, and the date and time of your visit

This information is collected through cookies and similar technologies, described below.

How We Use Information

We use the information we collect to:

  • Schedule, confirm, reschedule, and remind you of appointments

  • Process payments and deposits

  • Respond to your questions and requests

  • Send our newsletter and practice updates if you sign up

  • Operate, secure, and maintain the Site

  • Understand how visitors use the Site so we can improve it

  • Comply with legal obligations and protect our rights

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We do not use information from your appointment booking for marketing without your written authorization.

Service Providers

We share information with service providers who help us run the Site and the practice. They may use it only to provide services to us.

  • Squarespace hosts the Site, provides site analytics, and processes form submissions. Squarespace collects visitor information to run the Site and to protect and improve its platform. See the Squarespace Privacy Policy.

  • Acuity Scheduling (a Squarespace company) provides our online booking, confirmations, and appointment reminders. Our scheduling account is HIPAA-enabled and covered by a Business Associate Agreement.

  • Google Analytics helps us understand Site traffic (see below).

  • Mailchimp sends our newsletter. See the Intuit Mailchimp Privacy Statement.

  • Stripe processes payments made through online booking. We do not store full card numbers. See the Stripe Privacy Policy.

  • Fonts: The Site loads fonts from Google Fonts and/or Adobe Fonts, which may receive your IP address and browser information to display the page.

We may also disclose information when required by law, to respond to legal process, to protect the safety of patients, staff, or others, or in connection with a sale or transfer of the practice.

Google Analytics

We use Google Analytics to learn how visitors find and use the Site — for example, which pages are viewed, how long visitors stay, how they arrived, and general device and location information. Google Analytics uses cookies and collects information through your browser. We do not send Google your name, contact details, or anything you enter into our forms, and we have not enabled Google advertising features.

You can learn how Google uses this information at How Google uses information from sites that use its services, and you can opt out with the Google Analytics Opt-out Browser Add-on.

Cookies

Cookies are small text files placed on your device when you visit a website.

  • Necessary cookies allow Squarespace to securely deliver the Site and are always used.

  • Analytics and performance cookies (from Squarespace and Google Analytics) help us understand Site traffic. These are placed only after you accept them through our cookie banner.

You can change your cookie choices through the banner or your browser settings. Blocking cookies may affect how parts of the Site work.

Do Not Track

Some browsers offer a "Do Not Track" setting. The Site does not currently respond to Do Not Track signals. You can decline analytics cookies through our cookie banner or use the Google Analytics opt-out described above.

Text Messages

If you provide a mobile number when booking, we may send appointment confirmations and reminders by text message. Message and data rates may apply. Reply STOP to opt out at any time. Your mobile number and opt-in information are not sold, rented, or shared with third parties for their marketing purposes.

Email

You may unsubscribe from our newsletter at any time using the link at the bottom of any email. You will still receive messages about appointments you book.

Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We keep website and booking information only as long as needed for the purposes described in this policy or as required by law. Medical records are retained as required by California law and described in our Notice of Privacy Practices.

Your Choices and California Privacy Rights

  • Access, correction, and deletion: You may ask us what personal information we have collected about you through the Site and request that we correct or delete it, subject to legal and recordkeeping requirements. Requests regarding your medical record are handled under our Notice of Privacy Practices.

  • California "Shine the Light" (Civil Code § 1798.83): We do not share personal information with third parties for their direct marketing purposes.

To make a request, contact us using the information below. We may need to verify your identity before responding.

Children's Privacy

The Site is not directed to children under 18, and we do not knowingly collect personal information from children through the Site. If you believe a child has provided us information, please contact us and we will delete it.

Links to Other Websites

The Site links to third-party websites, including our Fullscript supplement dispensary and our social media pages. Those sites have their own privacy policies, and we are not responsible for their practices.

Changes to This Policy

We may update this policy from time to time. When we do, we will post the revised version on this page and update the effective date above.

Contact Us

Martha E. Wittenberg, MD, Inc. dba Thrive Health MD
4000 Birch Street, Suite 120B, Newport Beach, CA 92660
Phone: (949) 464-8575
Email: hello@marthawittenbergmd.com