Privacy Policy

Last Updated: October 2026

Introduction

Desert Dexa Inc. ("Desert Dexa," "we," "us," or "our") is committed to protecting your privacy and maintaining the confidentiality of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, when you use our DEXA scanning services at our locations in Rancho Mirage, San Dimas, and Temecula, CA, and when you use our telehealth services.

Information We Collect

Personal Information

We may collect the following types of personal information:

• Name and contact information (email address, phone number, mailing address)
• Date of birth and age
• Gender
• Payment information (credit/debit card details processed through secure third-party processors)
• Government-issued identification for verification purposes

Health and Medical Information

We collect health information relevant to DEXA scanning services:

• Medical history and current health conditions relevant to DEXA scanning
• Current medications
• DEXA scan results and body composition data
• Weight, height, and vital signs
• Bone density measurements

Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses

How We Use Your Information

We use the information we collect for the following purposes:

DEXA Scanning Services

• To provide and maintain our DEXA scanning services
• To schedule and confirm appointments
• To provide you with your scan results and maintain your scan history
• To track changes in body composition and bone density over time

General Business Operations

• To process payments and maintain billing records
• To communicate with you about services, appointments, and updates
• To improve our services and website functionality
• To comply with legal obligations and regulations
• To protect our rights and prevent fraud
• To conduct quality assurance and training programs
• To analyze treatment effectiveness and safety (in aggregate, de-identified form)
• To send you marketing communications about our services (with your consent)
• To improve our marketing and advertising efforts

Information Sharing and Disclosure

We may share your personal information with third parties in the following circumstances:

Healthcare-Related Sharing

• Healthcare Providers: We may share your health information for treatment purposes with healthcare providers involved in your care, including the licensed clinicians of MDI Medical Group PC who provide clinical care under our telehealth services
• Dispensing Pharmacy: Where a clinician prescribes medication for you, we may share the information needed to fill that prescription with the licensed pharmacy dispensing it
• Providers Not Involved in Your Care: We will obtain your written authorization before sharing your scan results with a healthcare provider who is not involved in providing your care
• Medical Emergency: In case of a medical emergency, we may share relevant medical information with emergency responders

Business Operations

• With your consent: We may share your information when you give us explicit permission to do so
• Service providers: We may share information with third-party vendors who perform services on our behalf (e.g., payment processing, appointment scheduling, video conferencing platforms)
• Advertising partners: We may share information with advertising partners to provide targeted marketing communications (with your consent). This never includes your mobile phone number or your text messaging consent: no mobile information is shared with third parties or affiliates for marketing or promotional purposes.
• Legal requirements: We may disclose information if required by law or in response to valid legal processes
• Protection of rights: We may disclose information to protect our rights, property, or safety, or that of others
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred

Quality Assurance and Research

• De-identified Data: We may use and share de-identified, aggregated data for research, quality improvement, and population health studies
• Regulatory Reporting: We may be required to report certain information to regulatory agencies for safety monitoring and compliance purposes

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Employee training on data protection and privacy

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations, including medical record retention requirements. You may request deletion of your personal information at any time, subject to our legal obligations to maintain certain medical and business records.

Your Rights and Choices

Access and Correction

You have the right to access and correct your personal information. You may request a copy of your information or ask us to update inaccurate information by contacting us.

Opt-Out

You may opt-out of receiving promotional communications from us by following the unsubscribe instructions in those communications or by contacting us directly.

Text Messages (SMS)

If you agree to receive text messages from us, such as appointment reminders or messages from your consultant about your results, we use your mobile number only to send you those messages and to read your replies. Message frequency varies. Message and data rates may apply. Reply STOP to any message to stop receiving texts from that number, or HELP for help.

We do not sell, rent, or share your mobile phone number or your text messaging consent with third parties or affiliates for their marketing or promotional purposes. We share them only with the service providers that deliver our text messages on our behalf, who may not use them for any other purpose.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA). Please see our separate CCPA Privacy Notice for more information.

Do Not Track

Our website does not currently respond to Do Not Track signals. However, you can control cookies through your browser settings.

Age and Eligibility

Our services are available to all individuals who meet the applicable medical and eligibility criteria as determined by our healthcare providers. We do not knowingly collect personal information from children under 13 without appropriate consent. If we learn we have collected information from a child under 13 without proper consent, we will delete that information promptly.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device. You can control cookie settings through your browser, but disabling cookies may limit some website functionality.

To understand which versions of our pages help people book, we may show visitors different versions of a page. We store a random visit ID and the version you saw in first-party cookies for up to 90 days, and record which pages you viewed, how you reached our site (such as the referring website or campaign tags), and your device type. If you book, the visit ID is linked to your booking so we can count bookings for each version. We do not use this information for advertising and do not sell or share it. If you have opted out of the sale or sharing of your personal information, or your browser sends a Global Privacy Control signal, we do not record these visits.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

International Users

Our services are intended for use in the United States. If you access our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website with an updated "Last Updated" date. Your continued use of our services after any modifications constitutes acceptance of the updated Privacy Policy.

Contact Information

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

How to Submit a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information above. You also have the right to file a complaint with applicable regulatory authorities.