Privacy Policy

Effective Date: October 22, 2026

1. Who We Are

This Privacy Policy describes how the following two separate legal entities (together, "Saffron & Sage," "we," "us," or "our") collect, use, and share personal information through our website, www.saffronsageliving.com (the "Site"), our online booking tools, and our in-person and virtual services (together, the "Services"):

  • Kasawa Medical APC, dba Saffron & Sage MD ("Saffron & Sage MD"), an independent California medical practice. Saffron & Sage MD provides all medical services and medical products, including prescription medications and peptides.
  • Saffron & Sage LLC, dba Saffron & Sage ("Saffron & Sage LLC"), which provides non-medical wellness services and wellness products.

Both entities follow the same privacy practices, described in this Policy. All clinical decisions are made by the licensed medical professionals of Saffron & Sage MD.

2. Medical Disclaimer

The content on this website is for educational and informational purposes only and does not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider before making health decisions. Medical services are provided by Kasawa Medical APC, dba Saffron & Sage MD, an independent California medical practice. Non-medical wellness services are provided by Saffron & Sage LLC, dba Saffron & Sage.

Prescription medications, peptides, and other medical products are provided only by Saffron & Sage MD, after evaluation by a licensed provider and only when medically appropriate. Wellness products sold by Saffron & Sage are not intended to diagnose, treat, cure, or prevent any disease.

Using this Site, or contacting us through it, does not by itself create a physician–patient relationship. If you are experiencing a medical emergency, call 911 or go to the nearest emergency room.

3. Scope of This Policy and Your Medical Information

This Policy applies to personal information we collect through the Site, online forms, booking tools, email, text messages, social media, and when you visit our location.

Protected health information. When you become a patient, the medical information we create or receive about you is "protected health information" under the federal Health Insurance Portability and Accountability Act (HIPAA) and "medical information" under the California Confidentiality of Medical Information Act (CMIA). That information is governed by our Notice of Privacy Practices, a separate HIPAA notice that every patient receives at or before their first visit. You can also request a copy at any time by calling (619) 933-2340 or emailing service@saffronsageliving.com. If anything in this Policy conflicts with the Notice of Privacy Practices regarding your protected health information, the Notice of Privacy Practices controls.

This Policy does not apply to information about our employees, contractors, or job applicants in that capacity, or to third-party websites we link to.

Employees and job applicants. This Policy does not govern personal information we collect about employees, contractors, or job applicants for employment purposes. If you apply for a position or work with us, we may collect your contact details, résumé, work history, education, professional licenses, references, background check results (with your authorization), and information needed for payroll, benefits, and legal compliance. We use this information only to evaluate applications, manage employment, verify credentials, and meet our legal obligations. We do not sell it or use it for marketing. We will provide a separate notice at or before the time we collect it. California applicants and employees may request to know, correct, or delete their information, subject to legal exceptions, by contacting service@saffronsageliving.com.

4. Information We Collect

Information you give us directly, such as:

  • Contact and identity details: name, email address, phone number, mailing address, date of birth.
  • Booking and account details: appointments, services requested, preferences, and account login information.
  • Health and wellness information: intake forms, health history, goals, and other information you choose to share in connection with medical or wellness services.
  • Payment information: billing details processed by our third-party payment processors. We do not store full card numbers on our systems.
  • Communications: messages, emails, texts, reviews, survey responses, and other information you send us.

Information collected automatically when you use the Site, such as IP address, browser and device type, pages viewed, referring URLs, approximate location, and the date and time of your visit. We collect this through cookies and similar technologies (see Section 9).

Information from other sources, such as Mindbody, which we use for online booking, intake forms, payments, and electronic medical records; Attentive, which we use for text and email messaging; other payment vendors; referring providers or laboratories (for medical services); and social media platforms when you interact with our accounts.

5. How We Use Your Information

We use personal information to:

  • Provide, schedule, and manage our medical and wellness Services and products, including prescriptions.
  • Communicate with you about appointments, reminders, follow-ups, and your inquiries.
  • Process payments, product orders, memberships, and refunds.
  • Send you news, offers, and updates where you have agreed to receive them (you can opt out at any time).
  • Operate, secure, and improve the Site and our Services, including through analytics.
  • Comply with legal, regulatory, licensing, and recordkeeping obligations.
  • Detect and prevent fraud, abuse, and security incidents, and protect the rights and safety of our clients, patients, staff, and others.

We will not use protected health information for marketing without your written authorization, except as permitted by HIPAA and the CMIA.

6. How We Share Your Information

We do not sell your personal information, and we do not rent or trade it. We may share personal information only as follows:

  • Service providers that perform services on our behalf, such as scheduling, payment processing, electronic health records, website hosting (Squarespace), email and text delivery, and IT support. These include Mindbody (online booking, intake forms, payments, and electronic medical records) and Attentive (text and email messaging), along with their related services. They may use your information only to provide services to us. Vendors that handle protected health information sign a Business Associate Agreement where HIPAA requires one.
  • Within Saffron & Sage, between our medical and wellness teams as needed to coordinate services you have requested, and, for protected health information, only as permitted by HIPAA, the CMIA, or your written authorization.
  • Other healthcare providers, laboratories, pharmacies, and insurers, as needed for treatment, payment, and healthcare operations and as permitted by law.
  • Legal and safety reasons: to comply with law, subpoenas, court orders, or licensing boards, or to protect the rights, property, or safety of you, us, or others.
  • Business transfers: in connection with a merger, sale, financing, or transfer of all or part of our business, subject to applicable law.
  • With your consent or at your direction.
  • De-identified or aggregated information that cannot reasonably be used to identify you.

We do not share mobile information with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all of the categories above and will not be shared with any third party.

7. Text Messaging (SMS) Terms

Why we text. Saffron & Sage MD and Saffron & Sage operate as one integrated practice, so texts may come from either entity under the Saffron & Sage name. We use text messages to contact patients and clients about their medical and wellness services, such as appointment confirmations, reminders, scheduling changes, intake requests, and follow-ups. We text prospective clients only after they have given us their phone number, for example by submitting a form, booking online, signing up for messages, or contacting us directly. We do not buy phone lists or send unsolicited texts. Because texting is not a fully secure channel, we keep health details out of texts, and you may ask us to contact you another way.

By providing your phone number to Saffron & Sage, you agree that Saffron & Sage may send text messages to your wireless number about your inquiry, appointments, and care, and, if you opt in to marketing messages, about offers and updates. Consent to marketing texts is not a condition of any purchase. Message frequency varies. Message and data rates may apply. You may opt out at any time by replying STOP.

Additional SMS details:

  • Opt out: Reply STOP at any time to stop receiving messages. You will receive one final message confirming your opt-out.
  • Help: Reply HELP or contact us at (619) 933-2340 or service@saffronsageliving.com.
  • Consent is not required to purchase: Agreeing to receive text messages is not a condition of purchasing any goods or services.
  • Carriers: Mobile carriers are not liable for delayed or undelivered messages.
  • Privacy: We do not share mobile information with third parties or affiliates for marketing or promotional purposes, and we never share text messaging opt-in data or consent with any third party.
  • Sending numbers: Our text messages may come from numbers other than our main line. Every message identifies Saffron & Sage, and replying STOP to any of them opts you out of messages from that number.

8. Email and Other Marketing Choices

You can unsubscribe from marketing emails by using the "unsubscribe" link in any marketing email or by contacting us. Even if you opt out of marketing, we may still send you service-related messages, such as appointment confirmations, reminders, and billing notices.

9. Cookies, Analytics, and Tracking Technologies

We and our service providers use cookies, pixels, and similar technologies to operate the Site, remember your preferences, understand how visitors use the Site, and measure the effectiveness of our communications. We use Squarespace Analytics and also use Google Analytics and the Meta Pixel, as described below.

Our website platform. Our Site is built and hosted on Squarespace. When you visit, Squarespace collects information on our behalf, including your IP address, browser, device, and network details, approximate location, the pages you view and links you click, and the website that referred you. Squarespace sets functional cookies the Site needs to work, such as remembering your cookie choices, and analytics cookies that show us site traffic and how visitors use the Site. Information you submit through Site forms, such as your name, email, phone number, and message, is stored by Squarespace for us. Squarespace acts as our service provider for this information. It also uses some site usage data, in de-identified form, to run and improve its platform, as described in the Squarespace Privacy Policy. Please do not include health information in Site contact forms; intake forms are completed through Mindbody.

Booking, intake, and messaging tools. Our online booking, intake forms, payments, and electronic medical records are provided by Mindbody, and our text and email sign-up and messaging tools are provided by Attentive. When you use these tools, including sign-up forms or pop-ups on our Site, these providers collect the information you enter and may use cookies, pixels, and similar technologies to operate the tools, keep them secure, and measure how our messages perform. They process your information on our behalf under their agreements with us and their own privacy policies. To learn how Mindbody handles information, see the Mindbody Privacy Policy.

Google Analytics. We use Google Analytics to understand how visitors find and use our Site, such as pages viewed, time on site, and general location. Google collects this information through cookies and processes it under the Google Privacy Policy. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

Meta Pixel. We use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram and to show relevant ads to people who have visited our Site. The pixel collects information such as pages viewed, actions taken on the Site, and device and browser details, which Meta processes under the Meta Privacy Policy. You can control the ads you see in your Facebook or Instagram ad preferences. We do not use the Meta Pixel on booking, intake, or other pages where you provide health information.

We do not use tracking technologies to disclose protected health information to advertising or social media platforms. Health information you provide for booking, intake, and treatment stays within Mindbody and is not shared with advertising or analytics providers.

Your choices: You can manage non-essential cookies through the cookie banner on our Site, and you can block or delete cookies through your browser settings; some Site features may not work without them. You can learn about opting out of interest-based advertising at the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org).

Do Not Track and Global Privacy Control: Our Site does not respond to browser "Do Not Track" signals. Where required by law, we treat a Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information for that browser.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including the safeguards HIPAA requires for protected health information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please do not send sensitive health information through unsecured email or website contact forms; use your Mindbody account or call us instead.

11. Data Retention

We keep personal information for as long as needed for the purposes described in this Policy, including to provide Services, resolve disputes, and meet legal obligations. Medical records are retained for the periods required by California and federal law. When information is no longer needed, we delete or de-identify it securely.

12. Your California Privacy Rights

If you are a California resident, you may have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), subject to certain exceptions:

  • Right to know the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
  • Right to delete personal information we have collected from you.
  • Right to correct inaccurate personal information.
  • Right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell personal information for money. Our use of the Meta Pixel for advertising may count as "sharing" under the CCPA. You can opt out by declining non-essential cookies in our cookie banner, enabling Global Privacy Control in your browser, or contacting us at service@saffronsageliving.com.
  • Right to limit the use of sensitive personal information. We use sensitive personal information only for purposes permitted by the CCPA, such as providing the Services you request.
  • Right to non-discrimination for exercising any of these rights.

Categories of personal information collected in the last 12 months: identifiers (such as name, email, phone, IP address); customer records (such as address and payment information); characteristics of protected classifications (such as age and sex); commercial information (such as services purchased); internet or network activity (such as Site usage); approximate geolocation; audio or visual information (such as call recordings or photos, if applicable); and sensitive personal information (such as health information and account login credentials). We collect these from the sources and for the purposes described in Sections 4 and 5, and disclose them for business purposes to the categories of recipients in Section 6.

Medical information exemption: Protected health information and medical information governed by HIPAA or the CMIA is generally exempt from the CCPA and is handled under our Notice of Privacy Practices. You still have rights to access and amend your medical records as described in that Notice.

How to submit a request: Email service@saffronsageliving.com or call (619) 933-2340. We will verify your identity before responding, typically by matching information you provide with information we already have. You may use an authorized agent to submit a request on your behalf; we may ask for proof of the agent's authority and verify your identity directly. We will respond within 45 days, or let you know if we need more time as permitted by law.

Shine the Light: California Civil Code Section 1798.83 lets California residents ask whether we disclosed personal information to third parties for their direct marketing purposes. We do not make such disclosures.

13. Rights for Residents of Other States

Depending on where you live, you may have similar rights to access, correct, delete, or obtain a copy of your personal information, or to opt out of certain processing. To make a request, contact us using the details in Section 16. If we deny your request, you may appeal by replying to our decision.

14. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information online from children under 13. Services for anyone under 18 require the consent and involvement of a parent or legal guardian, as required by law. If you believe a child has given us personal information online, contact us and we will delete it.

15. Third-Party Links and Services

The Site may link to or embed content from third-party websites and services, such as booking platforms, payment processors, and social media. Their privacy practices are governed by their own policies, not this one. We encourage you to review those policies.

16. Contact Us

If you have questions about this Policy or our privacy practices, contact us:

Saffron & Sage LLC, dba Saffron & Sage (non-medical wellness services and products)
Kasawa Medical APC, dba Saffron & Sage MD (medical services and products)
2555 State Street
San Diego, CA 92101
Email: service@saffronsageliving.com
Phone: (619) 933-2340

For questions about your medical records or protected health information, contact our Privacy Officer at (619) 933-2340 or service@saffronsageliving.com.

17. Changes to This Policy

We may update this Policy from time to time. When we do, we will change the Effective Date above and post the updated Policy on this page. If we make material changes, we will provide additional notice as required by law.