Mecca Health

Privacy policy

Effective 23 September 2026. This policy explains what we collect on this website, why we collect it, who we share it with, and the choices you have.

Who this policy covers

This site is operated by Ruvini Witjetilaka PLLC, doing business as Mecca Health, a medical practice with offices at 99 John Street, New York, NY 10038. In this policy, "we", "us" and "the practice" mean Mecca Health.

This policy applies to the public marketing and intake pages we operate, including go.meccahealth.co and optimization.meccahealth.co. It does not cover our patient portal at drruelakapt.md-hq.com, and it does not cover any other website you reach by following a link from here.

Information we collect

Information you give us

You can use this site without telling us anything about yourself. If you fill in the plan builder or the consultation request form, we collect what you enter, which may include:

• Your name, email address and phone number.
• Your age range and the state you live in, which we need because we can only provide care in certain states.
• Health-related answers you choose to give us: your main focus, the symptoms you selected, whether you are currently receiving treatment elsewhere, your training habits, your history with other doctors, how your body has changed, and what you want to achieve in the next year.
• Anything you type into a free-text field, which is entirely up to you.
• If you opt in to text messages, a record of that consent: the fact of it, the date and time, and the exact wording you agreed to.

The health-related questions are optional and are there so a physician can understand your situation before a discovery call. You decide how much to share.

Information collected automatically

• Standard technical information your browser sends, such as IP address, device and browser type, pages viewed and time of visit.
• Advertising and referral information, including campaign tags in the link you arrived on and click identifiers from Google and Meta, so we can tell which advertising brought you here.
• Cookies and similar technologies, described below.

How we use your information

• To reply to you, send you the result or plan you asked for, and follow up about a discovery call.
• To schedule and administer that call.
• To send you emails you have signed up for, and text messages if you opted in.
• To confirm we are able to serve you where you live.
• To measure whether our advertising works, and to operate, secure and improve the site.
• To meet legal, regulatory and record-keeping obligations.

What we do not do

These are commitments, not aspirations, and the site is built to enforce them.

• We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
• We do not send your health answers to advertising platforms. The answers you give in the plan builder are never transmitted to Google, Meta or any other advertising network. What those platforms receive is limited to the fact that a form was submitted, plus non-medical information such as a coarse age band, your state and the campaign you came from.
• We do not use your health answers to build advertising audiences or to target ads to you.
• We do not put personal information into web addresses that third parties can read.

Who we share it with

We share information with companies that run parts of this service for us, under contracts that require them to protect it and use it only for us. We do not give them permission to sell it.

We may also disclose information if the law requires it, to protect our rights or someone's safety, or as part of a sale or reorganisation of the practice.

Cookies and tracking

We use cookies and similar technologies to keep the site working, to remember which advertisement or link brought you here, and to measure whether our advertising leads to enquiries. We use Google Tag Manager to manage these tags, Google Analytics to understand how the site is used, and Google Ads conversion measurement to count enquiries.

You can block or delete cookies in your browser settings. If you do, parts of the site may not work as intended. You can also manage Google's advertising cookies at adssettings.google.com. Most browsers offer a Do Not Track setting; there is no common standard for how sites should respond to it, so we do not currently respond to those signals.

Email and text messages

Every marketing email we send has an unsubscribe link, and we act on it. If you opted in to text messages, message frequency varies, and message and data rates may apply. Reply STOP to any message to stop receiving them, or HELP for help. Consenting to texts is never a condition of receiving care.

How long we keep it

We keep enquiry records for as long as needed to respond to you and to meet our legal and record-keeping obligations, and then delete them or strip them of anything that identifies you. If you ask us to delete your information, we will, unless we are required to keep it.

Security

We use encryption in transit, access controls and vendors who maintain their own security programmes. No method of transmitting or storing information is completely secure, so we cannot guarantee absolute security. Please do not send us sensitive details through social media messages or any other channel we have not asked you to use.

Your choices and your rights

Wherever you live, you can ask us to give you a copy of the information we hold about you, correct it, or delete it. You can unsubscribe from email at any time and stop texts by replying STOP.

If you live in California, you have the right to know what personal information we collect, use and disclose, to request deletion or correction, and to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, and we do not use sensitive personal information for purposes that require a right to limit. We will not discriminate against you for exercising any of these rights.

If you live in Virginia, or in another state with a comprehensive privacy law, you have comparable rights to access, correct, delete and obtain a copy of your information, and to appeal a decision we make about a request. To appeal, reply to our decision and tell us you are appealing.

To make a request, contact us using the details below. We will verify your identity before acting, usually by confirming details you already gave us, and we will respond within the time the law allows. An authorised agent may make a request on your behalf with proof that you authorised them.

Children

This site is meant for adults. It is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Where your information is handled

We and our service providers are in the United States, and your information is processed here. Our care is available only to residents of the states we name on this site, so the site is not intended for use outside the United States.

Changes to this policy

If we change this policy we will post the new version here and update the effective date at the top. If a change is significant we will make that clear.