Last updated: July 16, 2026.
This Privacy Policy describes how shariqrefai.com (the "website") handles information when you visit or interact with the site. This website is an educational author and media platform. It is not a clinical service and does not collect or store protected health information (PHI) or operate as a HIPAA-covered service. Clinical care, when relevant, is provided through shrinkMD and is governed by shrinkMD's own privacy policies and HIPAA obligations.
Although this website is not a HIPAA-covered service, applicable U.S. state laws (including the Florida Information Protection Act, Fla. Stat. §501.171) may govern the limited information collected. Reasonable security measures are maintained, and any qualifying breach of personal information will be handled in accordance with applicable state notification requirements.
Not for Protected Health Information
This website is not intended for transmission of protected health information and is not a platform for clinical care communications.
Do not submit medical records, psychiatric symptoms, medication information, emergency details, or other confidential health information through this website.
shariqrefai.com is separate from shrinkMD's clinical platform. This website is not monitored for clinical or crisis communications.
Information We Collect
Information you provide
If you use the contact form, we collect the information you choose to submit, such as your name, email address, inquiry type, and the contents of your message. This information is used to respond to your inquiry. Please do not submit any personal health information through this form.
Information collected automatically
Like most websites, this site may automatically collect limited technical information when you visit, including IP address, browser type, device type, referring URL, pages visited, and timestamps. This information is used to operate, secure, and improve the site.
Cookies and similar technologies
This website uses Google Analytics 4 (measurement ID G-P568VWDRRY) to understand aggregate traffic. GA4 is loaded with Google Consent Mode v2 in strict mode: no analytics cookies are set and no analytics requests are sent to Google until you actively accept on the consent banner shown on your first visit. If you decline, remain undecided, or send a Global Privacy Control or Do Not Track signal, analytics stays off. See the Cookies & Analytics page for the specific cookies, retention, and how to change or withdraw consent.
No advertising cookies, retargeting pixels, or profile-building trackers are used on this website. Advertising features and Google Signals are disabled on the GA4 property.
How We Use Information
- To respond to inquiries you submit through the contact form.
- To operate, maintain, and secure the website.
- To understand, in aggregate, how the website is used so it can be improved.
- To comply with applicable legal obligations.
How We Share Information
We do not sell your personal information. Limited information may be shared with service providers that help operate the website (including Cloudflare for hosting and content delivery, and, only after you consent, Google LLC as the analytics processor for Google Analytics 4), and only to the extent necessary to provide those services. We may also disclose information when required by law, to protect rights and safety, or in connection with a business transfer.
When you accept analytics, Google Analytics 4 processes truncated IP addresses, a randomly assigned visitor ID, and page and event data. Processing is governed by Google's Analytics data processing terms. Event-level and user-level data is retained by Google for up to 14 months and then automatically deleted.
Third-Party Services and Links
The website may link to third-party websites and services, including shrinkMD, shrinQ, Unstuck, LinkedIn, Apple, and external publishers. Those services have their own privacy policies, and this Privacy Policy does not apply to them.
The website also loads Google Fonts from Google's servers on every visit (see Third-Party Fonts below) and, only after you consent, Google Analytics 4 from googletagmanager.com. When you decline or remain undecided, no analytics scripts are loaded.
Third-Party Fonts
This website loads typography from Google Fonts, a third-party service. When fonts are loaded, your IP address is transmitted to Google. No personally identifying information beyond IP address is shared in this transaction. You can read Google's privacy policy at policies.google.com/privacy.
Children
The website is not directed to children, and content is intended for adult audiences (18 and older). We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information through the website, please contact us at [email protected] so it can be promptly deleted.
Your U.S. State Privacy Rights
Depending on your state of residence, you may have one or more of the following rights regarding personal information collected through this website: the right to know or access the personal information collected about you; the right to correct inaccurate personal information; the right to delete personal information; the right to data portability; the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising; the right to limit the use and disclosure of sensitive personal information; and the right not to be subject to discrimination for exercising these rights.
No Sale or Sharing
Shariq Refai, MD, MBA does not sell or share (as those terms are defined in California Civil Code §1798.140) personal information collected through this website and has not done so in the preceding twelve (12) months. Shariq Refai, MD, MBA does not knowingly collect or sell the personal information of consumers under the age of 16.
California Shine the Light
California residents may request information regarding any disclosure of personal information to third parties for their direct marketing purposes by emailing [email protected].
Submitting a Request
To exercise any right, email [email protected] with the subject line "Privacy Rights Request" and identify the right you are exercising and the state in which you reside. Requests will be verified and responded to within the timeframe required by applicable law (generally 45 days, extendable in limited circumstances). You may designate an authorized agent to act on your behalf.
EEA, UK, and Swiss Visitors
If you are visiting this website from the European Economic Area, the United Kingdom, or Switzerland, you may have rights under the EU/UK GDPR and the Swiss FADP, including the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, the right to withdraw consent where processing is based on consent, and the right to lodge a complaint with your supervisory authority. The lawful basis for processing the limited information collected through this website is our legitimate interest in operating and securing the website and in responding to inquiries you choose to submit, and your consent where required.
This website is operated from the United States, and any information you submit, including contact-form data and automatically collected technical information, will be transferred to, processed on, and stored on servers located in the United States. The United States may not provide the same level of data protection as your home jurisdiction. By using this website or submitting information through it, you acknowledge that transfer. To exercise any right, email [email protected].
Data Retention
Contact-form submissions are retained for the period necessary to respond to and resolve your inquiry, and for an additional twenty-four (24) months thereafter for business-record purposes, after which they are deleted or de-identified. Automatically collected technical and log information is retained for up to thirteen (13) months. Information may be retained longer where required by law or to resolve a dispute or enforce an agreement.
Breach Notification
In the event of a security incident affecting personal information, affected individuals and applicable regulators will be notified consistent with applicable U.S. state and federal breach-notification law.
Data Security
Reasonable administrative, technical, and physical safeguards are used to protect the information collected; however, no internet transmission or storage system is completely secure.
Changes to This Policy
This Privacy Policy may be updated from time to time. The updated version will be posted on this page with a revised "Last updated" date.
Contact
For privacy questions, email [email protected] or use the contact page.