Legal
Effective date: March 15, 2026 | Applies to: lean.md
This Privacy Policy governs the collection and use of personal information on lean.md, the personal professional website of Dr. Alexa N. Lean, MD. This site is operated independently and is not an official website of UCI Health. It does not function as a patient portal, does not accept electronic health records, and is not a covered entity under HIPAA with respect to this website.
We collect personal information only when you voluntarily submit it. This occurs through the contact form and may include:
We also collect non-personally identifiable information automatically through analytics cookies, including browser type, referring URL, pages viewed, and approximate geographic region (country or state level). This data is aggregated and used only to understand how the site is being used.
Information submitted through the contact form is used solely to evaluate and respond to professional inquiries such as speaking engagements, consulting arrangements, and physician education requests. It is not used for direct marketing, and it is not shared with or sold to third parties for their own commercial purposes.
This form is not intended for patient inquiries or the submission of personal health information. Visitors should not include symptoms, diagnoses, medications, or any other health information in their messages.
This website uses Google Analytics 4 ("GA4"), a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 ("Google"). Google Analytics uses cookies — small text files stored on your device — to help analyze how visitors use the site. The data collected is aggregated and used solely to understand site usage; it is not used for advertising or commercial profiling.
Google Analytics automatically anonymizes IP addresses. Full IP addresses are never logged or stored in connection with this website. We have disabled advertising personalization features, do not link this site to any Google Ads account, do not use Google Signals, and have configured GA4 under Restricted Data Processing settings. Under this configuration, Google is restricted from using collected data for cross-context behavioral advertising.
Cookies set by Google Analytics:
| Cookie | Purpose | Expires |
|---|---|---|
| _ga | Distinguishes unique visitors (stores a randomized client ID) | 2 years |
| _gid | Distinguishes users within a 24-hour session | 24 hours |
| _ga_[ID] | Stores session-level state for this site's GA4 property | 2 years |
You may prevent Google from collecting data via these cookies by installing the Google Analytics Opt-out Browser Add-on . You may also manage or withdraw cookie consent at any time through the cookie preference center on this site, or through your browser settings. Opting out has no effect on your ability to use the site. For more detail on how Google processes data, see Google's Privacy Policy and Data Processing Terms .
Cookie consent is managed through the Ketch Consent Management Platform in compliance with California law (CCPA/CPRA) and applicable international regulations. For Ketch's privacy policy, see ketch.com/privacy-policy .
In addition to Google Analytics and Ketch described above, this site uses the following third-party services that may process limited visitor data under their own privacy policies:
This website does not collect, store, or transmit protected health information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA). Clinical patient care is conducted exclusively through UCI Health's HIPAA-compliant systems. For UCI Health's Notice of Privacy Practices, please visit ucihealth.org/legal/privacy .
We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising purposes. Google Analytics is configured under Restricted Data Processing settings, which restricts Google from using collected data for advertising personalization or cross-context behavioral purposes.
The categories of personal information collected through this website are:
| Category | Examples | Source |
|---|---|---|
| Identifiers | Randomized cookie IDs; anonymized IP address | Google Analytics |
| Internet activity | Pages viewed, time on site, referring URL, browser type | Google Analytics |
| Contact information | Name, email, phone number, inquiry message | Contact form (voluntary) |
Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have the right to:
To exercise any of the above rights, submit a request to alexa@lean.md. We will respond within 45 days as required by law.
In compliance with the California Online Privacy Protection Act (CalOPPA), this policy is posted conspicuously on the site and identifies the categories of personally identifiable information collected and the third parties with whom it may be shared.
Do Not Track: This site does not alter its data collection practices in response to browser Do Not Track (DNT) signals, as there is no consistent industry standard for DNT recognition. Visitors may manage tracking preferences through the cookie consent tool on this site.
Global Privacy Control (GPC): We honor the Global Privacy Control signal as required under California law. If your browser or browser extension transmits a GPC opt-out signal when you visit this site, we will treat that signal as a request to opt out of the sharing of your personal information and will configure analytics accordingly for your session.
Contact form submissions are retained only for as long as is necessary to evaluate and respond to the inquiry, after which they are deleted. Anonymized analytics data may be retained indefinitely in aggregate form.
This website is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has submitted personal information through this site, contact us at alexa@lean.md and we will promptly delete it.
We reserve the right to update this Privacy Policy at any time. The effective date at the top of this page will reflect the most recent revision. Material changes will be noted in the site footer. Continued use of the site following any update constitutes acceptance of the revised policy.
Questions or requests regarding this Privacy Policy may be submitted to alexa@lean.md.
This Privacy Policy applies to lean.md only and is independent of UCI Health's privacy practices. See also: Medical Disclaimer.