Privacy Policy
Last updated: October 8, 2026
About this policy
Pacific Scale Group, LLC (“Pacific Scale Group,” “we,” “us,” or “our”) operates the Pacific Scale Group website at https://www.pacificscalegroup.com. This policy explains how information is handled when you visit our website, submit an inquiry, or contact us about privacy. Our website serves healthcare-practice business audiences. It is not a patient portal; please do not send patient records or medical information through it.
Information you provide
When you submit the Revenue Leak Report form, we collect your first name, last name, email address, phone number, company, practice type, and message. Other correspondence may include the information you choose to provide. The Privacy Request form collects your request type, first name, optional last name, email address, whether you are acting for yourself or as an authorized agent, your optional access-history preference, and any optional request details. Do not submit passwords, Social Security numbers, identification documents, patient records, medical information, or other unnecessary sensitive information.
Information collected automatically
Our website, hosting, and security services may process technical information such as IP address, browser and device information, requested pages, and request timing to deliver and protect the site. The Revenue Leak Report form also records IP and device metadata with submissions. The separate Privacy Request form is configured without requester IP or device collection in its stored entries. This does not prevent the underlying hosting and security infrastructure from processing technical connection information.
How we use information
We use information to receive and respond to inquiries, review Revenue Leak Report requests, communicate about our business services, operate and improve the website, remember privacy choices, protect the site against misuse, and evaluate and respond to privacy requests. Optional analytics helps us understand website usage when enabled under the consent settings described below.
Revenue Leak Report submissions
Revenue Leak Report submissions are stored in the website’s form-entry database. They also generate internal email notifications and visitor acknowledgment emails. This means information may be held in both the website and email systems. An acknowledgment confirms receipt and is not a commitment to provide services or a completed assessment.
Essential cookies and website infrastructure
We use Cloudflare and Rocket.net infrastructure to deliver and protect the website. Essential technologies support site operation, security, and consent preferences. WPConsent manages cookie choices and remembers those choices for approximately 365 days. It is configured to maintain consent logs for approximately one year. Essential cookies and connection processing are distinct from optional analytics.
Google Analytics and Tag Manager
The site uses Google Tag Manager to manage tags and Google Analytics 4 to measure website usage. Non-essential consent starts denied. When you consent to analytics, Google Analytics uses the _ga and _ga_B7SXHHHT1L cookies. Without analytics storage consent, normal Google Analytics cookies are not created. Under Google Consent Mode v2, Google tags may still send restricted cookieless measurement signals; rejecting analytics storage does not mean that every connection to Google stops.
Your consent choices and Global Privacy Control
Use the existing cookie banner or cookie-preference controls to accept all cookies, reject non-essential cookies, or change Statistics preferences. You can revisit those controls to change optional analytics choices. Preferences apply to the browser or device where they are saved; clearing browser data or using another browser may require you to set them again. The site’s consent system supports Global Privacy Control (GPC), a browser signal expressing an opt-out preference. GPC does not replace requests for access, correction, or deletion. You may also submit a privacy inquiry through our Privacy Request form.
Service providers and disclosures
Website hosting and security providers, our form and email systems, and Google’s tag and analytics services process information in connection with the functions described in this policy. We may also need to disclose information to meet applicable legal requirements or respond to valid legal process. Provider involvement does not by itself establish whether a disclosure is a sale or sharing under California law; those terms have specific legal meanings.
We use OOPSpam Anti-Spam to help detect spam and abuse in website form submissions, including the Privacy Request form. Visitor IP addresses, submitted email addresses, and message content may be processed by OOPSpam’s API for spam detection. The enabled sensitive-information removal feature attempts to redact personal details from message content before API processing, but complete removal is not guaranteed.
OOPSpam also keeps local WordPress records of accepted or flagged submissions. These may include IP addresses, email addresses, message content, classification data, and timestamps, and are subject to operational review and configured cleanup. This processing and local logging are independent of the Privacy Request form’s disabled IP and device capture in Kadence form entries.
Retention
Our retention policy provides for keeping inquiries that do not become clients for 24 months, subject to applicable law and documented exceptions. This is a retention policy, not a statement that automatic deletion occurs at the end of 24 months. Cleanup must account for stored form entries, related email, and any other retained copies. Client-related records may require a different retention period based on the relationship and applicable obligations. Where California privacy-request recordkeeping rules apply, request and response histories must be preserved for at least 24 months. Those records are kept for request administration and applicable compliance purposes. WPConsent’s preference and consent-log periods are described above.
Data security
Our website uses hosting and security infrastructure to support secure operation. No website, transmission method, or storage system can guarantee absolute security. Please limit information sent through our forms to what is needed for the inquiry, and avoid sending sensitive documents or patient information.
California privacy rights, where applicable
Where the California Consumer Privacy Act (CCPA), as amended, applies, California residents may have rights to know and access personal information, request deletion subject to exceptions, correct inaccurate information, opt out of sale or sharing for cross-context behavioral advertising, limit certain uses or disclosures of sensitive personal information, and receive non-discriminatory treatment for exercising their rights. Rights depend on the law’s coverage and the relevant processing. You may act through an authorized agent. Access requests can specify all available history, including information older than 12 months. Applicable access rights may extend to information collected on or after January 1, 2022, subject to legal exceptions.
Submitting a privacy request
Use our Privacy Request form to ask about information we hold, request access, correction or deletion, submit an opt-out or limitation request, or raise another privacy concern. Select “Other privacy inquiry” if you are unsure which category fits. We may need follow-up information and, for access, correction or deletion, appropriate identity verification. Sale/sharing opt-outs are not subject to mandatory identity verification. Submitting the form or receiving an acknowledgment does not mean that identity has been verified or a request fulfilled. We review requests under applicable law and explain any relevant exceptions or limitations.
Third-party websites
Links may take you to websites operated by others. Their privacy policies and practices apply to information you provide on those websites. Review their policies before sharing information.
Children’s privacy
This website is intended for adult business audiences and is not designed for children to submit information. If you believe a child has provided personal information through this website, use our Privacy Request form so we can review the concern.
Updates and privacy contact
We may update this policy to reflect changes in our website or information practices. The “Last updated” date identifies the current version. For questions about this policy or to raise a privacy concern, use our Privacy Request form.