Privacy policy

Last updated and effective: 27 July 2026

Sage Cerebrovascular Diagnostics Inc., a Delaware corporation, doing business as Sage Cerebro.

01Introduction and scope

This Privacy Policy describes how Sage Cerebrovascular Diagnostics Inc. ("Sage Cerebro," "we," "us," "our") handles information collected through sagecerebro.com (the "Site").

The Site is informational. Nothing is sold here, there is no account or login, and no test results are delivered through it. Laboratory services, results delivery, and any patient portal operate on separate systems under a separate notice, and this policy does not describe them.

This policy does not apply to information collected by third parties, including the journals and public health resources we link to from the research page.

02Information we collect

Information you give us

Information collected automatically

We use Fathom Analytics, a privacy-focused, cookieless analytics service. It reports aggregate page views and referrers. It does not use cookies, does not collect personal data, does not fingerprint devices, and does not build cross-site profiles.

Our hosting provider maintains standard server logs, which may include IP address, browser type, and request time, for security and operational integrity. These are retained briefly and are not used to identify or profile individuals.

Information we do not collect

03How we use information

We do not use waitlist details for advertising, retargeting, profiling, or automated decision-making, and we do not enrich them with data purchased from third parties.

04Legal bases for processing

Where the GDPR or UK GDPR applies, our legal bases are your consent for waitlist and marketing communications, which you may withdraw at any time; our legitimate interests in responding to your enquiries, securing the Site, and understanding aggregate readership; and compliance with legal obligations.

05Sharing and disclosure

Service providers

We share information only with vendors who process it on our instructions and are bound by contract to protect it: our website host, which also receives and stores what you submit through the forms on this Site; our analytics provider; and our business email provider, through which those submissions reach us. There is no separate customer database behind this Site. They may not use your information for their own purposes.

Legal disclosures

We may disclose information where we believe in good faith that it is required by law, subpoena, or other legal process, or is reasonably necessary to protect the rights, property, or safety of Sage Cerebro, our users, or the public, or to investigate suspected fraud or abuse.

Business transfers

If Sage Cerebro is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information held on the Site may be transferred as part of that transaction. We will post notice of any change of control that materially affects this policy.

No sale, no sharing, no targeted advertising

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We have not done so in the preceding twelve months. We do not disclose personal information to third parties for their own direct marketing purposes.

06Retention

Waitlist entries are held with our website host and in our email, and are kept until the waitlist has served its purpose or you ask us to remove yours, whichever comes first. Contact-form messages and email correspondence are kept for as long as needed to resolve the matter and for a reasonable period afterwards for recordkeeping, generally not more than three years. Aggregate analytics contain no personal data and are kept indefinitely. Server logs are kept briefly.

07Security

We use encryption in transit, access controls limited to those who need it, and vendors selected for their security posture. The Site holds no health records, no payment data, and no credentials, which is itself the strongest control available to us.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and any regulator as applicable law requires.

08Your rights and choices

Everyone

You may ask us at any time to tell you what we hold about you, to correct it, or to delete it. You may unsubscribe from the waitlist using the link in any message we send or by writing to us.

California residents

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients; the right to delete; the right to correct; the right to opt out of sale or sharing; the right to limit the use of sensitive personal information; and the right not to be discriminated against for exercising any of these rights.

We do not sell or share personal information, and we do not collect sensitive personal information through this Site, so the opt-out and limitation rights have nothing to act on here. The request route below remains open regardless.

Categories collected in the preceding twelve months

Identifiers, being your name and email address, and, if given, an approximate location in the form of a ZIP code, together with the contents of any message you send us. We collect no other category enumerated in the statute through this Site: no commercial information, no biometric information, no precise geolocation, no sensory data, no professional or education information, no health information, and no inferences drawn to create a profile.

Other United States residents

Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, and others as they take effect, have comparable rights of access, correction, deletion, portability, and opt-out. We extend the same rights and the same request route to every resident of the United States regardless of state.

Nevada residents may direct us not to sell covered information. We do not sell covered information.

Washington and consumer health data

The Washington My Health My Data Act, and comparable Nevada and Connecticut provisions, govern consumer health data. This Site collects none, so the consent, authorization, and appeal mechanisms those statutes create are not engaged by anything you do here. We state the position rather than leave it unaddressed.

EEA and United Kingdom

You have rights of access, rectification, erasure, restriction, objection, and portability, and the right to withdraw consent at any time without affecting processing already carried out. You may also lodge a complaint with your supervisory authority.

How to make a request, and how we verify it

Write to support@sagecerebro.com, or use the contact form and choose "privacy". We verify a request by matching the email address you write from against the address in our records, which is proportionate given the limited information involved. An authorized agent may submit a request on your behalf with written permission signed by you. We respond within 45 days, extendable once by a further 45 days where the law allows, and we will tell you if we need the extension. There is no charge, and we will not treat you differently for asking.

If we decline a request, we will explain why, and California and Colorado residents may appeal by replying to our response with the word "appeal" in the subject line.

09Cookies, tracking, and opt-out signals

This Site sets no advertising cookies, no analytics cookies, and no tracking cookies. It runs no advertising pixels, no social media trackers, and no session-recording or heat-mapping tools. The only thing this Site stores on your device is your choice of light or dark appearance, kept in your browser's local storage so the Site does not change appearance between visits. It is not sent to us, it identifies nobody, and clearing your browser data removes it. There is no cookie banner because there is nothing to consent to.

Because we do not sell or share personal information or serve targeted advertising, there is nothing for a Global Privacy Control or Do Not Track signal to switch off. We will honour such signals as opt-out requests if that ever changes.

10Third-party links

The research page links to journals and public health resources operated by others. Following those links takes you to sites we do not control and whose privacy practices are their own. We receive nothing back from them about you.

11Children

The Site is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, write to us and we will delete it.

12International transfers

We are based in the United States and information collected here is processed in the United States, where privacy laws differ from those in your jurisdiction. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism with our vendors.

13Health Breach Notification Rule

The Site holds no health records and no identifiable health information, so it falls outside the scope of the Federal Trade Commission Health Breach Notification Rule. Should that change, we will provide notice as the Rule requires.

14Changes to this policy

We may update this policy. The date above changes when we do. Material changes will be posted on this page, and where we hold your email address for the waitlist we will tell you directly.

15Contact

Sage Cerebrovascular Diagnostics Inc.
Attn: Privacy
4500 Park Granada Blvd, Suite 202
Calabasas, CA 91302
support@sagecerebro.com