Privacy Policy

2.1 Account Information

When you create an account, we collect:

• •Full name and professional credentials
• •National Provider Identifier (NPI) number
• •Medical license information
• •Business name and address
• •Email address and phone number
• •Payment information (processed securely through third-party payment processors)

2.2 Order Information

When you place orders, we collect:

• •Product selections and quantities
• •Shipping and billing addresses
• •Order history and preferences
• •Communication records related to orders

2.3 Usage Information

We automatically collect certain information when you use our platform:

• •IP address and device information
• •Browser type and operating system
• •Pages viewed and features used
• •Access times and dates
• •Referring website addresses

2.4 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze platform usage, and provide personalized content. You can control cookie preferences through your browser settings.

4.1 Service Providers

We share information with trusted third-party service providers who assist with:

• •Payment processing (Stripe)
• •Shipping and fulfillment (3PL partners)
• •Email communications (Resend)
• •Analytics and platform monitoring
• •Cloud infrastructure (Vercel, Supabase)

4.2 Medical Director Program

For practices enrolled in our Medical Director Program, we share necessary information with network physicians to facilitate physician oversight and compliance.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.4 Legal Requirements

We may disclose information when required by law, such as:

• •In response to subpoenas or court orders
• •To comply with regulatory investigations
• •To protect our rights and safety or that of others
• •To detect, prevent, or address fraud or security issues

4.5 With Your Consent

We may share information for other purposes with your explicit consent.

7.1 Access & Correction

You may access and update your account information at any time through your account dashboard or by contacting support.

7.2 Data Portability

You may request a copy of your data in a structured, machine-readable format.

7.3 Deletion

You may request deletion of your account and personal data, subject to legal retention requirements.

7.4 Marketing Opt-Out

You may opt out of marketing communications by clicking "unsubscribe" in emails or adjusting your account preferences. Transactional emails (order confirmations, shipping updates) cannot be disabled.

7.5 California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• •Right to know what personal information is collected
• •Right to delete personal information
• •Right to opt-out of the sale of personal information (we do not sell data)
• •Right to non-discrimination for exercising privacy rights

7.6 European Privacy Rights (GDPR)

While we primarily serve U.S.-based healthcare providers, European users have rights under GDPR:

• •Right of access to your personal data
• •Right to rectification of inaccurate data
• •Right to erasure ("right to be forgotten")
• •Right to restrict processing
• •Right to data portability
• •Right to object to processing