Privacy Policy

Introduction

Healix Medical Supply LLC ("Healix," "we," "us," or "our") operates the website located at https://healixmedicalsupply.com and provides medical supply distribution services to healthcare facilities and professionals across the United States.

We are committed to protecting the privacy and confidentiality of personal information entrusted to us. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and how we protect it. It also describes your rights regarding your personal information. By using our website or placing an order with us, you agree to the terms of this policy.

Scope of This Policy

This policy applies to:

• Visitors to our website at https://healixmedicalsupply.com

• Customers who place orders for medical supplies (including facilities, purchasing agents, and individual buyers)

• Healthcare professionals who submit bulk pricing or account inquiries

• Email subscribers and marketing contacts

HIPAA Notice: Healix Medical Supply is a medical supply distributor, not a covered healthcare provider, health plan, or healthcare clearinghouse under HIPAA. We do not collect, process, or transmit Protected Health Information (PHI) as part of our standard commercial transactions. If you provide us with any PHI in connection with a special order or patient-specific product request, we will treat that information with strict confidentiality consistent with applicable law.

Information We Collect

A. Information You Provide Directly

B. Information Collected Automatically

When you visit our website, we automatically collect certain technical data:

• IP address and general geographic location (city/region level)

• Browser type, version, and operating system

• Pages visited, time on page, and referral URL

• Device type (desktop, tablet, mobile) and screen resolution

• Cookies and similar tracking technologies (see Cookie section below)

How We Use Your Information

• Order fulfillment: To process, fulfill, ship, and invoice your orders; communicate about delivery status; and resolve order issues.

• Account management: To create and manage facility accounts, credit terms, and purchase histories.

• Customer support: To respond to inquiries, resolve disputes, and provide technical or product assistance.

• Regulatory compliance: To verify purchaser eligibility for regulated products (e.g., certain Class II/III devices), maintain sales records as required by state and federal law, and comply with FDA distributor recordkeeping obligations.

• Marketing communications: To send promotional emails, product updates, and category-specific offers. You may opt out at any time using the unsubscribe link in any email or by contacting us directly.

• Website improvement: To analyze site traffic, diagnose technical issues, and improve the user experience.

• Fraud prevention: To detect and prevent unauthorized transactions, fraudulent orders, and abuse of our systems.

• Legal obligations: To comply with applicable laws, respond to lawful requests from government authorities, and enforce our Terms of Service.

How We Share Your Information

We do not sell your personal information. We share it only in the following limited circumstances:

• Shipping carriers: UPS, FedEx, and freight carriers receive your name, facility name, and delivery address to fulfill shipments.

• Payment processors: PCI-DSS-compliant processors (e.g., Stripe) handle all card transactions. We transmit billing data to them but do not store raw card numbers.

• Technology service providers: Cloud hosting, CRM, email delivery, analytics, and customer support software vendors who process data on our behalf under contractual data protection obligations.

• Legal and regulatory authorities: When required by law, court order, subpoena, or to protect our rights, property, or the safety of our customers and the public.

• Business transfers: In connection with a merger, acquisition, or sale of all or substantially all of our assets, with appropriate notice to you.

Cookies & Tracking Technologies

We use cookies and similar technologies to operate our website, remember your preferences, analyze traffic, and deliver relevant content. You can control cookie settings through your browser preferences. Disabling cookies may affect certain website functionality.

Data Security

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These include:

• TLS/SSL encryption for all data transmitted between your browser and our servers

• AES-256 encryption for data at rest in our databases

• PCI-DSS compliance for all payment processing

• Role-based access controls limiting employee access to personal data on a need-to-know basis

• Regular security assessments and vulnerability scanning

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy and to comply with our legal obligations. Order records are retained for a minimum of 7 years to comply with FDA distributor recordkeeping requirements and applicable tax laws. Account information is retained for as long as your account is active, plus 3 years thereafter. Marketing preferences and email records are retained until you opt out, plus 1 year.

Your Privacy Rights

Depending on your state of residence, you may have the following rights:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.

• Right to access: Request a copy of the personal information we hold about you.

• Right to correction: Request that we correct inaccurate personal information.

• Right to deletion: Request deletion of your personal information, subject to legal retention requirements.

• Right to opt out: Opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.

• Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, submit a written request to privacy@healixmedicalsupply.com. We will respond within 45 days. We may need to verify your identity before processing your request.

Children's Privacy

Our website and services are intended for healthcare professionals and businesses only. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, contact us immediately and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website. Your continued use of our website after the effective date of any changes constitutes acceptance of the updated policy.