Introduction
We at www.cpaptech.com respect your privacy and are committed to transparency about how we handle your personal information. This Privacy Policy explains how we collect, use, share, and protect your data when you visit our website (“Site”) or use any of our online or offline services (“Services”).
We may update this policy from time to time. Any changes will be posted here, so please review it periodically.
This policy covers the following topics:
- Personal Data We Collect
- Why We Collect & How We Use Personal Data
- How We Share Personal Data
- Cookies & Other Tracking Technology
- Security
- Changes to This Policy
- Children’s Privacy
- Links to Third-Party Sites
- Your State Privacy Rights
- Privacy Notice to California Residents
- Accessibility
- How to Contact Us
1. Personal Data We Collect
We collect personal data—information that can identify you directly or indirectly. This includes data you provide and data collected automatically.
a. Data You Provide
- Account Registration: Name, email, password (or login via Facebook/Google), optional SMS opt-in.
- Account Login: Email/password or social login details.
- Account Use: Prescription copies, payment methods, shipping addresses, product reviews, favorites.
- Contact Requests: Name, contact info, and message content.
- Purchases: Contact, shipping, order, prescription, and payment details.
- Marketing Emails: Email address.
- Payments: Processed via Shopify Payments (Shopify Privacy Policy).
- Job Applications: Name, contact info, work/education history, and other submitted details.
b. Data Collected Automatically
- Usage Info: Pages visited, click behavior, visit frequency.
- Technical Info: IP address, browser type/version, plugins.
- Device Info: Hardware model, OS, app version.
- Mobile Info: Device type (phone/tablet), carrier.
- Location Info: Approximate city/region level.
For more on tracking, see Section 4: Cookies & Other Tracking Technology.
2. Why We Collect & How We Use Personal Data
We use your data to:
- Deliver and improve our Site and Services.
- Provide customer support and resolve issues.
- Process orders, payments, and prescriptions.
- Personalize content and advertising.
- Send updates, offers, and newsletters (if subscribed).
- Enforce our agreements and comply with laws.
- Maintain and improve our business operations.
We may also use your data in ways disclosed at the time of collection or with your consent.
3. How We Share Personal Data
We may share your data in the following cases:
a. With Vendors & Service Providers
Including those who handle:
- Hosting, analytics, and IT services
- Advertising and marketing
- Payment processing (e.g., Shopify)
- Order fulfillment, CRM, accounting, and customer support
b. To Meet Legal Obligations
- When required by law
- In legal proceedings
- To protect our rights or prevent fraud
- During corporate transactions (e.g., mergers, asset sales)
c. At Your Request
For example, sharing prescription info with a healthcare provider.
d. As Disclosed at Time of Collection
We may notify you of additional sharing practices when you provide data.
4. Cookies & Other Tracking Technology
We use cookies and similar tools to:
- Estimate audience size and usage patterns
- Remember your preferences
- Deliver relevant ads and content
- Track ad performance
- Improve site functionality
- Recognize returning visitors
Third-Party Tools
Google Analytics
- Analyzes site traffic and user behavior
- Collects non-identifiable data (e.g., IP address, visit time, referring site)
- Data is stored by Google under Google’s Privacy Policy
- Opt out of Google Analytics tracking
Google reCAPTCHA
- Protects against spam and bots
- Shares data like IP, browser info, and mouse movements with Google
- Subject to Google’s Privacy Policy and Terms
Managing Cookies
- Your Preferences: Click “Manage Preferences” on our site.
- Global Privacy Control (GPC): We honor GPC signals. Enable via supported browsers.
- Do Not Track: We do not respond to browser “Do Not Track” signals due to lack of standardization.
- Advertising Opt-Outs:
- Network Advertising Initiative (NAI)
- Digital Advertising Alliance (DAA)
- NAI Mobile Choices
Opt-out settings apply per browser/device—repeat on each one you use.
Platform-Specific Controls
5. Security
- Keep your password confidential.
- Notify us immediately if your account is compromised.
- We use industry-standard security measures and require similar protections from service providers.
- Note: No internet transmission is 100% secure—we cannot guarantee absolute security.
6. Changes to This Policy
We may update this policy anytime. Continued use of our Site means you accept the current version. Major changes may be notified via email or site notice. Check the “Last Modified” date above for updates.
7. Children’s Privacy
Our Site is not for children under 16. We do not knowingly collect or sell their data.
8. Links to Third-Party Sites
Our Site may link to external websites. We are not responsible for their privacy practices—review their policies before use.
9. Your State Privacy Rights
Depending on your state, you may have rights to:
- Access, correct, or delete your data
- Receive a portable copy of your data
- Opt out of targeted advertising, data “sales”, or profiling
- Withdraw consent (for sensitive data)
- Not be discriminated against for exercising these rights
We do not use data for automated decisions with legal effects.
Our ad targeting may constitute a “sale” under state laws (e.g., sharing cookie data with advertisers).
10. Privacy Notice to California Residents
This section applies only to California residents under the CCPA.
Your Rights
- Right to Know: Request details about data collected, used, or shared in the past 12 months.
- Right to Delete: Ask us to delete your personal information (with exceptions).
- Right to Correct: Fix inaccurate data.
- Right to Opt Out: Say no to the “sale” or “sharing” of your data (including for behavioral ads).
- Right to Limit Use of sensitive data (if applicable).
- Right to Non-Discrimination: No penalty for exercising your rights.
How to Exercise Rights
Contact us via email or webform (see Section 12). We may verify your identity. You may also use an authorized agent (with proof of permission).
Key Details (Past 12 Months)
- Data Collected: See Section 1
- Purpose: See Section 2
- Sources: You, your devices, service providers
- Children: We do not collect or sell data from users under 16
- Sensitive Data: Used only as permitted by CCPA
- Retention: As long as needed for service delivery or legal compliance
“Sale” of Data
Under CCPA, “sale” includes sharing data for behavioral advertising. In the past 12 months, we shared:
| Category of Data | Shared With |
|---|---|
| Unique identifiers (cookies, device IDs, etc.) | Advertising networks, analytics providers |
👉 Opt out via “Manage Preferences” on our site.
Business Disclosures
We disclosed the following for business purposes:
| Data Type | Recipients |
|---|---|
| Identifiers (name, email, IP, address) | IT providers, payment processors, healthcare partners |
| Phone number | Same as above |
| Payment info | Payment processors |
| Commercial info (purchase history) | Marketing, payment, and fulfillment partners |
| Protected characteristics (e.g., health info) | Marketing & healthcare partners |
Purposes: Security, customer service, order fulfillment, service improvement, and business development.
“Shine the Light” Law (Civil Code § 1798.83)
California residents may request that we not share their data with third parties for direct marketing. Contact us to submit a request.
11. Accessibility
We strive to make this policy accessible. For alternative formats, contact us (see below).
12. How to Contact Us
Have questions or concerns? Reach out to us:
📧 Email: cpaptech2019@gmail.com