Privacy Policy for D1 Test Strips
Effective Date: [Insert Date]
This Privacy Policy describes how D1 Test Strips (the "Company," "We," "Us," or "Our") collects, uses, and discloses your information when you use our services and website (the "Services"). It also explains your privacy rights and how the law protects you. We are committed to protecting your "individually identifiable health information," referred to as Protected Health Information (PHI) under HIPAA, and all other personal data.
1. The Information We Collect
We collect various types of information to provide and improve our Services.
A. Personal Information (PI)
This includes information you directly provide to us:
- Identifiers: Name, address, email address, phone number, date of birth, and account credentials.
- Financial Information: Billing address, credit/debit card numbers, and insurance information for payment and claims processing.
- Health Information: Details about your medical conditions (e.g., diabetes), prescriptions, pharmacy details, glucose levels, and related health data necessary for providing our products and services or for insurance purposes.
B. Usage Data and Tracking Technologies
We also automatically collect information about your interaction with our website using cookies and similar technologies. This includes:
- Device Data: IP address, device type, operating system, and unique device identifiers.
- Browsing Data: Pages visited, links clicked, time spent on pages, and referring URLs.
2. How We Use Your Information
We use your information for the following purposes:
- Providing Services: To create and manage your account, process orders, facilitate purchases, arrange shipping, and provide customer support.
- Health Management: To provide and verify the quality and safety of the D1 Test Strips and related services you use.
- Communication: To send you order confirmations, product updates, safety information, and, with your consent, marketing and promotional messages.
- Analytics and Improvement: To understand how you use our Services, improve website functionality, and develop new products.
- Legal and Safety: To comply with legal obligations (e.g., FDA regulations), court orders, and law enforcement requests, and to protect our rights and the safety of our users and the public.
3. How We Share Your Information
We do not sell or lease your personal information to third parties for profit. We only disclose your information to the following categories of recipients:
- Service Providers: Third-party vendors who perform services on our behalf (e.g., payment processors, shipping companies, IT support, data analytics). These providers are contractually obligated to keep your information confidential.
- Healthcare Providers and Insurers: With your explicit consent or as required for billing and claims reimbursement purposes with your insurance entities or linking you to your healthcare professional (HCP).
- Legal and Regulatory Authorities: When required by law, regulation, court order, or to assist with investigations or public health and safety issues.
- Business Transfers: To an actual or potential buyer or successor entity in connection with a merger, acquisition, or sale of assets, subject to a robust confidentiality agreement.
4. Data Security and Retention
We implement reasonable and appropriate security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements.
5. Your Privacy Rights
Depending on your jurisdiction (e.g., California, EU, etc.), you may have the following rights regarding your personal information:
- Right to Access: Request access to the personal data we hold about you.
- Right to Correction: Request correction of inaccurate or incomplete personal information.
- Right to Deletion: Request the deletion of your personal data.
- Right to Opt-Out: Opt-out of the processing of your data for targeted advertising or the "sale" of your personal information.
- Right to Data Portability: Receive your personal information in a structured, commonly used, and machine-readable format.