Privacy Policy

Effective Date: September 28, 2026
Last Updated: September 28, 2026
(Previous versions of this policy are available upon request.)

Summary of Key Points

At a glance, here is what you need to know about how we handle your data:

• What personal information do we collect? We collect your contact details, insurance information, medical and prescription information, payment details, device information, and website usage data.
• Do we process any sensitive personal information? Yes, we process health and medical information to fulfill your orders and coordinate with your insurance.
• Do we collect information from third parties? Yes, we may receive information from your healthcare providers and insurance companies to verify coverage and process prescriptions.
• How do we use your information? We use your data to provide medical equipment, process billing, fulfill prescriptions, manage recurring supplies, and improve our services.
• Who do we share your personal information with? We share data with essential service providers (like payment processors and delivery services) and healthcare partners (like your doctor or insurance provider) necessary to deliver your care.
• What are your privacy rights? Depending on where you live, you have the right to access, correct, delete, or port your data, as well as the right to opt out of marketing communications.
• How can you contact us? You can reach our privacy team anytime at support@aamedsupplies.com.

1. Introduction

Welcome to AA Medical Supply Inc. (“AA Medical Supply,” “we,” “us,” or “our”). We are a durable medical equipment and medical supply company dedicated to providing patients with the healthcare supplies they need. Whether we are verifying your insurance, fulfilling a prescription order, setting up recurring deliveries, or answering your questions through customer support, our goal is to make managing your healthcare needs as seamless as possible.

We know that the information you share with us is deeply personal. Trust is the foundation of healthcare, and we are committed to protecting your privacy with the same care and diligence we apply to our medical services. This Privacy Policy explains in plain language how we collect, use, and protect your personal information when you visit aamedsupplies.com or use our services. It also outlines your rights regarding your data and how you can exercise them.

If you have any questions about this policy or how we handle your information, please reach out to us at support@aamedsupplies.com.

Note: If you are a patient receiving healthcare services covered by insurance, some of your information may be considered Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). In such cases, our HIPAA Notice of Privacy Practices will also apply and may provide additional details on how your medical information is handled.

2. What We Collect & Why

To provide you with medical equipment and supplies, we need to understand who you are and what you need. We organize the information we collect into three main categories.

Information You Give Us Directly

When you interact with us, you voluntarily provide specific details so we can serve you. We process this information primarily to fulfill our contract with you or to meet our legal obligations.

• Contact Information: Your name, email address, phone number, and shipping address. We need this to create your account, communicate with you, and deliver your supplies.
• Medical and Prescription Information: Details about your medical conditions, prescriptions, and equipment needs. This sensitive health information is essential for us to fulfill your specific healthcare orders safely and accurately. We collect these details by phone or directly from your provider — our website forms do not ask for them.
• Insurance Information: Your insurance provider, policy numbers, and coverage details. We collect this to verify your benefits and assist with billing your insurance directly. As above, this is gathered by phone rather than through our website.
• Payment Information: Financial details used when you make direct-pay purchases or cover copayments. Card details are entered directly with our payment processor and are not stored on our website.

Information Collected Automatically

When you visit our website, our systems automatically gather certain technical data. We collect this based on our legitimate interest in keeping our website secure and functioning properly, or with your consent where required by law.

• Device Information: Data about the computer or mobile device you use to access our site, including your browser type and operating system. This helps us optimize our website for your device.
• Usage Analytics and Website Data: Information about how you navigate our site, which pages you visit, and how long you stay. We use this to understand what our customers find helpful and to improve our online experience.
• Technical Logs: Server logs that record IP addresses and system activity. This is critical for detecting security threats and troubleshooting technical errors.
• Cookies & Tracking Data: Small data files stored on your device that help us remember your preferences and analyze site traffic.

Information from Third Parties

We occasionally receive information about you from trusted third parties to facilitate your care. We process this data to fulfill our contractual obligations to you.

• Healthcare Providers: Your doctors or clinics may send us prescriptions or medical necessity documentation on your behalf.
• Insurance Companies: We receive coverage confirmations, authorization details, and claim responses from your health insurance provider.

3. How We Use Your Information

We do not collect data just to have it. Every piece of information we gather serves a specific purpose in delivering or improving our services.

• Core Service Delivery: We use your contact, medical, and insurance information to process your orders, verify your insurance coverage, bill for services, and deliver your medical equipment. (Legal basis: Contract)
• Service Improvement and Personalization: We analyze website data and usage analytics to understand how our customers interact with our platform, allowing us to make our website easier to navigate and our recurring supply services more efficient. (Legal basis: Legitimate interest)
• Communication with You: We use your contact details to send order confirmations, delivery updates, refill reminders, and responses to your customer support inquiries. (Legal basis: Contract and Consent)
• Security and Fraud Prevention: We monitor technical logs and device information to protect our website from malicious activity, unauthorized access, and fraudulent transactions. (Legal basis: Legitimate interest)
• Legal Compliance: As a healthcare business, we must maintain certain medical and financial records to comply with healthcare regulations, HIPAA requirements, and tax laws. (Legal basis: Legal obligation)
• Marketing: With your permission, we may use your email address to send you promotional activities or updates about new medical supplies. You can opt out of these communications at any time. (Legal basis: Consent)

4. When We Share Your Information

We respect the sensitive nature of your health and personal data. We only share your information when it is absolutely necessary to provide our services or comply with the law. We never sell your personal data. Furthermore, we do not share your personal information for cross-context behavioral advertising.

We may share your information in the following circumstances:

• Essential Service Providers: We share specific data with trusted vendors who help us run our business. This includes payment processors to handle your transactions, delivery and logistics companies to ship your orders, and the technology providers listed in the Sub-processors section below.
• Healthcare and Insurance Partners: We share necessary medical and billing information with your doctors to confirm prescriptions and with your insurance company to process claims and verify coverage.
• Legal Requirements: We will disclose your information if required to do so by law, court order, or regulatory authorities, including healthcare oversight agencies.
• Business Transitions: If AA Medical Supply is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you if this occurs.
• With Your Consent: If we need to share your information for any purpose not listed here, we will ask for your explicit permission first.

5. Your Privacy Rights

Depending on your state of residence (including laws like the CCPA, VCDPA, CPA, and CTDPA) and applicable healthcare laws, you have significant control over your personal information.

You have the right to:

• Access Your Data: You can request a copy of the personal information we hold about you. We will provide this within the timeframe required by applicable law (typically 45 days).
• Correct Inaccuracies: If your contact details, insurance info, or medical records are incorrect or outdated, you can ask us to fix them.
• Delete Your Data: You can request that we erase your personal information. Please note that we may be legally required to keep certain medical and financial records even if you ask us to delete your account.
• Port Your Data: You can ask us to provide your data in a structured, commonly used, and machine-readable format so you can transfer it to another service provider.
• Opt Out of Marketing: You can unsubscribe from our promotional emails at any time by emailing us, or by using the unsubscribe link where one is provided. Refill reminder emails carry an unsubscribe link at the bottom of every message; opting out stops the reminders only, and your scheduled refills continue to ship.
• Withdraw Consent: If you have given us consent to process your data, you can withdraw it at any time. This will not affect the lawfulness of any processing we did before you withdrew consent.
• Lodge Complaints: If you believe we have violated your privacy rights, you have the right to file a complaint with your state's Attorney General or the relevant data protection authority.

To exercise any of these rights, please email us at support@aamedsupplies.com. We will not discriminate against you for exercising your privacy rights.

6. Data Security

Protecting your health and personal information is a critical priority for us. We implement appropriate technical and organizational measures to safeguard your data against unauthorized access, loss, or alteration.

These measures include utilizing secure servers, implementing access controls so only authorized staff can view sensitive health data, and using encryption for data in transit.

However, we want to be honest with you: no system connected to the internet is 100% secure. While we work tirelessly to protect your data, we cannot guarantee absolute security. You also play a role in keeping your data safe. We encourage you to use strong, unique passwords for your account and to access our services from secure devices and networks.

In the unlikely event of a data breach that compromises your personal information, we will notify you and the relevant regulatory authorities as required by applicable law.

7. Data Retention

We keep your personal information only for as long as we need it to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Active Account Data: We retain your contact and account information for the duration of our business relationship, plus a reasonable buffer period to allow for easy account reactivation if you need supplies again.
• Medical and Financial Records: Healthcare regulations and tax laws require us to keep prescription records, insurance billing details, and payment histories for specific periods, typically up to 7 years.
• Marketing Preferences: We keep a record of your marketing consent until you withdraw it or opt out.
• Technical Logs: We retain website server logs and technical data for 12 months to monitor security trends and website performance.

8. Cookies & Tracking

Our website uses cookies and similar tracking technologies to function properly and help us understand how visitors use our site.

We use Google Analytics to gather usage analytics, configured with IP anonymization. Because we do not sell or share your personal information for cross-context behavioral advertising, this tool acts strictly as a service provider for our own internal analytics.

We also use Cloudflare Turnstile, a privacy-focused verification service that protects our forms from automated abuse. It is strictly necessary for website security.

You can manage your cookie preferences through your web browser settings. Most browsers allow you to block or delete cookies. Please note that blocking essential cookies may impact the functionality of our website.

9. Children's Privacy

Our services are generally intended for adults. We do not knowingly collect personal information directly from children under the age of 16 without verifiable parental consent. If a child requires medical equipment or supplies, the child's parent or legal guardian must provide the necessary information and manage the account. If we discover that we have inadvertently collected data directly from a child without appropriate consent, we will delete it promptly. Parents who believe we might have such information can contact us at support@aamedsupplies.com.

10. International Transfers

AA Medical Supply is based in the United States, and our services are targeted to US residents. Your information is processed and stored in the US. If we ever need to transfer your data outside of the United States to a third-party service provider, we will ensure that appropriate legal safeguards are in place to protect your information and maintain your privacy rights.

11. Changes to This Policy

Healthcare regulations and technology are always evolving, and we may update this Privacy Policy from time to time to reflect those changes.

If we make material changes to how we handle your personal information, we will notify you by posting a prominent notice on our website or by sending an email to the address associated with your account. The updated policy will apply to all data we hold, including data collected before the change. You can always find the most current version of this policy at aamedsupplies.com, with the "Last Updated" date clearly marked at the top.

12. Contact Us

We are here to help. If you have any questions, concerns, or requests regarding your privacy or this policy, please reach out to us.

• Email: support@aamedsupplies.com
• Phone: (248) 432-2620
• Address: 39393 Van Dyke Ave, Ste 104, Sterling Heights, MI 48313
• Website: aamedsupplies.com

We strive to acknowledge all privacy-related inquiries promptly and will respond to formal requests within the timeframes required by applicable law.

13. Categories of Personal Information (CCPA/CPRA)

For residents of California and other states with similar disclosure requirements, the following table details the categories of personal information we have collected in the past 12 months, where we got it, why we collected it, who we disclosed it to for a business purpose, and our retention criteria.

Notice Regarding Sensitive Personal Information: We collect health and medical information, which qualifies as Sensitive Personal Information. We use this information only for the essential purpose of providing you with the medical equipment and healthcare supplies you requested. Because we do not use this sensitive data for inferring characteristics about you or for secondary purposes, the formal right to limit the use and disclosure of sensitive personal information does not apply to our current operations.

14. Automated Decision-Making

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects concerning you. All significant decisions regarding your account, insurance billing, or medical supply fulfillment involve human review.

15. Privacy Signals

We respect your privacy choices. Our website is configured to recognize and honor the Global Privacy Control (GPC) signal. If you access our website with a browser or extension that broadcasts the GPC signal, we will automatically treat it as a valid request to opt out of any applicable tracking or data sharing as required by the laws of California, Colorado, Connecticut, Montana, Texas, and other applicable jurisdictions. In practice, this means our analytics tracking is switched off for your visit.

16. Sub-processors

To provide our services securely and efficiently, we use specialized third-party vendors known as sub-processors. Our current sub-processors include:

• Netlify — website hosting, content delivery, and serverless functions
• Supabase — database hosting for account, order, and delivery-schedule records
• Microsoft 365 — email delivery and business correspondence
• Cloudflare — Turnstile form-verification and abuse prevention
• Google Analytics — website analytics and performance monitoring

We maintain a current, comprehensive list of all active sub-processors. You can request this list at any time by emailing support@aamedsupplies.com. Customers may also contact us at that email address to subscribe to notifications; if you subscribe, we will notify you before any new sub-processor is added to our operations, giving you the opportunity to review the change.