Privacy Policy
JFC Medical Supplies, LLC
Effective Date: April 2, 2026
Last Update: April 2, 2026
JFC Medical Supplies, LLC (“JFC,” “Company,” “we,” “us,” or “our”) respects the privacy and confidentiality of the individuals who visit our website, purchase products from us, communicate with us, or otherwise interact with our services. This Privacy Policy describes how we collect, use, disclose, retain, and safeguard personal information in connection with our website, online store, customer service operations, marketing activities, and related business functions.
By accessing or using our website or services, you acknowledge that you have read and understood this Privacy Policy.
1. Scope of This Privacy Policy
This Privacy Policy applies to personal information collected through:
-
our website and online storefront;
-
email, telephone, chat, and customer support communications;
-
account registration and checkout processes;
-
marketing subscriptions and promotional interactions; and
-
other digital or offline interactions with JFC.
This Privacy Policy does not govern third-party websites, platforms, payment processors, fulfillment partners, or other external services that may be linked from or integrated with our website, except to the extent expressly stated herein.
2. Categories of Information We Collect
We may collect the following categories of personal information, subject to applicable law:
A. Identifiers and Contact Information
-
full name;
-
billing address;
-
shipping address;
-
email address;
-
telephone number;
-
company or organization name, if applicable.
B. Transactional and Commercial Information
-
products viewed, selected, purchased, returned, or exchanged;
-
order history;
-
payment-related transaction details;
-
shipping, fulfillment, and delivery information;
-
customer service and support records.
C. Account and Authentication Information
-
username or login credentials, if account creation is available;
-
account preferences and saved information.
D. Device, Internet, and Usage Information
-
IP address;
-
browser type;
-
device identifiers;
-
operating system;
-
referring URLs;
-
website interaction data;
-
cookies, pixels, tags, and similar technologies.
E. Communications and Submission Data
-
information you provide in emails, forms, support requests, reviews, surveys, or chat messages;
-
records of your communications with us.
F. Limited Health-Related or Product-Use Information
Depending on the nature of the products we offer, we may collect information you voluntarily provide regarding product needs, usage preferences, caregiver status, or general health-related purchasing context. We do not sell such information. Where applicable, we handle such information with heightened sensitivity and only for legitimate business purposes described in this Policy.
G. Express Checkout Information
If you choose to use an accelerated or express checkout method made available on our website, such as Apple Pay, Google Pay, PayPal, or similar payment options, we may collect or receive from the applicable payment provider certain information necessary to process and fulfill your order, including your name, email address, billing address, shipping address, phone number, payment confirmation details, and other checkout-related information authorized by you and transmitted by the payment provider. Wix states that merchants may enable Apple Pay, Google Pay, and PayPal as checkout methods through Wix Payments and connected payment options.
3. Sources of Information
We may collect personal information:
-
directly from you;
-
automatically from your browser or device when you use our website;
-
from service providers that support payments, fraud prevention, shipping, analytics, advertising, and website hosting;
-
from marketing, social media, or advertising partners;
-
from publicly available sources, where lawful.
-
from payment processors, digital wallet providers, and express checkout providers when you authorize a transaction through those services. Wix documents customer checkout with Apple Pay, Google Pay, and PayPal on Wix stores.
4. How We Use Personal Information
We may use personal information for the following legitimate business and commercial purposes:
-
to operate, maintain, and improve our website and ecommerce platform;
-
to process and fulfill orders, payments, returns, refunds, and exchanges;
-
to facilitate and process express checkout transactions and receive order, shipping, and payment confirmation information from digital wallet or payment service providers selected by the customer. Wix says its payment ecosystem supports Apple Pay, Google Pay, PayPal, and other payment methods managed through Wix Payments or connected providers.
-
to provide customer support and respond to inquiries;
-
to communicate transactional notices, shipping updates, and account-related information;
-
to personalize user experience and product offerings;
-
to detect, investigate, prevent, and respond to fraud, abuse, security incidents, or unlawful conduct;
-
to comply with legal, regulatory, tax, accounting, contractual, and risk-management obligations;
-
to maintain internal records and business operations;
-
to send marketing and promotional communications, where permitted by law;
-
to enforce our Terms of Use and other legal rights.
5. Legal Bases for Processing
To the extent applicable under relevant law, we process personal information on one or more of the following bases:
-
performance of a contract or steps taken at your request before entering into a contract;
-
compliance with legal obligations;
-
our legitimate business interests, including security, fraud prevention, operations, analytics, and customer service;
-
your consent, where required by law.
6. Cookies and Similar Tracking Technologies
Our website may use cookies, pixels, tags, session replay tools, analytics technologies, and similar tracking mechanisms to:
-
keep the website functioning properly;
-
remember user preferences;
-
analyze site traffic and usage patterns;
-
improve performance and user experience;
-
support advertising and remarketing efforts, where applicable.
You may be able to modify your browser settings to decline or manage certain cookies. Please note that disabling cookies may impair certain website functionality.
7. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients, as reasonably necessary for the purposes described above:
-
website hosting and ecommerce platform providers;
-
we may disclose personal information to payment processors, digital wallet providers, express checkout providers, and fraud-prevention vendors to authenticate, process, complete, and secure transactions initiated through standard checkout or express checkout features. Wix states that its payment setup can include credit cards, Apple Pay, Google Pay, and PayPal.
-
shipping, logistics, and order-fulfillment providers;
-
IT, cloud storage, and cybersecurity vendors;
-
analytics and marketing service providers;
-
customer support providers;
-
professional advisors, such as attorneys, accountants, auditors, and insurers;
-
governmental, regulatory, or law-enforcement authorities where required by law;
-
parties involved in a merger, acquisition, financing, asset sale, reorganization, or similar corporate transaction.
We do not sell customer personal information for money.
We do not sell patient, customer, or health-related information to data brokers.
However, some privacy laws define “sale” or “sharing” broadly enough to include certain advertising or analytics disclosures made through cookies or similar technologies. Where such laws apply, we will honor applicable rights and opt-out requests to the extent required.
8. Health Information and HIPAA Statement
JFC Medical Supplies, LLC is an ecommerce retailer of medical and health-related products. In many circumstances, information collected through retail ecommerce activities is not protected health information (“PHI”) regulated by HIPAA, unless JFC is acting in a capacity that makes it a HIPAA covered entity or business associate with respect to specific information and functions. HHS guidance explains that HIPAA applies to covered entities and business associates, not to all businesses handling health-adjacent information.
Accordingly:
-
not all information collected through our website is subject to HIPAA;
-
if we ever act as a HIPAA covered entity or business associate for a particular service line, arrangement, or transaction, we will handle applicable protected health information in accordance with HIPAA and related contractual obligations;
-
if we collect consumer health information outside HIPAA and a qualifying breach occurs, the FTC’s Health Breach Notification Rule may impose notice obligations in certain circumstances.
9. Data Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, acquisition, disclosure, alteration, misuse, and destruction. Our website is hosted on the Wix platform, which provides certain infrastructure and platform-level security controls, including HTTPS/TLS encryption in transit, automatic SSL, and encryption of data at rest. Wix further states that it maintains recognized security and compliance certifications, including PCI DSS Level 1 and SOC 2 Type 2.
Access to personal information is restricted to authorized personnel, contractors, and service providers who require such access for legitimate business purposes. Nevertheless, no security measure or method of transmission over the Internet is infallible, and, accordingly, we do not warrant or guarantee that personal information will be absolutely secure.
10. Data Retention and Deletion Requests
We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to complete transactions, provide requested products or services, maintain business and financial records, comply with legal, tax, accounting, regulatory, and contractual obligations, resolve disputes, and enforce our agreements.
Subject to applicable law, users may request that we delete their personal information from our systems. Upon receipt of a verifiable request, we will review and process the request in accordance with applicable legal requirements. Please note, however, that we may retain certain information where necessary to: (i) complete a transaction or provide a requested service; (ii) comply with legal, tax, accounting, recordkeeping, or regulatory obligations; (iii) detect, prevent, or investigate security incidents, fraud, or illegal activity; (iv) protect our rights, property, and safety, or those of others; or (v) otherwise exercise or defend legal claims. State privacy laws such as the California Consumer Privacy Act provide deletion rights subject to these kinds of exceptions.
To submit a deletion request, users may contact us using the contact information provided in this Privacy Policy. We may need to verify the identity of the requester before completing a deletion request, and we may deny or limit a request to the extent permitted by applicable law. The FTC also emphasizes that companies should clearly disclose what they do with personal data and honor the privacy promises they make.
11. Consumer Privacy Rights
Depending on your state of residence and subject to applicable law, you may have the right to request access to, correction of, or deletion of certain personal information that we maintain about you. You may also have the right to request information regarding the categories of personal information we collect, the purposes for which such information is used, and the categories of third parties to whom such information is disclosed. California’s CCPA, as amended, is one example of a state law that may provide consumers with rights to know, delete, correct, and opt out in certain circumstances.
To exercise any applicable privacy rights, including a request for deletion, you may contact us using the contact information provided in this Privacy Policy. We may take reasonable steps to verify your identity before processing a request and may deny or limit a request where permitted or required by law, including where retention is necessary to complete transactions, comply with legal obligations, detect security incidents or fraud, or protect legal claims and business interests. The California Department of Justice’s CCPA regulations specifically address notice, identity verification, and the handling of consumer requests, and the FTC has emphasized that businesses are expected to honor the privacy promises they make to consumers.
We will not discriminate against you for exercising any privacy rights available under applicable law, except as permitted by law. If you are a resident of a state that provides an appeal right in connection with a privacy request, you may submit an appeal by contacting us through the same methods listed below and stating that you wish to appeal our decision. California and other state privacy laws may impose different rights and procedures depending on your jurisdiction.
12. Children’s Privacy
Our website and services are not directed to children under 13, and we do not knowingly collect personal information online from children under 13 without appropriate legal authorization. If we learn that we have received personal information from a child in violation of applicable law, we will take reasonable steps to delete such information.
13. Third-Party Services and External Links
If you subscribe to marketing communications, we may send you newsletters, promotional emails, product announcements, and related marketing messages, subject to applicable law. You may opt out of promotional emails at any time by using the unsubscribe link in the message or by contacting us directly.
Transactional or service-related communications may still be sent even if you opt out of marketing messages.
14. Marketing Communications
Our website may contain links to third-party websites, payment gateways, social media platforms, shipping providers, or embedded services. We are not responsible for the privacy, security, content, or practices of third parties. Your interactions with those services are governed by their own terms and privacy notices.
When you use Apple Pay, Google Pay, PayPal, or another third-party payment method, your transaction may also be subject to that provider’s own privacy notice, terms, and data-handling practices. Wix’s checkout documentation indicates these third-party payment options may appear alongside the standard checkout flow.
15. Business Transfers
In the event of a merger, acquisition, financing, bankruptcy, dissolution, restructuring, sale of assets, or other corporate transaction, personal information may be disclosed, transferred, or assigned as part of the transaction, subject to applicable law.
16. International Visitors
Our website is intended for persons located in the United States. If you access the website from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers operate.
17. Changes to This Privacy Policy
We reserve the right to amend, revise, or update this Privacy Policy at any time in our sole discretion. When we do so, we will revise the “Last Updated” date above. Your continued use of the website following the posting of changes constitutes your acceptance of the revised Privacy Policy, to the extent permitted by law.
18. Contact Us
If you have questions, requests, or concerns regarding this Privacy Policy or our privacy practices, please contact:
JFC Medical Supplies, LLC
[Insert Mailing Address]
[Insert Customer Service Email]
[Insert Customer Service Phone Number]
[Insert Website URL]