Privacy policy

MEDAZA (USA) — PRIVACY POLICY

Effective Date: 07/01/2026

Medaza (USA) operates this store and website, including all related information, content, features, tools, products, and services (the "Services"), exclusively for institutional and business purchasers — including veterinary clinics, medical institutions, and other licensed or authorized entities ("Buyer," "you," or "your"). The Services are not directed to, and are not intended for use by, individual consumers or patients, and Medaza (USA) does not knowingly collect protected health information ("PHI") regulated under the Health Insurance Portability and Accountability Act ("HIPAA") through this Platform. Medaza (USA) is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

1. Scope: Business Information, Not Patient or Consumer Data

Because the Services are limited to institutional, business-to-business transactions, the personal information we collect relates to the individuals who act on behalf of Buyer (e.g., authorized purchasing staff, clinic administrators, or veterinary/medical professionals placing an Order), not to patients, animal owners, or individual consumers. We do not collect, and Buyer should not submit through the Services, any patient health records, medical charts, diagnostic information, treatment history, or other PHI. If Buyer inadvertently submits such information (for example, in a free-text customer support message), Medaza (USA) will delete it upon discovery and request that Buyer refrain from including such information in future communications.

2. Personal Information We Collect or Process

We may collect or process the following categories of personal information, depending on how you interact with the Services and as permitted or required by applicable law:

  • Business contact details, including the name, work email address, business phone number, job title, and business billing/shipping address of Buyer's authorized representatives.
  • Institutional and licensure information, including Buyer's business name, applicable professional or facility license or registration number, and other credentials used to verify Buyer's eligibility to purchase medical devices as an institutional buyer.
  • Financial information, including payment card or financial account information, transaction details, and payment confirmation, processed on our behalf by Shopify and its payment processors.
  • Account information, including username, password, security settings, and preferences.
  • Order and transaction information, including items viewed, added to cart, purchased, returned, or exchanged, and Order history, retained in part for the traceability and recordkeeping purposes described in Section 6.
  • Communications with us, including information included in customer support inquiries or other correspondence.
  • Device and usage information, including IP address, browser type, and interaction data collected automatically through the Services.

3. Personal Information Sources

We collect personal information: (a) directly from you, when you create an account, place an Order, or communicate with us; (b) automatically, through your use of the Services and through cookies and similar technologies; (c) from our service providers, including Shopify and payment processors, who process information on our behalf; and (d) where applicable, from professional licensing databases or third-party verification services used to confirm Buyer's institutional eligibility.

4. How We Use Your Personal Information

  • Provide and Fulfill the Services. To process payments, fulfill and ship Orders, verify Buyer's institutional eligibility to purchase medical devices, manage accounts, and facilitate returns, exchanges, or warranty claims.
  • Regulatory and Quality Compliance. To maintain distribution records, support product traceability, and cooperate with recall, corrective action, or FDA-related reporting obligations, as described in Section 6.
  • Business Communications. To send Order confirmations, shipping updates, account notices, and — where you have not opted out — relevant product or catalog updates. Marketing communications are limited to business-relevant product information and are not used for consumer-style behavioral advertising.
  • Security and Fraud Prevention. To authenticate accounts, secure transactions, and detect or prevent fraudulent or unauthorized activity.
  • Customer Support. To respond to inquiries and maintain our business relationship with Buyer.
  • Legal and Regulatory Compliance. To comply with applicable law, including FDA regulations applicable to medical device distributors and brokers, and to respond to valid legal process.

5. How We Disclose Personal Information

We may disclose personal information: (a) to Shopify and other service providers who perform functions on our behalf (e.g., payment processing, fulfillment, cloud storage, customer support); (b) to manufacturers or Suppliers solely to the extent necessary to process warranty claims, recalls, or product-specific inquiries; (c) with your direction or consent; (d) with our affiliates; and (e) in connection with a business transaction (such as a merger), to comply with legal obligations, to enforce our terms and policies, or to protect the rights, safety, or property of Medaza (USA), our Buyers, or others. We do not sell personal information to third parties for their own independent marketing purposes, and we do not use Buyer data for third-party consumer-targeted advertising.

6. FDA Recordkeeping and Retention

As a licensed medical device distributor and broker, Medaza (USA) is subject to applicable FDA regulations governing device distribution, complaint handling, corrections and removals, and recall coordination (see, e.g., 21 CFR Parts 803, 806, and 821, as applicable to our registration and licensure). To meet these obligations, we retain certain Order, Buyer institution, and product traceability records — including Buyer name, business contact information, shipping address, and purchase history — for the retention periods required by applicable FDA regulations and our state distribution licensure, which may exceed the retention periods otherwise described in this Policy. This retention is limited to records necessary for regulatory traceability and does not include patient-level or PHI data, which we do not collect.

7. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you submit will be transmitted to and shared with Shopify and its service providers, which may be located in countries other than where you reside. To learn more about how Shopify uses personal information, you may visit the Shopify Privacy Policy at https://www.shopify.com/legal/privacy.

8. Third-Party Websites and Links

The Services may link to websites or platforms operated by third parties, including manufacturer or Supplier resource pages. We do not control and are not responsible for the privacy or security practices of such third parties. Review their privacy policies before providing any information.

9. Children's Data

The Services are intended exclusively for institutional business use and are not directed to, marketed to, or intended for use by children. We do not knowingly collect personal information from individuals under the age of majority in their jurisdiction. If you believe a child has provided personal information to us, please contact us using the details below so we can delete it.

10. Security and Retention of Information

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, but no security measures are perfect, and we cannot guarantee absolute security. We retain personal information for as long as necessary to maintain Buyer's account, provide the Services, comply with FDA and other legal recordkeeping obligations described in Section 6, resolve disputes, and enforce our agreements.

11. Your Rights and Choices

Depending on where your business is located, you may have rights to access, correct, delete, or receive a copy of personal information we hold about your business contacts, and to opt out of certain processing, subject to the exceptions below. You may exercise these rights by contacting us using the details below; we may need to verify your identity or authorization before processing a request.

Exception for Regulatory Recordkeeping. Where personal information is retained to satisfy FDA distribution, traceability, complaint-handling, or recall recordkeeping obligations described in Section 6, or other applicable legal or licensure requirements, we may decline or delay a deletion request to the extent necessary to comply with those obligations, and will inform you if this applies to your request.

We will not discriminate against you or Buyer for exercising these rights. You may designate an authorized agent to submit requests on your behalf, subject to verification.

12. Complaints

If you have concerns about how we process personal information, please contact us using the details below. Depending on your jurisdiction, you may also have the right to lodge a complaint with the applicable data protection or consumer protection authority.

13. International Transfers

We may transfer, store, and process personal information outside the country in which you are located, using appropriate safeguards where required by applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will post the revised Policy on this website and update the "Last updated" date.

15. Contact

Questions about this Privacy Policy, or requests to exercise the rights described above, may be directed to Medaza (USA) at medazausa@medaza-platform.com.