Privacy Policy

Effective Date: January 1, 2021

Last Updated: February 6, 2026

At Compression Care, we are dedicated to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, use our services, or interact with us. As a provider of compression therapy and related medical products/services, we handle protected health information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and its regulations (45 CFR Parts 160 and 164). We also adhere to other applicable laws, such as the California Consumer Privacy Act (CCPA) where relevant.

If you have questions or concerns about this policy, please contact our Privacy Officer at hello@compressioncare.com or by mail at: Compression Care 123 SE Parkway Ct Ste 110 Franklin, TN 37064-3949

Information We Collect

We collect information to provide and improve our services, including compression therapy consultations, product recommendations, and educational resources. The types of information we may collect include:

• Personal Information: Name, email address, phone number, mailing address, and other contact details you provide via forms, emails, or phone calls.
• Health Information (PHI): Details about your medical conditions, treatments, or needs related to compression care (e.g., via inquiries or order forms). This is considered PHI under HIPAA and is only collected with your consent or as necessary for services.
• Usage Data: Automatically collected data such as IP address, browser type, device information, pages visited, and cookies (as described below).
• Payment Information: Billing details processed securely through third-party providers (we do not store full credit card information).
• Other Data: Comments, media uploads, or feedback you submit.

We collect this information directly from you, automatically through website technologies, or from third parties (e.g., analytics tools) with appropriate safeguards.

How We Use Your Information

We use your information to:

• Provide and personalize our services, such as recommending compression products or scheduling consultations.
• Communicate with you, including responding to inquiries, sending newsletters (with opt-out options), or providing health education.
• Process payments and fulfill orders.
• Improve our website and services through analytics.
• Comply with legal obligations, such as HIPAA-required reporting.
• For treatment, payment, and healthcare operations under HIPAA (e.g., coordinating care with your healthcare provider if authorized).

We do not use your information for purposes outside those described here without your consent.

Does Not Share Information

At Compression Care, we prioritize your privacy and do not share your protected health information (PHI) or personal data in ways that violate HIPAA or your trust. Specifically:

• We do not share your PHI with third parties for marketing purposes without your explicit written authorization.
• We do not sell, rent, or lease your personal data or PHI to any external organizations.
• We do not disclose sensitive details, such as treatment notes (if applicable) or other highly confidential health information, without your prior written consent, except as required by law.
• Sharing is limited to what is necessary for treatment, payment, healthcare operations, or legal compliance (e.g., public health reporting, court orders, or audits). All business associates (e.g., payment processors) are bound by HIPAA agreements to protect your data.

If you wish to restrict certain disclosures, contact our Privacy Officer—we will accommodate reasonable requests unless they conflict with legal requirements.

Data Security

We implement robust security measures to protect your information, including:

• Encryption of PHI in transit and at rest (e.g., SSL/TLS for website communications).
• Access controls, firewalls, and regular security audits.
• Employee training on HIPAA compliance and data handling.
• Breach notification procedures: In the event of a data breach, we will notify affected individuals as required by HIPAA (within 60 days) and take steps to mitigate harm.

While no system is infallible, we strive to maintain the highest standards of security.

Your Rights Regarding Your Information

Under HIPAA and applicable laws, you have rights over your PHI, including:

• Access: Request a copy of your PHI (we may charge a reasonable fee for copies).
• Amendment: Request corrections to inaccurate or incomplete PHI.
• Accounting of Disclosures: Request a list of certain disclosures made of your PHI.
• Restriction: Request limits on how we use or disclose your PHI (we may not always accommodate, e.g., for treatment purposes).
• Confidential Communications: Request alternative communication methods (e.g., email instead of phone).
• Complaint: File a complaint with us or the U.S. Department of Health and Human Services (HHS) if you believe your rights have been violated.

To exercise these rights, contact our Privacy Officer in writing. We will respond within 30 days (extendable by 30 days with notice).

Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children without verifiable parental consent, in compliance with the Children’s Online Privacy Protection Act (COPPA). If we learn we have collected such data, we will delete it promptly.

International Transfers

If you are outside the U.S., note that your data may be transferred to and stored in the U.S., where privacy laws differ. By using our services, you consent to this transfer.

Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. Updates will be posted here with the new effective date. We encourage you to review it periodically.

Contact Us

For questions, requests, or complaints: Privacy Officer Compression Care 123 SE Parkway Ct Ste 110 Franklin, TN 37064-3949 Email: hello@compressioncare.com Fax: (615) 807-3334

If you suspect a privacy violation, you may also contact the HHS Office for Civil Rights at www.hhs.gov/ocr/privacy/hipaa/complaints/.