Privacy policy

Privacy Policy

Nova Vascular · 99 Wall Street #878, New York, NY 10005 · (205) 947-4273 · info@novavasc.com

Effective: September 21, 2026

What we collect

Order and account data: name, facility, shipping/billing address, email, phone, order history, and — for net-terms customers — W-9, tax-exempt certificates and license verification you send us.
Payment data: processed by Shopify Payments, Shop Pay or PayPal. We never see or store full card numbers.
Site usage: pages viewed, device and browser type, approximate location from IP, and referral source, collected through cookies and Shopify analytics.
Marketing preferences: whether you opted in to email or SMS and how you interact with messages.

We do not collect patient information, and you should not send protected health information to us. If you need to discuss a clinical event involving a product, contact us by phone and we will arrange a secure channel.

Why we use it

To fulfil and ship orders, verify professional eligibility, provide quotes and support, send order and recall notices, run the store (fraud prevention, analytics, site improvement), and — only with your consent — send marketing about products and pricing. We may also use it to comply with legal obligations, including device-tracking and complaint-handling requirements.

Sharing

We share data only with providers who need it to operate the store: Shopify (hosting, checkout, analytics), payment processors, shipping carriers, our email/SMS platform, and accounting. Manufacturers may receive your contact details if needed to resolve a product complaint or warranty claim. We do not sell personal data.

Marketing email and SMS

You can opt in at checkout or via a form. Every email has an unsubscribe link; reply STOP to any text to opt out of SMS. Message frequency varies; message and data rates may apply. Consent is not a condition of purchase.

Cookies

Essential cookies keep the cart and checkout working. Analytics and marketing cookies are optional; manage them through the cookie banner or your browser. Shopify’s cookie details are at shopify.com/legal/cookies.

Retention

Order records are retained for at least seven years to satisfy tax and device-traceability obligations. Marketing data is deleted on request. Analytics data is retained per Shopify’s defaults.

Your rights

Depending on where you live (including under the California Consumer Privacy Act and New York law), you may request access to, correction of, or deletion of your personal data, and may opt out of marketing at any time. Email info@novavasc.com; we respond within 30 days and may verify your identity first. We do not discriminate against you for exercising these rights.

Security

Checkout and account pages are served over TLS. Shopify is PCI-DSS Level 1 compliant. Internally, access to order data is limited to staff who need it to fulfil and support orders.

Children

The store is not directed to anyone under 18 and we do not knowingly collect their data.

Changes

We will post the revised date at the top of this page when the policy changes.

Contact