Privacy Policy
Effective Date: June 1st, 2025
This Privacy Policy describes how MedShift, LLC collects and uses the Personal Data we receive about you, as well as your rights in relation to that Personal Data, when you visit our Website or purchase our Goods or use our Services.
Article 1 — Definitions
a) Applicable Website: refers to any website owned or operated by MedShift, LLC (“Website”), including any corresponding mobile application.
b) Effective Date: the date this Privacy Policy comes into force.
c) Parties: the data controller, MedShift, LLC (“Data Controller”), and you, the user.
d) Data Controller: the publisher, owner, and operator of the Website, responsible for the collection of information described herein.
e) You: the user of the Website who agrees to this Privacy Policy.
f) Goods: any goods we make available for sale on the Website.
g) Services: any services we make available for sale on the Website.
h) Personal Data: data we obtain from you that is capable of identifying you in any manner.
Article 2 — General Information
This Privacy Policy describes how we collect and use the Personal Data we receive about you, and your rights in relation to it. It does not cover information received through sources other than our Website, and does not apply to any linked websites or applications. By continuing to use our Website, you acknowledge that you have reviewed this Privacy Policy and consent to it. If you do not agree, you agree to immediately cease use of our Website.
Article 3 — Contact and Data Protection Officer
The Party responsible for processing your personal data is MedShift, LLC, which may be contacted at:
it@medshift.com
328 W Carson Blvd, Charlotte, NC 28203
The Data Protection Officer is Adam Walsh, who may be contacted at it@medshift.com.
Article 4 — Location
Data processing activities take place in the United States, outside the European Economic Area. Data may be transferred to companies within the United States, but only in a manner that complies with the EU’s General Data Protection Regulation (GDPR). Processing takes place in North Carolina, USA.
Article 5 — Modifications and Revisions
We reserve the right to modify, revise, or amend this Privacy Policy at any time. If we do, we will notify and obtain your consent to the change in processing. Unless we specifically obtain your consent, changes will only impact information collected on or after the date of the change. It is also your responsibility to periodically check this page for any modification.
Article 6 — The Personal Data We Receive From You
Depending on how you use our Website, different types of Personal Data are collected:
a) Registered users: during registration we collect data you voluntarily disclose, including name, email, phone number, and addresses.
b) Unregistered users: may be subject to passive data collection through cookies, IP address, location, and browser data.
c) All users: passive data collection applies to all visitors.
d) Sales & billing information: credit, billing, and related information needed to process purchases.
e) Related entities: we may share Personal Data with parent companies, subsidiaries, or affiliates that agree to our privacy standards.
f) Email marketing: collected only through your voluntary opt-in.
g) User experience: information that helps us improve the Website, Goods, and Services.
h) Content interaction: data collected when you comment on content (e.g., username or email).
i) Combined or aggregated information: may be combined to better serve you; aggregated data shared with others contains no Personal Data.
Article 7 — The Personal Data We Receive Automatically
We may collect information through automatic tracking systems such as cookies — small strings of text that store information about your preferences and device to make browsing easier and more personalized. Cookies do not record Personal Data. We use technical cookies (necessary for navigation), third-party cookies (e.g., analytics and advertising), and profiling cookies (for which we obtain explicit consent). You can manage or disable cookies through your browser settings, though this may limit access to parts of the site. Like all websites, we also use log files that store automatic information such as IP address, browser and device parameters, ISP, date and time of visit, referral and exit pages, and number of clicks — processed in aggregate to verify correct functioning and for security.
Article 8 — Third Parties
We may use Third-Party Service Providers to help with information storage, usage tracking, hosting, and order fulfillment, and we may allow third parties to advertise on the Website. We only share your Personal Data with a provider that agrees to our privacy standards. Your Personal Data will not be sold or transferred to other third parties without your approval, except to protect rights, property, or safety, or as required by law.
Article 9 — Social Network Plugins
This Website incorporates plugins and buttons for social networks to allow easy sharing of content. These plugins are programmed not to set cookies on page access; cookies may be set if you voluntarily use a plugin. Collection and use of information via plugins is governed by the respective privacy policies of each social network (Facebook, Twitter, Pinterest, LinkedIn, and others).
Article 10 — How Personal Data Is Stored
We use secure physical and digital systems to store your Personal Data and protect it against unauthorized access, disclosure, or destruction. No system involving internet transmission or electronic storage is completely secure, but we take all reasonable steps to protect your data. Your Personal Data is retained for the duration of your relationship with us and deleted upon request. In the event of a breach, you will be notified within a reasonable time frame, no later than two weeks.
Article 11 — Purposes of Processing of Personal Data
We primarily use your Personal Data to provide a better experience and the services or information you request. Identifying Personal Data may be used for: improving your user experience; communicating about your account; marketing and advertising (including via email); fulfilling purchases; providing customer service; and advising you about updates to the Website.
Article 12 — Disclosure of Personal Data
Although our policy is to maintain the privacy of your Personal Data, we may disclose it where reasonable in our sole discretion, including: to satisfy laws or regulations; to respond to legal process such as subpoenas or court orders; to bring legal action against a user who violated the law or our terms; as necessary for the operation of our Website; to cooperate with a lawful investigation; or if we suspect fraudulent activity.
Article 13 — Public Information
We may allow users to post content or information publicly on our Website, such as photographs, status updates, blogs, or articles. Any such information should be considered entirely public, and we do not purport to maintain the privacy of such public information.
Article 14 — Opting Out of Transmittals From Us
From time to time we may send informational or marketing communications. To opt out, contact it@medshift.com or click the opt-out link at the bottom of any such communication. Even if you opt out, you may still receive information specifically about your use of the Website or your account.
Article 15 — Modifying, Deleting, and Accessing Your Information
If you wish to modify, delete, or access any information we have about you, you may do so from your account settings page.
Article 16 — Acceptance of Risk
By continuing to use our Website, you accept that no transmission of information via the internet is completely secure. We do not guarantee the security of any information you provide, and you transmit such information at your own risk.
Article 17 — Your Rights
You have the right to: be informed about the processing of your Personal Data; access your Personal Data; update or correct it; port it; oppose or limit its processing; request that we stop processing and delete it; block any processing in violation of applicable law; and launch a complaint with the FTC or applicable data protection authority. These rights can be exercised by contacting us at the information listed in this Privacy Policy.
Article 18 — Contact Information
If you have questions about this Privacy Policy or how we collect information, or would like to launch a complaint, contact us at it@medshift.com.
Article 19 — Google Services
Google Workspace OAuth: if you authenticate with a Google Workspace account, we request non-sensitive data to verify your email, fetch your profile, and authenticate you to the proper account. Google Analytics (Google LLC): we use Google Analytics with cookies to understand how users interact with our Website; you can opt out via a browser plug-in. Google Maps: our Site uses the Maps API to display locations; technical data may be transmitted to Google. YouTube: our Site sometimes displays YouTube videos; you can prevent data transmission by not clicking embedded videos.
Article 20 — Data Retention, Storage, and Security
MedShift retains your information for as long as your account is active or as reasonably necessary to provide our products and services, comply with legal obligations, resolve disputes, and enforce agreements. We employ industry-standard security measures, though no method of online transmission is entirely secure. For users authenticating with Google, we do not share your Google User data with third parties except as necessary to provide our services or as required by law.
Article 21 — SMS Messages
We may share Personal Data with third parties that help provide the messaging service, including platform providers and phone companies. We will not share your opt-in to an SMS campaign with a third party for unrelated purposes. We may disclose Personal Data to affiliates or subsidiaries, whose use will be subject to this Policy; text messaging originator opt-in data and consent will not be shared with any third parties.
Article 22 — Shopify Apps
Velocity collects data through Shopify APIs to calculate commissions, including the store currency code, products in opted-in collections (names and images), products on orders, order line-item totals, and customer address (zip code) to determine the correct rep. Velocity does not collect information from the merchant that is not voluntarily provided, and does not collect information directly from a merchant’s customers. We do not share or sell this information; it is stored solely for the merchant’s use until the app is uninstalled.
Article 23 — MedShift Data Subject Access Requests (DSAR/SAR)
Subject access requests can be submitted at the form provided by MedShift (https://forms.gle/U5ZHc6tgDLzyz6mk6).
Article 24 — Cookie Policy
MedShift’s Cookie Policy can be viewed at this URL.