Privacy Policy

Last Updated: December 3, 2025

This Privacy Policy describes how JoHat Services LLC (d/b/a Alpha Medical Care) ("we," "us," or "our") collects, uses, and shares your personal information when you visit or make a purchase from alphamedical.shop (the "Site").

1. Information We Collect

1.1 Information You Provide

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.

Device Information:

• Web browser type and version
• IP address
• Time zone settings
• Browser plug-in types and versions
• Operating system and platform
• Device identifiers

Order Information:

• Name
• Billing address
• Shipping address
• Email address
• Phone number
• Payment information (processed securely by our payment processors)
• Order history and purchase details

1.2 Information Collected Automatically

We automatically collect certain information when you visit our Site using cookies and similar technologies:

• Pages viewed and links clicked
• Products viewed and added to cart
• Time spent on pages
• Referring website addresses
• Search terms used

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill orders: Including payment processing, shipping, and order confirmations
• Communicate with you: Send order updates, respond to inquiries, and provide customer support
• Improve our Site: Analyze usage patterns, troubleshoot issues, and optimize user experience
• Marketing: Send promotional emails about new products, special offers, and other updates (with your consent where required)
• Prevent fraud: Screen orders for potential risk or fraud
• Comply with legal obligations: Meet tax, accounting, and other legal requirements

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information under the following legal bases:

• Contract Performance: To fulfill our contract with you (processing orders, providing customer service)
• Legitimate Interests: To improve our services, prevent fraud, and conduct marketing
• Consent: For marketing communications (where required by law)
• Legal Obligations: To comply with applicable laws and regulations

4. Sharing Your Information

We share your personal information with third parties to help us use your information as described above. We use:

Service Providers:

• Shopify: E-commerce platform provider (Shopify Privacy Policy)
• Payment Processors: Secure payment processing (Shopify Payments, credit card processors)
• Shipping Partners: Order fulfillment and delivery services
• Email Service Providers: Klaviyo for marketing emails (Klaviyo Privacy Policy)
• Analytics Providers: Google Analytics, Meta Pixel, TikTok Pixel for website analytics
• Customer Support: Tidio for live chat support

We may also share your information to comply with applicable laws, respond to legal requests, protect our rights, or prevent fraud.

5. Your Rights and Choices

5.1 General Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal exceptions)
• Restriction: Request we limit how we use your information
• Objection: Object to our processing of your information
• Data Portability: Receive your information in a structured, commonly used format
• Withdraw Consent: Withdraw consent for marketing communications at any time

5.2 Marketing Communications

You can opt out of marketing emails by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at contact@alphamedical.shop
• Adjusting your account settings (if you have an account)

6. California Consumer Privacy Act (CCPA) - California Residents

This section applies to California residents and describes your rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA").

6.1 Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

Category	Examples	Collected
A. Identifiers	Name, email address, postal address, phone number, IP address, device identifiers	✓ YES
B. Personal information (Cal. Civ. Code § 1798.80(e))	Name, address, telephone number, payment card information	✓ YES
C. Protected classification characteristics	Age, gender, medical conditions (if voluntarily provided)	✓ YES (limited)
D. Commercial information	Products purchased, order history, shopping behavior	✓ YES
E. Internet/network activity	Browsing history, search history, interaction with our Site	✓ YES
F. Geolocation data	Physical location (derived from IP address)	✓ YES
G. Sensory information	Audio, electronic, visual information	NO
H. Professional/employment information	Job title, employer information	NO
I. Non-public education information	Education records	NO
J. Inferences	Preferences, characteristics, behavior predictions	✓ YES
K. Sensitive personal information	Account login credentials, precise geolocation, health information	✓ YES (limited)

6.2 Sources of Personal Information

We collect personal information from the following sources:

• Directly from you: When you place an order, create an account, or contact us
• Automatically: Through cookies and tracking technologies when you use our Site
• Third parties: Social media platforms (if you interact with our ads), analytics providers, advertising networks

6.3 Business Purposes for Collection and Use

We collect and use personal information for the following business purposes:

• Fulfilling orders: Processing transactions, shipping products, customer service
• Marketing and advertising: Sending promotional emails, targeted advertising
• Analytics: Understanding customer behavior, improving our Site and products
• Security: Detecting and preventing fraud, protecting against malicious activity
• Compliance: Meeting legal and regulatory requirements
• Internal operations: Auditing, quality control, maintaining records

6.4 Categories of Third Parties We Share Information With

We share personal information with the following categories of third parties:

• Service providers: E-commerce platform, payment processors, shipping carriers, email service providers, analytics providers
• Advertising networks: Google Ads, Meta (Facebook/Instagram), TikTok
• Social media platforms: When you interact with our social media presence
• Government entities: When required by law or to protect our rights

6.5 Sale and Sharing of Personal Information

Sale of Personal Information: We do NOT sell your personal information in exchange for monetary compensation.

Sharing for Cross-Context Behavioral Advertising: We may "share" your personal information (as defined under CCPA) with advertising partners for cross-context behavioral advertising purposes. This includes:

• Identifiers (IP address, device ID, cookie IDs)
• Internet/network activity (pages viewed, products browsed)
• Inferences (shopping preferences, interests)

We share this information with: Google Ads, Meta (Facebook/Instagram), TikTok, and similar advertising platforms.

6.6 Your California Privacy Rights

As a California resident, you have the following rights:

1. Right to Know: You have the right to request that we disclose:

• Categories of personal information we collected about you
• Categories of sources from which we collected your information
• Our business purposes for collecting your information
• Categories of third parties we share your information with
• Specific pieces of personal information we collected about you

2. Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (e.g., completing transactions, legal compliance, fraud prevention).

3. Right to Correct: You have the right to request correction of inaccurate personal information.

4. Right to Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising.

5. Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to purposes necessary to perform our services.

6. Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights, including by:

• Denying goods or services
• Charging different prices or rates
• Providing a different level or quality of goods or services
• Suggesting you will receive different prices or quality of goods or services

6.7 How to Exercise Your California Rights

To exercise your rights under CCPA, you may:

Submit a Request:

• Email: contact@alphamedical.shop (Subject: "CCPA Privacy Request")
• Mail: JoHat Services LLC (d/b/a Alpha Medical Care), ATTN: Privacy Officer, 611 South DuPont Highway Suite 102, Dover, DE 19901
• Phone: Contact us through the email above to request a phone consultation

Opt-Out of Sale/Sharing: Visit our "Do Not Sell or Share My Personal Information" page or use the link in our website footer.

Verification Process: To protect your privacy, we will verify your identity before processing your request. We may ask you to:

• Provide your email address and order number (for customers)
• Confirm information we have on file
• Provide additional identifying information if necessary

Authorized Agents: You may designate an authorized agent to make a request on your behalf. The agent must:

• Provide written authorization signed by you
• Verify their own identity
• You may also need to verify your identity directly with us

Response Timeline: We will respond to verifiable requests within 45 days. If we need more time (up to 90 days total), we will inform you of the reason and extension period.

6.8 California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific Retention Periods:

• Order information: Retained for 7 years for tax, accounting, and legal compliance purposes
• Marketing data: Retained until you opt-out, unsubscribe, or request deletion
• Account information: Retained while your account is active or as needed to provide services to you
• Analytics data: Retained for 14-26 months (Google Analytics default retention period)
• Customer support records: Retained for 3 years after last interaction
• Legal requirements: Retained as required by applicable laws and regulations (e.g., warranty claims, tax records)

After the retention period expires, we will securely delete or anonymize your personal information. In some cases, we may retain anonymized data indefinitely for statistical analysis and business intelligence purposes.

You may request early deletion of your personal information at any time, subject to our legal obligations and legitimate business interests.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings. Note that disabling cookies may affect Site functionality.

8.1 Types of Cookies We Use

Necessary Cookies (Required):

• Shopify session cookies: Maintain your shopping cart and login session
• Security cookies: Prevent fraud, abuse, and unauthorized access
• Preference cookies: Remember your settings and choices
• Duration: Session-based or up to 30 days

Analytics Cookies (Optional - Requires Consent in GDPR Regions):

• Google Analytics (GA4): Traffic analysis, user behavior tracking, conversion measurement
• Google Tag Manager: Manage tracking tags and analytics tools
• Purpose: Help us understand how visitors use our Site to improve user experience
• Duration: 14-26 months

Marketing/Advertising Cookies (Optional - Requires Consent in GDPR Regions):

• Meta Pixel (Facebook/Instagram): Ad targeting, campaign measurement, lookalike audiences
• TikTok Pixel: TikTok advertising and campaign optimization
• Google Ads: Google advertising, remarketing, conversion tracking
• Purpose: Deliver personalized advertisements and measure ad campaign effectiveness
• Duration: Up to 24 months

8.2 Managing Cookie Preferences

You can control cookie preferences through:

• Cookie Banner: Use our cookie consent banner (appears for GDPR regions) to accept or reject non-essential cookies
• Browser Settings: Configure your browser to block or delete cookies (may impact site functionality)
• Opt-Out Tools: Use industry opt-out tools like DAA WebChoices or NAI Opt-Out
• CCPA Residents: Visit our "Do Not Sell or Share My Personal Information" page

8.3 Cookie Lifetime and Renewal

Cookies have different lifespans:

• Session cookies: Deleted when you close your browser
• Persistent cookies: Remain on your device until expiration date or manual deletion
• Renewal: Some cookies renew their expiration date with each visit

For residents of GDPR regions (European Economic Area, United Kingdom, Switzerland), we use our cookie consent banner to obtain your explicit consent before using non-essential cookies. Your consent is stored for 12 months and can be withdrawn at any time.

9. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Our Site does not currently respond to DNT signals because there is no industry standard for DNT compliance.

10. Children's Privacy

Our Site is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you are under 18, please do not use our Site or provide any personal information. If we learn we have collected information from a child under 18, we will delete it immediately.

11. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

12. International Transfers

Your information may be transferred to, and maintained on, servers located outside your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States and choose to provide information to us, please note that we transfer data to the United States.

If we transfer personal information from the European Economic Area or United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses or equivalent UK mechanisms.

13. Complaints and Disputes

If you have complaints about how we process your personal information, please contact us using the information below. Depending on your location, you may have the right to:

• EEA/UK residents: Lodge a complaint with your local data protection supervisory authority
• California residents: Contact the California Attorney General's office

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this page and update the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

For material changes, we will provide notice as required by applicable law (e.g., email notification, prominent notice on our Site).

15. Contact Information

If you have questions about this Privacy Policy, want to exercise your privacy rights, or need to contact our Data Protection Officer, please reach out to us:

Email: contact@alphamedical.shop
Subject Line: "Privacy Inquiry" or "CCPA Request"
Mail: JoHat Services LLC (d/b/a Alpha Medical Care)
ATTN: Privacy Officer
611 South DuPont Highway Suite 102
Dover, DE 19901
United States

For GDPR purposes: JoHat Services LLC (d/b/a Alpha Medical Care) is the data controller of your personal information.

Response Time: We will respond to all inquiries within 30 days (45 days for CCPA requests).