Legal
Privacy Policy
Effective date: [to be set]
This policy explains how VIPOK Inc. (“VIPOK”, “we”) collects, uses and shares personal information through this website and the VIPOK doctor portal. Contact us at customer_service@vipok.com or [mailing address].
Information we collect
- Inquiries: the name, email, role, practice or company, country and message you send through the contact form.
- Doctor accounts: your email, password (stored only in hashed form by our sign-in provider), name, professional credentials, license number and issuing state or country, NPI number if you give it, and practice details.
- Orders (planned): what you order and where it ships. Orders identify patients only by your own reference number. Please do not send us patient names or other patient health information.
- Technical information: our hosting provider records standard server logs, such as IP address, browser type and pages requested. The site loads fonts from Google Fonts and scripts from cdnjs (Cloudflare), which receive your IP address when your browser requests them. We do not use advertising cookies. [Confirm whether any analytics will be used.]
How we use it
To answer inquiries; to verify practitioner licenses with the issuing licensing boards and, for US practitioners, the NPPES NPI Registry; to run the doctor portal, certification and orders; to keep the site secure; and to meet legal and regulatory obligations, including medical device reporting.
How we share it
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only with service providers that run the site for us (hosting, sign-in and database, email delivery) [list providers]; with authorized VIPOK distributors when needed to fulfill an order in your region [confirm]; when the law requires it; or as part of a merger or sale of the business.
How long we keep it
[VIPOK to set retention periods, for example for inquiries, rejected applications, closed accounts and order records.]
Your rights and choices
You can ask to see, correct or delete your personal information, and close your doctor account, by emailing us. Depending on where you live (for example California or other US states, the EU, Taiwan, Malaysia or mainland China), you may have additional rights under local law. We will respond within the time the law requires and will not treat you differently for using these rights.
Patient health information
This site is not designed to receive patient health information. Please don’t send it through forms or email. [Counsel to confirm VIPOK’s status under HIPAA.]
Children
This site is intended for eye care practitioners and adults, including parents. It is not directed to children under 13, and we do not knowingly collect personal information from them.
Security and international transfers
We use reasonable safeguards, but no method of transmission or storage is completely secure. Information is processed in the United States [confirm], which may have different data protection rules than your country.
Changes
We will post any changes here and update the effective date.