Privacy Policy

Introduction

G&C Medical Technology (“we,” “us,” or “our”) operates its business-to-business (B2B) digital platforms and website (collectively, the “Platform”), which support
GPO member onboarding, product information, demand forecasting, orderingand procurement coordination.

This Platform is intended for use by authorized representatives of healthcare institutions and GPO member organizations. While certain orders may be placed
online, payment processing, invoicing, and settlement may occur offline or pursuant to separate contractual arrangements.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Platform.

Information We Collect

We collect information necessary to provide and operate the Platform:

Information You Provide to Us:

Account and Transaction Information:

  • Shipping and delivery contact details
  • Login credentials and account identifiers (e.g., GPO-associated member ID)
  • Order information, including products ordered, quantities, order history, shipping status, and fulfillment details
  • Billing and invoicing information necessary to support invoice-based transactions
  • Shipping and delivery contact details

Information Collected Automatically:

Technical Data: Internet Protocol (IP) address, browser type, operating system, access times, pages viewed, and referring website addresses.
Cookies and Similar Technologies: We use strictly necessary cookies to maintain your login session and platform security. We do not use non-essential cookies for advertising or cross-site tracking. You can manage cookie preferences through your browser settings, but disabling necessary cookies may impair Platform functionality.

No Patient or Clinical Data

The Platform is intended solely for business, procurement, and supply chain purposes. We do not collect, store, or process patient health information (PHI), medical records, or other individually identifiable clinical data. The Platform is not intended for use in connection with patient diagnosis or treatment decisions.

How We Use Your Information

We use the information we collect for the following business purposes:

  • To verify your identity and authorization as a GPO Member.
  • To process, aggregate, and analyze the demand forecasts you submit for supply chain planning.
  • To communicate with you regarding your forecasts, respond to inquiries, provide support, and send important service notices.
  • To maintain, secure, and improve the Platform, including analyzing usage trends.
  • To comply with applicable U.S. federal and state laws, regulations, or legal processes.
  • To support order fulfillment, invoicing, shipping, returns, and related customer service activities.

 

How We Share and Disclose Information

We do not and will not sell your personal information to third parties for their own marketing purposes. We share information only in the following limited circumstances:

· With Service Providers: We share necessary information with trusted vendors who assist us in platform hosting, data analysis, and IT services under strict contractual obligations.
· For Legal Compliance: We may disclose information if required by law, such as to comply with a subpoena or similar legal process, or to protect the rights, property, or safety of our users or the public.
· Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.

Your Privacy Rights

Rights You May Have

· Right to Know/Access: Request to know what personal information we have collected about you.
· Right to Correction: Request correction of inaccurate personal information.
· Right to Deletion: Request deletion of your personal information, subject to certain exceptions.
· Right to Opt-Out: Opt-out of the “sale” or “sharing” of your personal information (as defined by laws like the California CCPA/CPRA). Please note that our Platform does not engage in such activities. You may also have the right to opt-out of targeted advertising or profiling.
· Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

How to Exercise Your Rights

To submit a verifiable request to exercise your rights, please contact us using the information in the “Contact Us” section below. We will need to verify your identity (typically by confirming your GPO contract details) before processing your request. We aim to respond within 45 days of receipt.

Data Security and Retention

We implement reasonable administrative, technical, and physical safeguards designed to protect your information. However, no electronic transmission or storage is 100% secure.

We retain your information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law (e.g., for tax, accounting, or contractual obligations).

Children’s Privacy

Our Platform is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware of such collection, we will take steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. The updated version will be indicated by the “Last Updated” date at the top. We encourage you to review this policy regularly. Material changes will be communicated through the Platform or via email.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:G&C Medical Technology Privacy Office
Email: sales@gcmti.com
Mailing Address:1775 Tysons Blvd, 5th Floor, Tysons VA 22102