Privacy Policy

This Privacy Policy explains how Good Shepherd Health Corporation, doing business as Good Shepherd Stores ("we," "us"), collects, uses, shares, and retains information in connection with the store.goodshepherdrx.com website and related services (the "Site").

1. Categories of Information We Collect

• Account information such as name, business name, role, and login credentials.
• Contact information such as email, phone number, and business address.
• Quote information including products requested, quantities, project details, and preferences.
• Order information including purchases, shipping and billing addresses, and order history.
• Payment information handled by third-party payment processors; full card information is not stored in the storefront database.
• Financing inquiry information submitted for referral to third-party financing providers.
• Uploaded documents that you attach to quotes, applications, or support tickets.
• Website activity such as pages viewed, referring URLs, and interactions.
• Device information such as browser type, operating system, and general location derived from IP.
• Cookie data as described below.
• Communication preferences such as newsletter subscriptions and category interests.
• Customer support data including the content of your inquiries and our responses.

2. Sources of Information

We collect information directly from you when you create an account, submit a quote or order, request financing, subscribe to communications, or contact support. We also collect information automatically through cookies, log files, and analytics providers, and from service providers acting on our behalf.

3. Purposes of Processing

• To operate the Site and provide accounts, quotes, orders, and support.
• To process payments, verify credit, and provide invoicing.
• To coordinate shipping, freight, delivery, and installation.
• To refer financing inquiries to third-party financing providers.
• To send transactional communications and, with consent, marketing communications.
• To secure the Site, prevent fraud, and comply with law.
• To improve products, services, and site performance.

4. Service Providers

We share information with service providers who help us operate the business, including:

• Payment processors for card, ACH, and other payment methods.
• Analytics providers to measure site usage and improve the Site.
• Advertising providers, only where an advertising program is active and disclosed.
• Shipping vendors and freight carriers for order fulfillment.
• Installation providers for scheduled installation projects.
• Financing providers for financing inquiries you initiate.
• Cloud, hosting, and communication providers that support the Site.

Service providers are permitted to use information only to provide services to us.

5. Data Retention

We retain information for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type.

6. Security Practices

We use administrative, technical, and physical safeguards designed to protect information, including encrypted data transmission, role-based access controls, and processor-hosted payment handling. No system is fully secure, and we cannot guarantee absolute security.

7. Consumer Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal information, to opt out of certain processing, and to appeal decisions. To exercise these rights, contact us using the details below.

8. Cookie Choices

The Site uses cookies and similar technologies for essential functionality, analytics, and (where applicable) marketing. You may control cookies through your browser settings. Disabling certain cookies may affect site functionality.

9. Do Not Sell or Share

We do not sell personal information for money. Where applicable law treats certain cross-context advertising activities as "sharing," you may opt out by contacting us using the details below.

10. Global Privacy Control

Where required, we honor recognized universal opt-out signals such as Global Privacy Control (GPC) when transmitted by your browser.

11. Children's Privacy

The Site is directed to businesses and is not intended for children under 16. We do not knowingly collect personal information from children.

12. Policy Updates

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the current version.

13. Contact