Trust & Security
This page is maintained by Inox Medical to answer common security and privacy questions about our storefront. It is editable content authored by us, not an independent certification or audit.
Hosting & platform
The Inox Medical storefront is built and hosted on the Lovable platform, which runs on managed edge and cloud infrastructure. All traffic is served exclusively over HTTPS, and our custom domain (inoxmedical.com) is protected by a TLS certificate managed by the platform. Describing platform capabilities here is not a claim of independent certification.
Payments
Card payments are processed by our payment provider on their own PCI-compliant infrastructure. Inox Medical never sees or stores full card numbers, CVV codes, or bank credentials — that data is submitted directly to the processor from your browser.
Accounts & authentication
Customer and admin accounts are managed by our backend authentication service. Passwords are stored as salted hashes by the auth provider; we do not have access to plaintext passwords. Administrative areas are protected by an authenticated, role-gated layout, and privileged actions are validated server-side rather than relying on the browser.
Data we collect
When you place an order or request a quote, we collect the information you provide: name, email, shipping/billing address, phone number, institution (if applicable), and the contents of your order. We use this information to fulfill orders, provide support, send transactional emails, and meet tax and accounting obligations.
We also collect basic technical data (such as IP address, browser, and pages visited) to operate the site, prevent abuse, and improve the experience.
Subprocessors & integrations
We rely on a small set of vendors to run the store, including our hosting platform, our e-commerce backend (Shopify), our payment processor, and our transactional email provider. These vendors process data on our behalf under their own security and compliance programs.
Data retention & deletion
Order and invoice records are retained as long as required for tax, accounting, and warranty purposes. You may request a copy or deletion of your personal data by emailing us at hello@inoxmedical.com; we will honor verified requests where permitted by law.
Reporting a security issue
If you believe you've found a security vulnerability affecting Inox Medical or our customers, please email hello@inoxmedical.com with details and steps to reproduce. Please do not publicly disclose the issue until we've had a reasonable opportunity to investigate and remediate.
Shared responsibility
Security is a shared responsibility between our platform vendors, Inox Medical, and you as a customer. We recommend using a strong, unique password for your account and keeping your devices and browser up to date.
Questions? Reach us via our contact page.
