Trust & Security

The Inox Medical storefront is built and hosted on the Lovable platform, which runs on managed edge and cloud infrastructure. All traffic is served exclusively over HTTPS, and our custom domain (inoxmedical.com) is protected by a TLS certificate managed by the platform. Describing platform capabilities here is not a claim of independent certification.

Card payments are processed by our payment provider on their own PCI-compliant infrastructure. Inox Medical never sees or stores full card numbers, CVV codes, or bank credentials — that data is submitted directly to the processor from your browser.

Customer and admin accounts are managed by our backend authentication service. Passwords are stored as salted hashes by the auth provider; we do not have access to plaintext passwords. Administrative areas are protected by an authenticated, role-gated layout, and privileged actions are validated server-side rather than relying on the browser.

When you place an order or request a quote, we collect the information you provide: name, email, shipping/billing address, phone number, institution (if applicable), and the contents of your order. We use this information to fulfill orders, provide support, send transactional emails, and meet tax and accounting obligations.

We also collect basic technical data (such as IP address, browser, and pages visited) to operate the site, prevent abuse, and improve the experience.

We use Google measurement tools, including Google Analytics 4 and Google Ads, to understand how visitors use our site and to measure quote requests and orders.

These tools may collect usage information, such as pages visited, actions taken on the site, and device and browser information. When you submit a quote or order form, we may also use the contact details you provide in that form, such as name, email, phone, and institution, to measure whether a quote request or order was completed.

We use this information to understand site performance, improve our site and service, and measure advertising effectiveness. We do not use health information for measurement or advertising.

You can manage cookies in your browser settings. You can also use the Google Analytics opt-out browser add-on and your Google Ads settings to control advertising measurement. To learn how Google uses data when you use partner sites or apps, see Google's policy page.

If you have questions, contact us at hello@inoxmedical.com.

We rely on a small set of vendors to run the store, including our hosting platform, our e-commerce backend (Shopify), our payment processor, and our transactional email provider. These vendors process data on our behalf under their own security and compliance programs.

Order and invoice records are retained as long as required for tax, accounting, and warranty purposes. You may request a copy or deletion of your personal data by emailing us at hello@inoxmedical.com; we will honor verified requests where permitted by law.

If you believe you've found a security vulnerability affecting Inox Medical or our customers, please email hello@inoxmedical.com with details and steps to reproduce. Please do not publicly disclose the issue until we've had a reasonable opportunity to investigate and remediate.

Security is a shared responsibility between our platform vendors, Inox Medical, and you as a customer. We recommend using a strong, unique password for your account and keeping your devices and browser up to date.