California Consumer Privacy Act (CCPA) Policy

California Consumer Privacy Act (CCPA/CPRA) Policy

Effective Date: 04/12/2026

Introduction

At CPAPCloud.com ("we," "our," or "us"), we are committed to protecting the privacy and security of your personal information. This policy describes the rights of California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and explains how we collect, use, and safeguard personal information.

1. Information We Collect

We may collect the following categories of personal information:

• Identifiers: Name, email address, mailing address, phone number, account information
• Commercial Information: Records of products or services purchased, obtained, or considered
• Internet Activity: Browsing history, search history, and interactions with our website
• Geolocation Data: Approximate location based on IP address
• Payment Information: Credit/debit card details and billing information

Sensitive Personal Information

We may collect sensitive personal information, including:

• Health-related information (such as sleep apnea diagnosis or prescription details)
• Insurance and Medicare-related information
• Payment and financial details

We collect this information only as necessary to provide medical equipment, process transactions, and comply with legal and regulatory requirements. We do not use sensitive personal information for purposes beyond those permitted by law.

2. How We Collect Information

We collect personal information directly from you when you:

• Create an account
• Place an order
• Submit insurance or prescription information
• Contact us for support
• Use or interact with our website

 

3. Use of Personal Information

We use personal information to:

• Provide, manage, and improve our products and services
• Process transactions and fulfill orders
• Verify insurance and comply with Medicare requirements
• Respond to inquiries and provide customer support
• Send communications, including marketing (where permitted)
• Maintain website security and functionality
• Comply with legal and regulatory obligations

 

4. Sharing of Personal Information

We may share personal information with:

• Service Providers: Payment processors, shipping providers, IT/hosting services, customer support platforms, and analytics providers
• Healthcare & Insurance Partners: As necessary to process orders, prescriptions, and Medicare or insurance claims
• Legal Authorities: When required by law, subpoena, or regulatory obligations
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell or share your personal information for cross-context behavioral advertising.

5. Data Retention

We retain medical records and transaction data for a minimum of 7 years to comply with Medicare and federal record-keeping requirements.to:

• Provide services and fulfill transactions
• Comply with legal, regulatory, and Medicare recordkeeping requirements
• Resolve disputes and enforce agreements

 

6. Your California Privacy Rights

If you are a California resident, you have the following rights:

• Right to Know: Request details about the personal information we collect, use, or disclose
• Right to Delete: Request deletion of your personal information, subject to legal exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit Use of Sensitive Personal Information: Request limitations on certain uses of sensitive data
• Right to Opt-Out: Request to opt out of the sale or sharing of personal information (we do not sell or share your data)
• Right to Non-Discrimination: You will not be discriminated against for exercising your rights

 

7. How to Exercise Your Rights

To submit a request, contact us:

• Email: policy@cpapcloud.com
• Phone: 818-875-2020
• Mail: 1516 N. San Fernando Blvd. #101, Burbank, CA 91504

We will verify your identity before processing your request, which may include matching information you provide with information already on file. We will respond within 45 days as required by law.

8. Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We may require written authorization and identity verification before processing such requests.

9. HIPAA Notice

Certain health and medical information we collect may be considered Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). In such cases, that information is governed by HIPAA and not by the CCPA/CPRA to the extent applicable.

10. Changes to This Policy

We may update this policy from time to time. Updates will be posted on this page with a revised “Effective Date.”

11. Contact Us

If you have any questions about this policy or our privacy practices, please contact us:

• Email: policy@cpapcloud.com
• Phone: 818-875-2020
• Mail: 1516 N. San Fernando Blvd. #101, Burbank, CA 91504