This Privacy Policy explains how Vessl Inventory, LLC (“Vessl,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the website at vesslorder.com and any related forms, communications, and services (the “Site”).
This Policy is part of, and incorporated into, our Terms and Conditions.
1. Who This Policy Covers
Vessl serves licensed healthcare facilities, physician-owned practices, office-based labs, ambulatory surgery centers, and the professionals and administrators who operate them. This Policy applies to information we collect from visitors to the Site and from individuals who contact us, request information or a quote, or engage with us in a business capacity.
The Site is directed to business users, not to consumers or patients. Even so, several state privacy laws treat business contact information as personal information, and we apply this Policy to that information as well.
2. Important Limits: No Patient Information
Do not send us protected health information. The Site is not designed to receive, and must not be used to transmit, individually identifiable patient information or protected health information (“PHI”) as defined under HIPAA.
Please do not include patient names, medical record numbers, dates of birth or service tied to an identifiable individual, images, or any other patient identifiers in any form field, email, attachment, or file you send us. If you do, we may delete it, and we have no obligation to retain or safeguard it as PHI.
3. Information We Collect
3.1 Information you give us
- Contact and professional details — your name, business email address, telephone number, job title or role, and the name, type, and location of your practice or facility.
- Inquiry content — what you tell us in a form, email, call, text message, or meeting, including your stated needs, timeline, and purchasing interests.
- Practice Data — operational information about your practice that you choose to share so we can prepare an analysis or quote, such as item usage, par levels, purchase history, current vendor pricing, contract status, and spend data. See Section 8.
- Credentialing information — licensure, facility, tax-exemption, or account-verification information we may need to confirm eligibility to purchase regulated products.
- Payment information — billing contact and address, and payment details submitted through our payment processor. See Section 9.
- Account information — if we make accounts available, your username, password, and account settings.
3.2 Information collected automatically
- Device and log data — IP address, browser type and version, operating system, device identifiers, referring and exit pages, and time stamps.
- Usage data — pages viewed, links clicked, time on page, scroll depth, forms started or submitted, and similar interaction data.
- Approximate location — derived from IP address, at the city or region level. We do not collect precise geolocation from your device.
- Email engagement — whether you opened an email we sent or clicked a link in it, where permitted.
3.3 Information from other sources
- Publicly available and professional sources — practice websites, professional directories, licensing databases, industry publications, and business social platforms.
- Business data providers — vendors that supply or enrich business contact and firmographic data, such as facility size, specialty, or procedure volume.
- Referrals and partners — colleagues, manufacturers, distributors, consultants, or other partners who refer you to us.
- Service providers — our analytics, email, hosting, CRM, and payment vendors, in connection with services they perform for us.
4. Cookies and Similar Technologies
We and our service providers use cookies, pixels, tags, and similar technologies on the Site. We use them for the following purposes:
| Category | What it does | Can you turn it off? |
|---|---|---|
| Strictly necessary | Enables core functions such as page delivery, security, load balancing, form submission, and fraud prevention. | No — the Site will not function properly without these. |
| Preferences | Remembers choices you make, such as a dismissed banner or a saved form field. | Yes — through your browser settings. |
| Analytics | Helps us understand how the Site is used so we can improve it, using Google Analytics 4. | Yes — see Section 12. |
Do Not Track and Global Privacy Control
Browsers vary in how they send “Do Not Track” signals, and there is no common standard for responding to them, so we do not currently respond to DNT signals. We do honor the Global Privacy Control (GPC) signal where required by applicable law, and treat it as a request to opt out of the sale or sharing of personal information from that browser.
5. How We Use Information
We use the information described above to:
- respond to your inquiry, answer questions, and provide requested information;
- prepare quotes, pricing analyses, savings estimates, and product recommendations for you;
- verify your professional or facility credentials and eligibility to purchase regulated products;
- process, fulfill, and support orders, and manage billing, collections, and returns;
- provide customer support and communicate about your inquiry, quote, order, or account;
- send marketing and educational communications where you have opted in, and manage your preferences;
- operate, secure, troubleshoot, analyze, and improve the Site and our products and services;
- create aggregated and de-identified statistics, benchmarks, and market analyses that do not identify you, your organization, or any individual;
- detect and prevent fraud, abuse, and security incidents;
- comply with legal, regulatory, tax, recordkeeping, and recall or field-action obligations; and
- establish, exercise, or defend legal claims.
6. How We Share Information
We do not sell your personal information. We disclose information only as described here:
- Service providers. Vendors that perform services for us — hosting, email delivery, CRM, analytics, payment processing, accounting, shipping, and professional services — and that are contractually limited to using the information for those services.
- Suppliers, manufacturers, and distributors. Where necessary to source, quote, fulfill, warranty, or support a product you have requested, or to comply with a recall or field action.
- Professional advisors. Our attorneys, accountants, auditors, and insurers, under duties of confidentiality.
- Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, including during diligence, subject to reasonable confidentiality protections.
- Legal and safety. Where we believe disclosure is required by law, subpoena, or legal process, or is reasonably necessary to enforce our agreements, protect the rights, property, or safety of Vessl or others, or report suspected unlawful activity.
- With your direction or consent. Including when you ask us to share information with a colleague, partner, or vendor.
We may also disclose aggregated or de-identified information that cannot reasonably be used to identify you, your organization, or any individual, for any lawful purpose.
7. We Do Not Sell Personal Information
We do not sell personal information for money, and we have not done so in the preceding twelve months.
We also do not share personal information for cross-context behavioral advertising. We do not run advertising or retargeting pixels on the Site, and we do not disclose personal information to advertising platforms. We do not knowingly sell or share the personal information of anyone under 16.
8. Practice Data
Practice Data — item usage, par levels, purchase history, vendor pricing, contract status, and spend data — is commercially sensitive, and we treat it that way.
As between you and Vessl, you own your Practice Data. We use it to respond to your inquiry, prepare analyses and quotes for you, and provide and support our services.
We may also use Practice Data to create aggregated and de-identified statistics and benchmarks — for example, typical pricing ranges across a product category. We will not attempt to re-identify de-identified data, and we will not publish or share any benchmark that identifies you, your organization, or your specific pricing or vendor terms.
We will not disclose identifiable Practice Data to your competitors, and we will not disclose it to any third party except as described in Section 6. If you ask us to delete your Practice Data, we will do so, subject to Section 10.
9. Payment Information
We do not currently accept payments through the Site. If we make payment available in future, card and bank payments will be handled by a third-party payment processor under its own terms and privacy policy, and we will update this Policy before doing so.
We do not collect or store full payment card numbers on our systems. We receive limited information from the processor, such as the last four digits of the card, card brand, expiration date, billing contact, and the result of the transaction, which we use for order processing, accounting, support, and fraud prevention.
10. How Long We Keep Information
We keep personal information only as long as we need it for the purposes described in this Policy, and then delete it or de-identify it. In deciding how long to keep information, we consider the amount and sensitivity of the data, the potential for harm from unauthorized use, the purposes for which we process it, and applicable legal requirements. As general guidance:
- Inquiry and lead information — kept while your inquiry is active and for a reasonable period afterward for follow-up, then deleted or archived, normally within 24 months of last contact.
- Marketing preferences and opt-outs — kept indefinitely, so that we can continue to honor your choice.
- Customer, order, and transaction records — kept for the term of the relationship and for as long as required by tax, accounting, warranty, product-tracking, and recall obligations, normally 7 years.
- Practice Data — kept while it is needed to serve you, and deleted or de-identified on request or when no longer needed.
- Site logs and analytics — kept for a limited period for security and performance purposes, normally 14 months.
We may retain information longer where necessary to comply with law, resolve disputes, or enforce our agreements.
11. How We Protect Information
We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, and loss. These include encryption of data in transit, access controls and authentication, limiting access to personnel who need it, vendor diligence and contractual protections, and periodic review of our practices.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send sensitive information — and never patient information — by unencrypted email.
12. Your Choices
- Marketing email. Use the unsubscribe link in any marketing message, or contact us at info@vesslorder.com. We may still send you messages about an active inquiry, quote, order, or account.
- Calls and text messages. Tell us during a call, reply STOP to a text message, or contact us at info@vesslorder.com.
- Cookies. Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies may prevent parts of the Site from working.
- Analytics. You can opt out of Google Analytics using the browser add-on at tools.google.com/dlpage/gaoptout.
- Global Privacy Control. We honor GPC signals where required by law.
- Access, correction, and deletion. You may request access to, correction of, or deletion of your personal information as described in Section 14.
13. State Privacy Rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Know and access — confirm whether we process your personal information and obtain a copy, including the categories we collect, the sources, the purposes, and the categories of recipients.
- Correct — request correction of inaccurate personal information.
- Delete — request deletion of personal information we hold about you.
- Portability — receive a copy in a portable, readily usable format, where technically feasible.
- Opt out — opt out of the sale or sharing of personal information, of targeted advertising, and of certain profiling.
- Limit sensitive information — limit our use of sensitive personal information. We do not collect sensitive personal information through the Site.
- Non-discrimination — not be denied service or charged a different price for exercising these rights.
- Appeal — if we decline a request, appeal that decision. Our response will tell you how.
California residents. California treats business contact information as personal information. The categories we collect are described in Section 3, our purposes in Section 5, and our disclosures in Section 6. We do not sell personal information as described in Section 7. You may designate an authorized agent to make a request on your behalf; we may ask the agent for proof of authorization and ask you to verify your identity directly.
These rights are subject to exceptions and verification requirements under applicable law. We will not discriminate against you for exercising them.
14. How to Submit a Request
Email info@vesslorder.com with the subject line “Privacy Request,” and tell us what you are requesting and the state you reside in. You may also write to us at the address in Section 20.
To protect your information, we will take reasonable steps to verify your identity before acting, which may mean asking you to confirm details we already hold or to respond from an email address associated with our records. We will respond within the time required by applicable law, generally within 45 days, and will tell you if we need more time.
15. Relationship to HIPAA
Vessl is not a HIPAA covered entity. In connection with the Site and the activities described in this Policy, Vessl does not act as a business associate of any covered entity, and we do not seek to receive PHI through the Site. See Section 2.
If a future engagement would require Vessl to create, receive, maintain, or transmit PHI on behalf of your organization, that arrangement would be governed by a separate written Business Associate Agreement. This Privacy Policy is not, and does not substitute for, a Business Associate Agreement.
16. Children
The Site is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us at info@vesslorder.com and we will delete it.
17. Third-Party Sites
The Site may link to websites we do not operate, including manufacturer, distributor, and social media sites. This Policy does not apply to those sites, and we are not responsible for their privacy practices. Review the privacy policy of any site you visit.
18. Users Outside the United States
Vessl operates in the United States, and the Site is intended for users in the United States. Information we collect is processed and stored in the United States, where privacy laws may differ from those in your jurisdiction. If you access the Site from outside the United States, you do so on your own initiative and are responsible for compliance with local law.
19. Changes to This Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and post the revised Policy on the Site. If the changes are material, we will provide additional notice, such as a notice on the Site or an email to the address associated with your inquiry or account. Your continued use of the Site after the effective date means you accept the updated Policy.
20. Contact Us
Questions, concerns, or requests regarding this Policy or your information:
Vessl Inventory, LLC
Attn: Privacy
7 Hidcote Circle
Durham, NC 27713
Email: info@vesslorder.com
Phone: (919) 666-7933