Privacy Policy

Effective Date: 01-02-2026

Baron DME is committed to protecting your privacy and safeguarding the personal and health information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect your information in connection with our medical supply services and website operations. We comply with all applicable data protection laws, including the Health Insurance Portability and Accountability Act (“HIPAA”), where applicable.


1. Information We Collect

We may collect personal information directly from you or automatically through your use of our website. This information may include, but is not limited to:

  • Contact information (name, mailing address, phone number, and email address)

  • Billing and payment details

  • Account credentials (if you register on our platform)

  • Health-related information necessary to fulfill supply orders or verify medical requirements (Protected Health Information or “PHI”)

  • Technical and usage data, such as IP address, browser type, device information, and browsing activity collected through cookies


2. Use of Information

We use the information we collect for legitimate business and operational purposes, including:

  • Processing and fulfilling product orders

  • Managing customer accounts and providing support services

  • Communicating order updates, service-related notices, or promotional information

  • Complying with legal, regulatory, and contractual obligations

  • Improving website performance, functionality, and user experience

Any PHI collected or processed is used strictly in accordance with HIPAA and applicable privacy laws.


3. HIPAA Compliance

When health information is provided, Baron DME complies with HIPAA Privacy and Security Rules. We implement appropriate administrative, physical, and technical safeguards to protect PHI from unauthorized access, use, alteration, or disclosure. Employees with access to PHI receive training aligned with HIPAA compliance standards.


4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance functionality, analyze website traffic, and improve your browsing experience. Cookies may store preferences or session-related information to make navigation easier. You may disable cookies through your browser settings; however, some website features may not function properly as a result.


5. Data Retention

We retain personal and health-related information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws and regulations. Retention periods vary based on the nature of the data, legal obligations, and business requirements. When information is no longer needed, it is securely deleted or anonymized.


6. Information Sharing

We may share your personal or health information with:

  • Trusted service providers involved in payment processing, order fulfillment, delivery, or technical support (subject to confidentiality obligations)

  • Government authorities or law enforcement agencies when required by law

  • Business partners only when necessary for legitimate business purposes and in compliance with applicable privacy regulations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.


7. Data Security

We use industry-standard security measures, including encryption, secure servers, and restricted access controls, to protect your information. While we take reasonable steps to safeguard data, no method of transmission or storage is completely secure.


8. Limitation of Liability

While Baron DME makes reasonable efforts to protect your personal and medical information, we cannot guarantee absolute security. To the fullest extent permitted by law, Baron DME shall not be liable for any indirect, incidental, or consequential damages resulting from unauthorized access, data breaches, or circumstances beyond our reasonable control.


9. Your Rights

Subject to applicable laws, you have the right to request access to, correction of, or deletion of your personal information. To exercise these rights or to ask questions about our data practices, please contact us using the information provided below.


10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business practices. Any updates will be posted on this page with a revised effective date. Continued use of our website after changes are posted constitutes acceptance of the updated Privacy Policy.