LactaSync – Privacy Policy

1.1 Business-to-Business Scope: LactaSync operates strictly as a business-to-business (B2B) software and administrative platform. Our services are tailored for lactation consultants, medical equipment manufacturers, healthcare facility representatives, and industry professionals.

1.2 NO Health or Medical Data Collected: We DO NOT collect, store, process, or request Protected Health Information (PHI), medical records, clinical notes, patient details, or personal health condition data. Please do not submit any medical, clinical, or patient health information through our forms, schedulers, chat interfaces, or virtual meetings.

Because we interact exclusively with professionals and business entities, we collect limited categories of information necessary for commercial operations:

2.1 Business Contact Information: Name and professional title; business or organization name; professional email address (e.g., info@mail.lactasync.com); business telephone number; mailing/billing address.

2.2 Account & Transaction Information: Login credentials (usernames and encrypted passwords) for platform access; transaction details, equipment order history, and subscription metadata; payment card details (processed directly and securely by third-party payment processors; LactaSync does not store full payment card numbers).

2.3 Technical & Usage Information: IP address, browser type, operating system, and device identifier; referrals, page views, clickstream data, form conversion metadata, and session history.

We and our service providers utilize standard web technologies—including cookies, web beacons, local storage, and tracking scripts—to deliver functional website features, run web applications, maintain user authentication, and gather platform analytics.

3.1 Operational & Tech Stack Technologies: GoHighLevel (GHL) uses functional cookies and local storage to manage page sessions, form step persistence, scheduling availability, and funnel performance tracking. Google Workspace & Google Analytics are utilized for web analytics, performance optimization, and spam protection (e.g., reCAPTCHA). Namecheap & Domain Infrastructure uses security and routing headers/cookies to ensure safe data transport (SSL/HTTPS). Vibe Power Apps employs session tokens and local application storage to execute web application workflows and user state management.

3.2 Managing Cookies: You can adjust your web browser settings to reject or delete cookies. However, disabling essential functional cookies may affect the performance of platform features (such as appointment scheduling or account logins).

We use collected information solely for professional and administrative business purposes, including to: facilitate B2B meeting scheduling, demonstrations, and platform onboarding; provide access to web applications, user portals, and training resources; process B2B equipment transactions, invoices, and payment authorizations; respond to business inquiries sent to info@mail.lactasync.com; monitor and maintain platform security, prevent fraud, and verify identity; send operational announcements, account notices, and marketing updates (with opt-out controls provided).

We do not sell, rent, or trade personal or business contact data. We share information only under the following circumstances:

5.1 Service Providers: We share data with vetted third-party service providers who assist in operating our platform infrastructure (including CRM/funnel hosting, web app runtime environments, cloud storage, payment processing, and email transmission). These providers are bound by strict confidentiality and security obligations.

5.2 Compliance with Laws: We may disclose information if required to do so by applicable law, court order, regulatory subpoena, or governmental request originating in the State of California or federal jurisdiction.

5.3 Business Transfers: In the event of a merger, acquisition, corporate reorganization, or asset sale involving LactaSync, business contact data may be transferred as part of the commercial assets.

If you reside in California and interact with us in a professional or commercial capacity, you have rights regarding your personal information under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA): Right to Know / Access — the right to request information regarding the categories and specific pieces of personal information we have collected about you; Right to Delete — the right to request deletion of your personal contact data, subject to legal and transactional retention exceptions; Right to Correct — the right to request correction of inaccurate personal information; Right to Opt-Out — we do not sell or share personal information for cross-context behavioral advertising; Non-Discrimination — we will not discriminate against you for exercising any of your privacy rights. To exercise your California privacy rights, please submit a request to info@mail.lactasync.com.

We maintain reasonable physical, administrative, and technical safeguards designed to protect personal and business information against unauthorized access, destruction, loss, or disclosure. We retain business contact and transactional data for as long as necessary to fulfill the operational purposes described in this policy or as required by law.

Our website or web applications may contain links to external third-party websites or services. LactaSync is not responsible for the privacy practices, content, or policies of third parties. We encourage you to review the privacy policies of any third-party service you visit.

We reserve the right to modify this Privacy Policy at any time. Any changes will be published on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.