Privacy Policy

Shanghai CareFix Medical Instrument Co., Ltd (referred to as "CareFix", "we", "us", or "our") is a leading ISO 13485-certified orthopedic implant manufacturer based in Shanghai, China. We specialize in the R&D, manufacturing, and global supply of advanced external fixators, locking plate systems, intramedullary nails, spinal fixation devices, and precision surgical instruments. We are fully committed to respecting and protecting the privacy of our global partners, hospital procurement managers, orthopedic distributors, healthcare professionals, and website visitors.

This Privacy Policy provides a detailed explanation of how personal and commercial business information is collected, processed, maintained, and safeguarded when navigating our official website or initiating procurement inquiries. By accessing our portal, you acknowledge the privacy practices outlined below.

1. Fundamental Principles of Data Protection

CareFix operates under rigorous quality management and regulatory compliance protocols aligned with global medical device industry standards. In handling user and corporate inquiry data, we strictly uphold the following core tenets:

• Data Ownership & Autonomy: Your corporate and personal information belongs solely to your organization. We collect data exclusively for operational evaluation, procurement facilitation, and communication purposes.
• Data Minimization: We restrict data collection to the minimum required to fulfill technical consultations, compliance verifications, and international shipping logistics.
• Institutional Security: Advanced technical safeguards and strict access controls are deployed to protect your business records from unauthorized access, disclosure, modification, or destruction.
• Regulatory Transparency: We maintain complete transparency regarding data usage and ensure adherence to international privacy standards applicable to cross-border B2B transactions.

2. Scope & Categories of Information Collected

To deliver seamless medical procurement support and technical assistance, we collect information through voluntary submissions and operational interactions on our website.

A. Corporate Procurement & Contact Details

When requesting product quotes, CE/ISO documentation, or technical specifications, we may collect the following details:

• Full name, official job title, and professional department.
• Corporate organization name, registered hospital/company address, and country of operation.
• Commercial communication credentials, including official business email address, corporate telephone number, or direct WhatsApp number.
• Product inquiries, medical device specifications, surgical application requirements, or regulatory compliance requests.

B. Technical & System Usage Information

To optimize platform performance, technical cybersecurity, and user navigation for our international visitors, system logs automatically record standard technical data:

• Browser type, language preferences, operating system details, and screen resolution.
• IP address, regional domain location, and network access routing.
• Page navigation history, visit durations, and resource download metrics.

3. Lawful Purposes for Data Processing

CareFix processes collected data exclusively for legitimate commercial, legal, and operational objectives, including:

• Processing B2B Inquiries & Quotations: Responding promptly to pricing requests, OEM/ODM inquiries, product catalog requests, and distribution agreement discussions.
• Verification & Regulatory Compliance: Verifying hospital procurement credentials, distribution authorizations, and regulatory compliance documents required under medical device distribution laws.
• Supply Chain & Order Fulfillment: Facilitating international export documentation, customs processing, freight logistics, and post-sale technical support.
• Platform Maintenance & Fraud Prevention: Monitoring website performance, ensuring IT system security, preventing unauthorized access, and detecting fraudulent activities.

4. Cross-Border Data Transfer & International Logistics

As a global supplier exporting orthopedic medical systems to over 32 countries, CareFix operates central servers and management systems in Shanghai, China. To process international procurement requests, your submitted inquiry data may be transferred to and maintained on secure servers in China or secure cloud infrastructure supporting our global distribution operations.

Whenever cross-border transfers occur, CareFix applies robust technical encryption and administrative procedures to ensure that your business information receives a level of protection consistent with internationally accepted data privacy guidelines.

5. Information Sharing & Third-Party Restrictions

CareFix does not sell, rent, or trade your corporate or personal data to third-party marketing firms under any circumstances. Information is disclosed strictly on a need-to-know basis under the following limited conditions:

• Authorized Service Providers: Trusted third-party logistics companies, customs brokers, and IT hosting providers operating under binding confidentiality agreements to fulfill your order requests.
• Legal & Regulatory Mandatory Disclosures: When legally mandated by enforceable court orders, government authorities, or international regulatory bodies overseeing medical device safety.

6. Data Security Measures & Technical Safeguards

In alignment with our ISO 13485 quality management philosophy, CareFix implements rigorous technical and organizational security controls to protect information assets. Web interactions are protected using SSL/TLS encryption protocols, and internal databases are protected behind firewalls with restricted user permissions.

While we apply industry-standard security protocols, no internet transmission method can be guaranteed as completely immune to electronic risk. We continuously evaluate and enhance our cybersecurity infrastructure to safeguard commercial data.

7. Rights of Overseas Buyers & Data Control

Regardless of your geographic location, CareFix respects your rights to manage your professional data. You may exercise the following rights by submitting a formal request to our compliance department:

• Access & Rectification: Request access to stored business records or ask for corrections to inaccurate contact or institutional details.
• Erasure & Withdrawal: Request the deletion of your personal contact data from our active customer relationship management system, subject to legally mandated financial or regulatory record retention requirements.
• Communication Choice: Opt out of receiving non-transactional corporate newsletters or product update announcements at any time.

8. Updates to This Privacy Policy

CareFix reserves the right to revise this Privacy Policy periodically to reflect technological advancements, operational changes, or updates in international medical device data laws. Material changes will be posted on this page with an updated effective date.

9. Contact Information & Corporate Compliance

For inquiries, feedback, or compliance requests regarding our data privacy practices, global procurement partners may contact our corporate headquarters directly:

Corporate Entity: Shanghai CareFix Medical Instrument Co., Ltd
Factory Address: No. 31, Lane 1515, Rongle East Road, Songjiang District, Shanghai, China
Official Hotline: +86 400 098 2859
Compliance Email: [email protected]