Privacy policy

Last updated: 5 October 2026

This policy explains what cpaphero Inc. ("cpaphero", "we", "us") collects when you use cpaphero.com, order from us or contact us, why we collect it, and what you can do about it. If anything here is unclear, email info@cpaphero.com.

Who we are

cpaphero Inc., 2015 N Forbes Blvd, Suite 101, Tucson, AZ 85745, United States. Phone 1-888-202-4376. We are the controller of the personal information described here.

We sell CPAP supplies to businesses: home medical equipment providers, pharmacies, sleep labs and distributors. We don't sell to consumers through this site.

What we collect

  • Business contact details. Name, job title, company, email, phone and business address, when you open an account, request a quote or catalog, fill in a form, call or email us.
  • Account and order records. What your business ordered, shipping and billing addresses, invoices and payment history.
  • Payment details. Card payments for invoices go through PayTrace, our payment processor. We never see or store your full card number.
  • Website usage. Pages viewed, the site that referred you, browser and device type, and an approximate location from your IP address. Some of this is collected with cookies (see "Cookies" below).
  • Dealer map listings. Our "find our products" map shows the business name, address and website of providers that carry our products. If your business is listed and you want the listing changed or removed, email us.

Why we use it

  • To set up and manage your account, take and ship orders, invoice you and collect payment.
  • To answer questions, send quotes and provide product support.
  • To send business contacts product and pricing updates. Every email has an unsubscribe link.
  • To keep the site secure, fix problems and understand which pages are useful.
  • To keep the tax and accounting records the law requires.

Legal basis (UK and EEA)

If you are in the UK or the European Economic Area, we rely on these legal bases under the UK GDPR and EU GDPR:

  • Contract: accounts, orders, shipping, invoicing and support.
  • Legal obligation: tax and accounting records.
  • Legitimate interests: marketing to business contacts, site security and fraud prevention. You can object at any time.
  • Consent: analytics and marketing cookies, and loading the Google dealer map. You can withdraw consent at any time.

Cookies

Visitors in the UK and the EEA see a cookie banner, and nothing beyond essential cookies runs until you choose. Elsewhere, analytics and marketing cookies run by default.

  • Essential (Shopify): keep the cart, checkout and account login working and protect the site from abuse. These can't be switched off.
  • Analytics and marketing (Shopify, HubSpot): count visits, show which pages are used, and connect form submissions and emails to your business contact record.
  • Dealer map (ProloFinder, Google Maps, Google Analytics): the map is provided by Google Maps. It loads only when your cookie choice allows it or you click "Show the map". Loading it sends your IP address to Google.

To change your choice, clear the cookies for cpaphero.com in your browser. The banner will show again on your next visit.

Who we share it with

We don't sell personal information and we don't share it for other companies' advertising. We share it only with providers that run parts of our business for us, under contracts that limit how they use it:

  • Shopify (website and store hosting)
  • HubSpot (customer relationship management, forms and email)
  • PayTrace (card payment processing)
  • FedEx (shipping)
  • Microsoft (email and our accounting system)
  • ProloFinder and Google (the dealer map)

We also share information with companies in our corporate group that make and ship our products, and with professional advisers or authorities when the law requires it.

International transfers

We are based in the United States, and our providers store data in the United States and other countries. When personal information from the UK or EEA is transferred, we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses (with the UK Addendum), or the EU-US Data Privacy Framework and its UK extension where a provider is certified.

How long we keep it

  • Account, order and invoice records: while your account is active, then for as long as tax and accounting law requires.
  • Marketing contact details: until you unsubscribe or object.
  • Form submissions and support emails: as long as needed to deal with your request and any follow-up.

Your rights

You can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. You can also withdraw consent you've given. Email info@cpaphero.com and we'll respond within one month. We may need to confirm who you are first.

If you're in the UK, you can complain to the Information Commissioner's Office (ico.org.uk). If you're in the EEA, you can complain to the data protection authority where you live or work. We'd appreciate the chance to sort it out with you first.

Residents of some US states have similar rights to access, correct and delete their information. Email us and we'll handle the request under the law that applies to you.

Security

We use access controls and encrypted connections, and we limit access to the people who need it. No system is perfectly secure, so if you think your account has been compromised, call or email us straight away.

Children

This site is for businesses. We don't knowingly collect information from anyone under 16.

Changes

When we change this policy we'll update the date at the top. If a change is significant, we'll tell account holders by email.

Contact

cpaphero Inc., 2015 N Forbes Blvd, Suite 101, Tucson, AZ 85745, United States
info@cpaphero.com · 1-888-202-4376