A Human Beginning
Let’s be honest: most privacy policies read like they were written by robots for lawyers—not by humans for humans.
You’re not here because you enjoy parsing legalese. You’re here because you care about your data. You want to know:
Who sees it? What do they do with it? Can I trust them?
We get it. And we’re honored that you’d even consider trusting us with something as intimate as your health information.
So before we dive into the formal details, let’s say this plainly:
At The Omron, your privacy isn’t a compliance checkbox. It’s a covenant.
We don’t collect your data to sell ads, train AI models, or build shadow profiles. We collect only what’s necessary—to help you use our products safely, fulfill orders, and offer support when you need it. And even then, we treat every byte of information like it belongs to someone we love.
This policy is long—because transparency requires depth—but it’s written in plain English, with explanations, not just clauses. We’ll tell you what we do, why we do it, and how you stay in control.
If anything feels unclear, unfair, or overly technical, please reach out. We’re real people, and we’ll respond like one.
Now, let’s walk through this together—with care.
1. Who We Are (And Why That Matters)
The Omron is a small, independently operated company focused on personal health monitoring tools—primarily blood pressure devices designed for home use. We are not a subsidiary of a multinational corporation. We are not venture-backed. We are not harvesting data to “unlock value.”
We are clinicians, engineers, and caregivers who believe that health technology should empower—not exploit.
Because we’re small, every decision about your data is made by humans who understand its weight. There’s no algorithm quietly optimizing for engagement. No hidden data-sharing partnerships. Just a team committed to doing right by you.
That context matters—because how a company is structured directly shapes how it treats your privacy.
2. What This Policy Covers
This Privacy Policy applies to:
- Our website (including browsing, account creation, and purchases)
- Our physical products (when used with optional digital features)
- Our customer support interactions (email, phone, mail)
- Any paper-based journals or guides we provide
It does not cover:
- Third-party websites you visit after clicking external links (though we rarely include any)
- Data collected by shipping carriers, payment processors, or postal services
- Information you choose to share publicly (e.g., in community forums we don’t host)
We only speak for ourselves. We can’t control others—but we’ll always name them clearly when they’re involved.
3. The Core Principle: Minimalism by Design
We operate under a simple rule: Collect less. Protect fiercely. Delete when possible.
Unlike many tech companies that hoard data “just in case,” we ask: Do we truly need this to serve you?
If the answer is no, we don’t collect it.
For example:
- We don’t require an account to browse our site.
- We don’t track your behavior across the web.
- We don’t use cookies for advertising or profiling.
- We don’t store your credit card number after a transaction.
Our devices, by default, store readings locally—on the device itself. No cloud. No app. No account needed.
Only if you choose to engage with optional digital services (like email support or order tracking) do we collect limited personal information—and even then, only what’s essential.
This isn’t just policy. It’s philosophy.
4. What Information We Collect (And Why)
A. When You Visit Our Website
If you’re just reading, exploring, or researching, we collect almost nothing.
- Basic server logs: Like most websites, our server automatically records:
- Your IP address (temporarily, for security)
- Browser type and operating system
- Pages visited and time spent
- Referring site (if you came from a search engine)
But here’s the key: We do not link this data to your identity. We don’t use it to build profiles. We don’t share it with advertisers. We keep these logs for 30 days max—then delete them.
- Cookies: We use only two types:
- Essential cookies: To remember your shopping cart or language preference during a session. These expire when you close your browser.
- Analytics cookie (optional): We use a privacy-respecting analytics tool that anonymizes your IP and doesn’t track across sites. You can opt out at any time via a banner at the bottom of the page.
We do not use:
- Tracking pixels
- Third-party ad cookies
- Social media widgets that leak data
Why? Because your browsing habits are yours alone.
B. When You Make a Purchase
To fulfill your order, we need some basic information:
- Full name
- Shipping address
- Email address (for order confirmations and support)
- Payment details (processed securely by our payment partner—more below)
We do not store your full credit card number. It’s handled entirely by Stripe or PayPal—both PCI-DSS compliant services. We only retain the last four digits and card type for reference.
We also record:
- Product purchased
- Order date
- Shipping status
This helps us manage inventory, process returns, and assist you if there’s an issue.
C. When You Create an Account (Optional)
You don’t need an account to buy from us—but if you choose to create one, we store:
- Email address (as your login)
- Encrypted password
- Shipping addresses (so you don’t have to retype them)
- Order history
You can delete your account anytime. When you do, we remove all personal data within 7 days—except what we must keep for legal or tax purposes (like invoice records, which are anonymized).
D. When You Contact Support
If you email or call us, we keep a record of:
- Your message or call notes
- Your name and contact info
- Any product details you share (e.g., serial number, error description)
This helps us resolve your issue faster and avoid asking you to repeat yourself. These records are stored securely and deleted after 2 years unless you request earlier removal.
E. Device Data (Only If You Opt In)
Most Omron devices store readings locally on the unit itself. Nothing leaves the device unless you physically connect it to a computer or use a companion app—which we do not currently offer.
However, if we ever introduce optional digital features (like syncing to a secure portal), we will:
- Make it 100% opt-in
- Use end-to-end encryption
- Allow you to delete your data anytime
- Never use it for marketing or research without explicit consent
Until then, your readings stay with you—in your hands, in your home.
5. How We Use Your Information
We use your data for one overarching purpose: to serve you ethically and effectively.
More specifically:
To Fulfill Orders
- Process payments
- Ship products
- Handle returns or exchanges
- Provide warranty service
To Communicate With You
- Send order confirmations and shipping updates
- Respond to support requests
- Notify you of safety recalls (rare, but critical)
We do not send promotional emails unless you explicitly subscribe to our newsletter. Even then, you can unsubscribe with one click—and we won’t guilt-trip you.
To Improve Our Products & Services
- Analyze aggregate, anonymized trends (e.g., “30% of users in cold climates report cuff fit issues”)
- Fix bugs or design flaws based on support feedback
- Test new features with voluntary beta users
Crucially: We never use individual-level data for product development without consent. If we want to study how a specific user interacts with a device, we ask first.
To Comply With Legal Obligations
- Retain financial records as required by tax law (typically 7 years, but anonymized after 2)
- Respond to valid legal requests (e.g., court orders)—but only after careful review and, when possible, notifying you
We fight overly broad requests. Your data is not ours to give away lightly.
6. Who We Share Your Data With (Spoiler: Almost No One)
We believe sharing should be the exception, not the norm.
Here’s exactly who might see your data—and why:
Payment Processors
- Stripe or PayPal handle transactions. They receive only what’s needed to complete payment: card details, billing address, and order amount.
- We have data processing agreements with them requiring strong security and prohibiting resale.
Shipping Carriers
- USPS, UPS, or DHL receive your name and shipping address to deliver packages.
- We do not share your email or phone number unless required for delivery notifications (and you can opt out).
Customer Support Tools
- We use a secure helpdesk system (like Zendesk) to manage support tickets. It stores your messages and contact info—but is protected by encryption and access controls.
- Only authorized team members can view your data—and only when helping you.
Legal & Accounting Professionals
- Our accountant may access anonymized sales data for tax filing.
- Our lawyer may review data in response to a legal claim—but only under strict confidentiality.
We Do NOT Share With:
- Advertisers or data brokers
- Social media platforms
- Analytics firms (beyond anonymized, aggregated stats)
- Affiliates or “partners” for cross-promotion
- AI training datasets
Ever.
7. International Data Transfers
We are based in the United States, but we ship worldwide.
When you place an international order:
- Your shipping address is shared with the carrier in your country (as required for customs)
- Your payment info is processed in the U.S. or EU (depending on your card issuer)
We do not store your data on servers outside the U.S. unless legally required (e.g., for EU customers under GDPR, we use EU-based subprocessors where possible).
For users in the European Economic Area (EEA) or UK:
- We comply with GDPR
- We act as both data controller and processor
- You have full rights to access, correct, delete, or port your data
For users in California:
- We comply with CCPA/CPRA
- We do not “sell” or “share” your data as defined by the law
- You can opt out of any future data sharing (though none exists today)
We treat all users with the same standard of care—regardless of location.
8. How Long We Keep Your Data
We delete what we don’t need.
| Data Type | Retention Period | Reason |
|---|---|---|
| Server logs | 30 days | Security monitoring |
| Order records (personal) | 2 years | Warranty, returns, support |
| Order records (financial) | 7 years (anonymized after 2) | Tax/legal compliance |
| Support tickets | 2 years | Service continuity |
| Account data | Until deletion request | User convenience |
| Marketing subscriptions | Until unsubscribe | Legal requirement |
After retention periods expire, data is either:
- Securely deleted (digital)
- Shredded (paper)
- Anonymized beyond re-identification (for statistical use)
You can request early deletion anytime—just email us.
9. Your Rights Over Your Data
You are not powerless. You have real control.
Depending on your location, you may have the right to:
Access
Request a copy of all personal data we hold about you.
Correct
Update inaccurate or incomplete information (e.g., a changed address).
Delete
Ask us to erase your data—unless we must keep it for legal reasons.
Restrict Processing
Pause use of your data while a dispute is resolved.
Data Portability
Receive your data in a structured, machine-readable format (e.g., CSV).
Withdraw Consent
Opt out of optional data uses (like newsletter emails).
Object to Processing
Challenge uses you believe are unjustified.
To exercise any right, simply email us. We’ll respond within 30 days—usually much sooner. No forms. No hoops. Just human-to-human communication.
We’ll never charge you for making a request. And we’ll never penalize you for asserting your rights.
10. How We Protect Your Data
Security isn’t optional. It’s foundational.
Technical Measures
- All data in transit is encrypted (TLS 1.3)
- Passwords are hashed with bcrypt (we can’t see them)
- Devices use local storage—no cloud exposure
- Regular security audits and penetration testing
- Automatic software updates for any connected systems
Organizational Measures
- Staff training on privacy and phishing
- Strict access controls (least privilege principle)
- Confidentiality agreements for all team members
- No data access without a legitimate support or operational need
Physical Measures
- Paper records locked in fireproof cabinets
- Office access restricted to employees
- Devices wiped before disposal
We’ve never had a data breach. But if we ever do, we’ll notify affected users within 72 hours—and take full responsibility.
11. Children’s Privacy
Our products and site are not intended for children under 16.
We do not knowingly collect data from minors. If we discover we have, we’ll delete it immediately.
Parents: if you believe your child has interacted with us, contact us right away.
12. Changes to This Policy
We won’t change this lightly.
If we must update our Privacy Policy (due to new laws, product changes, or ethical growth), we will:
- Post the revised version here with a clear “Last Updated” date
- Summarize key changes in plain language
- Notify active users via email if the changes affect their rights
Your continued use means you accept the updates—but you can always stop using our services or request data deletion if you disagree.
We believe in evolving with integrity, not springing surprises.
13. Cookies and Tracking Technologies
As mentioned earlier, we use minimal cookies:
| Cookie Name | Purpose | Duration | Required? |
|---|---|---|---|
cart_session | Remembers items in your cart | Session only | Yes (for checkout) |
language_pref | Saves your language choice | 30 days | No |
analytics_opt_in | Records if you allow anonymized stats | 2 years | No |
You can manage preferences via our cookie banner or browser settings. Disabling essential cookies may prevent checkout—but won’t stop you from browsing.
We do not use:
- Fingerprinting
- Cross-site tracking
- Behavioral advertising
Your online movements are your own.
14. Email Communications
We send emails only when necessary or requested.
Transactional Emails
- Order confirmations
- Shipping updates
- Support replies
These are essential to service—you cannot opt out.
Marketing Emails
- New product announcements
- Seasonal wellness tips
Only if you subscribe. Unsubscribe anytime with one click.
We never buy email lists. We never share your address. We never track opens or clicks in a way that identifies you individually.
Our emails are sent via a trusted provider (like Mailchimp) with strict data safeguards.
15. Third-Party Links and Integrations
We rarely link to external sites. When we do (e.g., to a clinical guideline from the American Heart Association), it’s for your benefit—not for tracking.
We do not embed social media buttons (like Facebook “Share”) because they silently track you even if you don’t click.
If we ever integrate with third-party health platforms (e.g., Apple Health), it will be:
- Fully optional
- Clearly explained
- Requiring your explicit permission per connection
Until then, your data stays within our ecosystem—or better yet, in your hands.
16. Our Stance on AI and Automated Decision-Making
We do not use artificial intelligence to:
- Profile you
- Predict your health risks
- Make decisions about your care
- Personalize ads
Even if we develop smart features in the future, we will never let algorithms replace human judgment in health contexts.
Any automated processing (e.g., flagging irregular heartbeats on a device) is:
- Based on established medical guidelines
- Transparent in its logic
- Always reviewed by you—not acted upon autonomously
You are more than a data point. You are a person.
17. Contact Us—Really
If you have questions, concerns, or just want to talk about privacy over virtual tea, reach out.
Email us at privacy [at] theomron.com.
Write to us by post (address available upon request).
We’re not a faceless legal department. We’re Elena, Raj, Maya, and Thomas—the same people building the devices. We read every message.
You deserve clarity. You deserve respect. And you deserve to feel safe in your own data.
Thank you for trusting us with something so deeply personal.
With humility and vigilance,
The Team at The Omron
