Privacy

This policy covers information collected by Lumbee Advanced Medical Supply LLC (“Lumbee Advanced Medical Supply”, “we”) through lam.supply, the customer portal, our order, quote, sourcing and contact forms, and our phone and email interactions with customers. It is written for the organizations and individuals who buy from us. It does not cover the practices of manufacturers, carriers or other companies whose sites we link to.

• Account and organization information. Name, work email, phone, job title, organization name and type, addresses, tax-exemption certificates, licensure details for restricted items, and credit-application information for accounts that request terms.
• Order, quote and sourcing details. The items, quantities, prices, ship-to and bill-to addresses, purchase-order numbers, and the files or descriptions you send with a quote request, RFQ or Find It For Me request.
• Messages. What you send through the contact form, by email or by phone, and our replies.
• Browser storage. Your cart and unfinished form drafts, kept in this browser’s local storage so they survive a page reload. Saved products for signed-in customers live on the account, not only in the browser. See Cookies and browser storage.
• Technical logs. Standard server and security logs — IP address, browser type, pages requested and timestamps — used to keep the site running and secure.
• No protected health information. This site does not collect patient charts, diagnoses, treatment notes, or other PHI. An order carries the buying organization’s ship-to, the catalog items, quantities, and business contact details — not a patient record.

When this site is connected to the live service, the same kinds of records listed above are stored on our servers so the portal and operations console work on every device:

• Accounts. Email, a hashed password, optional authenticator enrollment for operations staff, and the organization or staff role attached to the sign-in.
• Transactional email. A notification queue of messages we send (order received, quote ready, invoice issued, and the same templates) and whether the provider accepted them.
• Audit log. An append-only record of who changed what — orders, quotes, inventory, settings — used for accountability, not advertising.
• Uploads you send. Files attached to a quote, sourcing request, tax-exemption certificate, or vendor document (PDF, spreadsheet, or image), held in private storage and issued as a time-limited download link.
• Payment identifiers. A customer id and payment-intent id from the payment provider so we can match a charge to an order. Card numbers never land here.

Card and ACH payments, including government purchase cards, are processed by our payment provider. Card numbers and bank details are entered into and stored by the provider, not on our systems; we receive a confirmation and a truncated reference we use to match payments to orders. Purchase-order and net-terms accounts are invoiced, and the invoice history is kept as part of the account.

• To fulfil orders, prepare quotes, source items, ship, invoice and provide support.
• To verify tax-exempt status and the licensure required for restricted items.
• To communicate about orders, quotes, backorders, returns and account matters.
• To meet legal, tax, accounting and procurement record-keeping obligations, including those that come with public-sector sales.
• To keep the site secure, diagnose problems and improve how it works.

We do not use your information for advertising networks, and we send commercial email only to customers and people who ask to hear from us; every such message includes a way to stop them.

We do not sell personal information, and we do not share it with third parties for their own marketing. We share information only as needed to do business with you:

• With carriers, to deliver your order (name, address, phone, and for freight a delivery contact).
• With our payment provider, to process payments.
• With manufacturers and vendors, when an item ships directly from them or when a warranty claim, recall or documentation request requires it.
• With professional advisers — accountants, lawyers, insurers — under confidentiality.
• When required by law, a court, a regulator, or the terms of a government contract, or to protect the rights and safety of our customers, our staff and ourselves.

The storefront keeps your cart and unfinished form drafts in this browser’s local storage under a key for this site. That is what lets a cart survive a reload. It stays on your device; clearing your browser’s site data removes it. Signing in to the customer portal or operations console keeps a short-lived session so the service knows who you are until you sign out.

We do not use third-party advertising or tracking cookies. If we adopt analytics tooling, it will be described here and configured to avoid collecting more than page-level usage.

Order, quote, invoice and payment records are kept for as long as tax, accounting and procurement rules require, which for many records is several years after the transaction. Account information is kept while the account is active and for a reasonable period afterwards in case of reorders, returns or warranty claims. Contact-form messages are kept as long as they are needed to resolve the matter and for a reasonable period afterwards. Technical logs are kept for a limited time for security purposes.

You may ask us what information we hold about you, ask us to correct it, ask us to delete it where we are not required to keep it, or ask us to stop sending commercial email. Send requests to support@lam.supply or call (910) 736-5696. We verify that a request comes from the account holder or an authorized person before acting on it, and we respond within the time the applicable law allows. Depending on where you live you may have additional rights under state privacy law; we honour them.

We use administrative, technical and physical safeguards appropriate to the information we hold — access limited to staff who need it, multi-factor authentication for operations accounts, encrypted connections, and a payment provider that handles card data so we do not. No system is perfectly secure; if a breach affects your information we will notify you as the law requires.

This site sells to organizations and adults. It is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.

When this policy changes, the date at the top of this page changes with it. Material changes that affect how we use information already collected are communicated to account holders by email.