Privacy Policy
Effective date: March 3, 2026
Med to Tech ("we," "us," "our") is operated by Tech First Ventures LLC. This policy describes how we collect, use, and protect your personal information when you use medtotech.com (the "Site").
What we collect
Information you provide
- Email address — when you subscribe to our mailing list.
- Name — if you provide it on the confirmation page (optional).
- Messages — if you contact us via email or form.
Information collected automatically
- IP address hash — we store a one-way cryptographic hash of your IP address for abuse prevention and consent logging. We do not store your raw IP address.
- User agent string — browser and device information, stored with consent events.
- Cloudflare analytics — page views, country-level location, and performance metrics collected by Cloudflare. This data is aggregated and not linked to individuals.
How we use your information
- To send you emails you've signed up for (and nothing else).
- To respond to messages you send us.
- To maintain a consent audit log as required by law.
- To protect the Site against abuse.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Third-party services
We use the following services to operate the Site:
- Cloudflare (DNS, hosting, analytics, bot protection) — Cloudflare Privacy Policy
- Resend (email delivery) — Resend Privacy Policy
- Google Fonts (typography) — Google Privacy Policy
Data storage and security
Your data is stored in Cloudflare D1, a serverless database hosted on Cloudflare's global network. All data is encrypted in transit (HTTPS) and at rest. Access to the database is restricted to authorized personnel only.
Consent and double opt-in
When you subscribe to our mailing list, we use a double opt-in process: you enter your email, and we send a confirmation link. Your subscription is not active until you click that link. We log all consent events (subscription, confirmation, unsubscription) with timestamps and hashed IP addresses for compliance purposes.
Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data ("right to be forgotten").
- Export your data in a portable format.
- Unsubscribe from emails at any time using the link in every email we send.
- Withdraw consent at any time.
To exercise any of these rights, email us at privacy@medtotech.com. We will respond within 30 days.
GDPR (European Economic Area)
If you are in the EEA, our legal basis for processing your data is your explicit consent (double opt-in). You have all rights listed above under Articles 15–22 of the GDPR. Our data controller is Tech First Ventures LLC.
CCPA (California)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To make a request, email privacy@medtotech.com.
Cookies
The Site uses essential cookies required for security (Cloudflare bot protection). We do not use tracking cookies or advertising cookies. If we add analytics or marketing cookies in the future, we will update this policy and implement a cookie consent banner.
Data retention
We retain your email address and subscription data for as long as your subscription is active. If you unsubscribe, we retain a minimal record (email hash, consent events) for legal compliance. Consent audit logs are never deleted.
Children's privacy
The Site is not directed at anyone under 18. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email to active subscribers. The effective date at the top of this page reflects the most recent revision.
Contact
For privacy-related questions or requests:
privacy@medtotech.com
Tech First Ventures LLC
United States