Privacy
Policy

Effective date: June 11, 2026  ·  Last updated: June 11, 2026

1. Overview

3D Orthotics (“3D Orthotics,” “we,” “us,” or “our”) is a federally registered medical device company that provides HIPAA-aligned digital orthotic scanning for U.S. Department of Veterans Affairs (VA) and Department of Defense (DoD) healthcare facilities through our AccuScan DP program. This Privacy Policy explains how we handle information collected through this website and describes, at a high level, how patient information is protected within our clinical scanning workflow.

This policy applies to 3DOrthotics.com and the services described on it. It does not change or replace any Business Associate Agreement (BAA), contract, or data-handling agreement we have entered into with a healthcare facility or government customer; where such an agreement applies, its terms govern.

2. Information we collect from website visitors

This website is intentionally minimal in the data it collects:

• No web forms. We do not collect personal information through online forms on this site. To contact us, you use your own email client (via our published email addresses) or telephone.
• Information you choose to send us. If you email or call us, we receive the information you provide (such as your name, facility, role, and the content of your message) so we can respond.
• Standard server and log data. Like most websites, our hosting infrastructure may automatically record technical information such as IP address, browser type, referring page, and timestamps for security, reliability, and diagnostic purposes.

3. Patient health information and de-identification

This website does not collect, store, or transmit patient health information. Patient data is handled only within our clinical AccuScan DP workflow at participating facilities, not through this website.

Within that clinical workflow, our model is built around de-identification:

• The patient’s identity remains within the facility’s own systems. Identifying information is not part of what is transmitted to us for fabrication.
• Scan data is de-identified before transmission, consistent with the HIPAA “Safe Harbor” standard (45 CFR § 164.514(b)(2)). What we receive is the foot scan together with the prescription and accommodations the provider selects, not the patient’s name, date of birth, medical record number, or other direct identifiers.
• Where 3D Orthotics acts as a Business Associate of a covered entity, we do so under a Business Associate Agreement and handle any protected health information in accordance with HIPAA and the terms of that agreement.

If you are a veteran or patient with a question about your specific health information or an order, please contact your treating facility directly, as they are the custodian of your medical record.

4. How we use information

We use the limited information described above to:

• Respond to inquiries and provide the products, services, and support requested;
• Fulfill and coordinate orthotic orders with participating facilities and our authorized fabrication partner;
• Operate, secure, maintain, and improve this website and our services; and
• Comply with legal, regulatory, contractual, and government-procurement obligations.

5. How we share information

We do not sell personal information, and we do not share it for third-party advertising. We share information only as needed to operate, and only with appropriate safeguards:

• Authorized fabrication partner. De-identified scan and order information is shared with our authorized fabrication partner solely to manufacture and deliver the orthotic. Such partners are bound by confidentiality and, where applicable, Business Associate Agreements.
• Service providers. We use vetted infrastructure providers (for example, secure hosting infrastructure) that process information on our behalf under contractual and, where applicable, HIPAA obligations.
• Legal and regulatory. We may disclose information where required by law, regulation, legal process, or a lawful government request.

6. Cookies and tracking

This website does not use third-party advertising or cross-site tracking cookies. We do not run advertising networks or sell visitor data. Any storage used is limited to what is necessary for the site to function. Our pages embed a video hosted by a third party (YouTube); if you play that video, the third-party provider may collect information in accordance with its own privacy policy.

7. Data security

We use administrative, technical, and physical safeguards designed to protect information in our care. Within our clinical workflow these include encryption of data in transit and at rest, access controls, and HIPAA-aligned operational practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data retention

We retain information only as long as necessary to fulfill the purposes described in this policy, to provide our services, and to meet legal, contractual, and government-records obligations, after which it is deleted or de-identified. Specific retention periods for clinical data are governed by the applicable facility agreement and Business Associate Agreement.

9. Your choices and rights

You may contact us at any time using the details in Section 12 to ask about the information we hold from your correspondence with us, or to request that we update or delete it, subject to our legal and contractual obligations. Requests concerning a patient medical record should be directed to the treating facility, which is the record custodian.

10. Children’s privacy

This website is directed to healthcare professionals, facilities, and adult patients. It is not intended for children under 13, and we do not knowingly collect personal information from children through this site.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected on this page, and your continued use of the website after an update constitutes acceptance of the revised policy.

12. Contact us

Questions about this Privacy Policy or our data practices can be directed to:

3D Orthotics
3901 W. Van Buren St., Suite 210/220
Phoenix, AZ 85009
Phone: 844-FOOT-911
Email: PatientCare@3DOrthotics.com

This Privacy Policy is provided for general informational purposes and does not constitute legal advice. See also our Terms of Service.