Introduction

This Privacy Policy (“Policy”) explains how Lumify MD, LLC (collectively, “Lumify” (“we,” “us,” or “our”), collects, uses, discloses, and protects your information when you use our website (“Website”), or any related services (collectively, the “Platform”).

Important Note

• Our Notice of Privacy Practices is a separate document governing how your protected health information (“PHI”) is used and disclosed for healthcare services, following the Health Insurance Portability and Accountability Act (“HIPAA”).

I. Your Information and How We Collect It

We collect various information from and about Platform users, including:

• Personal Information (PI): Identifies you, such as name, address, email, phone number, billing information, gender, occupation, and any information collected considered PI under applicable laws.
• Health Information: Includes clinical history, medical conditions, and communication with Lumify healthcare professionals.
• Device and Usage Information: Details about your internet connection, device used, and usage data (IP address, cookies, etc.).
• General Information: Interests, demographics, location, or inquiry-related information.

We collect this information through:

• Direct input from you.
• Automatic data tracking as you navigate the Platform.
• Third-party providers we work with (e.g., physicians, pharmacies).
• Social media accounts used to sign in.

II. How We Use Your Information

We may use your information for various purposes, including:

• Completing transactions and requests (e.g., payment processing, eligibility determination).
• Providing healthcare services, communication, and information.
• Account administration and order fulfillment for healthcare services.
• Platform operation, technical support, and improvement.
• Responding to inquiries and requests.
• Creating de-identified, non-personal information for analytics.
• Measuring communication effectiveness and providing relevant content.
• Understanding our audience and improving Platform safety and security.
• Designing, developing, and communicating features, products, and services (subject to consent).
• Notifying you about service or Platform changes.
• Enforcing this Policy and other agreements.
• Complying with applicable laws and regulations.

III. Disclosing Your Information

We may disclose your information as follows:

• For healthcare treatment, payment, or operations.
• With authorized individuals or as permitted by your consent.
• To service providers who assist us with Platform maintenance and improvement.
• To healthcare providers involved in your care.
• To Lumify affiliates and employees, or third-party service providers.
• To fulfill the purpose for which you provided the information.
• To credit card processors for payment processing.
• To comply with law enforcement or legal obligations.
• To protect Lumify, our customers, or others’ rights, property, or safety.
• For any purpose disclosed at the time of information collection or with your consent.
• In a business transfer, merger, consolidation, or asset sale.

IV. Your Options Regarding Information Use and Disclosure

We offer choices regarding your PI:

• Tracking Technologies: Set your browser to refuse or alert you about cookies. Disabling cookies may limit Platform functionality.
• Promotional Offers: Unsubscribe from emails by replying to “[email protected]” or clicking the unsubscribe link in the email.
• Mobile Alerts: Contact customer care to manage communication preferences.
• Social Media Sign-On: Be aware of potential information access by others using your social media account.

V. Data Security

We implement measures to secure your PI from unauthorized access, use, alteration, and disclosure. However, no internet transmission is completely secure.

VI. Third-Party Platforms

Our Platform may contain links to external websites. Lumify is not responsible for their privacy practices. Please review their policies before using them.

VII. No Services Under 18

Lumify does not knowingly provide services to minors under 18.

VIII. California Resident Privacy Rights (CCPA)

California residents have specific rights regarding their personal information under the California Consumer Privacy Act (“CCPA”). This section details how we handle your PI under the CCPA.

Your CCPA Rights:

• Right to Know: You have the right to request that we disclose to you:
  • The categories and specific pieces of personal information we collect, use, and disclose about you.
  • The categories of sources from which we collect your personal information.
  • The business purpose for collecting or selling your personal information.
  • The categories of third parties with whom we share your personal information.
  • The specific pieces of personal information we sold (as defined by the CCPA) about you in the past 12 months.

• Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions. We may deny your deletion request if the information is necessary for us to:
  • Complete the transaction for which the personal information was collected, provide a good or service requested by you, or fulfill a contract we have with you.
  • Detect security incidents, prevent fraudulent activity, or prosecute those responsible for such activities.
  • Debug products to identify and repair errors that impair existing intended functionality.
  • Exercise free speech rights or ensure the right of another consumer to exercise their right to free speech.
  • Comply with the California Electronic Communications Privacy Act (Cal. Civ. Code § 1798.80, subd. (b)).
  • Engage in scientific research or other research activities that benefit the public or comply with the law on research involving human subjects.
  • To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.
  • Comply with a legal obligation.

• Right to Opt-Out of Sale: We do not currently sell your personal information as defined by the CCPA. However, we provide you with the right to opt-out of any future sale (as defined by the CCPA) of your personal information. You can submit a request to opt-out by contacting us using the methods described in the “Contact Us” section below.

Exercising Your CCPA Rights

You can exercise your CCPA rights by submitting a request through one of the following methods:

• Email: [email protected]
• Phone Number: You can also submit a request by calling us at (561) 406-4607.
• Submitting a request through our Platform (this option is currently unavailable).

We will verify your request by asking you for specific pieces of information to confirm your identity. We endeavor to respond to your request within 45 days of receipt. We may extend this period by an additional 45 days if necessary, subject to the CCPA. We will disclose or delete your information free of charge.

Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

Shine the Light Request

California Civil Code Section 1798.83 permits California residents to request a list of all third parties to whom we disclosed certain categories of personal information during the preceding year for the third party’s direct marketing purposes. We do not currently share your personal information with third parties for their direct marketing purposes. However, you can submit a request to opt-out of any future sharing by contacting us using the methods described in the “Exercising Your CCPA Rights” section above.

IX. Changes to this Policy

We may update this Policy to reflect changes in practices or legal requirements. We will notify you of any material changes by posting the new Policy on this Platform.

X. Contact Us

If you have questions about this Policy, please contact us at:

• Email: [email protected]
• Phone: (561) 406-4607

XI. Entire Agreement

This Policy constitutes the entire agreement between you and Lumify regarding your use of the Platform and supersedes all prior or contemporaneous communications.

XII. Severability

If a provision of this Policy is found invalid or unenforceable, such provision will be struck and the remaining provisions will remain in effect.

XIII. Governing Law

This Policy shall be governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of law provisions.

XIV. Dispute Resolution

Any dispute arising under or related to this Policy will be settled by binding arbitration in accordance with the rules of the American Arbitration Association.

By using the Platform, you agree to this Policy.

This structure provides a basic framework for the remaining sections of your Privacy Policy. Remember to replace bracketed information with your specific details and consult with a legal professional to ensure compliance with all applicable laws and regulations.