Consumer Health Data Privacy Policy

Last Updated: February 17, 2026

Lume Labs owns and operates the websites located at lumebiosciences.com, which we refer to as the Platform. Your access to and use of the Platform, including any portion of it, and anything associated with it, including the content available on the Platform, which we refer to as Content, any products or services offered through the Platform or otherwise by Lume Labs, and any affiliated website, software, or application owned or operated by Lume Labs, are collectively referred to as the Service. The Service includes the Platform and the Content. Unless we expressly state otherwise, your use of the Service is governed by our Privacy Policy. Any capitalized terms used in this Consumer Health Data Privacy Policy that are not defined in our Privacy Policy or in this Consumer Health Data Privacy Policy have the meanings set forth in the Lume Labs Terms and Conditions.

This Consumer Health Data Privacy Policy applies only to the extent required by applicable state law and only with respect to consumer health data, which we refer to as Consumer Health Data, as that term is defined by applicable law. For clarity, this Consumer Health Data Privacy Policy does not apply to protected health information that is subject to the Health Insurance Portability and Accountability Act of 1996. This Consumer Health Data Privacy Policy supplements our general Privacy Policy. If there is any conflict between our Privacy Policy and this Consumer Health Data Privacy Policy, this Consumer Health Data Privacy Policy will apply to the extent it is consistent with applicable state law.

Collection of Consumer Health Data

The Consumer Health Data that we collect varies based on how you interact with us, which services you use, and the settings or selections you choose. We collect Consumer Health Data from multiple sources and through several methods in connection with your use of our services, including Consumer Health Data that you submit to us, Consumer Health Data that is collected automatically, Consumer Health Data that we receive from third party sources, and Consumer Health Data that we derive, infer, or generate from other information.

Consumer Health Data You Provide

We may collect Consumer Health Data that you provide to us:
1. Name and contact information includes your name, email address, telephone number, and your billing and physical addresses. 
2. Payment information includes your payment card number, financial account information, and other payment related details. 
3. Marketing information includes your preferences regarding marketing communications and information about your interactions with those communications.
4. Content includes photographs, videos, documents, and other files that you upload or submit through the Service, as well as email messages and the substance of other communications you send to us.

Consumer Health Data Collected Automatically

We use standard technical tools and tracking mechanisms to gather certain data when you access or use our services. Depending on the context, some of that data may qualify as Consumer Health Data. Identifiers and device details are automatically received by our systems, including your Internet Protocol address, device identifiers (such as a MAC address), device type, operating system, web browser, and other installed software details like version and language. Our services also place and read cookies and mobile identifiers. Location information includes approximate location data collected in connection with your use of our applications or online services. Activity and interaction information records how you engage with our websites and products, including referring URLs, pages viewed, time spent, and actions taken. In certain circumstances, this may indicate or be associated with browsing activity involving health-specific websites.

Consumer Health Data We Derive

In some cases, we develop Consumer Health Data based on other information we collect. This can include using automated tools or processes to produce insights about you, such as predicted preferences or other attributes.

Consumer Health Data From Third Parties

We may also receive the categories of Consumer Health Data described above from third party sources. Corporate affiliates within the Lume Labs family may provide data to us. Third party partners, such as social media platforms or other applications you link to our services, may share data. Co-branding and marketing partners include organizations with whom we provide joint offerings. Service providers include vendors that collect or share data as part of performing services on our behalf. Public sources include information made available through open government databases.

Use of Consumer Health Data

We use Consumer Health Data for the purposes described in this Consumer Health Data Privacy Policy and for any other purposes that we specifically describe to you at the time of collection or use.

Service Delivery

To make the Service available and to run our business operations. This may include monitoring and evaluating how the Service is used, diagnosing and fixing technical issues, enabling navigation and functionality within the Service, confirming your general location, billing and invoicing, processing payments, maintaining accounting records, administering and maintaining your account, protecting our networks and systems, identifying and preventing fraud or other unlawful activity, responding to requests and providing customer support, communicating with you about the Service, tailoring and personalizing the Service, verifying your identity, meeting legal and regulatory requirements, and exercising or defending our legal rights and remedies. Data used for this purpose may include contact information, payment information, content and files, location data, usage data, inferences, and Consumer Health Data.

Product Improvement, Development, and Research

To evaluate, build, test, and enhance the Service and any related content, functionality, features, products, or services made available through the Service. This also includes identifying or developing new products or services, and assessing traffic patterns and user interactions with the Service. Data used for this purpose may include contact information, payment information, content and files, usage data, inferences, location data, genetic data, and Consumer Health Data.

Aggregation, De-identification, and Anonymization

We may transform Consumer Health Data into aggregated, de-identified, or anonymized information by removing or modifying information that could reasonably identify you. We do not attempt to re-identify this information, except where applicable law permits or requires otherwise. We may use and disclose this information, including sharing it with third parties.

Additional Service Delivery Categories

For the service delivery purposes described above, we may use the following categories of Consumer Health Data: contact information, payment information, content and files, location data, usage data, inferences, government-issued identification, account access information, and Consumer Health Data.

Marketing

We may use Consumer Health Data to send you messages about our services and offerings, including announcements about new services, special offers, promotions, rewards programs, contests, events, and other updates. These communications may also include information about offerings from selected partners. Data used for this purpose may include contact information, demographic information, payment information, content and files, biometric information, identifiers and device information, location data, usage data, sensor data, inferences, and Consumer Health Data.

Sharing of Consumer Health Data

We may share Consumer Health Data, as that term is defined under applicable state law, when you direct or authorize us to do so, when sharing is needed to process a transaction or provide a service you have requested or approved, and as otherwise allowed or required by law.

Affiliates. We may permit our subsidiaries, affiliates, and other related entities to access Consumer Health Data, including when we use shared systems or when such access supports service operations and business functions. Affiliates with which we may share Consumer Health Data include Valiant Compounding Pharmacy LLC and Stripe LLC.

Legal and Law Enforcement. We may access, retain, and disclose Consumer Health Data when we determine it is reasonably necessary to comply with applicable law, to respond to lawful requests or legal process, including requests from law enforcement or other governmental authorities, or to protect the rights, property, or safety of our customers, Lume Labs, or others.

‍

Your Consumer Health Data Rights

Depending on where you live, state law may provide you with specific rights relating to your Consumer Health Data. The availability and scope of these rights can differ by state, and the exercise of a right may be subject to conditions or restrictions permitted by law, which may include a reasonable fee in certain circumstances. To submit a request to exercise any applicable rights, please visit www.privacy.lumebiosciences.com.

Withdraw Consent. If we collect or share your Consumer Health Data based on your consent, you may revoke that consent at any time for future collection or future sharing.

Right to Know and Right to Access. You may request that we confirm whether we have collected your Consumer Health Data and whether we have shared or sold it. You may also request access to the Consumer Health Data we have collected, shared, or sold, including requesting a copy of that information. In addition, you may request a list of the third parties, as defined by applicable state law, and affiliates to whom we have shared or sold your Consumer Health Data, along with related information that state law may require us to provide.

Correction. You may ask us to update or correct Consumer Health Data that you believe is inaccurate.

Deletion. You may request that we remove your Consumer Health Data.

Appeals. If we deny a request to exercise one of your rights, you may appeal that decision. We will provide instructions for submitting an appeal when we respond to your request.

To submit a Consumer Health Data rights request and exercise the rights described above, please visit www.privacy.lumebiosciences.com. We may take steps to confirm that you are the person making the request before we act on it. As part of that process, we may ask you to confirm information that we already maintain about you. If we are unable to verify your identity using the information in our records, we may request additional information, including a copy of government-issued identification. We will use any additional verification information only to verify your identity and to help protect against security incidents or fraud.

Certain Consumer Health Data is necessary for us to provide the Service. If you ask us to delete Consumer Health Data that we need to provide the Service, or if you withdraw consent for our future collection or sharing of Consumer Health Data that is required for the Service, we may be unable to provide the Service to you, or we may be unable to offer certain features or functionality.
‍

Changes to this Consumer Health Data Privacy Policy

We may update this Consumer Health Data Privacy Policy from time to time. When we make a material update, we will indicate that the policy has changed by revising the effective date and making the updated version available through the Service, or by using another method we consider appropriate. Unless we state otherwise when we post an update, revisions take effect when the updated policy is posted. Your continued use of the Service after the effective date of an updated policy means that the updated Consumer Health Data Privacy Policy governs your interactions with the Service going forward.

Contact Us

Questions about this Consumer Health Data Privacy Policy may be sent to us at hello@lumebiosciences.com.