Privacy Policy
Last updated: July 1, 2026
LumeraMD (LumeraMD, we, us, or our) respects your privacy and is committed to protecting the personal and health information you share with us. This Privacy Policy explains what information we collect, how we use and disclose it, and the choices you have. It applies to our website, our online consultation and intake services, and related communications (collectively, the Services).
By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Services.
1. Information we collect
We collect information you provide directly and information generated automatically when you use the Services.
- Account and contact information: name, email address, phone number, shipping and billing address, and date of birth.
- Health information: the medical history, symptoms, medications, and other health details you submit through your consultation and intake, which are shared with licensed providers to evaluate whether therapy is appropriate.
- Payment information: payment card or other billing details, processed by our third-party payment processors. We do not store full card numbers on our systems.
- Order and prescription information: products requested, prescriptions issued by providers, and fulfillment and shipping details from partner pharmacies.
- Usage and device information: IP address, browser type, device identifiers, pages viewed, and interactions, collected through cookies and similar technologies.
2. How we use your information
- To provide the Services, including facilitating your consultation, connecting you with licensed providers, and coordinating fulfillment with partner pharmacies.
- To process orders, payments, and shipping, and to communicate about your account, prescriptions, and orders.
- To provide customer support and respond to your inquiries.
- To improve, personalize, and secure the Services and to develop new features.
- To comply with legal, regulatory, and pharmacy or provider recordkeeping obligations, and to detect and prevent fraud or misuse.
3. Health information and telehealth
Health information you provide is used to facilitate a medical evaluation by licensed providers and, where appropriate, fulfillment by licensed pharmacies. These providers and pharmacies are independent and may maintain their own records of your care as required by law. Depending on the parties involved and applicable law, some of your health information may be protected under laws such as HIPAA and applicable state privacy laws. We apply administrative, technical, and physical safeguards designed to protect this information.
4. Medical Disclaimer / Educational Use Notice
Content provided by LumeraMD is for educational and informational purposes only and is not intended to diagnose, treat, cure, or prevent any disease.
All care is delivered by licensed healthcare providers following clinical evaluation. Treatment plans are individualized based on professional medical assessment. This website and related materials do not replace professional medical advice, diagnosis, or treatment. Always consult a licensed healthcare provider before making health-related decisions.
5. HIPAA Compliance at LumeraMD
At LumeraMD, we are committed to protecting your personal health information (PHI) and maintaining the privacy and security of your medical records. As a telehealth company, we strictly adhere to the Health Insurance Portability and Accountability Act (HIPAA) to ensure that your information remains confidential and secure.
How We Protect Your Health Information:
Data Encryption: All sensitive information, including your medical records, lab results, and communications with healthcare providers, is encrypted both in transit and at rest. This ensures that unauthorized individuals cannot access your data.
Access Control: We limit access to your PHI to only authorized personnel who need the information to provide services. Each member of our team, including healthcare providers, administrative staff, and IT professionals, is trained in HIPAA-compliant practices.
Audit Trails: Our systems track all access and activity related to your health data, providing a detailed audit trail to monitor who has accessed your information and when. This ensures accountability and transparency.
Secure Communication: We use HIPAA-compliant platforms for video consultations, messaging, and record-keeping to guarantee the privacy of your interactions with our healthcare team.
Regular Security Reviews: Our systems and procedures are regularly reviewed and updated to ensure they meet the latest HIPAA standards and industry best practices for protecting your health information.
Your Rights Regarding Your Health Information:
As a patient of LumeraMD, you have the following rights under HIPAA:
Right to Access: You have the right to access and obtain a copy of your medical records.
Right to Correct: If you believe any of your information is inaccurate or incomplete, you have the right to request corrections.
Right to Confidential Communications: You may request that we communicate with you in a specific way (e.g., through encrypted emails or phone calls).
Right to File a Complaint: If you believe your privacy rights have been violated, you have the right to file a complaint with us or directly with the Department of Health and Human Services.
At LumeraMD, safeguarding your health information is our priority, and we are dedicated to maintaining the highest standards of privacy and security in all our telehealth services.
6. How we share information
We do not sell your personal health information. We share information only as needed to provide the Services or as required by law, including with:
- Licensed medical providers who review your intake and determine whether to issue a prescription.
- Licensed pharmacies that prepare and ship prescribed therapy.
- Service providers that support us with payment processing, hosting, analytics, shipping, and customer communications, under contractual confidentiality obligations.
- Legal and safety recipients, when required by law, subpoena, or to protect the rights, safety, or property of you, LumeraMD, or others.
- Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
7. Cookies and tracking technologies
We and our partners use cookies, pixels, and similar technologies to operate the Services, remember your preferences, measure performance, and support marketing. You can control cookies through your browser settings; disabling some cookies may affect functionality. Where required, we honor recognized opt-out preference signals. See our Your Privacy Choices page for more.
8. Data security
We maintain reasonable safeguards designed to protect your information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Data retention
We retain personal and health information for as long as needed to provide the Services and to comply with legal, tax, medical, and pharmacy recordkeeping requirements. Retention periods for medical records are often set by law and may extend for several years.
10. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to opt out of certain processing, and to withdraw consent. To exercise these rights, contact us using the details below. We will respond as required by applicable law and may need to verify your identity. You will not be discriminated against for exercising your rights.
11. Children
The Services are intended only for adults 18 years of age or older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, please contact us so we can delete it.
12. Third-party links
The Services may link to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy practices.
13. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new effective date and, where required, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance.
14. Notice of Privacy Practices
IMPORTANT: This notice outlines how your medical information may be used and shared, and explains your rights regarding that information. Please read it carefully.
Overview
This Notice of Privacy Practices (the “Notice”) explains how LumeraMD. and its Affiliated Covered Entity members (collectively referred to as “we” or “our”) may use and disclose your protected health information (PHI) to provide treatment, obtain payment, and manage business operations, as well as for other legally permitted purposes. An Affiliated Covered Entity is a group of health care providers that operates under common ownership or control, designed to comply with the Health Insurance Portability and Accountability Act (HIPAA). In some instances, we may be classified as a Covered Entity under HIPAA and are required to adhere to its regulations. When HIPAA applies, we have formed an Affiliated Covered Entity, allowing members to share PHI for treatment, payment, and health care operations as permitted by HIPAA and this Notice. For a full list of our Affiliated Covered Entity members, please contact the LumeraMD Privacy Officer.
“Protected health information” (PHI) refers to information about you, including demographic details, that can identify you and relates to your health history, treatment, or payment for health care services. This Notice also details your rights regarding access to and control over your PHI.
15. Contact us
Questions or requests regarding this Policy can be sent through our Contact page.
IMPORTANT FDA DISCLOSURE: The peptide medications and therapies offered have not been approved by the FDA. The FDA has not evaluated statements regarding benefits of these therapies. These products are not intended to diagnose, treat, cure, or prevent any disease. Individual results may vary. Use of compounded medications involves known and unknown risks that should be discussed with your clinician.
This Privacy Policy is provided for general informational purposes and does not constitute legal advice.