Last Updated: August 15, 2025
Lumena Fertility & Wellness Clinic, S.C. (“Company,” “we,” or “us”) respects your privacy and is committed to protecting the confidentiality of data it receives. This privacy policy (“Policy”) sets forth the expectations of the Company related to the receipt, handling, storage, use, transmission and destruction of data it receives from you when providing services to you through our products, services, and website, www.lumenafertilityandwellness.com (“Website”) (products, services and Website shall collectively be referred to as “Services”). This Policy applies to the Company, its employees, agents and representatives; and vendors and others that receive, use, store, or transmit information on the Company’s behalf.
We are and may in the future be subject to various data protection laws, both foreign and domestic. Such laws have certain common principles and elements, which we respect and will uphold, including (1) transparency, (2) limiting the collection of data, (3) allowing you to have a say in how their personal data is stored and used, (4) implementation of reasonable physical, technical and administrative safeguards to prevent unauthorized access or use of protected data, (5) ongoing risk assessment, and (6) vigilance in preventing and responding to data breaches.
This Policy describes our current privacy policy, which is subject to periodic change as outlined below. Please read this document carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this Policy. This Policy may change from time to time. Your continued use of the Services after we make changes as described here is deemed to be acceptance of those changes, so please check the Policy periodically for updates. If you do not agree with this Policy or our practices, you must not access or use the Website.
DEFINITIONS
“Personal Information” means information that relates to an identifiable natural person or that can be used, by itself or combined with other data, to identify that person, regardless of whether the information is confidential or publicly available. This includes both business and personal information, such as name, address, telephone number, email address, business contact information, business affiliation, title, etc. Personal Information also includes all Sensitive Personal Information (as defined below). Personal Information does not include information about an individual that cannot be used to identify that individual, such as aggregated and deidentified data.
“Sensitive Personal Information” means Personal Information that is especially sensitive and that should be treated with additional respect and protection, often because its improper use or transmission can lead to identity theft or other significant losses. Examples of Sensitive Personal Information include Social Security Number (SSN); credit card number; bank account number(s); username(s) and/or password(s); health information, genetic and biometric information; Personal Information of children; and criminal history, as well as information regarded as highly private or sensitive under various laws, such as information regarding race, ethnicity, political opinions, religious or philosophical beliefs, trade union membership, sex life or sexual orientation. Questions regarding whether specific data or information constitutes Sensitive Personal Information should be directed to the Data Privacy Officer.
“Protected Information” means all Personal Information, or Sensitive Personal Information, and all other information that the Data Privacy Officer designates as subject to this Policy.
“Data Protection Officer” means the individual authorized and obligated to enforce and interpret this Policy and responsible for the overall protection and management of our data. The Data Privacy Officer is Lauren Weasler, M.D.
DATA PROTECTION PRINCIPLES
The following principles govern our collection, use, retention, transfer, disclosure and destruction of Personal Information, and our reasons for collecting Personal Information:
- Lawfulness, Fairness and Transparency: Personal Information will be processed lawfully, fairly and in a transparent manner. We will inform yous how we obtain and use their data (primarily through this Policy and our Notice of Privacy Practices on our Website).
- Purpose Limitation: Personal Information will be collected for specific and legitimate purposes. This means you will know why we are obtaining Personal Information when we obtain it, and we will not use it for other purposes without your consent or other lawful basis to do so.
- Minimum Necessary: We do not collect Personal Information we do not need, and we will only retain Personal Information as long as we have a legitimate need for it. We only collect, maintain, use and transmit the minimum amount of Protected Information necessary to accomplish a given task, and we only allow the least amount of people the lowest amount of access necessary to accomplish a legitimate purpose.
- What We Collect: We primarily collect the Personal Information you supply us with as well as your IP address and information about your equipment, browsing actions, and patterns.
- Accuracy: Personal Information should be accurate and kept up to date. You can contact our Data Protection Officer to correct your Personal Information or you may update it through an online form, if available.
- Access Limitation: Personal Information will only be accessible to those with a legitimate need for the information to accomplish one of the purposes listed herein or another purpose required by law. This includes both protection from external access and internal limitations on who within the Company can access Personal Information.
- Integrity & Confidentiality: Personal Information will be received, maintained, used and/or transmitted in a matter that ensures appropriate security, including protection from unauthorized or unlawful access, as well as accidental loss, destruction or damage. You will be afforded your rights as recognized under applicable laws (including GDPR where applicable).
COLLECTION OF YOUR DATA
Most Personal Information we receive is provided directly by you, and in most cases the provision of such information is specifically so that we may can provide you with the Services you have requested.
We collect primarily the Personal Information you supply us with, and we collect your IP address automatically. We collect your email address and your name if you register to download a book or resource, sign up for our newsletter, or purchase Services from us. We use Personal Information to track your preference, to keep you informed about or provide support for the products and Services you have selected to receive, and to respond to your concerns or inquiries. We also collect your address and credit card payment information when you pay for the Services. We use various technologies to collect and store Personal Information when you use our Website, including “cookies,” “pixels,” or other similar technologies.
In addition, as you navigate through our Website, we may use automatic data collection technologies including Google Analytics to collect certain information about your equipment browsing actions, and patterns. This will generally include information about your location, your traffic pattern through our Website, and any communications between your computer and our Website. Among other things, we will collect data about the type of computer you use, your Internet connection, your IP address, your operating system, and your browser type. This information is used for statistical data and will not include Personal Information. We use this data to improve our Website and our service offerings.
Some content or applications on the Website are served by third parties, including advertisers, ad networks and servers, content providers and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you and your device when you use our Website. The information they collect may be associated with your Personal Information or they may collect information, including Personal Information, about your online activities over time and across different websites, apps, platforms, or other online Services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
If you are outside the European Union and opt to receive any free resources, participate in any free training programs, register for a webinar, register for a live event, register for a seminar, or purchase any Services sold by the Company on this Website, we will automatically enroll you to receive our free email newsletter. If you do not wish to receive this newsletter, you can unsubscribe anytime. We include an “unsubscribe” link at the bottom of every email we send. If you ever have trouble unsubscribing, you can send an email to [email protected] requesting to unsubscribe from future emails.
If you are in the European Union and opt to receive any free resources, participate in any free training programs, register for a webinar, register for a live event, register for a seminar, or purchase any Services sold by the Company on this Website, we will only enroll you to receive our free email newsletter if you affirmatively consent to it. If you do not wish to receive this newsletter, you can unsubscribe anytime. We include an “unsubscribe” link at the bottom of every email we send. If you ever have trouble unsubscribing, you can send an email to [email protected] requesting to unsubscribe from future emails.
USE OF YOUR INFORMATION
We use Personal Information for purposes of presenting our Website and its contents to you, providing you with information, providing you with offers for Services, providing you with information about your subscriptions and Services, carrying out any contract between you and the Company, administering our business activities, and providing customer service.
From time-to-time, we may use the Personal Information you provide to us to display advertisements to you that are tailored to your personal characteristics, interests, and activities.
DISCLOSURE OF YOUR INFORMATION
We may disclose Personal Information to any person performing audit, legal, operational, or other services for us. We will use information which does not identify the individual for these activities whenever feasible. Personal information disclosed to vendors or contractors for our operational purposes may not be re-disclosed to others by such a vendor or contractor.
We may disclose Protected Information when required to do so by a subpoena, court order, search warrant, or other legal process, including to respond to any governmental or regulatory request. We may disclose Protected Information as we deem it appropriate to protect the safety of an individual or for an investigation related to public safety or to report an activity that appears to be in violation of law. We may disclose Protected Information to protect the security and reliability of this Service and to take precautions against liability.
We may disclose Protected Information when legally compelled to do so, in other words, when we, in good faith, believe that the law requires it or for the protection of our legal rights, the property or safety of our organization, or when compelled by a court or other governmental entity to do so.
We may provide your Protected Information to our subsidiaries and affiliates, to our contractors, service providers, and other third parties we use to support our organization, or for the purpose of providing our Services to you.
We may use your information to enforce or apply our Terms of Use or Patient Agreement and other agreements, including for billing and collection purposes.
DATA SECURITY AND RETENTION
We employ commercially reasonable methods to ensure the security of the Personal Information you provide to us and the information we collect automatically. This includes using standard security protocols and working only with reputable third-party vendors.
Email is not recognized as a secure medium of communication. For this reason, we request that you do not send Personal Information to us by email. However, doing so is allowed, but at your own risk. Some of the Personal Information you may enter on our Website may be transmitted securely via a secure medium known as Secure Sockets Layer, or SSL. Credit Card information and other Sensitive Personal Information is never transmitted via email.
The Company may use software programs to create summary statistics, which are used for such purposes as assessing the number of visitors to the different sections of our Website, what information is of most and least interest, determining technical design specifications, and identifying system performance or problem areas.
For Website security purposes and to ensure that this Service remains available to all users, the Company uses software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage.
The amount of time we store information depends on the purposes for which we use it as well as the type of information. We will store your information for as long as you continue to use our Services, or as long as we have another business purpose to do so but never for longer than permitted by applicable law. The information collected may be stored and processed on third-party servers which may be located in the United States or around the globe. No information, especially electronically stored or transmitted information, is absolutely safe. However, we take the protection of Protected Information and information seriously. We will continue to actively assess risks and look for ways to better safeguard Protected Information.
We protect Protected Information through physical, technical and administrative safeguards, taking into account factors such as legal requirements; the sensitivity of the information; the need for and uses pertaining to it; practical factors related to access, use and cost; foreseeable risks, their likelihood and the potential harm were a breach to occur.
INDIVIDUAL USER’S RIGHTS
We respect the rights of individuals to control their Personal Information under various laws, and we will allow them to exercise those rights. Subject to requirements and restrictions from applicable law (including employment laws, the Health Insurance Portability and Accountability Act, and record retention requirements) you have the right to:
- access and know what Protected Information we have about you.
- correct any Protected Information we have about you.
- request that we delete your Protected Information.
- request that we limit the way we use or share your Protected Information.
- object to the use of your Protected Information for direct marketing.
- refuse all or some browser cookies or other tracking technology files or alert you to when these files are being sent. If you disable or refuse cookies or similar tracking files, some Services features may be inaccessible or not function properly.
Your requests related to these rights should be forwarded to the Data Protection Officer.
There may be situations where someone other than you requests your Protected Information such as requests by police or court order. The Data Protection Officer will undertake reasonable efforts to authenticate the identity of the requesting individual before providing further information or undertaking further action to allow you to exercise one or more of the above rights. All such requests should be forwarded to the Data Protection Officer.
CHILDREN’S AND MINORS’ DATA
Our Services are not intended for, and we do not knowingly collect any Personal Information, Sensitive Personal Information, or Protected Information from anyone under the age of 18. If we learn we have collected or received such information from a child under 18 years old without verification of parental consent, we will delete that information.
EMAIL POLICIES
If you choose to correspond with us through email, we may retain the content of your email messages together with your email address and our responses. We provide the same protections for these electronic communications that we employ in the maintenance of Protected Information received online, mail, and telephone. These protections also apply when you register for our Website, sign up through any of our forms using your email address, or make a purchase on this Website.
We are committed to keeping your email address confidential. We do not sell, rent, or lease our subscription lists to third parties and will not disclose your email address to any third parties except as allowed in this Policy. We will maintain the Personal Information you send via email in accordance with applicable federal law.
In compliance with the CAN-SPAM Act, all emails sent from our organization will clearly state who the email is from and provide clear information on how to contact the sender. In addition, all email messages will also contain concise information on how to remove yourself from our mailing list so that you receive no further email communication from us.
Our emails provide users the opportunity to opt-out of receiving communications from us and our partners by following the unsubscribe instructions located at the bottom of any email they receive from us at any time.
Users who no longer wish to receive our newsletter or promotional materials may opt-out of receiving these communications by clicking on the unsubscribe link in the email.
BUSINESS TRANSFERS
As a general rule, we will not sell, rent, swap, transfer, or authorize any third party to use your Protected Information without your permission. In the future we may sell, buy, merge or partner with another company or business. In such a transaction, we may include your Protected Information in the transferred assets.
NEVADA PRIVACY RIGHTS
Nevada provides its residents with a limited right to opt out of certain personal data sales. Residents who wish to exercise their sale opt-out rights may submit a request to this designated address: [email protected]. However, please know we do not currently sell data triggering that statute’s opt-out requirements.
CALIFORNIA PRIVACY RIGHTS
California residents who provide Personal Information in obtaining Services for personal, family or household use are entitled to request and obtain from us once a calendar year information about the Personal Information we shared, if any, with other businesses for their own direct marketing uses. To obtain this information, you can contact us with a “Request for California Privacy Information” on the subject line and in the body of your message and provide a telephone number where you can be reached. The Company will first call to verify the validity of the request and will then provide the requested information as promptly as possible. Under California’s Consumer Privacy Act (the CCPA), you have the right to have us delete information collected from you (subject to some exceptions) and the right to opt-out of the sale, if any, of your Protected Information gathered through the Website. Doing so will not impact your usage of the Website or discriminate against you in any other way.
GENERAL DATA PROTECTION REGULATION (GDPR) RIGHTS
If you are within the European Union, you are entitled to certain information and have certain rights under the GDPR.
We will retain the any Personal Information you choose to provide to us until the earlier of: (a) your request to delete the Personal Information, (b) our decision to cease using our existing data providers, or (c) our decision that the value in retaining the Personal Information is outweighed by the costs of retaining it.
You have the right to request access to your Personal Information that the Company stores and have the right to either rectify or erase your Personal Information. You have the right to seek restrictions on the processing of your Personal Information. You have the right to object to the processing of your Personal Information and the right to the portability of your Personal Information.
To the extent that you provided consent to the Company’s processing of your Personal Information, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based upon consent that occurred prior to your withdrawal of Consent.
You have the right to lodge a complaint with a supervisory authority that has jurisdiction over issues related to the GDPR.
We require only the information that is reasonably required to enter into a contract with you. We will not require you to provide consent for any unnecessary processing as a condition of entering into a contract with us.
PRIVACY POLICY CHANGES
We may update this Policy from time to time, and we will provide notice of any such changes to the Policy as required by law. The date the Policy was last updated is identified at the top of the page. We will notify you of changes to this Policy by updating the “last updated” date and posting the updated Policy on the Website. We may email or otherwise communicate reminders about this Policy, but you should check our Website periodically to see the current Policy and any changes we have made to it. If you disagree with the terms of this Policy or any updates to the Policy, you may contact us at any time to request that we delete your Protected Information.
WHO TO CONTACT
Questions and concerns regarding this Policy, its application or interpretation, security and accessibility of our data and other related matters should be directed to the Data Protection Officer:
Lauren Weasler, M.D., President