Privacy Policy

Who this policy covers

This policy applies to the public marketing website lumexity.com and to the contact form, WhatsApp link, and measurement tools on that site.

It does not govern the Lumexity application at app.lumexity.com. Clinic data processed there is covered by your customer agreement and, where required, a Business Associate Agreement.

Who we are

Lumexity is a US healthcare technology company. We build revenue-cycle tools for practices that run on eClinicalWorks. This website is how we describe those tools and how prospective customers reach us.

What we collect

Information you submit

The contact form asks for:

• Work email, clinic or practice name, your role, phone number, and address
• How you want us to follow up (email, phone, SMS, or WhatsApp)
• Optional notes
• The page URL where you opened the form

If you start a WhatsApp chat from the site, WhatsApp receives the prefilled message (including the page you were viewing). That conversation is handled by WhatsApp, not stored by this website.

If you book a time on the booking page, Google Calendar collects the details you enter in that scheduling form.

Information collected automatically

• Technical data such as IP address, browser type, and pages viewed (via our host and CDN)
• Your analytics choice, stored in the browser as lumexity_consent_analytics_v1
• A country hint cookie lx_cc when CloudFront can set it, used only to pick the consent model
• Google Analytics and Meta Pixel events — only when the regional rules below allow it

How we use it

• Respond to sales and support inquiries you send through the form
• Measure how the marketing site is used and whether ads led someone here
• Apply the correct cookie model for your region and honor an opt-out or GPC signal

We do not use marketing-site contact details to make automated decisions that produce legal effects.

Cookies and similar technologies

Depending on your region and choice, the site may use:

• Necessary. Consent storage and the optional country cookie so the banner behaves correctly.
• Google Analytics 4. Measurement cookies (for example _ga) when analytics storage is allowed.
• Meta Pixel. Advertising cookies (for example _fbp) only after the regional rules allow Facebook to load. We do not inject the pixel before that point.

Regional consent

We serve the model that matches where you appear to be visiting from:

• European Economic Area and United Kingdom. Strict opt-in. Google Analytics and Meta Pixel stay off until you accept.
• United States. Measurement is on by default. You can opt out at any time from Your Privacy Choices in the footer. We honor Global Privacy Control (GPC) as an opt-out.
• Other identified countries. Same opt-out model as the United States, including GPC.
• Unknown location. Same opt-out model as the United States, including GPC.

A saved choice in your browser always wins. If you already accepted or declined, we keep that decision until you change it.

Your Privacy Choices and GPC

Your Privacy Choices (US and other opt-out regions) or Cookie settings (EEA/UK) in the footer open the same controls: allow analytics or opt out.

Global Privacy Control (GPC) is a browser signal that means you do not want your data sold or shared for advertising. If your browser sends GPC and you have not explicitly allowed analytics, we treat that as an opt-out and do not load the Meta Pixel.

We do not sell personal information for money. Advertising pixels can still count as “sharing” under California law (CPRA). That is why US visitors get an opt-out path and GPC support.

Who we share it with

We share marketing-site data only with processors that run the site or the tools above:

• Amazon Web Services (hosting and content delivery for lumexity.com)
• Our application backend, which receives contact-form submissions
• Google LLC (Analytics), when measurement is allowed
• Meta Platforms, Inc. (Meta Pixel), when the pixel is allowed
• Google Calendar Appointment Scheduling, when you book a time on this site

We do not sell your contact-form details to data brokers.

How long we keep it

• Contact-form submissions: for as long as needed to respond and manage the inquiry, or until you ask us to delete them
• Consent choice: in your browser until you change it or clear site data
• Analytics and ads events: according to Google and Meta retention settings

Patient data and HIPAA

This marketing website is not a place to submit patient records or other protected health information. Do not include PHI in the contact form or in a WhatsApp message started from this site.

Patient data that clinics process inside the Lumexity application is handled under the customer agreement and HIPAA obligations for that product — not under this page.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export personal information, to restrict or object to certain processing, to withdraw consent, and to opt out of sale or sharing for advertising.

Use the contact form on this site to make a request. US visitors can also opt out of advertising measurement from Your Privacy Choices without sending a message.

Children

lumexity.com is directed at healthcare professionals and practice operators, not at children. We do not knowingly collect personal information from anyone under 16.

Changes

When this policy changes, we update the date at the top of the page. Continued use of the site after an update means the revised policy applies to later visits.