LUXE BIOLOGIX PRIVACY POLICY

LUXE Biologix, LLC (“LUXE Biologix,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you provide when you visit luxebiologix.com, create an account, complete a health intake, communicate with us, purchase products or services, participate in a telehealth or wellness program, or otherwise use our websites, portals, communications, and related services (collectively, the “Services”).

This Privacy Policy explains the types of information we may collect, how we use and disclose that information, the choices and rights available to you, and certain additional protections applicable to health-related information.

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy.

1. IMPORTANT INFORMATION ABOUT HEALTH INFORMATION

LUXE Biologix facilitates access to wellness programs and telehealth services that may involve licensed healthcare professionals, medical groups, pharmacies, laboratories, technology providers, and other healthcare-related service providers.

Certain health information maintained by a healthcare provider, pharmacy, health plan, or other entity may be protected by the Health Insurance Portability and Accountability Act (“HIPAA”) or other healthcare privacy laws and may be subject to a separate Notice of Privacy Practices.

This Privacy Policy applies to information collected or controlled by LUXE Biologix. It does not replace a healthcare provider’s Notice of Privacy Practices or other legally required healthcare privacy notice.

Depending on the particular service and relationship involved, LUXE Biologix may process information on behalf of healthcare providers or other entities subject to healthcare privacy laws.

Other health-related information may be regulated by federal or state consumer privacy and consumer-health privacy laws even when HIPAA does not apply.

2. INFORMATION WE MAY COLLECT

We may collect information directly from you, automatically through your use of the Services, and from healthcare providers, pharmacies, laboratories, technology providers, payment processors, and other service partners.

Contact and Identification Information

This may include:

• Name
• Email address
• Telephone number
• Mailing and shipping address
• Date of birth
• Account credentials
• State or jurisdiction in which you are physically located
• Other information reasonably necessary to verify your identity or eligibility for Services

Health and Wellness Information

When you seek healthcare or wellness services, information may include:

• Medical history
• Current and previous medical conditions
• Symptoms and health concerns
• Diagnoses
• Medications and supplements
• Allergies
• Height and weight
• Treatment history
• Prescription history
• Laboratory information
• Vital signs or health measurements
• Pregnancy, reproductive-health, or breastfeeding information when relevant
• Skin, hair, metabolic, weight-management, or wellness concerns
• Photographs submitted for evaluation
• Treatment preferences and goals
• Responses to health questionnaires and medical intake forms
• Communications concerning your care
• Other information you voluntarily provide in connection with healthcare or wellness services

Please use designated secure intake or patient systems for sensitive health information whenever available rather than ordinary email, social media, or unsecured communications.

Payment and Transaction Information

We may collect information concerning:

• Purchases
• Subscriptions
• Treatment programs
• Orders
• Refunds
• Billing
• Transaction history
• Payment status

Payment card information may be processed directly by third-party payment processors. LUXE Biologix may not directly receive or store complete payment-card numbers.

Communications

We may collect information contained in:

• Emails
• Telephone communications
• Text messages
• Customer-service communications
• Patient-support communications
• Surveys
• Reviews
• Forms
• Chat communications
• Other correspondence with us

Device and Website Information

When you use our website or other online Services, we and our service providers may automatically collect information such as:

• IP address
• Browser type
• Device type
• Operating system
• Referring webpage
• Pages visited
• Date and time of access
• Approximate location derived from IP address
• Cookie or device identifiers
• Website interactions and performance information

Referral and Affiliate Information

If you are referred to LUXE Biologix through an affiliate, referral partner, provider, aesthetic professional, wellness professional, or similar source, we may collect information necessary to identify and administer that referral.

A referral relationship does not, by itself, authorize a referral partner to access your medical records or private medical information.

3. HOW WE USE INFORMATION

We may use personal information to:

• Provide and administer the Services
• Create and maintain accounts
• Process health intake information
• Facilitate medical review and telehealth services
• Connect patients with appropriately licensed healthcare professionals
• Facilitate prescriptions when authorized by a licensed healthcare professional
• Coordinate pharmacy fulfillment
• Coordinate laboratory or diagnostic services
• Process payments and transactions
• Administer subscriptions and recurring treatment programs
• Ship eligible products
• Provide patient and customer support
• Communicate regarding appointments, accounts, treatments, prescriptions, orders, subscriptions, or billing
• Authenticate users
• Maintain security
• Prevent fraud, misuse, and unauthorized access
• Maintain legally or operationally required records
• Improve the Services and patient experience
• Perform internal analytics
• Manage referrals and affiliate programs
• Respond to legal requests
• Comply with applicable laws and regulations
• Protect the rights, safety, and property of LUXE Biologix, patients, healthcare professionals, service providers, and others

We may also use information for marketing where permitted by law and consistent with applicable consent and opt-out requirements.

We do not use consumer health information to make decisions concerning employment, housing, credit, insurance eligibility, or similar unrelated eligibility determinations.

4. HOW WE DISCLOSE INFORMATION

We may disclose information when reasonably necessary to provide, administer, secure, or support the Services.

Recipients may include:

• Licensed healthcare professionals
• Medical practices and medical groups
• Pharmacies and pharmacy fulfillment providers
• Laboratories and diagnostic providers
• Electronic health record providers
• Telehealth technology providers
• Payment processors
• Website and cloud-hosting providers
• Patient-support and customer-service providers
• Email, telephone, and text-message service providers
• Identity verification providers
• Security and fraud-prevention providers
• Shipping and logistics providers
• Attorneys, accountants, auditors, insurers, and professional advisers
• Government agencies and law enforcement when disclosure is legally required
• Parties involved in a merger, acquisition, financing, restructuring, asset sale, or similar corporate transaction

Health information is disclosed only as reasonably necessary and as permitted or required by applicable law.

5. HEALTHCARE PROVIDERS AND MEDICAL RECORDS

Healthcare professionals accessible through the Services exercise independent professional judgment concerning diagnosis, treatment, prescriptions, monitoring, and medical eligibility.

Information that becomes part of an official medical record may be maintained by the applicable healthcare professional, medical group, electronic health record provider, or other healthcare organization.

Requests involving an official provider medical record may therefore need to be submitted directly to the applicable provider or medical group.

6. PHARMACIES AND PRESCRIPTIONS

When a healthcare professional issues a prescription, information necessary to process, prepare, dispense, deliver, and monitor that prescription may be transmitted to an appropriate pharmacy.

The pharmacy maintains its own records and may be subject to separate privacy obligations and policies.

Independent pharmacies are responsible for their own privacy practices except to the extent LUXE Biologix has rights or obligations concerning those practices under contract or applicable law.

7. CONSUMER HEALTH DATA

Information relating to a person’s physical or mental health, symptoms, diagnoses, medications, prescriptions, treatments, reproductive health, laboratory information, health measurements, health goals, or efforts to obtain healthcare may receive enhanced protection under state consumer-health privacy laws.

LUXE Biologix does not knowingly sell Consumer Health Data.

We do not knowingly disclose identifiable medical intake responses, diagnoses, prescriptions, laboratory information, medical photographs, or treatment information to advertising platforms for targeted advertising.

Where applicable, additional information concerning Consumer Health Data is provided in our separate Consumer Health Data Privacy Policy.

8. COOKIES AND SIMILAR TECHNOLOGIES

We may use cookies, pixels, analytics technologies, session-storage technologies, and similar technologies on public portions of our website to:

• Operate the website
• Remember preferences
• Authenticate users
• Maintain security
• Prevent fraud
• Analyze website performance
• Understand how visitors interact with our Services
• Measure permitted marketing activities

We endeavor to limit advertising and non-essential tracking technologies in areas where patients submit sensitive medical information.

Where required by applicable law, you may be provided with controls to reject non-essential cookies or opt out of certain uses of personal information.

Your browser may also permit you to block or delete cookies.

9. SALE, SHARING, AND TARGETED ADVERTISING

LUXE Biologix does not sell personal information in exchange for money.

Certain privacy laws define terms such as “sale,” “sharing,” or “targeted advertising” broadly enough to include some advertising or analytics activities.

Where our activities fall within such definitions and applicable law provides an opt-out right, eligible consumers may exercise that right through available website privacy controls or by contacting us.

Where legally required and technically supported, we will process recognized opt-out preference signals, such as Global Privacy Control, in accordance with applicable law.

10. DATA RETENTION

We retain information for the period reasonably necessary to:

• Provide the Services
• Maintain patient, transaction, and business records
• Fulfill contractual obligations
• Maintain security
• Prevent fraud
• Resolve disputes
• Enforce agreements
• Meet applicable regulatory, tax, accounting, and legal obligations

Different types of information may be retained for different periods.

Healthcare records controlled by a licensed healthcare professional, medical group, pharmacy, or laboratory may be subject to separate legally required retention periods.

11. INFORMATION SECURITY

We maintain administrative, technical, physical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

However, no website, electronic transmission, database, or storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your passwords and account credentials.

Please contact us promptly if you believe your account or information has been compromised.

12. SECURITY INCIDENTS AND BREACH NOTIFICATION

If personal or health-related information is affected by a security incident that requires notification under applicable law, LUXE Biologix will provide legally required notifications to affected individuals, regulators, governmental authorities, or other parties as applicable.

Different requirements may apply depending on whether the information is governed by HIPAA, state data-breach laws, state consumer-health privacy laws, the Federal Trade Commission Health Breach Notification Rule, or another applicable law.

13. YOUR PRIVACY RIGHTS

Depending on your state of residence, the type of information involved, and whether a particular privacy law applies to LUXE Biologix or the information being processed, you may have rights to:

• Confirm whether we process personal information about you
• Access personal information about you
• Obtain a copy of certain personal information
• Correct inaccurate personal information
• Request deletion of personal information
• Withdraw certain consent
• Opt out of certain targeted advertising
• Opt out of certain sales or sharing of personal information
• Limit certain uses or disclosures of sensitive personal information
• Opt out of certain qualifying profiling activities
• Appeal the denial of certain privacy requests
• Exercise privacy rights without unlawful discrimination or retaliation

These rights are subject to applicable exceptions and limitations.

14. CALIFORNIA PRIVACY RIGHTS

Where the California Consumer Privacy Act, as amended (“CCPA”), applies, California residents may have rights including:

• The right to know what personal information is collected, used, or disclosed
• The right to access personal information
• The right to request deletion
• The right to correct inaccurate personal information
• The right to opt out of qualifying sales or sharing
• The right to limit certain uses and disclosures of sensitive personal information
• The right to non-discriminatory treatment for exercising privacy rights

Health-related information may qualify as sensitive personal information under California law, although certain medical information governed by other healthcare privacy laws may be exempt from some CCPA requirements.

15. TEXAS PRIVACY RIGHTS

Where the Texas Data Privacy and Security Act applies, Texas consumers may have rights to:

• Confirm whether personal data is being processed
• Access personal data
• Correct inaccuracies
• Request deletion
• Obtain a portable copy of certain personal data
• Opt out of qualifying targeted advertising
• Opt out of qualifying sales of personal data
• Opt out of certain qualifying profiling
• Appeal certain decisions regarding privacy requests

We will not unlawfully discriminate or retaliate against consumers for exercising applicable privacy rights.

16. HOW TO EXERCISE PRIVACY RIGHTS

Privacy requests may be submitted by emailing:

hello@luxebiologix.com

or by mailing:

LUXE Biologix, LLC3420 Basswood Blvd, Suite 100Fort Worth, TX 76137

Please describe the privacy right you wish to exercise and provide enough information for us to identify your account and understand your request.

We may take reasonable steps to verify your identity before fulfilling certain requests.

Where permitted by law, an authorized agent may submit a request on your behalf. We may request information reasonably necessary to verify the agent’s authority.

If applicable law gives you a right to appeal our decision regarding a privacy request, you may submit an appeal to hello@luxebiologix.com with the subject line Privacy Request Appeal.

17. MARKETING EMAILS

You may unsubscribe from promotional emails by using the unsubscribe link included in the applicable message.

Even after opting out of marketing, you may continue receiving non-promotional communications relating to:

• Your account
• Medical or treatment-related administrative matters
• Orders and prescriptions
• Billing
• Security
• Customer service
• Legal notices
• Other transactions you initiated

18. TEXT MESSAGES

If you provide a mobile telephone number and consent to text messaging, LUXE Biologix and service providers acting on our behalf may send messages concerning appointments, accounts, orders, prescriptions, treatment-related administrative communications, customer service, and other Services.

Where you separately authorize promotional messaging, you may also receive marketing messages.

Message frequency may vary. Message and data rates may apply.

You may reply STOP to discontinue applicable text messages and HELP for assistance.

Consent to receive marketing text messages is not a condition of purchasing goods or services.

19. CHILDREN

LUXE Biologix’s Services are intended for adults unless a specific service expressly states otherwise.

We do not knowingly provide adult telehealth programs directly to children under 18 without appropriate authorization and compliance with applicable law.

If we learn that information concerning a child has been collected in violation of applicable law, we will take reasonable steps to appropriately delete, restrict, or otherwise handle that information.

20. THIRD-PARTY SERVICES

Our Services may contain links to or integrations with providers, pharmacies, laboratories, payment processors, shipping providers, and other independent organizations.

Third parties may maintain their own privacy policies and legal obligations.

We encourage you to review the privacy practices of those organizations.

21. BUSINESS TRANSFERS

If LUXE Biologix or substantially all or part of its business or assets is involved in a merger, financing, restructuring, acquisition, bankruptcy, sale, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy as our Services, technology, business practices, or legal obligations change.

The “Last Updated” date above indicates when this Policy was most recently revised.

Where required by law, we will provide additional notice or obtain required consent before materially changing certain uses of information.

23. CONTACT US

Questions concerning this Privacy Policy, privacy requests, or our privacy practices may be directed to:

LUXE Biologix, LLC3420 Basswood Blvd, Suite 100Fort Worth, TX 76137

Email: hello@luxebiologix.com

© 2026 LUXE Biologix, LLC. All rights reserved.