Last updated: March 2026
Luci Medical is a distributor of regenerative medicine products to licensed healthcare providers. We are not a healthcare provider and do not create, receive, maintain, or transmit protected health information (PHI). We are not a "covered entity" or "business associate" under the Health Insurance Portability and Accountability Act (HIPAA). Our website collects only business contact information from healthcare providers and practice professionals for partnership purposes. Healthcare providers who partner with Luci Medical remain solely responsible for their own HIPAA compliance in their clinical practices.
If we inadvertently receive protected health information through our contact form or other communication channels, we will promptly notify the submitting party, delete the information from our systems, and will not use or further disclose it. Healthcare providers should not submit patient information through our website.
When you submit a contact form or inquire about a partnership through our website, we may collect the following personal information: your name, email address, phone number, practice or organization name, professional title, specialty, and the content of your message or inquiry. This information is provided voluntarily by you and is used to respond to your request and facilitate a potential business relationship.
We do not collect patient information, protected health information (PHI), or personal data from the general public beyond what is described here. Luci Medical is a business-to-business (B2B) distributor of medical products and does not operate as a healthcare provider.
When you visit our website, our hosting provider (Vercel) automatically collects certain technical information through server logs. This may include your Internet Protocol (IP) address, browser type and version, operating system, referring URL, pages visited on our site, time and date of your visit, and general geographic location (country and region level, not precise location). This information is collected for website performance, security monitoring, and to understand general traffic patterns. Some technical data, such as IP addresses, may be considered personal information under certain privacy laws.
Our website does not currently set analytics, marketing, or tracking cookies. Essential cookies may be set by our hosting provider (Vercel) for load balancing and security purposes. These are strictly necessary for website operation.
As we integrate additional services to improve your experience, we may introduce analytics and functional cookies. We will update this section before activating any such tools and provide you with information about what cookies are set, their purposes, and how to manage your preferences.
You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being set.
Some web browsers transmit "Do Not Track" (DNT) signals to websites. There is currently no universally accepted standard for how websites should respond to DNT signals. Our website does not currently respond to or alter its practices when it receives a DNT signal.
We use the information we collect for the following purposes:
To respond to inquiries and communicate with you: When you submit a contact form or inquire about a partnership, we use your personal information to respond to your inquiry and provide the information you requested.
To manage business relationships: We use contact information and communication records to maintain our relationships with current and prospective provider partners, including following up on inquiries and facilitating partnership onboarding.
To improve our website: We use aggregated technical data to understand general traffic patterns, identify areas for improvement, and ensure our website functions properly across devices and browsers.
To maintain security: We use technical data, including IP addresses and server logs, to protect our website against malicious traffic, unauthorized access, and other security threats.
To comply with legal obligations: We may use or retain information as necessary to comply with applicable laws, respond to legal process, or fulfill regulatory requirements.
We do not sell your personal information. We do not use your information for automated decision-making or profiling. We may send you communications related to your inquiry or our business relationship. You can opt out of non-transactional communications at any time by contacting us at info@lucimedical.com.
We use the following third-party services to operate our website. Each service is subject to its own privacy policy, which governs its data practices. We select providers whose practices we believe are consistent with reasonable data protection standards.
Vercel provides our website hosting and deployment infrastructure. It processes server request data including IP addresses for performance optimization and security. Vercel does not use third-party cookies or cross-site tracking identifiers.
We may integrate additional third-party services in the future, including analytics, customer relationship management, email delivery, scheduling, and content management tools. When new services are added, we will update this section before or simultaneously with their activation to disclose their data practices.
We do not sell, rent, or trade your personal information to third parties. We share information only in the following limited circumstances:
Service providers: We share information with the third-party service providers listed above, strictly for the purposes of operating our website and managing business communications. These providers are subject to their own privacy policies and terms of service, which govern their data practices.
Legal compliance: We may disclose your information if required to do so by law, in response to a valid subpoena, court order, or government request, or to protect the rights, property, or safety of Luci Medical, our partners, or the public.
Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will make reasonable efforts to notify affected contacts directly, such as via email, before their information is transferred to a new entity, and will update this policy accordingly.
With your consent: We may share your information in other circumstances if you provide explicit consent.
We do not share your information with third parties for their own marketing purposes.
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.
Contact form submissions: We retain business contact information and communication records for the duration of our business relationship and for a reasonable period following your last interaction with us, generally not to exceed three years, to maintain continuity and respond to follow-up inquiries.
Server and security logs: Technical logs generated by our hosting provider are retained according to their standard retention practices, typically 30 to 90 days.
When personal information is no longer needed for its original purpose and no legal obligation requires its retention, we will securely delete or anonymize it.
You have the right to opt out of certain data practices at any time:
Communications: If you receive communications from us that you no longer wish to receive, you can opt out by contacting us at info@lucimedical.com or by following the unsubscribe instructions in any email.
Browser controls: Most web browsers allow you to manage your cookie preferences, delete existing cookies, and set your browser to block or alert you about new cookies. As we add analytics or functional cookies in the future, we will provide specific opt-out mechanisms for those tools.
You may request the deletion of your personal information by contacting us at info@lucimedical.com. Upon receiving a verifiable request, we will delete your personal information from our active systems and direct our service providers to do the same, unless we are legally required to retain it. We will respond to deletion requests within a reasonable time, generally not to exceed 45 days. If we require additional time, we will notify you of the delay and the reason.
Under the California Online Privacy Protection Act (CalOPPA), California residents who use our website have the right to:
Know what personal information is being collected about them, as described in the "Information We Collect" section of this policy.
Know whether their personal information is disclosed to third parties, and to whom, as described in the "Data Sharing and Disclosure" and "Third-Party Services" sections.
Have this privacy policy posted conspicuously on our website, which we satisfy by linking to this policy from every page of our site.
Be notified of material changes to this policy, which we address in the "Changes to This Policy" section below.
Luci Medical does not currently meet the applicability thresholds under the California Consumer Privacy Act (CCPA/CPRA), which applies to businesses with annual revenues exceeding $25 million or that process personal information of 50,000 or more California consumers annually. However, we voluntarily extend the above rights to all users regardless of location and will update this policy if our business reaches CCPA applicability thresholds.
Our website is designed for healthcare professionals and medical providers operating in a business-to-business context. It is not intended for use by children. In compliance with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13. As an additional precaution, we extend this protection to individuals under 16. If we learn that we have inadvertently collected personal information from a child under 16, we will take steps to delete that information promptly. If you are a parent or guardian and believe your child has provided personal information through our website, please contact us at info@lucimedical.com.
Our website is intended for healthcare professionals in the United States. If you access our website from outside the United States, please be aware that your information may be transferred to and processed in the United States, which may have different data protection standards than your jurisdiction. By using our website, you consent to this transfer. If you are located in the European Economic Area, United Kingdom, or other jurisdiction with data protection laws, please contact us at info@lucimedical.com with any questions about how your data is handled.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. In particular, we will update this policy before or simultaneously with activating new third-party services that collect or process personal information.
When we make changes, we will update the "Last updated" date at the top of this page. For material changes that significantly affect your rights, we will provide prominent notice on our website. Your continued use of our website following the posting of changes constitutes your acceptance of those changes.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your information, please contact us:
info@lucimedical.com
