Privacy Policy

This Privacy Policy describes how BioLume Rx ("BioLume," "we," "us," or "our") collects, uses, and accesses information when you access or use our website, platform, applications, services, or related offerings (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy and our Terms & Conditions.

What BioLume Does and Does Not Do

BioLume provides administrative, customer support, billing, payment facilitation, and platform technology services. BioLume does not provide medical care, clinical diagnosis, treatment recommendations, or prescribing services. Medical services, clinical evaluations, prescriptions, and all related clinical decisions are provided solely by independent licensed healthcare providers affiliated with Remedora and LocumTele Medical Group.

BioLume does not store or maintain patient medical records. All patient information, including Protected Health Information (PHI), is stored and maintained exclusively on the Remedora platform. BioLume has access to certain patient information necessary to facilitate administrative services only.

This Privacy Policy governs information BioLume accesses and uses in connection with the Services. Information about how your Protected Health Information (PHI) is stored, used, and disclosed by Remedora and LocumTele Medical Group is governed by their separate Notice of Privacy Practices.

Information BioLume Accesses

BioLume may access patient information stored on the Remedora platform necessary to facilitate administrative services, including:

• Name, contact information, and program enrollment status

• Billing and payment authorization information

• Basic service request information

• Limited clinical information necessary to process administrative functions (such as service type, medication names, and basic health history for customer support purposes)

BioLume may also automatically collect technical information when you use the Services:

• IP address and device information

• Browser type and operating system

• Usage activity and platform interaction data

• Location information (if permitted by your device settings)

• Cookies and similar tracking technologies

How BioLume Uses Information

BioLume uses information accessed from Remedora to:

• Provide and administer platform services

• Process subscriptions, memberships, and payments

• Facilitate communication with Remedora providers and partner pharmacies

• Provide customer support and respond to inquiries

• Send administrative notices, updates, and service communications

• Detect fraud or unauthorized activity

• Comply with legal and regulatory obligations

• Improve website functionality and user experience

• Conduct analytics and platform optimization

BioLume may use de-identified or aggregated information for analytics, operational improvements, research, or platform enhancement purposes.

BioLume's Access to Protected Health Information

BioLume accesses Protected Health Information (PHI) stored on the Remedora platform in order to facilitate administrative support, customer service, billing, and program coordination. This PHI may include limited clinical information such as service types, medication names, basic health history, and related details necessary for BioLume to provide administrative services.

Important: Remedora is responsible for storing, maintaining, and securing all PHI. BioLume's access to PHI is limited to what is reasonably necessary to perform administrative functions on behalf of Remedora and LocumTele Medical Group. BioLume does not store PHI on its own systems, does not make clinical decisions, and does not control how Remedora uses clinical data.

How BioLume Shares Information

BioLume may share information accessed from Remedora with:

• Remedora** and LocumTele Medical Group:** To facilitate patient enrollment, billing coordination, and service delivery

• Affiliated healthcare providers: To support service delivery

• Partner pharmacies: To process prescriptions and coordinate fulfillment

• Payment processors (Luqra): To process authorized payments

• Technology vendors and service providers: Who assist with platform operations and customer support

• Legal or regulatory authorities: When required by law

BioLume does not sell personal information or PHI.

HIPAA and State Privacy Compliance

BioLume complies with HIPAA privacy and security requirements and applicable state privacy laws governing jurisdictions where users reside. Because BioLume accesses PHI maintained by Remedora on behalf of clinical services, BioLume functions as a Business Associate under HIPAA. BioLume has executed a Business Associate Agreement (BAA) with Remedora.

BioLume maintains administrative, technical, and physical safeguards designed to protect the confidentiality and security of PHI while it is being accessed or transmitted. These safeguards include access controls, secure data transmission, staff training on confidentiality obligations, and incident response procedures. However, because all PHI is stored on Remedora's platform, Remedora maintains primary responsibility for the security of the data at rest.

State privacy laws may impose obligations beyond HIPAA. BioLume shall comply with all applicable state laws including the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and similar consumer privacy laws in other jurisdictions where users reside.

Cookies and Tracking Technologies

BioLume may use cookies, pixels, web beacons, analytics tools, and similar technologies to improve functionality, personalize user experience, analyze traffic, and support marketing activities. You may disable cookies through your browser settings; however, some portions of the Services may not function properly if cookies are disabled.

Data Security

BioLume maintains administrative, technical, and physical safeguards to protect information while it is being accessed or transmitted through the BioLume platform. Because all patient information is stored on the Remedora platform, Remedora is responsible for the security of data at rest. No internet transmission or storage system can be guaranteed to be completely secure. You acknowledge the inherent risks of electronic communication and transmission.

Data Retention

BioLume does not retain patient information. All patient information is stored and retained by Remedora in accordance with applicable legal, regulatory, and contractual requirements. Questions about data retention should be directed to Remedora.

Children's Privacy

The Services are intended for individuals eighteen (18) years of age or older unless otherwise permitted by applicable law and authorized through a parent or legal guardian. BioLume does not knowingly access information from children under eighteen.

Your Privacy Rights

Depending on your state of residence and applicable law, you may have rights to:

• Access your personal information and PHI

• Request correction or deletion of inaccurate or unnecessary information

• Opt out of certain marketing communications

• Request information regarding data disclosures

• Submit privacy-related complaints

To exercise privacy rights or file a complaint, contact:

BioLume** Privacy Office** admin@biolumerx.com

You also have the right to file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, or your state attorney general.

California and Nevada Privacy Rights

California residents may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to access, delete, and request information regarding disclosures. California residents may also opt out of "sales" or "sharing" of personal information as defined by law.

Nevada residents may request that BioLume not sell certain personal information as defined under Nevada law.

To exercise these rights, contact admin@biolumerx.com.

Changes to This Privacy Policy

BioLume reserves the right to modify or update this Privacy Policy at any time. Updated versions will be posted on the Website with a revised effective date. Your continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy.

Contact Information

BioLume** Rx** admin@biolumerx.com www.BioLumeRx.com