Cookie Policy

Effective Date: January 1, 2026 | Last Updated: May 25, 2026

This Cookie Policy is part of our commitment to transparency and data privacy. It explains the types of cookies we use, the purposes for using them, and the choices you have to accept or decline cookies when you visit www.lumenmedical.com, our patient portal, or any related digital services (collectively, the “Website”). By continuing to browse our Website, you agree to our use of cookies as described in this policy, unless you have configured your browser or our cookie consent tool to reject them.

1. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, smartphone) when you visit a website. They are widely used to make websites work more efficiently, remember your preferences, and provide anonymous analytics data. Cookies do not typically contain any information that personally identifies you, but the information we store about you may be linked to the information stored in and obtained from cookies. Other tracking technologies such as web beacons, pixels, and local storage are also used in a similar manner.

Cookies can be “persistent” (remain on your device until you delete them or they expire) or “session” (deleted automatically when you close your browser). We use both types to deliver a seamless experience.

2. Why We Use Cookies

Lumen Medical uses cookies for the following purposes:

• Strictly Necessary Cookies: These are essential for the Website to function correctly. They enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies as the Website would not work properly without them.
• Performance & Analytics Cookies: These help us understand how visitors interact with our Website by collecting anonymous information about page visits, time spent, and error messages. We use this data to improve site performance and user experience.
• Functional Cookies: These remember your choices (such as language preference, font size, or region) to provide enhanced, personalized features.
• Security Cookies: Used to authenticate users, prevent fraudulent activity, and protect patient data when accessing secure areas like the patient portal.
• Advertising / Marketing Cookies: Lumen Medical does NOT use third-party advertising cookies or retargeting pixels. We never sell your data for advertising purposes. However, we may use limited first-party cookies to understand if you found our clinic via a partner referral link.

3. Types of Cookies We Use

The table below provides specific details about the cookies used on Lumen Medical’s Website:

Cookie Name	Provider	Purpose	Duration	Type
lumen_session	Lumen Medical	Maintains your session while navigating the site, essential for patient portal access.	Session	Strictly Necessary
csrf_token	Lumen Medical	Security cookie that protects against cross-site request forgery attacks.	Session	Strictly Necessary
cookie_consent	Lumen Medical	Stores your cookie preference (accept/decline) so we don’t re-prompt you.	12 months	Functional
_ga	Google Analytics	Used to distinguish unique users and track anonymous site usage statistics.	2 years	Performance
_gid	Google Analytics	Used to throttle request rate and track user behavior on a daily basis.	24 hours	Performance
preferences_ui	Lumen Medical	Remembers your accessibility settings (contrast, font size) for better usability.	6 months	Functional

We may update this table as our technology evolves. Any material changes will be communicated via an updated policy notice.

4. Third-Party Cookies

Some cookies may be placed by third-party services that we integrate to enhance our Website. These include:

• Google Analytics: We use Google Analytics to collect anonymous traffic data. Google’s own privacy policy and cookie usage apply. You can learn more about Google Analytics cookie usage and opt-out via Google’s opt-out browser add-on.
• Patient Portal Platform: Our secure patient portal is powered by a HIPAA-compliant vendor that may set essential session cookies for authentication. Those cookies are strictly necessary and do not track you across other websites.
• Accessibility Widget: We use a third-party accessibility tool to improve usability for users with disabilities. This tool may set functional cookies to remember your settings.

We do not control third-party cookies. We encourage you to review the privacy and cookie policies of those third parties for detailed information.

5. How to Manage and Delete Cookies (Accept or Decline)

You have the right to accept or decline non-essential cookies. The Cookie Consent Dialog Box at the bottom of this page allows you to make your choice instantly. Additionally, you can control cookies through your browser settings:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data.
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data.
• Safari: Preferences → Privacy → Block all cookies.
• Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies.

Please note that disabling strictly necessary cookies may prevent the Website from functioning correctly, including access to the patient portal, appointment scheduling, and secure messaging. Declining performance or functional cookies will not affect core functionality but may limit personalization.

6. Cookie Consent Mechanism & Dialogue Box

In compliance with ePrivacy Directive and GDPR requirements, Lumen Medical provides a clear and interactive Cookie Consent Dialog Box. When you first visit our Website, a dialog will appear asking you to accept or decline non-essential cookies. Your preferences are stored in a cookie (cookie_consent) for 12 months. You may change your mind at any time by refreshing this page or clearing your cookies. The consent box will reappear after the expiration period or if you manually delete the preference cookie.

We do not use cookie walls or deceptive patterns. You are free to decline analytics and functional cookies without losing access to medical information or appointment features (except for personalized settings).

7. Web Beacons, Pixels, and Local Storage

In addition to cookies, we may use web beacons (also known as clear GIFs or pixel tags) in our transactional emails (e.g., appointment reminders, password reset emails). These help us understand if you opened an email or clicked a link, allowing us to improve communication. You can opt out of email tracking by disabling HTML images in your email client or by unsubscribing from non-essential communications. Local storage and IndexedDB may be used to store larger amounts of data on your device for improved performance of the patient portal (e.g., draft messages).

8. Cookies & Protected Health Information (PHI)

Lumen Medical is a HIPAA-covered entity. We take extraordinary care to ensure that no Protected Health Information is ever stored in cookies or client-side storage without your explicit consent and encryption. Session cookies used for authentication are encrypted and contain only a random identifier — never your name, medical record number, or clinical data. Our third-party analytics are configured to anonymize IP addresses and do not intersect with PHI.

9. Updates to This Cookie Policy

We may revise this Cookie Policy from time to time to reflect changes in technology, legal requirements, or our operations. The “Last Updated” date at the top indicates when changes were made. If we make material changes, we will notify you via a prominent notice on our Website or by email (for registered portal users). Your continued use of the Website after the effective date constitutes acceptance of the revised policy.

10. Contact Us About Cookies

If you have any questions, concerns, or requests regarding our use of cookies, please contact our Data Privacy Officer:

• Email: privacy@lumenmedical.com (subject: Cookie Inquiry)
• Phone: (512) 555-8230
• Mail: Lumen Medical – Privacy Office, 450 Health Avenue, Suite 200, Austin, TX 78701