Legal
Privacy Policy
Last updated October 3, 2026.
Information we collect
- Contact details such as your name, email address and shipping address.
- Health information you provide during intake and follow-ups.
- Order and payment information (card details are handled by our payment processor, not stored by Luun).
- Device and usage data, including cookies and analytics identifiers.
How we use your information
- To provide telehealth services and fulfil your orders.
- To connect you with licensed providers and pharmacies.
- To send service updates and, with your consent, marketing emails.
- To improve the safety, security and performance of the platform.
How we share information
We share information with the licensed providers and pharmacies involved in your care, and with service providers who work on our behalf under contract. We do not sell your personal health information.
Your choices
- Request access to, correction of, or deletion of your data.
- Opt out of marketing emails at any time.
- Manage cookie and analytics preferences via Your Privacy Choices.
Security and retention
We use encryption in transit and at rest, access controls and audit logging. Health records are retained for the period required by applicable law.
HIPAA and protected health information (PHI)
Health information you provide through the medical intake — for example, medical history, medications, symptoms, and lab results — is protected health information (PHI) when it is created, received, or maintained by or on behalf of the independent licensed healthcare providers and licensed pharmacies that provide your care.
How PHI is handled: Luun shares PHI only as needed with the independent licensed providers who review your intake and, if they prescribe, with the licensed pharmacy that dispenses your medication, and with service providers that help us operate the service — for treatment, payment, and healthcare operations, or as otherwise permitted or required by law. We do not sell PHI and we do not use PHI for advertising.
Business associate agreements are in place with partner providers, pharmacies, and service providers where required by HIPAA.
PHI is protected with administrative, technical, and physical safeguards, and access is limited to people who need it.
Your rights under HIPAA
- Access and obtain a copy of your health information.
- Request an amendment to your health information.
- Receive an accounting of certain disclosures.
- Request restrictions on certain uses and disclosures.
- Request confidential communications.
- Receive a paper copy of the notice of privacy practices.
You can send requests to privacy@luunhealth.com. Requests may be coordinated with the treating provider or pharmacy that maintains the record. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights; we will not retaliate for filing a complaint.
Breach notification
If a breach of unsecured PHI occurs, affected individuals will be notified as required by HIPAA and applicable state law, without unreasonable delay.
State consumer health data privacy laws
Some information — for example, quiz and assessment answers, or browsing information that could reveal health status — may be "consumer health data" under state laws, including Washington's My Health My Data Act, Nevada's consumer health data law (SB 370), Connecticut's consumer health data provisions (Connecticut Data Privacy Act), and California law (CCPA/CPRA, including sensitive personal information, and the Confidentiality of Medical Information Act where it applies).
We collect and share consumer health data only with your consent or as necessary to provide the service you request. We do not sell consumer health data, and we do not use geofencing around healthcare facilities.
Residents of these states may have rights to confirm whether we collect, share, or sell their consumer health data, to access it, to obtain a list of third parties and affiliates it was shared with, to withdraw consent, to request deletion, and to appeal a denied request. Send requests to privacy@luunhealth.com. We will not discriminate against you for exercising these rights.
Privacy contact
For questions, to exercise any right described on this page, or to report a privacy concern, email privacy@luunhealth.com.