Join Our Network
Get a Consultation

eLuma, LLC Privacy Policy

Last updated: November 3, 2026

Introduction

eLuma, LLC (“eLuma,” “we,” “us,” or “our”) provides special education services, including speech-language pathology, occupational therapy, school counseling, school psychology, and specialized instruction, to K–12 school districts and educational agencies (“Schools”) across the United States.

This Privacy Policy describes how we collect, use, disclose, and safeguard personal information of students, parents and guardians, educators, school personnel, clinicians, job or network applicants, and other individuals who visit our websites (including eluma.com and any related eLuma-operated web properties), use our platforms, or interact with us in the course of delivering or receiving our services. “Personal information” means information that uniquely identifies, relates to, describes, or is reasonably capable of being associated with or linked to you.

Personal information that directly relates to an identifiable student that we receive from a School or that we collect on behalf of a School (“Student Data”) is owned and controlled by the specific School. When the School is subject to the Family Educational Rights and Privacy Act of 1974 (“FERPA”), we create and receive such data as a “school official’ under FERPA. Our collection, use, and disclosure, and data subject rights with respect to Student Data are governed by this Privacy Policy, Data Processing Agreements (or similar contractual instruments) that we enter into with the Schools, as well as applicable federal and state laws, which, in addition to FERPA, may include California’s Student Online Personal Information Protection Act (SOPIPA), New York Education Law § 2, and other state Student Data privacy laws, including those in Colorado, Connecticut, Illinois, Texas, Utah, and Washington (collectively, the “Education Laws”). With respect to Student Data, if there is a conflict between this Privacy Policy, the applicable Data Processing Agreement, and applicable Education Laws, the requirements of the Education Laws and the Data Processing Agreements shall govern. Our Data Processing Agreements with the Schools are tailored to address applicable state requirements and commonly address breach notification timelines, use of subcontractors and notices, data location, security standards, retention and deletion of Student Data, and restrictions on our use of Student Data.

By accessing or using our websites or services, you acknowledge that you have read and understand this Privacy Policy.

1. Information We Collect

We collect personal information about you from several sources depending on the nature of your interaction with us:

a. Information You Provide Directly

We collect personal information when you voluntarily submit it to us, including when you:

  • Request a consultation, demo, or more information about our services
  • Fill out forms on our website (including contact forms, newsletter sign-ups, or assessment tools)
  • Register for webinars, events, or professional development offerings
  • Apply to become a clinician or join our provider network
  • Communicate with us by phone, email, or text message

The personal information we may collect includes: full name, job title, employer or school district name, email address, mailing address, phone number, and any other information you choose to provide. If you have applied for employment or to join our provider network, personal information collected may include your resume, employment history, education and professional experience, and any other information you provide to us.

b. Automatically-Collected Information

When you use our websites, we automatically collect certain technical and usage information, including your IP address, browser type and version, operating system, referring and exit URLs, pages viewed, time spent on pages, clickstream data, device identifiers, and general geographic location inferred from your IP address.

This information is collected using cookies, web beacons, pixels, log files, and similar tracking technologies. Please see Section 4 (Cookies and Tracking Technologies) for more details.

We collect technical data needed to operate and secure the platform. When this data relates to a student, it is Student Data and is never used for advertising.

c. Information From Third Parties

We may receive information about you from third parties, including business partners, marketing data providers, social media platforms (such as LinkedIn), and public sources. We may combine this information with data we have collected directly from you.

Schools may provide us with personal information of their staff members related to the services, such as: name and contact information, school, employer, professional affiliation, or any other information necessary to coordinate or administer the services.

If you applied for employment or to become part of our clinician network, we may also receive information from recruiters, professional references, and credentialing or background service providers.

d. Student Data

eLuma receives Student Data from Schools only on behalf of, and as authorized by, the School. Such data is subject to FERPA or other Education Laws, when applicable, and our receipt of the Student Data is for a legitimate educational interest.

eLuma may also collect or receive Student Data directly from Students or their parents or guardians when relevant to the services, including student names, dates of birth, parent or guardian names and contact information, individualized-education program (“IEP”) or Section 504 plan information, academic and behavioral information, and other information necessary to provide the services.

During teletherapy and related services, eLuma’s platform may capture session-related data, including session notes, progress records, and service logs. We do not routinely record the audio or video content of teletherapy sessions. If recording is proposed for a particular purpose or with respect to a specific School authorization, such recording will only take place after the School obtains any consents or authorizations required by applicable law and after all other School and legal requirements are met.

2. How We Use Your Information

We use the personal information we collect for the following purposes, subject to the limitations described in this Privacy Policy:

  • To respond to inquiries and provide information about our services
  • To deliver, operate, maintain, and improve our websites, platform, and services, including, as applicable, for purposes requested by the Schools and to provide customer support
  • To communicate with you, including by email, phone, and — with your consent where required — by text message
  • To send marketing communications, newsletters, and promotional content (you may opt out at any time)
  • To personalize your experience and deliver content relevant to your role and interests
  • To administer webinars, events, and professional development programs
  • To analyze usage trends and improve website performance
  • To protect against fraud, unauthorized access, and misuse of our services, including to enforce security access controls
  • To comply with applicable law, regulation, and legal process, as well as our contractual commitments
  • To enforce our Terms of Use and other agreements
  • For any other purpose disclosed to you at the time of collection or with your consent.

If you have applied for a job or to be part of our provider network, we may use your personal information to: evaluate your application and qualifications; communicate with you; schedule and conduct interviews; verify professional credentials, education, references, and employment history; conduct lawful background, credentialing, or screening processes; assess suitability for employment or contracting opportunities; maintain recruiting and hiring records; comply with legal, regulatory, licensing, and reporting obligations; and consider applicants for future opportunities, where permitted by law. Submission of an application does not create an employment or contractual relationship.

We do not use Student Data or any other personal information collected from Schools or School users (such as staff members) for marketing or advertising purposes. We do not sell, rent, or otherwise disclose Student Data to third parties, use or disclose Student Data to inform, influence, or enable targeted advertising to a Student based on Student Data or information, or use Student Data for any commercial purpose other than to provide the services to the Schools or as permitted by applicable Education Laws. We do not use Student Data to amass a profile about any student, unless in furtherance of contracted services provided by eLuma to the relevant School.

It is used solely to provide contracted services and is accessible only to authorized clinicians and School personnel.

Student Data is used solely to provide contracted services to the School and its students, including to improve and ensure the effective operation and delivery of our services and customer support, and is accessible only to authorized eLuma personnel and clinicians and School personnel. Student Data used to improve services is de-identified; we do not attempt to re-identify it; we do not use it to train AI models unless the School’s contract permits.

Use of Artificial Intelligence

eLuma uses artificial intelligence (“AI”) tools to support our services and business operations. For example, we use AI to help draft and summarize documents, schedule, research prospective customers, and improve how our websites and services work. When we use AI, we apply the following safeguards:

  • Approved tools only. We use only AI tools that eLuma has reviewed and approved and that eLuma administers under a business contract.
  • No model training on your data. The contracts for AI tools that process personal information prohibit the vendor from using that information to train or improve its AI models. eLuma does not use Student Data to train AI models.
  • Limits for Student Data. AI tools may process Student Data only when the tool is part of, or approved to connect to, the system that holds that data, and only when the School’s agreement with eLuma permits it. We do not put Student Data into general-purpose AI assistants.
  • People make the decisions. AI does not make, and is not the sole basis for, decisions about a student’s eligibility, evaluation, services, IEP goals, progress or placement. Licensed clinicians and School personnel make those decisions.
  • No AI notetakers in student sessions. We do not use AI notetakers, transcription tools or recording assistants in teletherapy sessions, evaluations, IEP meetings or family conferences. The only exception is an eLuma platform feature that has completed our review, that the School’s agreement authorizes, and for which any required parent or guardian consent has been obtained.
  • Telling Schools. We tell Schools about AI features in our platform that process their Student Data, consistent with our Data Processing Agreements.
  • Meetings and calls. When we use AI to record, transcribe or summarize a meeting or call with you, we tell participants. We follow applicable laws on recording consent

3. How We Share Your Information

We may share personal information in the following circumstances:

a. Employees and Other Personnel

We may share personal information with our employees and personnel (such as contractors) who have a need to know the information for our business purposes.

b. Service Providers

We may share your information with third-party vendors and service providers that perform services on our behalf, who have a legitimate need to receive such information in order to assist us in providing or supporting the services, such as website hosting, email delivery, customer relationship management, analytics, marketing tools, and payment processing. These providers are contractually required to protect your information and may only use it in a manner consistent with this Privacy Policy, applicable law, and when relevant with respect to Student Data, the Data Processing Agreements and Education Laws.

c. Schools and Authorized Users

Student Data is shared with the applicable School and its authorized personnel (including administrators and teachers) as needed to deliver and support contracted services, consistent with FERPA and our Data Processing Agreement with the School and applicable Education Laws.

d. Business Partners

We may share information with trusted business partners to offer joint products, services, or events, only with your consent, where required by law.

e. Legal Compliance and Protection

We may disclose your information if required by law, regulation, court order, or valid legal process, to protect our rights in a legal dispute, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of eLuma, our clinicians, our users, or the public.

f. Business Transactions

In the event of a merger, acquisition, financing, reorganization, or sale of assets at eLuma, your information may be transferred to a successor entity, provided that the successor entity will be required to comply with the privacy protections in this Privacy Policy with respect to information collected under this Privacy Policy. Student Data will continue to be subject to the terms of the relevant Data Processing Agreements. When legally required, we will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

g. With Your Consent

We may share your information for other purposes with your explicit consent, or as otherwise disclosed to you at the time of collection.

4. Cookies and Tracking Technologies

What We Use

We use cookies, pixels, web beacons, and similar technologies on our websites. These tools help us operate and improve our services, understand how visitors interact with our sites, and deliver relevant content. The categories we use include:

  • Strictly Necessary Cookies — Required for core website functionality; cannot be disabled.
  • Analytics Cookies — Help us understand how visitors use the site (e.g., Google Analytics).
  • Marketing/Advertising Cookies — Used to measure campaign effectiveness and deliver relevant content (e.g., LinkedIn Insight Tag, Meta Pixel, HubSpot).
  • Functional Cookies — Enable enhanced features and personalization.

Your Cookie Choices

When you first visit our website, you will see a cookie consent banner that lets you accept or decline cookies. Most browsers allow you to control cookies through your browser settings.

We use analytics and session replay services, that use cookies and other technologies that collect your personal information, to assist us with analyzing our website traffic and usage to optimize, maintain, and secure our website and inform subsequent business decisions (including, e.g., advertising). These include, but are not limited to, the following third-party services:

  • Google: We use Google Analytics to collect analytic data about your use of the website and provide remarketing. To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data from sites or apps that use our services.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites. Additionally, third parties, including Google (through, for example, our use of Google Dynamic Remarketing), may place and read cookies on your browser, or use web beacons to collect information in connection with ad serving on or through the website, including for the purposes of showing our ads on sites across the internet. Our partners may collect personal information for personalization of ads and may use first-party cookies or other first-party identifiers and third-party cookies and other third-party identifiers for personalized and non-personalized advertising and measurement. Ad serving may be based on users’ visits to our website or other websites on the Internet, and your activity may be tracked over time and across websites. You can opt out of Google’s use of cookies or device identifiers by visiting the Google Ads Settings web page at: https://www.google.com/ads/preferences/. You can opt out of a third-party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page or control the use of device identifiers by using your device’s settings.
    • Meta Pixels: We use Meta pixels to track user activity on our website and improve downstream offerings, including interest-based advertising for our services and those of our partners and service providers. We further use the Meta Pixel to analyze user activity on our website for remarketing and behavioral targeting. The Meta Pixel may be triggered when you perform certain activities on the website, and aids us in displaying Facebook ads to Facebook users who have visited our website, or Facebook users who share certain characteristics with visitors to our website. Meta and other third parties may use cookies, web beacons, and other storage technologies to collect information from the website and from other internet websites, and use that information for the purposes of targeting ads and providing measurement services. Meta may track your activity over time and across websites. For more information about the data Meta collects, please visit Meta’s privacy policy at: https://www.facebook.com/privacy/policy/. For specific information about Meta Pixel, please visit: https://www.facebook.com/business/help/742478679120153?id=1205376682832142. For more information about ad targeting and exercising your choice to opt out of the collection and use of information for ad targeting, please visit: https://www.facebook.com/help/568137493302217, or https://optout.aboutads.info/?c=2&lang=EN.

You may also use industry opt-out tools at the Network Advertising Initiative (https://optout.networkadvertising.org) and the Digital Advertising Alliance (https://optout.aboutads.info). Please note that even if you opt out of interest-based advertising, you may still see “contextual” ads which are based on the context of what you are looking at on the websites and pages you visit.

Do Not Sell or Share / Global Privacy Control

eLuma does not sell personal information. Certain third-party advertising technologies we use (including Meta Pixel, LinkedIn Insight Tag, and HubSpot tracking) may constitute “sharing” of personal information for cross-context behavioral advertising under applicable law, even absent monetary exchange. You may opt out of such sharing by:

  • Using the cookie consent banner on our website to decline marketing/advertising cookies; or
  • Submitting a request to privacy@eluma.com with the subject line “Do Not Share My Personal Information.”

eLuma honors Global Privacy Control (GPC) signals. If your browser transmits a GPC signal, we will treat it as a request to opt out of the sale or sharing of your personal information and will disable non-essential tracking for your session. We do not currently respond to legacy browser “Do Not Track” signals, as no universal standard has been established.

5. Text Messaging

Opt-In Consent

eLuma may send text messages (SMS) to individuals who have opted in to receive them. Opt-in consent is obtained through one of the following mechanisms:

  • Checking an opt-in checkbox on a web form hosted on eluma.com (the checkbox is unchecked by default and the consent language is displayed adjacent to the checkbox);
  • Verbally confirming consent during a phone call with an eLuma representative, which is documented by eLuma;
  • Providing consent through text message, or
  • Submitting a written request to receive text message communications.

Your consent to receive text messages is not a condition of purchasing any product or service from eLuma.

Types of Messages

eLuma may send the following categories of text messages to opted-in recipients:

  • Transactional messages: appointment confirmations, scheduling reminders, and service updates
  • Operational messages: urgent service notifications and platform status updates
  • Marketing messages: promotional communications about eLuma services and events (only with separate express written consent and such communications are never sent to Students)

Message Frequency and Rates

Message frequency varies depending on your opt-in preferences and service activity. Message and data rates may apply based on your carrier plan.

Opt-Out and Help

You may opt out of text messages at any time by replying STOP to any message you receive from us. After opting out, you will receive one final confirmation message and no further messages will be sent, unless you re-opt-in. For assistance, reply HELP or contact us at privacy@eluma.com.

No Third-Party Sharing

eLuma does not share your mobile phone number or your consent to receive text messages with third parties for their own marketing purposes. Carriers are not liable for delayed or undelivered messages.

6. FERPA and HIPAA

eLuma provides teletherapy and related services to K–12 school districts, including mental and behavioral health counseling, school psychology, and speech-language pathology.

eLuma has a legitimate educational interest in the records necessary to perform contracted services and is under the direct control of the School with respect to the use and maintenance of those records. As such, Student Data, including clinical records that may be created by eLuma’s contracted clinicians and licensed professionals is often subject to FERPA and may only be used and disclosed by eLuma in accordance with the Data Processing Agreement that eLuma has entered into with the relevant School.

eLuma’s contracted clinicians are licensed professionals who are individually responsible for compliance with applicable professional licensing laws and ethical standards. In some limited instances, clinical records created by eLuma’s contracted clinicians may be subject to the Health Insurance Portability and Accountability Act of 1996, and the implementation regulations thereunder (“HIPAA”), instead of FERPA. In such instances, eLuma’s use and disclosure of such clinical records, and your rights with respect to such clinical records, will be governed by the relevant clinician’s HIPAA Notice of Privacy Practices.

Nothing in this Privacy Policy is intended to characterize all student therapy or health-related information as either an education record under FERPA or protected health information under HIPAA. The applicable legal framework depends on the particular relationship, record, service, and entity involved.

Parental and Student Rights Under Education Laws

When applicable, FERPA and other Education Laws, grant parents and legal guardians and students (18 year or older) certain rights with respect to their information. Parents and guardians seeking access to, amendment of, or other rights concerning Student Data should generally submit their requests to the applicable School. We will reasonably cooperate with the School in responding to such requests. If eLuma receives a FERPA or Education Law-related request directly from a parent or eligible student, we will refer that individual to the applicable School and notify the School of the request.

7. Children’s Privacy (COPPA)

Our Websites Are Not Directed to Children

eLuma’s public-facing websites and business services are directed to K–12 school districts, administrators, clinicians, and other adult professionals — not to children under 13. We do not knowingly collect personal information directly from children under the age of 13 through our public-facing websites.

Student Data Received Through Schools

All Student Data that eLuma collects or receives in connection with delivering the contracted services is collected by eLuma or delivered to us by the Schools pursuant to Data Privacy Agreements. Schools that use eLuma’s services and serve children under 13 are responsible for compliance with the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, including obtaining any required verifiable parental consent or consent on behalf of the parent or guardian (when permitted by appliable law) prior to providing Student Data to eLuma.

During live sessions, eLuma’s platform transmits audio and video in real time between the student and the clinician. [Audio and video are not stored. / Audio and video are stored only when recording is enabled as described in Section 1(d).] The platform also collects session records (attendance, start and end times, service minutes), in-session content such as chat, whiteboard and shared materials, and technical data (IP address, device and browser information) needed to connect and secure the session. This data is Student Data and is used only to deliver and document the contracted services. Third-party AI notetakers and transcription tools are not used in student sessions.

Deletion Requests and Questions

If we become aware that a child under 13 has submitted personal information directly to eLuma outside of our service delivery process (e.g., through a public contact form), we will delete that information promptly. To request deletion, contact privacy@eluma.com with “COPPA Request” in the subject line. Parents or guardians with questions about their child’s participation in eLuma services should contact the child’s School directly.

8. Privacy Rights

eLuma is committed to honoring privacy rights under applicable state law. Depending on where you live, you may have the following rights with respect to your personal information under applicable privacy laws:

  • Right to Access — Request access to and a copy of the categories and specific personal information we have collected about you, including the sources of such information.
  • Right to Delete — Request deletion of personal information we have collected, subject to certain exceptions.
  • Right to Correct — Request correction of inaccurate personal information, subject to certain exceptions.
  • Right to Opt Out of Certain Processing — : (a) Opt out of the processing of your personal information for purposes of targeted advertising, (b) opt out of the sale or sharing of your personal information; (c) limit the use of your sensitive personal information (if applicable), and (d) opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not collect or process sensitive personal information outside of purposes permitted by law (such as section 7027(m) under the California Consumer Privacy Act Regulations), so we do not offer the option to limit its use. We also do not profile you or other individuals in a manner that would result in legal or similarly significant effects, so we do not offer an opt out.
  • Right to Object/Restrict Certain Processing – Object or restrict us from processing your personal information in certain circumstances.
  • Right to Withdraw Consent – Where we are relying on your consent to process your personal information, you may withdraw your consent.
  • Automated Decision-Making – The right to know when you are subject to automated decision-making, the personal information used to render the decision, the principal factors and parameters involved in the decision, and human review or correction of the decision (or its underlying data, where appropriate). You may also have the right to consent or opt out of this automated decision-making, depending on your location.
  • Lodge a Complaint – The right to lodge a complaint with a supervisory authority or other regulatory agency if you believe we have violated any of the rights afforded to you under applicable data protection laws. We encourage you to first reach out to us so we have an opportunity to address your concerns directly before you do so.

For California Residents Only – California Shine the Light – Under California Civil Code Section 1798.83, individuals who reside in California and who have an existing business relationship with us may request information about our disclosure of certain categories of personal information to third parties for the third parties’ direct marketing purposes, if any. To make such a request, please contact us at privacy@eluma.com. Please be aware that not all information sharing is covered by these California privacy rights requirements and only information on covered sharing will be included in our response. This request may be made no more than once per calendar year.

To exercise any of these rights, contact privacy@eluma.com or call us at 877-496-3332. We will respond within the timeframe required by applicable law. You may also exercise your opt out rights by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). We honor Opt-Out Preference Signals, including GPC. If you choose to use an Opt-Out Preference Signal, you will need to turn it on for each supported browser or browser extension you use.

You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Privacy Policy; however, should you withdraw your consent or object to processing of your personal information, or if you choose not to provide certain personal information, we may be unable to provide some, or all, of our services to you.

We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.

In California, speech-language pathology and behavioral/mental health services are provided by eLuma Medical Therapies, P.C. and eLuma Speech and Language Therapy, P.C., independently owned and operated professional corporations.

9. International Users

Our website and platform are operated and hosted in the United States and are intended for use by individuals solely from within the United States. We do not provide services outside the United States.

10. Data Security

eLuma implements commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to maintain commercially reasonable safeguards, we cannot guarantee absolute security. If you believe your information has been compromised, contact us immediately at privacy@eluma.com.

Data Breach Notification

In the event of a privacy or security incident that affects your personal information and triggers notification requirements under applicable law, eLuma will provide notice to affected individuals, applicable Schools, and regulatory authorities in accordance with those requirements and, when Student Data is potentially impacted, the applicable Data Processing Agreements with the relevant School.

11. Data Retention and Destruction

eLuma retains personal information for as long as necessary to fulfill the purposes for which it was collected, described in this Privacy Policy, to comply with legal and contractual obligations, to resolve disputes, and to enforce our agreements. Retention periods vary by data category:

  • Business contact and prospect data (e.g., leads, demo request records): retained while the relationship is active and for a reasonable period thereafter, subject to opt-out requests.
  • School customer records: retained for the duration of the contract and as required by applicable law and record-keeping obligations.
  • Student and education records: retained only for the duration of the applicable Data Processing Agreement, unless a longer period is required by law or requested in writing by the School. Upon termination, Student Data is deleted or de-identified in accordance with the agreement. Individual licensed clinicians may retain their clinical records for a longer period of time to comply with applicable state record retention laws.
  • Website analytics data: retained in accordance with the data retention policies of applicable third-party analytics providers (e.g., Google Analytics default retention settings).
  • Employee and Provider Network Applicants: Applicant information may be retained after a hiring decision for purposes such as maintaining recruiting records, complying with legal requirements, resolving disputes, or considering an applicant for future opportunities, to the extent permitted by law.
  • Legal hold: records subject to litigation hold are retained until the hold is lifted, regardless of standard retention periods.

When personal information is no longer reasonably necessary and retention is not otherwise required or authorized, we will delete, de-identify, return, or securely dispose of it in accordance with applicable law, contractual obligations, and our retention procedures.

To request deletion of your personal information, contact privacy@eluma.com. Requests are subject to applicable legal obligations and exceptions.

12. Third-Party Websites and Services

Our website may contain links to third-party websites, tools, and services, including social media platforms and educational technology providers. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. eLuma is not responsible for the privacy practices or content of third-party websites.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or eLuma’s privacy practices, please contact us:

Email: privacy@eluma.com

Mailing Address:

eLuma, LLC
Attn: Privacy Officer
1633 W Innovation Way
Floor 5
Lehi, UT 84043

If you are reporting a security concern, include “Security Concern” in the subject line.

For California-specific requests, include “California Privacy Request” in the subject line.

For COPPA-related requests, include “COPPA Request” in the subject line.

For New York Education Law § 2-d inquiries, include “NY Ed Law 2-d” in the subject line.

For clinical services delivered in California, the licensed professional corporation, not eLuma, LLC, is responsible for clinical records and is the HIPAA-covered entity where applicable.

14. Changes to This Privacy Policy

eLuma may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email or by posting a prominent notice on our website.

Your continued use of our websites or services after any changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.