Medluxe Instute Privacy Policy

Last updated: February 2, 2026

1) Who we are and what this policy covers

This Privacy Policy explains how MedLuxe Institute (“MedLuxe,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you interact with:

• our website (medluxeinstitute.com) and any pages we operate on it;
• our lead and inquiry forms (including “request information” / “course interest” forms);
• our communications (email, phone, text/WhatsApp where applicable) related to courses, trainings, and events.

This policy applies to prospective students, attendees, customers, and website visitors.

Important: MedLuxe Institute is an education/training provider. This website is not intended for medical diagnosis or treatment.

Business details (required for publishing):

• Legal entity name: MedLuxe Institute
• Country of formation: United States (US)

2) Information we collect

We collect information in three main ways: (1) information you provide, (2) information collected automatically, and (3) information from third parties.

2.1 Information you provide to us

A) Lead / inquiry forms (course interest): When you fill out a lead form such as:

“Fill in your details and one of our advisors will contact you to help you choose the best course for you.”

…we may collect:

• Full name
• Email address
• Phone number (including country code)
• Course of interest (e.g., MSK Joint Injection – Large Joints; MSK Joint Injection – Small Joints; Regenerative Comprehensive Course; Peptide Therapy)
• Message / comments (optional)
• Consent confirmation (that you accept the Privacy Policy and Terms & Conditions and agree to be contacted with information about courses)

B) Enrollment / registration (if offered on the website): If you register for a course, request a seat, or complete a purchase, we may collect:

• Registration details (name, email, phone)
• Course selection and schedule preferences
• Billing information (billing name and billing contact details)
• Payment details (processed by third‑party payment processors — we do not store full card numbers)
• Professional eligibility data (e.g., license status, credentials) if a course is restricted to licensed providers

Payment processor(s): Payments (if available) are processed by third‑party payment processors integrated through our checkout platform (e.g., SureCart) and/or other payment providers presented to you at checkout. We do not store full payment card numbers.

C) Communications: If you contact us by email, phone, text, or through social media, we may collect:

• the content of your message and related metadata (date/time, sender details);
• records of communications and follow‑ups.

2.2 Information collected automatically

When you visit our website, we may automatically collect:

• Device and log data (IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, date/time, approximate location derived from IP)
• Usage data (how you interact with pages, clicks, time on page, navigation paths)

We may use cookies and similar technologies to support site functionality, remember preferences, measure performance, and (if enabled) support marketing/advertising.

2.3 Information from third parties

We may receive information from:

• Service providers that help us run our website, manage leads, communicate with you, process payments, or measure performance.
• Marketing platforms (if you engage with our ads or campaigns).

3) How we use your information

We use personal information to:

1. Respond to your inquiry and contact you about the course(s) you selected.
2. Provide course information and help you choose the best training option.
3. Manage enrollment and attendance (if registration/purchasing is offered).
4. Send operational communications (e.g., confirmations, schedule updates, reminders, required materials).
5. Improve our website and offerings (analytics, quality improvement, troubleshooting, security).
6. Prevent spam and abuse (including automated spam filtering on forms).
7. Comply with legal obligations and enforce our Terms & Conditions.

4) Legal bases for processing (EEA/UK visitors)

If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases as applicable:

• Consent (e.g., when you submit a lead form and consent to be contacted, or when you accept non‑essential cookies).
• Contract (e.g., when processing enrollment, providing access to paid training, and delivering services you request).
• Legitimate interests (e.g., improving our services, preventing fraud/spam, maintaining site security, responding to business inquiries).
• Legal obligation (e.g., accounting, compliance, or responding to lawful requests).

5) How we share your information

We do not sell your personal information.

We may share personal information in limited situations:

5.1 Service providers (processors)

We may share information with vendors that help us operate our business, such as:

• CRM and lead management (e.g., GoHighLevel) to store and manage inquiries and follow‑ups.
• Automation / integrations (e.g., Zapier webhooks) and/or routing to internal tools.
• Internal tracking sheets (e.g., Google Sheets) when used to log leads and campaign performance.
• Email and communications providers to send messages and reminders.
• Spam prevention tools on forms (e.g., Akismet) to detect and reduce spam submissions.
• Website hosting and infrastructure providers.
• Analytics providers (if enabled) to understand website performance.
• Payment processors (if paid registration is available) to process transactions.

Provider list (may include, depending on what is enabled on the website): WordPress (site platform), Elementor (site builder), LearnPress (learning management), Ultimate Member (user accounts), Contact Form 7 (forms), Akismet (spam prevention), SureCart (checkout/cart), and hosting/infrastructure and email/communications providers used to operate the site and respond to inquiries.

5.2 Instructors, staff, and partners (limited access)

We may share limited information with internal staff, contractors, instructors, or operational partners strictly as needed to:

• respond to you;
• manage your registration;
• deliver the training;
• provide support.

5.3 Legal and safety

We may disclose information if we believe it is necessary to:

• comply with applicable law, regulation, or legal process;
• protect rights, safety, and security of MedLuxe, our users, and others;
• prevent fraud or abuse.

5.4 Business transfers

If we undergo a business transaction (e.g., merger, acquisition, asset sale), personal information may be transferred as part of that transaction, subject to appropriate safeguards.

6) Marketing communications and your choices

If you submit a lead form and consent to be contacted, we may contact you with course information by email, phone, SMS, or messaging apps where applicable.

You can opt out of marketing communications at any time by:

• using the unsubscribe link in our emails (if present);
• replying “STOP” to SMS (if used);
• contacting us at the email listed in Section 13.

Operational messages related to an existing registration (e.g., confirmations, schedule changes) may still be sent even if you opt out of marketing.

7) Cookies and similar technologies

We may use:

• Essential cookies (required for site operation)
• Preferences cookies (remember settings)
• Analytics cookies (measure performance)
• Marketing cookies (if enabled, for advertising and remarketing)

You can control cookies through your browser settings and, where implemented, through a cookie banner/preferences tool.

Cookie banner / consent tool: At this time, cookie controls are primarily managed through your browser settings. If we implement a cookie consent tool in the future, it will be available on the website.

8) Data retention

We keep personal information only as long as needed for the purposes described in this policy, including:

• to respond to inquiries and maintain business records;
• to manage enrollment and provide services;
• to comply with legal obligations.

Retention timeframes (general):

• Leads / inquiries: up to 24 months from the last interaction.
• Student accounts / training records: for the duration of the account and up to 7 years thereafter (or longer if required for compliance or dispute resolution).
• Transaction and billing records (if applicable): up to 7 years.
• Security/technical logs: typically up to 12–18 months.

We may retain certain minimal records for longer where necessary to honor opt‑out requests, comply with legal obligations, or protect our rights.

9) Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of transmission or storage is 100% secure.

10) International data transfers

If your information is processed outside your country of residence, we take steps to provide appropriate safeguards where required by law (such as contractual protections).

11) Your rights and choices

Depending on your location, you may have rights to:

• access your personal information;
• correct inaccurate information;
• delete information (subject to legal exceptions);
• object to certain processing;
• restrict processing;
• data portability;
• withdraw consent (where processing is based on consent).

11.1 U.S. State privacy rights

If you are a resident of certain U.S. states (e.g., California, Colorado, Connecticut, Utah, Virginia), you may have additional rights, including the right to know the categories of personal information collected and to opt out of certain sharing for targeted advertising.

• Sale of personal information: We do not sell personal information.
• Targeted advertising / “sharing”: We may share limited identifiers and internet activity information with advertising and analytics partners (for example, Meta/Facebook and Google) to measure performance and, where enabled, deliver or optimize advertising. You may opt out by adjusting cookie settings in your browser and by contacting us as described in Section 13.

To exercise your rights, contact us as described in Section 13.

12) Children’s privacy

Our website and services are not intended for children under 13 (or a higher age threshold where required by law). We do not knowingly collect personal information from children.

13) Contact us

For privacy questions or requests, contact:

• Email: info@medluxeinstitute.com

Privacy request workflow: Email us with the subject line “Privacy Request” and include (1) your full name, (2) the email address you used with us, and (3) a clear description of your request (access, deletion, correction, opt‑out, etc.). We may ask for additional information to verify your identity before processing certain requests.

14) Changes to this Privacy Policy

We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date above.

---

Effective Date: February 2, 2026