Privacy Policy
Last updated: October 28, 2026
This policy explains how DC Northern Holdings LLC d/b/a LightenMD ("LightenMD," "we") collects, uses and protects information when you use lightenmd.com and our services.
Health information and HIPAA
Health information you provide for medical care, such as questionnaire answers, health history and prescriptions, is collected on behalf of and maintained by an independent, physician-owned medical group that partners with LightenMD (the "Medical Group"), and its pharmacy partners. They are covered by the Health Insurance Portability and Accountability Act (HIPAA). When LightenMD handles that information, we do so as their business associate under a written agreement and only to support your care. The Medical Group's Notice of Privacy Practices, which describes your HIPAA rights, is provided during sign-up.
Information we collect
- Account and contact: name, email, phone, shipping address, state.
- Billing: membership plan and payment status. Card numbers are handled by our payment processor; we don't store full card numbers.
- Waitlist: first name, email, state and the programs you're interested in.
- Usage: device, browser and pages visited, through cookies and similar tools.
How we use it
- To run your membership: account, billing, shipping coordination and support.
- To send service messages, and, with your permission, marketing emails you can unsubscribe from at any time.
- To keep the platform secure and improve it.
- To meet legal obligations.
What we don't do
- We don't sell your personal information or your health information.
- We don't share health information with advertising platforms. Ad and analytics tools are not used on pages where you enter health information.
Who we share with
We share information only with service providers that help us operate, such as the Medical Group, pharmacies, payment processors, shipping and email providers, under contracts that limit their use of it. We may also share it when required by law or to protect safety.
Your choices and rights
You can access, update or delete your account information, and unsubscribe from marketing emails, by contacting support@lightenmd.com. Depending on your state, you may have additional rights to know, correct or delete personal information, and we'll honor them as required by law. HIPAA rights for your medical records are handled by the Medical Group.
Security
We use administrative, technical and physical safeguards appropriate to the information we handle. No system is perfectly secure, so please keep your login credentials private.
Retention
We keep information as long as needed to provide services and meet legal, tax and accounting requirements. Medical records are retained by the Medical Group as required by law.
Children
Our services are for adults 18 and over. We don't knowingly collect information from children.
Changes and contact
We'll post updates here and notify you of material changes. Questions: support@lightenmd.com.