Privacy Policy

1. Scope of this policy

This policy covers lumiclinics.org, the website operated by LumiClinics Behavioral Wellness Center at 614 Academy Dr., Northbrook, IL 60062.

It does not replace the separate rules that apply to protected health information created or received while providing care. Appointment booking and the patient portal are provided through IntakeQ. Information submitted through those systems is handled under our healthcare privacy obligations and our agreements with that provider.

2. Information we collect

Information you give us

When you submit a form on this site, we collect what you enter. That may include your name, phone number, email address, who the appointment is for, your insurance carrier, and any note you choose to add.

We ask you not to include clinical details, diagnoses or medication information in website forms. Website form submissions travel by email and are not an appropriate channel for sensitive health information. Use the patient portal for anything clinical.

Information collected automatically

• Standard server and request data such as IP address, browser type, device type, referring page and the pages you visit
• Aggregate website usage information collected by the analytics service described in section 5

Information we do not collect here

We do not ask for Social Security numbers, insurance member ID numbers, payment card details or clinical records through this website.

3. How we use it

• To respond to your request, call you back and schedule care
• To check what your insurance plan covers before you commit to an appointment
• To operate, secure and improve the website
• To understand which pages help people find the practice
• To meet legal, regulatory and professional obligations

We do not sell your personal information, and we do not share it with third parties for their own independent marketing.

4. When we share it

We share information only in these circumstances.

• Service providers. Vendors that host the site, deliver form submissions, process bookings and provide analytics, each under contract and only for the purpose we engaged them for
• Legal requirements. When required by law, subpoena, court order, or to respond to a lawful request from a government authority
• Safety. When we believe disclosure is necessary to prevent serious harm to you or another person, consistent with our professional and legal obligations
• Business transfer. If the practice is ever acquired or reorganized, information may transfer as part of that transaction, subject to this policy

5. Analytics and third-party services

This website uses Fathom Analytics to understand how visitors find and move through the site. Fathom provides aggregate measurements without using cookies or tracking visitors across unrelated websites. It records information such as page views, referring sources, device type, and general geographic region.

Fathom does not receive the information you type into a form. IntakeQ widgets and links are provided by IntakeQ and may use technologies governed by IntakeQ's privacy terms and its agreements with LumiClinics.

6. HIPAA and your health information

LumiClinics Behavioral Wellness Center is a covered entity under the Health Insurance Portability and Accountability Act. Protected health information created or received in the course of your care is governed by HIPAA and by our Notice of Privacy Practices, which describes how that information may be used and disclosed and the rights you have over it.

The Notice of Privacy Practices is a separate document from this website policy. It explains permitted uses and disclosures of protected health information, our duties, and your rights. You can obtain a current copy at the front desk, by calling (847) 769-4500, or by emailing info@lumiclinics.org.

Mental health and substance use records carry additional protections under Illinois law, including the Illinois Mental Health and Developmental Disabilities Confidentiality Act. Where state law is more protective than federal law, the more protective standard applies.

7. Your choices and rights

• Access and correction. Ask about the website inquiry information we maintain about you or ask us to correct it
• Deletion. Ask us to delete a website inquiry, subject to records we must retain for legal, clinical, billing, security, or compliance reasons
• Email. Unsubscribe from nonclinical promotional email, if offered. We may still contact you about appointments, care, or a request you made
• Health record rights. Rights over your medical record, including access, amendment and an accounting of disclosures, come from HIPAA and are described in the Notice of Privacy Practices

To exercise any of these, contact us using the details in section 10.

8. Security and retention

The site is served over an encrypted connection and we use reasonable administrative, technical and physical safeguards to protect information we collect. No method of transmission over the internet is completely secure, so please do not send sensitive health information by website form or by ordinary email.

We keep website inquiries for as long as reasonably needed to respond, operate the practice, protect the site, and meet legal and professional obligations. Clinical records follow separate retention requirements.

9. Children and teens

We treat children and adolescents, and a parent or legal guardian generally submits the request for care. This website is not directed at children, and we do not knowingly collect information directly from a child through it.

Privacy rights involving a minor's healthcare information depend on the circumstances and applicable law. Those rights are addressed through our healthcare privacy practices rather than this website policy.

10. Contact us

Questions about this policy, or a request about your information, can go to the practice directly.

We may update this policy from time to time. The date at the top of the page shows when it last changed.