Effective Date/ Updated Date: November 1, 2026 

1. Introduction and Scope

This Website Privacy Policy (“Policy”) describes how Tom Health, LLC and its parent and affiliated entities (collectively, “Company,” “we,” “us,” or “our”) collect, use, disclose, and safeguard your personal information when you access or use the Tom™ Website (the “Website”).  

By accessing, or using the Website, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with our policies and practices, please do not access or use the Website. 

 

2. When does this Policy Apply

This Policy applies strictly to data collected through the Website and does not apply to information collected through other channels, which may be governed by separate privacy policies. This Policy does not apply to the practices of other companies or other websites or software applications that may be linked from or made available through our Website. 

 

3. Information We Collect or Receive

In the course of operating this Website, we will collect and/or receive the following types of information. By accessing or using this Website You authorize us to collect and/or receive such information. 

• Information You Provide Directly to Us:  We may collect information that describes or relates to you and is classified as Personal Information or Personal Data under applicable state laws (collectively, “Personal Information”). Personal information includes information you provide when submitting inquiries, customer support requests, or product feedback.  

If you provide us with Personal information on our Website, we may store and use your personal information for a number of purposes, such as verifying your identity, responding to a request from you, conducting our business, and complying with applicable laws. 

• Information Collected Automatically:  When you access and interact with our Website, we automatically collect certain technical details:

• Device Identifiers and Technical Data: Web browsers, mobile device unique identifier (Device ID), Internet Protocol (IP) address, operating system, browser/platform type, and mobile carrier information. 

• Usage Analytics and Diagnostics: activity logs, features accessed, session duration, error logs, and performance metrics utilized to optimize website stability and usability. 

• Location Information (Optional): With your explicit, permission-based device consent, real-time geolocation data. 

• Information Received from Third Parties:  We and our third-party technology providers with which we work use third-party analytics services (e.g., Google Analytics) to evaluate your use of the Website, compile reports on activity, collect demographic data, analyze performance metrics, and collect and evaluate other information relating to the Website and Internet usage. These third parties use cookies and other technologies to help analyze and provide us with the data. You consent to the processing of data about you by these analytics providers in the manner and for the purposes set out in this Policy.  

 

4. How We Use Your Information

We will use your Personal Information for us to conduct our business, to the extent such use is permitted by law or for any other purpose with your consent. For example, we will use your Personal Information to communicate with you, provide our products and services, perform analytics to improve our products and/or Website, and advertising, provide security and protection, and comply with applicable laws, regulations, and legal process.  

We may share your Personal Information with third parties with which we have a business relationship or hire to perform services on our behalf and as otherwise permitted by law or in accordance with your consent. We may also share Personal Information within the Company, including our affiliates, or with our parent company, or subsidiaries. 

We may share Personal Information if all or part of our Company is sold, merged, dissolved, acquired or in a similar transaction, including in connection with activities that may need to take place prior to such transactions.  

 

5.  State Privacy Rights (Including CCPA / CPRA)

Where applicable under state privacy laws (including California), and subject to statutory exemptions for Protected Health Information governed by HIPAA: 

• Right to Know and Access: You have the right to request access to the categories and specific pieces of personal data we have collected about you. 

• Right to Correct: You have the right to request correction of inaccurate personal data. 

• Right to Delete: You have the right to request deletion, subject to the legal/clinical retention exemptions outlined in Section 6.C. 

• No Discrimination: We will not discriminate against you for exercising any of your consumer privacy rights. 

 

6. Children’s Privacy

The Website is intended solely for adult users 18 years of age and older. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 18. If we learn that personal data of a minor has been collected without verifiable parental or guardian consent, we will promptly purge that information. 

 

7. Security

We maintain physical, electronic, and procedural safeguards that comply with federal standards. Additionally, we take reasonable precautions to protect personal information from unauthorized use or alteration. To protect from unauthorized access, a secure infrastructure utilizing a defense in-depth strategy is used to safeguard the data that you provide. Please note, we cannot guarantee the security of our Website or that your Personal Information will not be intercepted as there is always a risk in sending information over the internet and data transmitted by email is vulnerable to security breaches. 

 

8. Tracking Technologies and Cookies

We may use various technologies, including cookies, pixels, web server logs, web beacons, and other similar technologies to gather non-personal information. A “cookie” is a piece of data that a website can send to your browser while you are using the website. This information may include demographic data, technical information about the technology (e.g., mobile device, computer) you use to connect to the Website, mobile device, web browser information, your IP address, and browsing behavior such as pages visited and how often they are visited. We may also use third-party analytics companies to provide these services, such as Google Analytics.  

These technologies help us remember your information if you visit again; understand how you use and interact with the Website; measure the usability of our Website and manage and enhance our Website and marketing activities. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your device. Our Website does not currently respond to “Do Not Track” signals received from browsers. 

 

9.  Updates to This Policy

We may update this Policy periodically to reflect Website updates, technical enhancements, or legal requirements. Material updates will be communicated through the Website Privacy Policy. The date at the top of this document indicates when this Policy was last modified. 

 

10.  Contact Information

For inquiries, concerns, or questions concerning the Policy, please direct them in writing to: 

Entity: Tom Health, LLC / Privacy Office 

13736 Riverport Drive, Suite 1100 

St. Louis, MO  63043  

Email: privacy@lumeris.com