This Privacy Policy is a structured placeholder. Final content is pending review by legal counsel. Do not rely on this version for compliance purposes.
Privacy Policy
Effective date: [PENDING]
Lotus Health, Inc. ("Bloom", "we", "us", "our") operates the Bloom member portal at members.utahbloom.com. This Privacy Policy describes what personal information we collect, how we use it, and the choices available to you.
1. Information We Collect
[PLACEHOLDER] We collect information you provide directly — such as your name, email address, date of birth, and payment details — when you create an account or subscribe to Bloom membership. We also collect information about your use of the portal, including appointment references, lab order identifiers, and scheduling activity. We do not store clinical records, diagnosis information, or cannabis card numbers directly in our systems.
2. How We Use Your Information
[PLACEHOLDER] We use your information to provide and improve the Bloom membership service, process payments, communicate with you about your membership, and connect you with partner services (labs, imaging centers, supplement providers, and health sharing programs). We do not sell your personal information to third parties.
3. HIPAA-Adjacent Disclosures
[PLACEHOLDER] Bloom is a wellness membership platform operated by Lotus Health, Inc. While we handle information related to medical cannabis evaluations and clinical scheduling, not all data processed through the Bloom portal is subject to HIPAA. We treat all health-related information with the same level of care required under HIPAA and applicable Utah state law. Appointment reference IDs and evaluation scheduling data are stored by reference only — protected health information (PHI) is maintained by the clinical provider, not by Bloom.
4. Data Retention
[PLACEHOLDER] We retain your account and membership data for as long as your account is active or as needed to provide services. Upon account deletion, we will remove or anonymize personal information within [X] days, except where retention is required by law or for legitimate business purposes such as fraud prevention or dispute resolution.
5. Third-Party Services
[PLACEHOLDER] Bloom integrates with third-party services including Stripe (payment processing), Firebase (authentication), Acuity Scheduling (appointment booking), Fullscript (supplements), and Zion's Health Sharing. Each third party operates under its own privacy policy. We share only the minimum information necessary to provide you with these services.
6. Your Rights
[PLACEHOLDER] You have the right to access, correct, or delete your personal information. You may also request a copy of the data we hold about you, or ask us to restrict processing in certain circumstances. To exercise these rights, contact us at the address below. Utah residents may have additional rights under applicable state privacy law.
7. Contact
[PLACEHOLDER] For privacy-related questions or requests, contact Lotus Health, Inc. at: privacy@lotushealth.com [ADDRESS PENDING]