Privacy Policy

Last updated: May 18, 2026

Your privacy is important to us. It is the policy of Lock Lab, LLC ("we", "us", “Company” or "our") to respect your privacy and comply with any applicable law and regulation regarding any personal data we may collect about you, including across our website, https://www.locklab.co, and other sites we own and operate. “Digital Properties" means our website at https://www.locklab.co, any related mobile applications, and any other websites, applications, or online services we own or operate. “Personal Data” is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service. In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

This Privacy Policy is incorporated by reference into the Lock Lab, LLC’s Terms & Conditions (the “Terms”), inclusive of all defined terms, and describes how we and Medical Groups collect, use, maintain, protect, and disclose Personal Data about you through the use of the Service. Please read this Privacy Policy carefully to understand our policies and practices regarding your Personal Data and how we will treat it. If you do not agree with this Privacy Policy, your choice is to not use the Services. By accessing or using the Services, you agree to this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

This Privacy Policy applies to information we collect about individual consumers, such as general website visitors (“Individuals”) as well as information we collect about the personnel of our business partners, including vendors and business customers, in business-to-business interactions (“Business Contacts”). However, this Privacy Policy does not apply to information about our current/former employees, applicants, and other individuals who interact with us for employment-related purposes. This Privacy Policy also does not apply to data that we handle on behalf of and under the instructions of our business customers (as a processor).

Whenever you interact with us on behalf of another individual or entity, such as if you refer a friend to us, you must obtain their consent (or have the legal authority without consent) to share their Personal Data with us.

Protected Health Information

Please see the Medical Groups’ Notice of Privacy Practices to understand how we protect, use and disclose your protected health information as defined under the Health Insurance Portability and Accountability Act of 1996 and related laws and regulations (“HIPAA”). If your Personal Data is protected health information, we treat the protected health information in accordance with HIPAA and the Notice of Privacy Practices. To the extent this Privacy Policy conflicts with our HIPAA obligations or the Notice of Privacy Practices, we comply with HIPAA obligations or the Notice of Privacy Practices.

Children Under the Age of 18 and Majority

The Services are not intended for children under the age of 18 or the age of majority in the jurisdiction in which you live if older than 18. Children under the age of 18 are strictly prohibited from using the Services. We do not knowingly collect Personal Data from persons who are under the age of 18. If you are under the age of 18, do not use or provide any information on the Services or on or through any of their features, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Data from a child under the age of 18, we will delete that information. If you believe we might have any Personal Data from a child under the age of 18, please contact us at help@locklab.co.

If you access or use the Services, you represent and warrant that you are either at least 18 years old or otherwise have adequate authority and capacity to consent to use the Services under applicable state laws, federal laws or the authorization of a parent or legal guardian who agrees to be bound by the Terms and this Privacy Policy. If you are under 18 and lack sufficient authority to access or use the Services, do not use or provide any information on the Services.

Sources of Information and Information We Collect

We only collect and use Personal Data when we have a legitimate reason for doing so. In which instance, we only collect Personal Data that is reasonably necessary to provide our services to you.

We collect Personal Data from the following sources.

“Voluntarily provided” information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions. We may collect this information when you contact us through our Digital Properties; interact with us in person; sign up for offers or newsletters; enter any of our competitions, contests, sweepstakes, and surveys; use a mobile device or web browser for the purposes of accessing our content; contact us via email, social media, or on any similar technologies; mention us on social media; place or customize orders; sign up for an account or other services; sign up to receive updates from us via email or social media channels;
“Automatically collected” information refers to any information automatically sent by your devices in the course of accessing our products and services.We may automatically collect information or inferences about you; such as through cookies and other tracking technologies, or when you interact with our Digital Properties. This may include information about how you use and interact with our Digital Properties, information about your device, and internet usage information. For more information about cookies and other tracking technologies, please see the Types of Cookies and Tracking Technologies We Use section.
“Third Parties” such as service and content provider, our affiliated companies and subsidiaries, business partners, data brokers, social media companies, or other parties who interact with us.
“Publicly Available Sources” such as public profiles and websites.

We may combine information that we receive from the various sources described in this Privacy Policy, including third party sources, and use or disclose the combined information for the purposes identified below.

We may collect the following types of Personal Data about you. Except as otherwise specified, we may collect this Personal Data from both Individuals and Business Contacts.

Identifiers, such as your name, email address, social media profiles, physical address, mailing address, telephone number, business contact information, and device identifiers (e.g., cookie IDs and IP address).
Records about you, such as signatures; physical characteristics or a description of you; the content, timing and method of communications you have with us, such as online chats, calls, and emails; and information you share with or upload to our Digital Properties, such as reviews and comments.
Demographic information, such as age (including birthdates) and gender.
Commercial information, such as information related to your transactions; products or services purchased, obtained, or considered; subscription information; or other purchasing or consuming histories or tendencies.
Internet or other electronic network activity information, such as your browsing history, search history, preference information (including marketing and purchasing preferences), account settings (including any default preferences), and other information regarding your interactions with and use of the Digital Properties. For more information about cookies and other device data, please the Personal Data Collected Through and Use of Automatic Data Collection Technologies and Cookies section below.
Non-precise geolocation data, such as your location as derived from your IP address.
Audio, electronic, visual, or other sensory information, such as photographs and audio/video recordings.
Professional or employment-related information (for Business Contacts), such as job title; organization; professional licenses, credentials, or affiliations; and other professional information.
Education information (for Business Contacts).
Inferences drawn from any of the information we collect about your preferences or behavior, including to assess the level of interest in our products and services based on frequency of visits and contact and determine your preferred frequency for receiving offers.
User Generated Content, which we consider to be materials (text, image and/or video content) voluntarily supplied to us by Users for the purpose of publication on our website or re-publishing on our social media channels. All user-generated content is associated with the account or email address used to submit the materials. Please be aware that any content you submit for the purpose of publication will be public after posting (and subsequent review or vetting process). Once published, it may be accessible to third parties not covered under this privacy policy.
Log Data, which is the standard data provided by your web browser that our servers may automatically log. It may include your device’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit. Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem. You may or may not receive notice of such errors, even in the moment they occur, that they have occurred, or what the nature of the error is. Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.
Device Data, which is data automatically collected when you visit our website or interact with our services, such as device type, operating system, unique device identifiers, device settings, and geo-location data. Data we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.
Sensitive Personal Data (“Sensitive Information” or “Special Categories of Data”), which is a subset of personal information that is given a higher level of protection. Examples include:
- Social Security number, driver’s license number, or passport number.
- Account log-in information.
- Precise geolocation.
- Racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership.
- Content of mail, email, and text messages where we are not the intended recipient (such as messages that we host as a Controller but are not sent to us).
- Genetic data.
- Biometric data processed for the purpose of uniquely identifying you.
- Information about your health.
- Medical or health insurance information, including insurance policy number.
- Information concerning your sex life, sexual practices, or sexual orientation.
- Citizenship, citizenship status, or immigration status.
Health and Medical Information. When you use the Service, we may collect the following categories of health-related information: (a) responses to health intake questionnaires, including current medications, medical conditions, allergies, and health history; (b) photographs you submit for treatment evaluation; (c) prescription information, including medications prescribed, dosages, and refill history; (d) consultation records between you and your Provider, including any messages, notes, or treatment plans; and (e) treatment outcome information you voluntarily provide, such as progress updates or satisfaction surveys. This information is collected to facilitate your consultation with a Provider and the fulfillment of prescriptions through the Pharmacy. To the extent any of this information constitutes protected health information under HIPAA, it is handled in accordance with the applicable Notice of Privacy Practices.

We will not collect sensitive information about you without first obtaining your consent, and we will only use or disclose your sensitive information as permitted, required, or authorized by law.

Personal Data Collected Through and Use of Automatic Data Collection Technologies and Cookies

Our Digital Properties and authorized third parties use cookies and other tracking technologies to collect information about you, your device, and how you interact with our Digital Properties. This section contains additional information about:

The types of tracking technologies we use and the purposes for which we use them
The types of information we collect using these technologies
How we disclose or make information available to others
Choices you may have regarding these technologies

Types of Cookies and Tracking Technologies We Use

We use cookies and other tracking technologies to help improve your experience of our website at https://www.Locklab.co. A cookie is a small piece of data that a website stores on your device when you visit. It typically contains information about the website itself, a unique identifier that allows the site to recognize your web browser when you return, additional data that serves the cookie’s purpose, and the lifespan of the cookie itself. Cookies are used to enable certain features (e.g. logging in), track site usage (e.g. analytics), store your user settings (e.g. time zone, notification preferences), and to personalize your content (e.g. advertising, language). Cookies set by the website you are visiting are usually referred to as first-party cookies. They typically only track your activity on that particular site. Cookies set by other sites and companies (i.e. third parties) are called third-party cookies They can be used to track you on other websites that use the same third-party service.

This cookie policy is part of Lock Lab LLC’s Privacy Policy. It covers the use of cookies between your device and our site. We also provide basic information on third-party services we may use, who may also use cookies as part of their service. This policy does not cover their cookies. At all times, you may decline cookies from our site if your browser permits. Most browsers allow you to activate settings on your browser to refuse the setting of all or some cookies. Accordingly, your ability to limit cookies is based only on your browser’s capabilities. If you don’t wish to accept cookies from us, you should instruct your browser to refuse cookies from https://www.Locklab.co. In such a case, we may be unable to provide you with some of your desired content and services.

We and the third parties that we authorize may use the following tracking technologies:

Cookies, which are a type of technology that install a small amount of information on a user’s computer or other device when they visit a website. Some cookies exist only during a single session and some are persistent over multiple sessions over time. We use the following types of cookies:
- Essential cookies: Essential cookies are crucial to your experience of a website, enabling core features like user logins, account management, shopping carts, and payment processing. We use essential cookies to enable certain functions on our website.
- Performance cookies: Performance cookies track how you use a website during your visit. Typically, this information is anonymous and aggregated, with information tracked across all site users. They help companies understand visitor usage patterns, identify and diagnose problems or errors their users may encounter, and make better strategic decisions in improving their audience’s overall website experience. These cookies may be set by the website you’re visiting (first-party) or by third-party services. They do not collect personal information about you. We use performance cookies on our site.
- Functionality cookies: Functionality cookies are used to collect information about your device and any settings you may configure on the website you’re visiting (like language and time zone settings). With this information, websites can provide you with customized, enhanced, or optimized content and services. These cookies may be set by the website you’re visiting (first-party) or by third-party services. We use functionality cookies for selected features on our site.
- Targeting/advertising cookies: Targeting/advertising cookies help determine what promotional content is most relevant and appropriate to you and your interests. Websites may use them to deliver targeted advertising or limit the number of times you see an advertisement. This helps companies improve the effectiveness of their campaigns and the quality of content presented to you. These cookies may be set by the website you’re visiting (first-party) or by third-party services. Targeting/advertising cookies set by third-parties may be used to track you on other websites that use the same third-party service. We use targeting/advertising cookies on our site.
Pixels, web beacons, and tags, which are types of code or transparent graphics. In addition to the uses described below, these technologies provide analytical information about the user experience and help us customize our marketing activities. In contrast to cookies, which are stored on a user’s computer hard drive, pixels, web beacons, and tags are embedded invisibly on web pages.
Session replay tools, which record your interactions with our Digital Properties, such as how you move throughout our Digital Properties and engage with our webforms. In addition to the uses described below, this information helps us improve our Digital Properties and identify and fix technical issues visitors may be having with our Digital Properties.
Embedded scripts and SDKs, which allow us to build and integrate custom apps and experiences on our Digital Properties.

Purposes for Using These Technologies

We and authorized third parties use these technologies for purposes including:

Personalization, such as remembering language preferences and pages and products you have viewed in order to enhance and personalize your experience when you visit our Digital Properties;
Improving performance, such as maintaining and improving the performance of our Digital Properties;
Analytics, such as analyzing how our websites are used. For example, we use Google Analytics to help us improve the user experience. Google Analytics may use cookies and other tracking technologies to perform their services. To learn how Google Analytics collects and processes data, please visit www.google.com/policies/privacy/partners;
Advertising, such as conducting advertising and content personalization on our Digital Properties and those of third parties; tracking activity over time and across properties to develop a profile of your interests and advertise to you based on those interests (“interest-based advertising”); providing you with offers and online content that may be of interest to you; and measuring the effectiveness of advertising campaigns and our communications with you, including identifying how and when you engage with one of our emails; and
Security, such as preventing fraud and malicious behavior.

Information Collected

These tracking technologies collect data about you and your device, such as your IP address, location (both approximate and precise) cookie ID, device ID, Ad ID, operating system, browser used, browser history, search history, and information about how you interact with our Digital Properties (such as pages on our Digital Properties that you have viewed).

Disclosures of Your Information

We may disclose information to third parties or allow third parties to directly collect information using these technologies on our Digital Properties, such as social media companies, advertising networks, companies that provide analytics including ad tracking and reporting, security providers, and others that help us operate our business and Digital Properties.

Your Choices

Some of the third parties we work with participate with the Digital Advertising Alliance (“DAA”) and Network Advertising Initiative (“NAI”). The DAA and NAI provide mechanisms for you to opt out of interest-based advertising performed by participating members at http://www.aboutads.info/choices/ and https://optout.networkadvertising.org/. We adhere to the DAA’s Self-Regulatory Principles for Online Behavioral Advertising. You may also click on the AboutAds icon on a Company advertisement and follow the instructions on how to opt out.

You can also refuse or delete cookies using your browser settings. If you refuse or delete cookies, some of our Digital Properties’ functionality may be impaired. Please refer to your browser’s Help instructions to learn more about how to manage cookies and the use of other tracking technologies. If you change computers, devices, or browsers; use multiple computers, devices, or browsers; or delete your cookies, you may need to repeat this process for each computer, device, or browser. Opting out of interest-based advertising will not opt you out of all advertising, but rather only interest-based advertising from us or our agents or representatives.

Some browsers have incorporated Do Not Track (“DNT”) preferences. At this time, we do not honor Do Not Track signals.

How We Use or Disclose Your Personal Data

We may disclose Personal Data to third parties, including the categories of recipients described below:

Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, business units, and other companies that share common ownership.
Employees, agents, and subcontractors, including subcontractors who assist us in providing information, products, services, or direct marketing to you.
Service providers that work on our behalf to provide the products and services you request or support our relationship with you, such as IT providers, internet service providers, web hosting providers, data analytics providers, payment service providers, and companies that provide business support services, financial administration, or event organization.
Professional consultants, such as accountants, lawyers, financial advisors, and audit firms.
Vendors necessary to complete transactions you request, such as shipping companies and logistics providers.
Healthcare Providers and Pharmacies. We share your personal information, including health information, with the Medical Groups, Providers, and Pharmacies that provide clinical services and prescription fulfillment through the Service. This includes sharing your health intake responses, contact information, and shipping address with prescribing Providers; and sharing your prescription information, contact information, and shipping address with the Pharmacy for dispensing and delivery. These disclosures are made to facilitate your treatment and are governed by the applicable Notice of Privacy Practices and this Privacy Policy.
Law enforcement, government agencies, and other recipients, when required by law for legal, security, or safety purposes, such as when we share information to comply with law or legal requirements, to enforce or apply our Terms of Service and other agreements or policies; and to protect ours, our customers’, or third parties’ safety, property, or rights.
Sponsors or Promoters of any competition, sweepstakes, or promotion we run
Other entities in connection with a corporate transaction, such as if we acquire, or sell or transfer all or a portion of our business or assets including through a sale in connection with bankruptcy and other forms of corporate change.
Business partners that may use Personal Data for their own purposes, such as:
- Advertisers, ad platforms and networks, and social media platforms;
- Third parties whose cookies and tracking tools we use as described above;
- Commercial data partners to whom we make information available for their own marketing purposes; and
- Partners who work with us on promotional opportunities, including co-branded products and services.

Where required by law, we will obtain your consent prior to disclosing your Personal Data to our business partners. Where recipients use your Personal Data for their own purposes independently from us, we are not responsible for their privacy practices or personal data processing policies. You should consult the privacy policies of those third-party services for details on their practices.

The public, such as when you have an opportunity to make comments regarding us or our products that we may share with the public, including comments on our blog posts and reviews on our product pages. Any Personal Data in comments, reviews, or other content that you share in public areas of our Digital Properties may be read, collected, or used by other users or the public.
Entities to which you have consented to the disclosure.

Third parties we currently use include: Google Analytics, Mixpanel, Bask Health, Google Adsense, Bing Ads, Facebook Ads, Reddit Ads, Pinterest Ads.

Locklab does not share Personal Data for third-party marketing unrelated to our services. Third parties may process data only to provide or improve services directly related to Locklab.

We may use Personal Data for the following purposes:

To provide our core products and services to you, making our Digital Properties, products and services available to you; such as registering, verifying, and maintaining your account with us; providing and delivering you the goods and services you request; contacting and communicating with you; providing customer service; processing or fulfilling orders and transactions (including processing payments); verifying customer information and eligibility for certain programs or benefits; communicating with you (including soliciting feedback or responding to requests, complaints, and inquiries); hosting informational webinars; and providing similar services or otherwise facilitating your relationship with us.
For our internal business purposes, such as operating our Digital Properties and customizing the content; enabling you to customize or personalize your experience; maintaining internal business records, such as accounting, document management and similar activities; considering your employment application; enforcing our policies and rules; management reporting; auditing; and IT security and administration.
For our internal research and product improvement purposes, such as verifying or maintaining the quality or safety of our products or services; improving our products or services; designing new products and services; evaluating the effectiveness of our advertising or marketing efforts; and debugging and repairing errors with our systems, networks, and equipment.
For legal, safety or security reasons, such as complying with legal, reporting, and similar requirements; investigating and responding to claims against us, our personnel, and our customers; for the establishment, exercise or defense of legal claims; protecting our, your, our customers’, and other third parties’ safety, property or rights; detecting, preventing, and responding to security incidents and health and safety issues (including managing spread of communicable diseases); and protecting against malicious, deceptive, fraudulent, or illegal activity.
In connection with a corporate transaction, such as if we acquire, or sell or transfer all or a portion of our business or assets including through a sale in connection with bankruptcy and other forms of corporate change.
For marketing and targeted advertising, such as marketing our products or services or those of our affiliates, business partners, or other third parties. For example, we may use Personal Data we collect to personalize advertising to you (including by developing product, brand, or services audiences and identifying you across devices/sites); to analyze interactions with us or our Digital Properties; or to send you newsletters, surveys, questionnaires, promotions, or information about events or webinars. You can unsubscribe to our email marketing via the link in the email, or by contacting us using the information in the Contact Information section below.

We may use anonymized, de-identified, or aggregated information for any purpose permitted by law.

We may combine data provided from our different sources of data, including voluntarily provided and automatically collected personal information, with general information or research data we receive from other trusted sources. For example, Our marketing and market research activities may uncover data and insights, which we may combine with information about how visitors use our site to improve our site and your experience on it.

Choices About How We Use and Disclose Your Personal Data

We offer you choices on how you can opt out of our use of tracking technology, disclosure of your Personal Data for our advertising to you, and other targeted advertising.

We strive to provide you with choices regarding the Personal Data you provide to us. We have the following mechanisms to provide you with control over your Personal Data:

Tracking Technologies and Advertising. You can set your browser or operating system to refuse all or some cookies or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Services may then be inaccessible or not function properly.
Promotional Offers from Company. If you do not wish to have your email address used by Company to promote our own products and services, you can opt-out at any time by clicking the unsubscribe link at the bottom of any email or other marketing communications you receive from us or by contacting us. This opt out does not apply to information provided to Company as a result of a Service purchase or your use of our Services.
Targeted Advertising. To learn more about interest-based advertisements and your opt-out rights and options, visit the Digital Advertising Alliance and the Network Advertising Initiative websites (www.aboutads.info and www.networkadvertising.org). Please note that if you choose to opt out, you will continue to see ads, but they will not be based on your online activity. We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can also opt out of receiving targeted ads from members of the NAI on its website.

We do not control the collection and use of your information collected by third parties as described in our Terms. These third parties may aggregate the information they collect with information from their other customers for their own purposes.

Your Rights Regarding Your Personal Data

You can review and change your Personal Data by logging into the Services and changing your Account information. You may also contact us at help@locklab.co regarding any of your rights under applicable state laws; any changes or errors in any Personal Data we have about you to ensure that it is complete, accurate, and as current as possible; or to delete your Account. We may not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect.

See state-specific sections below on your rights under specific state laws.

Security of Your Personal Data

When we collect and process Personal Data, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification. Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services. For example, ensuring any passwords associated with accessing your personal information and accounts are secure and confidential. We ask you not to share your password with anyone.

How Long We Keep Your Personal Data

Subject to any state-specific restrictions, we keep your Personal Data only for as long as we need to. This time period may depend on what we are using your information for, in accordance with this privacy policy. For example, if you have provided us with Personal Data as part of creating an account with us, we may retain this information for the duration your account exists on our system. If your Personal Data is no longer required for this purpose, we will delete it or make it anonymous by removing all details that identify you.

However, if necessary, we may retain your Personal Data for our compliance with a legal, accounting, or reporting obligation or for archiving purposes in the public interest, scientific, or historical research purposes or statistical purposes.

International Transfers of Personal Data

The Services are controlled and operated by us from the United States and are not intended to subject us to the laws or jurisdiction of any state, country, or territory other than that of the United States. The Personal Data we collect is stored and/or processed in the United States, or where we or our partners, affiliates, and third-party providers maintain facilities.

The countries to which we store, process, or transfer your Personal Data may not have the same data protection laws as the country in which you initially provided the information. If we transfer your Personal Data to third parties in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred Personal Data in accordance with this privacy policy.

Changes to This Policy

At our discretion, we may change our Privacy Policy at any time to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this Privacy Policy, we will post the changes here at the same link by which you are accessing this Privacy Policy.

If the changes are significant, or if required by applicable law, we will contact you (based on your selected preferences for communications from us) and all our registered users with the new details and links to the updated or changed policy.

If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal information.

California-Specific Disclosures

For individuals in California, you have rights under the California Consumer Privacy Act, as amended by the CPRA (“CCPA”). Please see additional information below that is intended to satisfy our obligations under the CCPA to disclose certain information to you.

Personal Information We Collect About You. In the preceding 12 months, we have collected the following categories and specific types of consumer personal information:

Categories of Personal Information

Specific Types of Personal Information Collected

Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers)