Privacy Policy

Lexington Medical Inc.

Please read this privacy policy carefully. It contains important information about Your Personal Information and Your legal rights.

Lexington Medical, Inc. – Privacy Policy

Last updated: February 11, 2026

1. Definitions

This Privacy Policy uses the following capitalized terms. Review this section to ensure You understand what each term means.

“Collect” or “Collection” means the act of obtaining Personal Information from You by any means, including through form submissions, cookies, or automated website interactions. The broader term “Process” or “Processing” refers to any operation performed on Personal Information, such as collecting, recording, organizing, storing, using, disclosing, or deleting it, whether by automated means or otherwise.

“Lexington Medical,” “We,” “Us,” and “Our” means Lexington Medical, Inc., a corporation organized under the laws of the Commonwealth of Massachusetts, with its principal place of business at 23 Crosby Dr, Bedford, MA 01730, USA; and its subsidiaries and affiliates.

“Personal Information” generally means any information relating to an identified or identifiable individual, but may have a different definition under applicable law. Please see Sections 9 and 10 for specific legal definitions under the GDPR, CCPA, and other regional frameworks.

“Services” means, collectively, the Lexington Medical website located at https://lexington-med.com/ (the “Website”), any product information portals, clinical evidence libraries, demo request forms, contact forms, whitepapers, and any digital tools or services Lexington Medical may provide now or in the future.

“Site Visitor” means any individual who visits, browses, or interacts with the Website.

“Healthcare Professional” or “HCP” means any licensed physician, surgeon, nurse, or clinical professional who accesses the Website for product evaluation, clinical evidence review, or professional educational purposes.

“You” and “Your” means any individual who accesses or uses the Website or Services.

2. Changes to this Policy

If Lexington Medical changes this Privacy Policy, we will inform You via our Website or by a notice posted on the Website. Material changes will be highlighted for thirty (30) calendar days following the date of update. Your continued use of the Website after such posting constitutes Your acceptance of the revised Policy.

3. How to Contact Lexington Medical Inc.

At Your request, and if applicable law requires, Lexington Medical may do the following: (a) disclose to You a list of Your Personal Information that Lexington Medical has Collected; (b) delete, amend, or correct Your Personal Information; and/or (c) transfer Your Personal Information to another party.

To submit a request, email:

Email: [email protected]
Subject Line: “Privacy Request — [Your Full Name]”

Postal Address:
Lexington Medical, Inc.
Attn: Privacy Inquiries
23 Crosby Dr
Bedford, MA 01730
United States

We will acknowledge receipt of Your request within five (5) business days and will respond substantively within thirty (30) calendar days, or within such shorter period as applicable law may require.

4. Personal Information Lexington Medical Collects

This section covers the types of Personal Information that Lexington Medical Collects from You when You visit Our Website, submit forms, request product demonstrations, access clinical evidence materials, or otherwise interact with Us. The specific types of Personal Information we Collect and the reasons for Collecting it will depend on Your interactions with Lexington Medical.

Lexington Medical Collects the following types and categories of Personal Information:

4.1 Information You Provide Directly

  • Contact Information: Your full name (first, last); professional email address; business phone number; employer or affiliated hospital/institution name; job title, role, or clinical specialty.
  • Demo Request and Contact Form Data: Information submitted through the “Request a Demo” or “Contact Us” forms on the Website, including any free-text fields describing Your clinical needs or product inquiries.
  • Whitepaper and Clinical Evidence Access Data: If You access gated clinical whitepapers or evidence publications, we may Collect Your name, email address, institution, and clinical specialty. (See Section 5.2 for our Lead Generation Roadmap.)
  • Communications: The contents of Your correspondence with Lexington Medical, including email messages, phone call summaries, and any other method of communication.

4.2 Information Collected Automatically

  • Website Usage Data: Pages visited, session duration, click paths, downloads (e.g., IFU documents, clinical publications), and interaction with Website elements.
  • Device and Browser Information: IP address, browser type and version, operating system, screen resolution, language preferences, and referring/exit URLs.
  • Cookie and Tracking Data: We deploy cookies, pixels, and similar tracking technologies to collect unique visitor identifiers, session data, and page engagement metrics. Under the CCPA/CPRA, the use of third-party analytics constitutes the “sharing” of Personal Information for cross-context behavioral advertising. Under the GDPR, these technologies require Your prior active consent.
  • Geolocation Data (General): Approximate geographic location derived from Your IP address (city/region level only; we do not Collect precise GPS coordinates).

4.3 Information from Third Parties

Lexington Medical may receive limited information from third-party analytics providers (e.g., Google Analytics) solely for the purpose of improving Website performance and understanding aggregate visitor demographics. We do not purchase, rent, or otherwise acquire Personal Information from data brokers.

5. How Lexington Medical Uses Your Personal Information

Lexington Medical uses Your Personal Information for the following purposes:

5.1 Website Operations and Improvement

To operate, maintain, and improve the Website; to analyze aggregate usage patterns; to diagnose and resolve technical issues; and to optimize Website performance and page load times.

5.2 Lead Generation and Third-Party Platforms

Lexington Medical uses standard analytics tools to understand aggregate traffic patterns and content performance. When Healthcare Professionals access gated clinical whitepapers or evidence publications, they may be redirected to third-party medical publication platforms that maintain their own independent privacy policies and data collection practices. Lexington Medical does not Collect or retain Personal Information from these third-party redirects unless You separately submit information directly to Us through our Website.

5.3 Product Demonstration and Sales Communication

To respond to demo requests, facilitate product evaluations, and communicate with Healthcare Professionals regarding Lexington Medical products, clinical applications, and supporting evidence.

5.4 Legal and Regulatory Compliance

To comply with applicable laws, regulations, legal processes, or governmental requests, and to enforce Our Terms of Service.

5.5 HIPAA Compliance Statement

Lexington Medical’s Website and Services are intended for general product information and professional education purposes only. We do not knowingly Collect or Process Protected Health Information (PHI) as defined under the U.S. Health Insurance Portability and Accountability Act of 1996 (HIPAA). Lexington Medical is not a “covered entity” or “business associate” under HIPAA, and visitors should not submit patient-identifying or treatment-related information through Website forms.

6. The Trust Pledge — Lexington Medical's Data Sharing Commitment

Lexington Medical does not sell Your Personal Information for monetary consideration.

We do not:

  • Sell Personal Information to data brokers or third-party marketers
  • Permit or deploy cross-context behavioral advertising (retargeting) tracking on Our Website
  • Participate in data cooperatives or exchanges
  • Disclose identifiable Personal Information for others’ independent marketing purposes

 

Under the California Consumer Privacy Act (as amended by the CPRA), certain uses of cookies or similar analytics technologies may constitute “sharing” for cross-context behavioral advertising. You have the right to opt out of such sharing at any time by adjusting Your cookie preferences or clicking “Do Not Sell or Share My Personal Information” in the Website footer.

6.1 Service Providers

Lexington Medical uses vetted third-party service providers for website analytics (e.g., Google Analytics), hosting, security, and communications. These providers are contractually required to process Personal Information solely on Our instructions and in compliance with applicable law. We strictly limit our marketing analytics to first-party performance tracking and external search engine conversion metrics. Service providers are prohibited from using Your data for any independent purpose, including cross-context behavioral advertising.

7. Cookies and Tracking Technologies

Lexington Medical uses cookies and similar tracking technologies on the Website. Our use of cookies falls into the following categories:

7.1 Strictly Necessary Cookies

These cookies are essential for the Website to function and cannot be switched off. They include cookies that enable page navigation, secure areas access, and basic site functionality. These cookies do not collect Personal Information for marketing purposes. No consent is required for Strictly Necessary Cookies.

7.2 Analytical / Performance Cookies

These cookies are deployed only after You have provided explicit opt-in consent through the cookie consent mechanism, where technically feasible. All information these cookies Collect is aggregated. These cookies require Your explicit opt-in consent. If You do not consent, these cookies will not be set, and Your visit will not be tracked for analytics purposes.

7.3 Your Cookie Choices

When You first visit the Website, a cookie consent banner will appear at the bottom of the screen. You may:

  • Accept analytical cookies (opt-in); or
  • Reject analytical cookies (opt-out); or
  • Manage Your preferences at any time by clicking the “Cookie Settings” link in the Website footer.

Choices made in the cookie banner also serve as mechanisms for exercising applicable privacy rights under regional laws, including the right to opt-out of the “selling” or “sharing” of Personal Information under the California Consumer Privacy Act (CCPA/CPRA).

You may also control cookies and similar tracking technologies through the following methods:

  • Browser Settings: You may adjust Your browser settings to block or delete cookies at any time. Note that blocking Strictly Necessary Cookies may impair core Website functionality. For instructions, consult the help documentation for Your browser (e.g., Chrome, Firefox, Safari, Edge).
  • Google Analytics Opt-Out: You may opt out of Google Analytics data collection by installing the Google Analytics Opt-Out Browser Add-On, available at https://tools.google.com/dlpage/gaoptout.
  • Global Privacy Control (GPC): Lexington Medical honors Global Privacy Control signals transmitted by Your browser as valid opt-out requests under the CPRA. If Your browser transmits a GPC signal, analytical and performance cookies will not be activated during Your session. To enable GPC, consult Your browser’s privacy settings or visit https://globalprivacycontrol.org for more information.

“Do Not Sell or Share” Link: California residents may click the “Do Not Sell or Share My Personal Information” link in the Website footer at any time to opt out of the sharing of Personal Information through analytics tools.

Opting out of analytical cookies may limit certain site performance insights on Our end but will not restrict Your access to any Website Content or functionality.

8. Data Retention

Lexington Medical retains Your Personal Information only for as long as reasonably necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law or regulation.

Specifically:

  • Contact and Demo Request Data: Retained for up to three (3) years from Your last interaction with Lexington Medical, unless You request earlier deletion or applicable law requires a shorter period.
  • Website Analytics Data: Aggregated or anonymized data (non-identifiable) may be retained indefinitely for research and statistical purposes. Identifiable usage data is deleted or anonymized within fourteen (14) months of collection.
  • Legal Compliance Data: Retained as long as required by law or to protect Lexington Medical’s lawful interests.

We periodically review Personal Information held in our systems to ensure it is no longer stored beyond necessity.

9. International Data Rights — GDPR Compliance (European Economic Area, United Kingdom, and Switzerland)

9.1 Data Controller

For individuals located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, the data controller is:

Lexington Medical, Inc.
23 Crosby Dr
Bedford, MA 01730, United States
Email: [email protected]

9.2 Legal Basis for Processing

If You are located in the EEA, UK, or Switzerland, Lexington Medical processes Your Personal Information on the following legal bases under the General Data Protection Regulation (GDPR) and equivalent frameworks:

  • Consent: Where You have provided explicit, informed consent (e.g., opting in to analytical cookies, submitting a demo request form).
  • Legitimate Interest: Where processing is necessary for Our legitimate business interests (e.g., improving the Website, analyzing aggregate usage trends), provided those interests are not overridden by Your fundamental rights and freedoms.
  • Legal Obligation: Where processing is necessary to comply with applicable law.

9.5 Right to Lodge a Complaint

If You are located in the EEA, UK, or Switzerland, You have the following rights:

  • Right of Access: You have the right to request a copy of the Personal Information We hold about You.
  • Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Information.
  • Right to Erasure (“Right to Be Forgotten”): You have the right to request deletion of Your Personal Information where: (a) it is no longer necessary for the purpose for which it was Collected; (b) You withdraw consent and no other legal basis applies; (c) You object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed.
  • Right to Restriction of Processing: You have the right to request that We restrict the processing of Your Personal Information in certain circumstances.
  • Right to Data Portability: You have the right to receive Your Personal Information in a structured, commonly used, machine-readable format and to transmit it to another controller.
  • Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, You have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

 

To exercise any of these rights, email [email protected] with the subject line “GDPR Rights Request.” We will respond within thirty (30) days, or within such shorter period as applicable law requires.

9.4 International Data Transfers

If Your Personal Information is transferred outside the EEA, UK, or Switzerland to the United States (where Lexington Medical is headquartered), We will ensure such transfers are made in compliance with applicable data protection law by implementing Standard Contractual Clauses (SCCs) as approved by the European Commission, or through other legally recognized safeguards.

9.5 Right to Lodge a Complaint

You have the right to lodge a complaint with Your local data protection supervisory authority.

10. CCPA/CPRA Compliance (California, United States)

10.1 Scope

This section applies to residents of the State of California, as defined under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Under the CCPA/CPRA, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

10.2 Your Rights Under the CCPA/CPRA

If You are a California resident, You have the following rights:

  • Right to Know: You may request that We disclose the categories and specific pieces of Personal Information We have Collected about You, the categories of sources, the business purpose for Collecting it, and the categories of third parties with whom it has been shared over the past twelve (12) months.
  • Right to Delete: You may request deletion of Your Personal Information, subject to certain legal exceptions.
  • Right to Correct: You may request correction of inaccurate Personal Information.
  • Right to Opt-Out of Sale or Sharing: While Lexington Medical does not sell Your Personal Information for monetary compensation, the deployment of third-party analytics and tracking cookies constitutes “sharing” for cross-context behavioral advertising under the CPRA. You have the right to opt-out of this sharing by clicking the “Do Not Sell or Share My Personal Information” link in the Website footer or adjusting Your cookie preferences.

Right to Non-Discrimination: Lexington Medical will not discriminate against You for exercising any CCPA/CPRA rights.

To exercise these rights, email [email protected] with the subject line “CCPA Rights Request.” We will acknowledge receipt within ten (10) days and respond to verified requests within forty-five (45) days, as permitted by California law.

10.3 Categories of Personal Information Collected

In the preceding twelve (12) months, Lexington Medical has Collected the categories of Personal Information listed in Section 4 of this Policy. We have not sold any Personal Information. We have disclosed Personal Information to service providers solely for the business purposes described in Sections 5 and 6.

11. Additional International Frameworks

11.1 Australia

Lexington Medical respects the privacy rights established under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

If You are located in Australia, You have the right to:

  • Access Your Personal Information held by Lexington Medical.
  • Request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading Personal Information.
  • Complain about a breach of the APPs.

We will respond to access and correction requests within thirty (30) days. If Your Personal Information is transferred outside Australia, We will take reasonable steps to ensure the overseas recipient complies with the APPs or substantially similar protections.

Right to Erasure (Australia): While the Privacy Act 1988 does not contain an explicit “Right to Be Forgotten” equivalent to the GDPR, Lexington Medical will, upon verified request, delete or de-identify Your Personal Information where it is no longer needed for any purpose for which it may be used or disclosed under the APPs, subject to legal retention requirements.

To exercise these rights, email [email protected] with the subject line “Australia Privacy Request.”

You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

12. Data Security

Lexington Medical implements appropriate technical and organizational measures to protect Your Personal Information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to: encrypted data transmission (TLS/SSL); access controls and authentication requirements for internal systems; regular security assessments; and contractual data protection obligations imposed on service providers.

No method of electronic transmission or storage is completely secure. While We strive to protect Your Personal Information, We cannot guarantee absolute security.

13. Children's Privacy

The Lexington Medical Website is designed for licensed Healthcare Professionals and professional stakeholders. It is not directed to children. We do not knowingly Collect Personal Information from individuals under the age of thirteen (13) as defined under the U.S. Children’s Online Privacy Protection Act (COPPA), or under the applicable age of digital consent in Your jurisdiction (which may be up to sixteen (16) years of age under the GDPR or other regional frameworks). If We become aware that We have inadvertently Collected Personal Information from a child under the applicable age threshold, We will take prompt steps to delete such information from Our systems. If You believe a child has submitted Personal Information to Us, please contact [email protected] immediately.

14. Third-Party Links

The Website may contain links to third-party websites. Lexington Medical is not responsible for the privacy practices of these external sites. We encourage You to review the privacy policies of any third-party site before providing Personal Information.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Commonwealth of Massachusetts, United States, without regard to its conflict of laws principles, except where superseded by applicable data protection law in Your jurisdiction (e.g., GDPR, CCPA, LGPD).

16. Contact Information

For all privacy-related inquiries:

Email: [email protected]


Postal Address:
Lexington Medical, Inc.
Attn: Privacy Inquiries
23 Crosby Dr
Bedford, MA 01730
United States