Last updated: April 25, 2026
Summus Medical Laser, LLC and its successors and assigns (collectively, "Summus", "We" or "Our") is the sole owner of the Website (as defined below) and all Content (as defined below). Our Summus Terms and Conditions ("Terms and Conditions") shall be read in conjunction herewith. Any terms included in the Terms and Conditions but not addressed herein shall be deemed to apply to this Privacy Policy. As to Users subject to the California Consumer Privacy Act of 2018 (and as amended)("CCPA"), the terms of the CCPA (set forth below) shall be read in conjunction with this Privacy Policy and to the extent inconsistent with or in conflict with this Privacy Policy, the terms of the CCPA shall control.
The following privacy policy ("Privacy Policy") shall govern all aspects of your, the User's ("You", "Your", or "User") use, review, viewing, access to, or engagement with (collectively, "Use") this the www.summuslaser.com website and any mobile versions or iterations thereof or apps related thereto (collectively, "Website") and all materials, Information (as defined in the Terms and Conditions), Summus IP (as defined in the Terms and Conditions), or other content thereon (all of the aforesaid, collectively, "Content"), arising from each separate use and all Uses collectively by You of the Website and its Content now and hereafter and as amended. Your agreement to this Privacy Policy as stated herein is required and a condition precedent to your use of this Website and its Content and shall be implied by your continued use of the Website and its Content and expressly affirmed by your indication that you "AGREE" below or elsewhere on this Website. If you do not agree to any or all terms of the Privacy Policy, do not use this Website.
When Using the Website, You may be asked to provide certain personal or business contact or other information, including but not limited to, your full name, your company name, your personal or business address, your email address, telephone number(s), or payment information in conjunction with your use of the Website (all of the aforesaid, collectively, "Your Information"). Your affirmative disclosure of each and all pieces of Your Information is strictly voluntary.
Summus may collect information about You from the Website in a variety of ways, currently including: (i) Your Information as affirmatively disclosed by You; and, (ii) Information or data not affirmatively disclosed by You but made available to Summus by your use of the Website and Content, including your browser type, IP address, operating system, times of access, Website or other pages visited or not visited, your smart phone or other device name and type, your country, your location, your likes and dislikes, and other such information as to your interaction with the Website and the Content (all of the aforesaid in (i) and (ii) of this paragraph including Your Information, collectively, "All Information Collected About You").
At this time, Summus does not sell any customer's personal information. Summus may use All Information Collected About You to provide information to You, respond to your questions, fulfill your secured orders, purchases, payments, and other transactions, improve the Website and Content, or for Summus' internal marketing, analytics, sales, or other such purposes, all of the aforesaid which may include but not be limited to the following actions by Summus: To create and manage your account; To email You regarding your account or order; To enable user-to-user communications; To fulfill and manage orders, purchases, payments, and other transactions related to the Website; To generate a personal profile about You to make future visits to the Website more personalized; To increase the efficiency and operation of the Website; To monitor and analyze usage and trends to improve your experience with the Website; To compile anonymous statistical data and analysis for use internally or with authorized third parties for Summus' internal use only; To deliver targeted advertising, coupons, newsletters, and other information regarding promotions and the Website to You; To notify You of updates to the Website; To offer new products, services, and/or recommendations to You; To prevent fraudulent transactions; To monitor against theft, and protect against criminal activity; To process payments and refunds; To request feedback and contact You about your use of the Website; To resolve disputes and troubleshoot problems; To respond to product and customer service requests; and, To perform any other business activities to meet your needs, provide all products and services requested, and improve your customer experience, as needed consistent with the above.
Summus may, in certain circumstances and for limited purposes, disclose some or all of the All Information Collected About You with authorized third parties, including but not limited to, in response to a legal process, court order, or subpoena, for fraud protection and credit risk reduction, for merchant, credit card, or payment processing, to complete secured purchases, payments, and other transactions, to provide, monitor, maintain, or improve customer service, for Summus' internal data analysis, marketing, analytics, sales, to monitor, maintain or improve hosting services or email delivery, or for other such purposes.
Summus uses administrative, technical, and physical security measures to help protect All Information Collected About You. While Summus has taken reasonable steps to secure All Information Collected About You, despite Summus' efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, Summus cannot guarantee complete security if You elect to provide Your Information or any other personal information or otherwise use the Website.
Summus does not knowingly solicit information from or market to minor children. If You become aware of any data Summus has collected from minor children, and expressly children under the age of 13 years of age, please contact Summus immediately.
You may at any time review or change the information in your existing Summus account, opt-out of further correspondence or emails from Summus, unsubscribe from existing email correspondence with Summus, or terminate your account by logging into your account settings and updating your account or by contacting Summus and making an express request. Upon your express request to terminate your account, Summus will deactivate or delete your account and all of Your Information from Summus' active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms and Conditions, and/or comply with legal requirements such as a legal process, court order, or subpoena.
Summus reserves the right to amend this Privacy Policy at any time and for any reason. Your notice of such amendments shall be limited to reviewing the Website and this Privacy Policy from time-to-time and as amended, if at all. Any amendments to the terms hereof shall be effective immediately upon posting the updated Privacy Policy on the Website, and You waive the right to receive specific notice of each such amendment other than as posted herein. You are encouraged to periodically review this Privacy Policy to stay informed of updates and amendments. You will be deemed to have been made aware of, to be subject to, and to have accepted the amendments in any revised Privacy Policy by your continued use of the Website thereafter after the date such revised Privacy Policy is posted. Amendments to the California Consumer Privacy Act of 2018 (and as amended) shall be deemed effective when put into law notwithstanding when such amendments are posted on this Website, though reasonable good faith efforts will be made to post such amendments herein in a timely manner once in effect.
Under California law (and specifically, the California Consumer Privacy Act of 2018 (and as amended)("CCPA")(Text of California Consumer Privacy Act of 2018 included below for reference), certain Users have specific rights regarding consumer personal information ("PI") which includes information that identifies, relates to, describes, or is capable of being associated with a particular consumer or household. Summus shall at all times comply with the terms of the CCPA as to those Users to whom it applies. To the extent any terms stated below are inconsistent with or conflict with the text of the CCPA, the CCPA shall control.
Notice: If you use or engage with Summus' Website, Summus may collect and/or use certain PI as set forth in its Privacy Policy.
Notice: If you use or engage with Summus' Website, Summus may disclose certain PI as set forth in its Privacy Policy.
Notice: The list below describes certain rights and types of requests You may make to Summus under the CCPA regarding your PI:
You have the right to request (by verifiable consumer request) that Summus disclose to You: (1) The categories of personal information it has collected about You; (2) The categories of sources from which the personal information is collected; (3) The business or commercial purpose for collecting or selling personal information; (4) The categories of third parties with whom Summus shares personal information; (5) The specific pieces of personal information Summus has collected about You. The CCPA does not require Summus to do the following: (1) Retain any personal information about a consumer collected for a single one-time transaction if, in the ordinary course of business, that information about the consumer is not retained; or, (2) Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information. Upon receipt of such a request, Summus shall promptly take steps to disclose and deliver, free of charge to You, the personal information required by the request in accordance with the terms of the CCPA. The information may be delivered by Summus by mail or electronically, and if provided electronically, the information shall be in a portable and, to the extent technically feasible, readily useable format that allows the consumer to transmit this information to another entity without hindrance. Summus may provide personal information to a consumer at any time, but shall not be required to provide personal information to a consumer more than twice in a 12-month period.
You have the right to request (by verifiable consumer request) that Summus delete any personal information that has been collected from you and to direct Summus' service providers to delete your personal information from their records. Upon receipt of such a request, Summus shall delete your personal information from its records and direct any service providers to delete your personal information from their records. Summus shall not be required to comply with a consumer's request to delete the consumer's personal information if it is necessary for the business or service provider to maintain the consumer's personal information in order to: (1) Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the consumer, or reasonably anticipated within the context of a business' ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer; (2) Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity; (3) Debug to identify and repair errors that impair existing intended functionality; (4) Exercise free speech, ensure the right of another consumer to exercise that consumer's right of free speech, or exercise another right provided for by law; (5) Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code; (6) Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the business' deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent; (7) To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer's relationship with the business; (8) Comply with a legal obligation; (9) Otherwise use the consumer's personal information, internally, in a lawful manner that is compatible with the context in which the consumer provided the information.
At this time, Summus does not sell customer's personal information. However, in the event that it does:
(a) You shall have the right to request that Summus as a business that sells your personal information, or that discloses it for a business purpose, disclose to You as a consumer: (1) The categories of personal information that Summus collected about You as the consumer. (2) The categories of personal information that Summus sold about You as the consumer and the categories of third parties to whom the personal information was sold, by category or categories of personal information for each category of third parties to whom the personal information was sold. (3) The categories of personal information that Summus disclosed about You as the consumer for a business purpose.
(b) A business that sells personal information about a consumer, or that discloses a consumer's personal information for a business purpose, shall disclose the information specified upon receipt of a verifiable consumer request from the consumer. To the extent Summus is such a business, Summus shall comply herewith.
(c) A business that sells consumers' personal information, or that discloses consumers' personal information for a business purpose, shall disclose: (1) The category or categories of consumers' personal information it has sold, or if the business has not sold consumers' personal information, it shall disclose that fact; (2) The category or categories of consumers' personal information it has disclosed for a business purpose, or if the business has not disclosed the consumers' personal information for a business purpose, it shall disclose that fact.
(d) A third party shall not sell personal information about a consumer that has been sold to the third party by a business unless the consumer has received explicit notice and is provided an opportunity to exercise the right to opt-out. To the extent Summus is such a business, Summus shall comply herewith.
(a) You shall have the right, at any time, to direct a business that sells personal information about You to third parties not to sell your personal information. This right may be referred to as the right to opt-out. At this time, Summus does not sell customer's personal information. To the extent Summus is such a business, Summus shall comply herewith.
(b) A business that sells consumers' personal information to third parties shall provide notice to consumers that this information may be sold and that consumers have the "right to opt-out" of the sale of their personal information.
(c) Notwithstanding subdivision (a), a business shall not sell the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumer's parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale of the consumer's personal information. A business that willfully disregards the consumer's age shall be deemed to have had actual knowledge of the consumer's age. This right may be referred to as the "right to opt-in."
(d) A business that has received direction from a consumer not to sell the consumer's personal information or, in the case of a minor consumer's personal information has not received consent to sell the minor consumer's personal information shall be prohibited from selling the consumer's personal information after its receipt of the consumer's direction, unless the consumer subsequently provides express authorization for the sale of the consumer's personal information. You may make such a request by following this link: Do Not Sell My Personal Information.
(a)(1) Summus shall not discriminate against You or any consumer because the consumer exercised any of the consumer's rights under the CCPA, including, but not limited to, by: (A) Denying goods or services to the consumer. (B) Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties. (C) Providing a different level or quality of goods or services to the consumer. (D) Suggesting that the consumer will receive a different price or rate for goods or services or a different level or quality of goods or services.
(2) Nothing in the CCPA prohibits a business from charging a consumer a different price or rate, or from providing a different level or quality of goods or services to the consumer, if that difference is reasonably related to the value provided to the business by the consumer's data.
(b)(1) A business may offer financial incentives, including payments to consumers as compensation, for the collection of personal information, the sale of personal information, or the deletion of personal information. A business may also offer a different price, rate, level, or quality of goods or services to the consumer if that price or difference is directly related to the value provided to the business by the consumer's data.
(2) A business that offers any financial incentives pursuant to this subdivision shall notify consumers of the financial incentives pursuant to the CCPA.
(3) A business may enter a consumer into a financial incentive program only if the consumer gives the business prior opt-in consent pursuant to the CCPA that clearly describes the material terms of the financial incentive program, and which may be revoked by the consumer at any time.
(4) A business shall not use financial incentive practices that are unjust, unreasonable, coercive, or usurious in nature. If You are not sure how your request may affect your participation in a special offer, ask Summus.
California's "Shine the Light" law permits customers who are California residents to request certain information regarding our disclosure of personal information to third parties for the third parties' own direct marketing purposes. To make such a request, please contact us using one of the Communication Methods, describing your request specifically.
For your privacy and security, and to prevent fraud and other harmful activities, when Summus receives a verifiable consumer request through one of the Communication Methods, Summus needs to ensure or "verify" that the person submitting the request is the person they purport to be. Accordingly, Summus may take reasonable measures to verify the identity of the person submitting the request. Initially, Summus may ask You to provide personal information when You submit a request, whether through a web form, toll-free telephone number, or other approved Communication Method. This information will include your first name, middle name, last name, email address, shipping address and telephone number. Providing accurate information that matches Summus' records is necessary so that Summus can locate the correct information within the Summus systems and service providers, verify the validity of the request, and protect your data. To verify your request, Summus may ask You to submit evidence proving your identity. You may submit this information simultaneously with your request (by mail or by using our interactive web form) or after your request. The evidence Summus may request from You, and the degree of certainty Summus will be required to reach regarding your identity and the authenticity of your request, will depend upon the nature of your request, the nature of the information Summus has about you, and your ability to furnish information. For requests of specific pieces of personal information about a consumer, Summus will verify your identity to a reasonably high degree of certainty; whereas for requests to know the categories of personal information collected and used about a consumer, Summus will verify identity to a reasonable degree of certainty. If Summus asks you to verify your identity, You must promptly cooperate with our efforts so that Summus can fulfill your request. If You do not comply, your request cannot be fulfilled; and you may re-submit your request with the required verification information.
If You submit a verifiable consumer request or other consumer privacy request on behalf of another person, You will be required to demonstrate your legal authority to act on behalf of that person, and Summus may contact You for verification purposes. For the protection of our customers, Summus must furnish all information requested and must demonstrate your authority to act to Summus' satisfaction before Summus can fulfill your request.
Summus will make commercially reasonable efforts to accommodate your request within 45 days. To exercise your options as described in this Privacy Policy, you may contact us in one of these ways:
Collectively, these are referred to as the "Communication Methods". To effectively exercise your privacy options, You must use one of these Communication Methods.
The following is the full text of the California Consumer Privacy Act of 2018 (CCPA), included for reference as required by the CCPA.
1798.100.
(a) A consumer shall have the right to request that a business that collects a consumer's personal information disclose to that consumer the categories and specific pieces of personal information the business has collected.
(b) A business that collects a consumer's personal information shall, at or before the point of collection, inform consumers as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used. A business shall not collect additional categories of personal information or use personal information collected for additional purposes without providing the consumer with notice consistent with this section.
(c) A business shall provide the information specified in subdivision (a) to a consumer only upon receipt of a verifiable consumer request.
(d) A business that receives a verifiable consumer request from a consumer to access personal information shall promptly take steps to disclose and deliver, free of charge to the consumer, the personal information required by this section. The information may be delivered by mail or electronically, and if provided electronically, the information shall be in a portable and, to the extent technically feasible, readily useable format that allows the consumer to transmit this information to another entity without hindrance. A business may provide personal information to a consumer at any time, but shall not be required to provide personal information to a consumer more than twice in a 12-month period.
(e) This section shall not require a business to retain any personal information collected for a single, one-time transaction, if such information is not sold or retained by the business or to reidentify or otherwise link information that is not maintained in a manner that would be considered personal information.
1798.105.
(a) A consumer shall have the right to request that a business delete any personal information about the consumer which the business has collected from the consumer.
(b) A business that collects personal information about consumers shall disclose, pursuant to Section 1798.130, the consumer's rights to request the deletion of the consumer's personal information.
(c) A business that receives a verifiable consumer request from a consumer to delete the consumer's personal information pursuant to subdivision (a) of this section shall delete the consumer's personal information from its records and direct any service providers to delete the consumer's personal information from their records.
(d) A business or a service provider shall not be required to comply with a consumer's request to delete the consumer's personal information if it is necessary for the business or service provider to maintain the consumer's personal information in order to complete the transaction, fulfill the terms of a written warranty, provide a good or service, detect security incidents, protect against illegal activity, debug, exercise free speech, comply with legal obligations, engage in public research, enable internal uses aligned with consumer expectations, or otherwise use the information internally in a lawful manner compatible with the context.
1798.110.
(a) A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following: (1) The categories of personal information it has collected about that consumer. (2) The categories of sources from which the personal information is collected. (3) The business or commercial purpose for collecting or selling personal information. (4) The categories of third parties with whom the business shares personal information. (5) The specific pieces of personal information it has collected about that consumer.
(b) A business that collects personal information about a consumer shall disclose to the consumer the information specified in subdivision (a) upon receipt of a verifiable consumer request from the consumer.
1798.115.
(a) A consumer shall have the right to request that a business that sells the consumer's personal information, or that discloses it for a business purpose, disclose to that consumer: (1) The categories of personal information that the business collected about the consumer. (2) The categories of personal information that the business sold about the consumer and the categories of third parties to whom the personal information was sold. (3) The categories of personal information that the business disclosed about the consumer for a business purpose.
1798.120.
(a) A consumer shall have the right, at any time, to direct a business that sells personal information about the consumer to third parties not to sell the consumer's personal information. This right may be referred to as the right to opt-out.
(b) A business that sells consumers' personal information to third parties shall provide notice to consumers that this information may be sold and that consumers have the "right to opt-out" of the sale of their personal information.
(c) Notwithstanding subdivision (a), a business shall not sell the personal information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers at least 13 years of age and less than 16 years of age, or the consumer's parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale of the consumer's personal information.
1798.125.
(a) (1) A business shall not discriminate against a consumer because the consumer exercised any of the consumer's rights under this title, including, but not limited to, by: (A) Denying goods or services to the consumer. (B) Charging different prices or rates for goods or services. (C) Providing a different level or quality of goods or services to the consumer. (D) Suggesting that the consumer will receive a different price or rate for goods or services or a different level or quality of goods or services.
(2) Nothing in this subdivision prohibits a business from charging a consumer a different price or rate, or from providing a different level or quality of goods or services to the consumer, if that difference is reasonably related to the value provided to the business by the consumer's data.
1798.130.
A business shall make available to consumers two or more designated methods for submitting requests for information required, including at a minimum a toll-free telephone number. The business shall disclose and deliver the required information to a consumer free of charge within 45 days of receiving a verifiable consumer request. The disclosure shall cover the 12-month period preceding the business' receipt of the verifiable consumer request.
1798.135.
A business that is required to comply with Section 1798.120 shall provide a clear and conspicuous link on the business's Internet homepage, titled "Do Not Sell My Personal Information," to an Internet Web page that enables a consumer to opt-out of the sale of the consumer's personal information.
1798.140.
For purposes of this title, the following definitions apply:
(a) "Aggregate consumer information" means information that relates to a group or category of consumers, from which individual consumer identities have been removed.
(b) "Biometric information" means an individual's physiological, biological, or behavioral characteristics.
(c) "Business" means a sole proprietorship, partnership, corporation, association, or other legal entity that collects consumers' personal information and determines the purposes and means of processing.
(d) "Business purpose" means the use of personal information for operational purposes.
(e) "Collects" means buying, renting, gathering, obtaining, receiving, or accessing any personal information.
(f) "Commercial purposes" means to advance a person's commercial or economic interests.
(g) "Consumer" means a natural person who is a California resident.
(h) "Deidentified" means information that cannot reasonably identify a particular consumer.
(i) "Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household.
(j) "Sell" means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer's personal information to another business or third party for monetary or other valuable consideration.
(k) "Service provider" means an entity that processes information on behalf of a business pursuant to a written contract.
(l) "Third party" means a person who is not the business collecting personal information or a service provider.
(m) "Verifiable consumer request" means a request that a business can reasonably verify was made by the consumer about whom the business has collected personal information.