Last updated: November 11, 2026
Lu Social is a monthly subscription service that produces social-media and blog content for complementary and alternative healthcare clinics. This policy explains what we collect from the people who visit lu-social.com and from the clinics who enrol, what we do with it, and how to get it changed or deleted. It covers lu-social.com and the service we deliver from it.
Who we are
Lu Social is operated from California by Michael Woodworth, L.Ac. Our website is lu-social.com and the address for anything in this policy is .
What we collect
- The enrolment form. When you fill in the form on /contact/ we receive your name, email address, phone number, the best time to call, what kind of clinic you operate, the specialties or content themes you mention, and which plan you are interested in.
- The demo request form. When you ask for a demo on /demo/ we receive your clinic’s name, your name and email address, your clinic’s website address, the focuses you choose, and any of the optional answers you give about your voice, colours and imagery. To prepare the demo we read the public pages of the website you name (its colours, fonts, logo and wording). We do not log in to anything and we read nothing that is not public. The demo is shared with you through a private view link; we remove demo folders after about 60 days.
- Correspondence. Emails, texts and call notes exchanged with us before and during your subscription.
- Client content assets. For enrolled clinics: your logo, watermark, brand colours, voice notes, specialty selections, and any photos or video clips you upload to your drop zone.
- Billing details. Handled by our payment processor. We see who subscribed and to which plan; we never see or store your card number.
- Website analytics. Pages viewed, approximate region, device and browser, and how you arrived, via Google Analytics 4.
- Server logs. Our host records IP addresses and request times for security.
What we do not collect
We have no access to your patients’ data. We do not connect to your practice-management system or your electronic health records, we do not log in to your social accounts (publishing runs through Metricool, which your clinic owns and authorises), and the content we produce is patient education — never anything about an identifiable patient. If you send us something with patient information in it, we will ask you to resend it without.
Cookies and analytics
We use Google Analytics 4 with Google Consent Mode. The banner on your first visit lets you accept or decline; your choice is stored in a vd_consent cookie for 180 days and you can change it any time from the Cookie preferences control in the corner of any page. Declining keeps advertising and measurement storage switched off. We run no advertising cookies and no remarketing pixels on lu-social.com.
How we use information
- To answer your enquiry and arrange the enrolment call.
- To prepare the demo you asked for and send you the link to it.
- To set up and deliver your subscription — producing, voicing and scheduling your content.
- To send your payment link and administer billing.
- To send you service messages about your account, and any newsletter you asked for.
- To keep the site and the service secure and working.
Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We disclose it only to the providers that make the service run:
- Google Workspace — our email.
- Our payment processor — to create and manage your subscription.
- The scheduling and publishing tools we use to deliver your content, including Metricool, which your clinic owns and authorises.
- Google Analytics — website measurement, as above.
- Our web host and security services.
- A court or regulator, where the law requires it.
Each acts as our service provider and may use your information only to perform that service for us.
Content you contribute
Clips and images a clinic contributes to the shared library are understood to be royalty-free for content use across the clinic brands in the programme. If you would rather an asset stayed exclusive to your clinic, say so when you send it and we will keep it out of the shared library.
How long we keep it
Enquiry details are kept while we are in conversation and for a reasonable period afterwards in case you come back. Client records, content assets and correspondence are kept for the life of the subscription and then for as long as our business and tax records require. Analytics data follows Google’s standard retention schedule. Ask us and we will delete anything we are not required to keep.
Your California privacy rights
If you live in California you may ask us what personal information we hold about you and where it came from, ask us to correct it, and ask us to delete it. You may also opt out of any sale or sharing of personal information — we do neither, so there is nothing to opt out of, but the right stands. You will never be treated differently for exercising these rights.
Email with enough detail for us to find your record. We verify who you are before acting and respond within the time the law allows. An authorised agent may act for you with written permission.
Children
This site is for clinic owners and operators. It is not directed at children and we do not knowingly collect personal information from anyone under 16 here.
Security
The site runs over HTTPS. Client assets and correspondence live in access-controlled accounts, and access is limited to the people producing your content. No system is perfect; if a breach ever affected your information we would notify you as the law requires.
Changes to this policy
When this policy changes we update the date at the top. Material changes will also be sent to enrolled clinics by email. Continuing to use lu-social.com after a change means the revised policy applies.