LIGHTSTEP ASSESSMENT PRIVACY NOTICE

Effective: 2 October 2026

This notice explains how TejoMed uses your information when you take our online weight care assessment. If anything is unclear, email privacy@tejomed.com.

1. Who we are

• EPOPEIA MATINAL, LDA. (“TejoMed”, “we”), registered office Rua Penha de França, 230-D, 3.º A, Lisboa, registered at the Commercial Registry of Odivelas under number 517869993 (also our tax number), share capital €500, is responsible for your information.
• Privacy questions: privacy@tejomed.com.

2. What this notice covers

• Our online weight care assessment, until you join or stop. When you join, our Lightstep Patient Privacy Notice applies instead.
• Browsing our website is covered by our website privacy policy (tejomed.com/tospp).

3. What we collect and when

• When you start: your name, email and phone number, saved as soon as you continue.
• During the health questions: your height and weight, goals, health conditions, medicines, previous attempts to manage your weight and safety questions. These reach us only when you submit.
• Before you submit: your legal name, date of birth, address and how you heard about us. Your SNS number and tax number are optional.
• Technical information needed to run the assessment securely.

4. How we use it, and why we are allowed to

• Contacting you about joining. We may call or email you about joining Lightstep, including if you do not finish the assessment. You agree to this when you start, and you can ask us to stop at any time (GDPR arts. 6(1)(a) and 9(2)(a)).
• Assessing your answers. Our clinical team uses your answers to see whether the programme could suit you and to suggest the right next step. Some answers may lead us to suggest a call with a TejoMed advisor before you pay; you can ask a doctor to review your answers instead. Only a doctor decides whether treatment is right for you. You give your explicit consent for this before the health questions (GDPR arts. 6(1)(b) and 9(2)(a)).
• Keeping the assessment secure and recording your choices. We keep security logs, prevent misuse and record what you agreed to and when (GDPR art. 6(1)(c) and (f)).

5. Who receives your information

• Only our clinical team and, if we suggest a call, the advisor who calls you see your health answers, all under confidentiality.
• Service providers who work for us under contract: hosting and data storage, email and telephone, workflow automation, our contact-management and team messaging tools, and booking calendars.
• Some of these providers are in the United States. Where that happens, we use the safeguards the law requires, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. You can ask us for a copy.

6. Answers saved in your browser

• Your unfinished answers are saved, encrypted, in this browser for up to 7 days so you can come back to them. Submitting or starting again clears them.

7. How long we keep it

• Unfinished answers in your browser: up to 7 days.
• If you do not join: your contact details and any submitted answers for 18 months after you last contact us or use the assessment, unless you ask us to delete them sooner.
• If you join: your answers become part of your clinical record, as explained in the Lightstep Patient Privacy Notice.
• Records of your choices: as long as we need them to respect those choices.

8. What you need to give us

• We need your name, email and phone number to start, and answers to the required questions to assess you. Optional questions can be left blank.

9. Your rights

• You can ask to see, correct or delete your information, to restrict or object to its use, or to receive a copy in a portable format.
• You can withdraw your agreement at any time: ask us to stop calls and emails, or withdraw your consent to use your health answers. This does not affect what we did before.
• Email privacy@tejomed.com.
• You can also complain to Portugal’s data protection authority, the CNPD (www.cnpd.pt).

10. Cookies

• Where we use cookies or similar technologies for analytics or advertising, we ask for your choice first in the cookie banner.

11. Changes

• If we change this notice, we will update the date above. We record which version you saw when you started.

Version: lightstep-assessment-privacy-notice-2026-10-02