Privacy Policy

Allurion Technologies, Inc.

Effective date: March 11, 2026 

This privacy policy (“Privacy Policy”) describes how and when Allurion Technologies, Inc. (“Allurion”, “we”, “us” and/or “our”) collects, uses and shares your personal data when you use the website https://allurion.com (the “Website”), our mobile application(s) and associated mobile application-enabled devices (collectively that “App”), and/or communicate with Allurion through another contact channel (collectively, the “Services”).

Allurion Technologies, Inc., with its registered office at 11 Huron Drive, 01760 Natick, MA, USA, will be the controller of your personal data, and collects such data through your interactions with our Services. When you use our Services, you agree to the collection, transfer, retention, organization, consultation, processing, modification, selection, recovery, comparison, use, interconnection, blocking, communication, dissemination, deletion and other uses of your information as described in this Privacy Policy – therefore, we recommend that you read it carefully. 

References in this Privacy Policy to the Allurion Program, Allurion balloon and Allurion App include, and this Privacy Policy applies to, the Elipse® Program, the Elipse® balloon and the Elipse® App, respectively, in applicable markets.   

Please see our Notice at Collection below for a high-level overview of our privacy practices. Additionally, if you are a resident of Washington or Nevada, please visit our separate Consumer Health Data Privacy Notice.

PERSONAL DATA WE COLLECT

When you interact with our Services, we may collect the following categories of personal data: 

• Identity and Contact Information, such as your name, email address, telephone number, postal code or zip code, location, business address, country, preferred contact method, your communication preferences, and, if you create an App account, your language preference, password, authentication details, and other registration information.
• Demographic Information, such as your age, date of birth, and gender.
• Health-Related Information, such as your height, weight, Body Mass Index (BMI) (including BMI calculation results), pregnancy status, breastfeeding status, and information about whether you have previously undergone esophageal or abdominal surgery (including bariatric surgery), which we use to assess eligibility for the Allurion Program. If you use the App, we may collect other data that you share from your mobile device, from third party services that you choose to connect to the App. You may also choose to share further information with us via the App regarding your health and personal circumstances, including information relating to physical and mental health conditions. To learn more, please see our Consumer Health Data Privacy Notice.
• Program Information, such as your preferences regarding how you wish to proceed with the Allurion Program, your selected participating clinic, appointment scheduling details, information regarding whether an appointment results in placement of an Allurion balloon, and other information related to determining your eligibility for, and participation in, the Allurion Program.
• Communications Information, such as the details of your enquiries, records and copies of your correspondence with us (including via website forms, live agent, SMS, chatbot, or WhatsApp features), chat transcripts, callback requests, recordings of calls with Allurion Advisors for training and monitoring purposes, and, if you use the App, the contents of messages exchanged between you and your selected clinic via the App's Messages feature, and your conversations with our AI-powered features.
• Professional Information, if you are a healthcare professional seeking to offer the Allurion Program at your practice, such as your name, contact details, business address, country, and information about your practice.
• Marketing information such as your preferences for receiving our marketing communications and details about your engagement with them.
• Other information not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
    

Information we automatically collect: Additionally, we collect personal data about you automatically when you use our Services. This information may not directly identify you (like your name or contact information), but may include the following information:  

• “Device data” such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, device type (e.g., phone or tablet), IP address, mobile device unique ID, unique device identifiers, and other diagnostic data.
• “Location Data”, such as your current location derived from your mobile device, which we use to search for clinics near you and to assist with syncing the App. We will only collect your location data if you have enabled location services on your device.
• “Online activity data”, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before coming to our Website, information about your activity on a page or screen, access times, and duration of access.  

Like many businesses, we collect this information through cookies and similar tracking technologies. Allurion may use this information to understand the manner in which pages of our Website have been visited in order to monitor and improve the Website. Allurion may also use this information to deliver targeted messages to you. For further details, please read our Cookie Policy.

 When sharing personal data or other information or content through our Services, we invite you to think carefully about what you are deciding to make public. 

If you choose to invite your acquaintances to learn more about our Services, you choose to do so under your sole responsibility, and warrant that you have received the necessary authorizations and approvals after having duly informed the person to whom the personal data belong. 

Information we obtain from other sources:

• Social Media: We may obtain your personal data from third party sources from social media platforms, such as LinkedIn, Instagram, and other third-party platforms. When you visit or interact with our pages on those platforms, you or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy.
• Third Party Services: If you use the App, we may receive health and fitness data that you choose to share from third-party services and devices, such as Fitbit, Apple Health, and any other third party services you choose to connect to the App.
• Partners: We may obtain personal data from other third parties, such as marketing partners, publicly-available sources, and data providers.

OUR USE OF YOUR PERSONAL DATA AND OTHER INFORMATION

Below, we have prepared a high level overview of what data we process on a programmatic level.

Allurion Program:  If you wish to learn more about the Allurion Program, you will be asked to provide your information on our Website such as your name, telephone number, email, gender, age, height and weight, post code or zip code, preferred contact method and your preferences in how you wish to proceed with the Allurion Program. Your information may be shared with our customer care managers, who will arrange for an Allurion Advisor to contact you to ask you more questions and potentially arrange an appointment with your selected participating clinic.  Please note that if there are no customer care managers in your region, we will share your information directly with a participating clinic, and such clinic will contact you. You can also submit your details using our Body Mass Index (BMI) calculator on the Website to find out whether your BMI is below or above 27 and determine whether the Allurion Program might be suitable for you. Furthermore, we will ask you to confirm if you are either currently pregnant or breastfeeding and/or if you have ever received esophageal or abdominal surgery (including bariatric surgery); this is vital for us to determine whether or not you can participate in the Allurion Program.  

Allurion Clinic: To assist you with selecting your participating clinic, you will be asked to provide your zip code or post code. Also, if your enquiry with us turns into an appointment or a placement, your selected participating clinic may share your name and email address with us so we are able to determine how many appointments lead to placements of our Allurion balloon.  Clinics are operated by independent third parties that are responsible for medical and health care decisions, including the suitability of the Allurion Balloon and Program, for patients.   

Call with an Allurion Advisor: If you are contacted by an Allurion Advisor, the details of your call may be recorded for training and monitoring purposes. You will be notified at the beginning of any call that is being recorded, and your continued participation in the call after such notification constitutes your consent to the recording. If you do not wish to be recorded, you may request that the recording be discontinued.

The App includes generative AI-powered health management features. If you choose to use these features, we use the data you have provided to us to generate intelligent and personalized responses.

Your questions: If you are a prospective or existing Allurion patient, a healthcare professional, or other person who wishes to contact us with an enquiry in connection with the Allurion Program or another question or concern, you will be asked to provide your name, email address, telephone number, location and the details of your enquiry. You can also use our live agent, SMS or our WhatsApp click feature on our Website to ask for more information. If you contact us via SMS or WhatsApp, you will be asked to provide your name, telephone number, email address, location and your preferences on how you wish to be contacted to arrange a call back from an Allurion Advisor. Our SMS and WhatsApp features can be used to assist you with determining your eligibility to join the Allurion Program. If you choose to use these features to determine your eligibility, in addition to collecting your name and contact information, you will be asked to provide your postal code, age, date of birth, height, weight, pregnancy status, whether you are breastfeeding, and whether or not you have had esophageal or abdominal surgery (including bariatric surgery). By using our SMS and WhatsApp features, you can also book an appointment with an Allurion Advisor or a participating clinic.

We will ask you for your explicit consent to the processing of your health-related information as described in this Privacy Policy, which you can withdraw at any time by contacting us at: privacy@allurion.com.  

In addition to the specific use cases described above, we use the personal data we collect or receive via our Services for the following purposes:  

To operate and administer our Services.

We will use your personal data to perform our contractual obligations under our Terms of Use and when it is in our legitimate interests, such as:  

• Processing any request or enquiry you make in connection with our Services, including the Allurion Program or using the App; 
• Contacting you via email, telephone, SMS or WhatsApp to ask questions concerning your eligibility to join the Allurion Program and, if the criteria is met, arrange an appointment with a clinic; and 
• Managing our relationship with you, which includes sending administrative information to you in relation to our Services and changes to our terms, conditions, and policies, and the Services generally.  
• Searching for Allurion clinics near your location;
• Fixing issues with the App, including responding to your questions or requests for support, maintenance, troubleshooting, or other performance issues;

Where required by applicable laws, when we process your sensitive data (such as health data), we will ask for your explicit consent.  
  

To improve, monitor, personalise, and protect our Services. 

It is in our legitimate business interests to improve and keep our Services safe, which includes: 

•  Analysing and understanding how you visit our Website, how you interact with us and to enrich your user experience and customize your relationship with us;  
• Conducting data analysis, testing and research, including for statistical purposes;  
• Conducting scientific research relating to the Allurion Program;  
• Analyzing and evaluating your usage of the App;
• Protecting the security of and managing access to our premises, IT and communication systems, online platforms, websites and other systems; and 
• Preventing and detecting security threats, fraud or other criminal or malicious activities. 

When we process your sensitive data (such as health data), we will be processing your personal data for the purposes of carrying out scientific research.  
 

For marketing and advertising purposes.  

We may use your personal data for marketing and advertising purposes, such as:  

• Enabling you to register for webinars on our Website;  
• Sending you information about healthcare professional organised events; and 
• Sending you communications about our products and services that may be of interest to you, as described in the “MARKETING” section below.   

Where required under applicable laws, we will rely on your consent to send you marketing communications.  
  

 To enforce our agreements, to comply with legal obligations and to defend against legal claims or disputes.  

We may use your personal data to comply with our legal obligations or when it is in our legitimate business interests, which includes:  

• Complying with our legal and regulatory obligations and requests, including reporting to and/or being audited or investigated by national and international regulatory bodies; and 
• Complying with court orders and to exercise and/or defend our legal rights. 

To facilitate corporate acquisitions, mergers or transactions.  

We may use your personal data, when it is in our legitimate business interests, when we do a business deal, or negotiate a business deal, involving the sale or transfer of all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding. 

If Allurion intends on using any personal data in any manner that is not consistent with this Privacy Policy, you will be informed of such anticipated use prior to or at the time at which the personal data is collected. 

MARKETING

We may contact you to provide you with information about products and services similar to those that were the subject of a previous sale or negotiation of a sale to you. You may be contacted by us or one of our selected partners.  

You may opt out of receiving our marketing communications by following the opt-out instructions in each marketing communication or at any time by contacting us at: privacy@allurion.com. 

We will continue to contact you for non-marketing related purposes where we need to issue a field corrective or safety notice, or where we need to send certain information to you under a legal, regulatory, or ethical requirement.

Please refer to our Cookie Policy for more information on how we use technologies for advertising and marketing purposes as well as information about the third-party cookies we use. 

OUR DISCLOSURE OF YOUR PERSONAL DATA

We may share your personal data with the following: 

1. Subjects predetermined by law or when necessary to protect our Services. There may be cases of communication of your information to other parties in order to: 

• protect the rights of Allurion and its affiliates, as well as users of its Services; 
• protect the security of users of the Services; 
• prevent fraud or for risk management purposes; or 
• comply with the requirements of law or judicial proceedings or in the event of a request for cooperation from a government agency, whether or not required by law. 

2. Our Service Providers. We engage third-party service providers to process personal data for any of the purposes listed in this Privacy Policy on our behalf and in accordance with our instructions, such as IT support, hosting, analytics, customer care management, legal services, marketing campaigns, auditing, and AI technology providers. 
3. Allurion clinics. We will share your personal data when you have selected a clinic and/or for the purposes of assessing your eligibility in joining the Allurion Program. 
     
4. Affiliates of Allurion. 
     
5. Prospective sellers or buyers of any business, stock, or assets to which we might assign or novate any of our rights and obligations; in such case, we may disclose your personal data to the prospective seller or buyer of such business, stock, or assets, as well as their and/or our business and legal advisors. 

SECURITY MEASURES

We make use of physical, technical and administrative measures to safeguard the information in our possession against loss, theft and unauthorized use, communication or modification of personal data. Please pay attention to the fact that, in any case, no transmission or storage of personal data can be guaranteed as 100% secure. Consequently, while committing ourselves to protect the information in our possession, we cannot guarantee or ensure the total security of any information that you send us, including your health data. 

POLICY FOR THE PROCESSING OF PERSONAL DATA RELATING TO MINORS

Our Services are not aimed at or intended for any individuals under the age 18. If you are aware of the fact that a minor under 18 has given us their personal data, please contact us at privacy@allurion.com.

We do not intentionally collect personal data from children under 18. If we are aware of the fact that a minor under 18 has given us his/her personal data, we will take the necessary measures to remove such information.  

NON-TRACEABILITY SIGNALS 

Your web browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time and across different websites. We do not honor any web browser “Do Not Track” signals or other mechanisms that provide you with the ability to exercise choice regarding the collection of personally identifiable information about your online activities over time and across third-party websites or online services.

AMENDMENTS TO THIS PRIVACY POLICY

We may revise this Privacy Policy at any time. The most recent version of the Privacy Policy will govern Allurion's use of your personal data and will be available on our Website. We may make changes to this Privacy Policy in our sole discretion. If we make material changes to how we treat your personal data that will result in substantially less protection than provided in this Privacy Policy, we will use reasonable efforts to notify you by e-mail using your contact information you have shared with us and/or through a notice on the home page of the Website.

DATA RETENTION

We keep personal data for as long as is reasonably necessary and proportionate for the purposes described in this Privacy Policy, while we have a business need to do so, or as required by law, whichever is longer. To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. 

INTERNATIONAL DATA TRANSFERS

When you use the Services, you provide your personal data directly to us. We may transfer your personal data to our affiliates and service providers in the U.S. and other jurisdictions that may not provide the same protections as the data protection laws in your home country. In these instances, we will ensure that relevant safeguards are in place to afford adequate protection for your personal data, including by implementing approved contractual protections (for example, European Commission approved standard contractual clauses) for the transfer of your personal data. For more information about how we transfer personal data internationally, please contact us as set out in the “CONTACT US” section below. 

LINKS TO OTHER WEBSITES

This Privacy Policy applies only to the Services. The Services may contain links to other websites not operated or controlled by Allurion or our affiliates (the “Third Party Sites”). The policies and procedures we described here do not apply to the Third Party Sites. The links from the Services do not imply that Allurion endorses or has reviewed the Third Party Sites. We suggest contacting those sites directly for information on their privacy policies. 

JOB APPLICANTS

When you apply for one of our open positions, we collect the information that you provide in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history, and other information that may be included in a resume or that you may provide during the interview process. This may also include demographic or diversity information that you voluntarily provide. We may also conduct background checks and receive related information. We also collect personal data from other sources where relevant for your application, such as employment research firms, recruiters, identity verification services, and information that you make publicly available on websites or social media platforms (for example, LinkedIn).

Throughout the recruitment process, we may supplement your personal data in connection with the assessment of your application. For example, we may record the views of those considering your application about your suitability for the role for which you have applied and retain interview notes. If you accept an offer from us, your personal data will be incorporated into and used as part of your employee record.

We use applicants' information to facilitate our recruitment activities, process employment applications and personalize candidate communication, including evaluating candidates and monitoring recruitment statistics. We also use successful applicants' information to administer the employment relationship. We may also use and disclose applicants' information to improve our Services and for the compliance and protection purposes described above.

YOUR PRIVACY CHOICES

You have and may exercise certain rights with respect to the data you provide us, as follows: 

Opt-out of marketing communications. You may opt out of marketing-related communications by following the Opt-out or Unsubscribe instructions contained in the marketing communication we send you, or by contacting us as provided in the “CONTACT US” section below. You may continue to receive Service-related communications and other non-marketing emails. 

Opt-out of online tracking. You can opt out of third-party cookies as described in our Cookie Policy.   

Personal data requests. We also offer you choices that affect how we handle your personal data. If you need to update your personal data, you can do so through the App or by contacting us. Depending on your location and the nature of your interactions with our Services, you may request the following in relation to your personal data:

• Information about how we have collected and used personal data. We have made this information available without you having to request it by including it in this Privacy Policy. 
• Access to a copy of the personal data that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format. 
• Correction of personal data that is inaccurate or out of date. 
• Deletion of personal data that we no longer need to provide the Services or for other lawful purposes.  
• Opt-out of the sale of your personal data or sharing of your personal data for interest-based advertising. By default, we do not sell or share your personal data.
• Opt-out “profiling” in connection with decisions that produce legal or similarly significant effects. By default, we do not engage in profiling in connection with decisions that produce legal or similarly significant effects.
• Additional rights, such as to object to and request that we restrict our use of your personal data. 

Please note that we may ask you to verify your identity before responding to certain requests. Upon receiving your request, we will confirm receipt by sending you a communication confirming receipt. We endeavor to respond to verifiable requests within the timeframes required by applicable law. You may designate an authorized agent to submit a request on your behalf. To do so, you must provide the authorized agent with written permission to act on your behalf, and we may require you to verify your own identity directly with us and confirm that you have provided the authorized agent with permission to submit the request. In some cases, our ability to uphold these rights for you may depend upon our obligations to process personal data for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the Services you have requested. Where this is the case, we will inform you of specific details in response to your request. We will not discriminate against you for exercising any of your privacy rights.

To exercise any of your rights in connection with your personal data, please contact us using the contact information in the “CONTACT US” section below. Based on where you are located, you may have the right to complain to a Data Protection Authority or other regulatory authority in your country and/or state about our collection and use of your personal data. 

CONTACT US

If you have any questions regarding this Privacy Policy or about your privacy when using our Services, please contact us at privacy@allurion.com

Notice at Collection

Below is a high-level snapshot of how we collect, use, and disclose your personal data. Please read the entire Privacy Policy for complete information.