Privacy Policy

---

THE DRIP LAB LLC – PRIVACY POLICY

Effective Date: 02/14/2026
Last Updated: 06/05/2026

The Drip Lab LLC (“we,” “our,” “us”) is committed to protecting the privacy and security of your personal information and your Protected Health Information (“PHI”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, schedule services, communicate with us, or receive IV therapy services through our clinic or mobile operations.

This Privacy Policy is designed to comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and all applicable federal and Arizona state privacy laws.

When you schedule or receive IV therapy services, we may collect PHI, including:

• Name, date of birth, address, phone number, email
• Medical history, allergies, medications, symptoms
• Treatment notes, vital signs, and clinical assessments
• Payment information related to healthcare services
• Emergency contact information

When you use our website, online booking system, or communicate with us, we may collect:

• Contact information, including mobile phone numbers
• Appointment preferences
• Device and browser information
• Cookies and analytics data
• Payment and billing information
• SMS communication preferences and consent records

We use PHI and personal information to:

• Provide IV therapy and wellness services
• Verify identity and maintain accurate medical records
• Coordinate care with our Administrative Medical Director
• Process payments and insurance-related transactions (if applicable)
• Communicate appointment reminders, updates, follow-up care, and customer support
• Respond to customer inquiries
• Send promotional messages, discounts, special offers, and service announcements when consent has been provided
• Improve our services, website functionality, and customer experience
• Comply with legal, regulatory, and safety requirements

We do not sell your information to third parties.

We maintain strict administrative, technical, and physical safeguards to protect your PHI, including:

• HIPAA-compliant Electronic Medical Record (EMR) system
• Encrypted data storage and secure transmission
• Access controls and authentication requirements
• Staff training on HIPAA and privacy practices
• Secure mobile operations with locked storage for medical records
• Regular audits and compliance reviews

We may disclose PHI only as permitted under HIPAA, including:

To coordinate care with licensed medical professionals, including our Administrative Medical Director.

To process payments, verify services, or support billing operations.

Quality assurance, compliance monitoring, and internal administrative functions.

We will obtain written authorization before using or disclosing PHI for:

• Marketing purposes requiring authorization under HIPAA
• Sharing information with third parties not involved in your care
• Any purpose not explicitly allowed by HIPAA

We may disclose PHI without authorization when required by:

• Court orders or subpoenas
• Public health reporting
• Law enforcement
• Threats to health or safety

When an individual contacts The Drip Lab via SMS for the first time, they are automatically sent the following message:

"Thanks for reaching out to The Drip Lab AZ. Please reply YES to confirm you're willing to receive texts from us."

A customer is not enrolled in SMS communications until they reply "YES" to this message.

Once consent is provided, The Drip Lab may send text messages related to:

• Appointment scheduling, confirmations, reminders, and updates
• Customer support and responses to inquiries
• Follow-up communications regarding services
• Promotional offers, discounts, and clinic announcements

Message frequency varies. Message and data rates may apply.

Customers may opt out at any time by replying STOP to any message or request assistance by replying HELP.

SMS consent is not shared with third parties or affiliates for marketing purposes. Mobile phone numbers collected for SMS communications are used solely for the purposes described in this Privacy Policy.

You have the right to:

• Access your medical records
• Request corrections to your PHI
• Receive an accounting of disclosures
• Request restrictions on how your PHI is used
• Request confidential communications
• Receive a copy of this Privacy Policy

To exercise your rights, contact us at:

The Drip Lab LLC
Email: sarah@thedriplabaz.com
Phone: (480) 588-0184
Address: 21455 S Ellsworth Rd Ste. 14, Queen Creek, AZ 85142

We retain PHI and medical records for the period required by Arizona law and HIPAA regulations. Non-PHI website data may be retained for analytics and operational purposes.

Our website may use cookies, tracking pixels, and analytics tools to improve user experience.

We may use secure third-party platforms for:

• Online scheduling
• Payment processing
• Email communication
• EMR management

All healthcare-related platforms are HIPAA-compliant.

Information submitted through online forms is encrypted and securely transmitted.

For mobile services, we maintain HIPAA compliance through:

• Secure transport of medical supplies and records
• Encrypted mobile devices
• Private treatment environments whenever possible
• Verification of identity before treatment

We may update this Privacy Policy periodically. Updates will be posted on our website with a revised effective date.

If you have questions about this Privacy Policy or your rights under HIPAA, contact:

The Drip Lab LLC – Privacy Officer
Email: sarah@thedriplabaz.com
Phone: (480) 588-0184
Address: 21455 S Ellsworth Rd Ste. 14, Queen Creek, AZ 85142