Privacy Policy

1. How We Treat Your Protected Health Information (PHI)

We collect and use PHI - such as your name, contact details, health conditions, and treatment information - only for legitimate healthcare purposes, including:

• Providing IV therapy and wellness services
• Managing appointments and follow-ups
• Processing payments and insurance (if applicable)
• Operating our wellness programs and improving services
• Complying with legal and regulatory requirements

We do not sell or share your PHI with unaffiliated third parties for marketing purposes. All electronic PHI (ePHI) is protected using administrative, physical, and technical safeguards including encryption, password protection, and secure servers.

If a data breach occurs, we will promptly notify affected individuals and the U.S. Department of Health and Human Services (HHS) in compliance with the HIPAA Breach Notification Rule.

2. Your HIPAA Rights

As a patient, you have the right to:

• Access and obtain a copy of your PHI.
• Request corrections to any inaccurate information.
• Request restrictions on certain uses or disclosures.
• Request confidential communications via alternative contact methods.
• Receive a list (accounting) of PHI disclosures made by NY Drip Lounge.
• Withdraw consent for future communications or sharing.

To exercise these rights, please submit a written request to our Privacy Official (see contact details below).

3. Disclosure of PHI

We may share your PHI only when:

• Required for your treatment or healthcare operations.
• Required by law, regulation, or court order.
• Authorized by you in writing.
• Necessary to prevent or lessen a serious threat to health or safety.

All third-party vendors or partners handling PHI (such as scheduling, billing, or data hosting services) are bound by HIPAA-compliant Business Associate Agreements (BAAs).

4. LegitScript Compliance

The Drip Lounge Holdings LLC adheres to LegitScript's Healthcare Certification Standards, ensuring all services are legitimate, lawful, and transparent. Our Privacy Policy aligns with LegitScript Standard 7 (Privacy) and Section VI(f) of the LegitScript Terms and Conditions, confirming that PHI is managed securely, ethically, and in compliance with HIPAA.

5. Privacy Official Contact Information

Our appointed Privacy Official oversees compliance with this Privacy Policy and HIPAA regulations.

Patients may contact our Privacy Official for any questions, requests, or complaints regarding privacy practices.

6. Updates to This Policy

We may update this Privacy Policy periodically to reflect new regulations or internal practices. Any changes will be published on this page with a revised effective date.

7. How to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with:

• The Drip Lounge Holdings LLC Privacy Official (contact above), or
• U.S. Department of Health and Human Services (HHS) Office for Civil Rights: https://www.hhs.gov/ocr/privacy/hipaa/complaints/

You will not face retaliation for filing a complaint.

The Drip Lounge Holdings LLC SMS/MMS Privacy Policy

Effective Date: August 27, 2025

SMS/MMS Privacy Statement (Required Disclosure): We do not sell or share your mobile phone number or personal information with third parties for marketing purposes. You can opt out of SMS/MMS at any time by replying STOP; reply HELP for help. Message and data rates may apply. Message frequency may vary.

1. Who We Are

The Drip Lounge Holdings LLC ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have-including your choices for SMS/MMS communications.

Information We Collect

• Contact information: name, email address, mobile phone number.
• Account & booking details: services selected, appointment date/time, and preferences.
• Communications & consent data: your consents, SMS/MMS opt-in/opt-out status, and message delivery logs limited to what's needed to operate the service.
• Device/usage data: IP address, browser type, pages visited, cookies and similar technologies used to operate and improve our website.

2. How We Use Information

• To provide and manage services, appointments, and customer support.
• To send transactional and, if you opt in, marketing SMS/MMS messages.
• To verify identity, maintain security, prevent fraud, and comply with laws.
• To analyze and improve our website, services, and communications.

3. SMS/MMS Program & Your Consent

By providing your mobile number and consenting (online, in person, or by phone), you agree to receive SMS/MMS from The Drip Lounge regarding appointments, updates, and (if you opt in) promotions.

• Opt out: Reply STOP to cancel at any time.
• Help: Reply HELP for assistance.
• Rates & frequency: Message and data rates may apply. Message frequency may vary.
• Privacy assurance: We do not sell or share your mobile phone number or personal information with third parties for marketing purposes.

We may use trusted service providers (e.g., messaging platforms, carriers, scheduling systems) to deliver texts and manage consent records. These providers act on our behalf under contracts that limit how they use your data.

How We Share Information

We share information only as needed to operate our services:

• Service providers: messaging platforms, scheduling, payment, hosting, analytics-under confidentiality and limited-use agreements.
• Legal compliance & safety: when required by law, or to protect the rights, property, or safety of you, us, or others.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to personalize your experience and understand how our website is used. You can control cookies through your browser settings. Some features may not work correctly if cookies are disabled.

5. Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is 100% secure.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

7. Changes to This Policy

We may update this policy from time to time. The Effective Date above reflects the latest version.

8. Contact Us