DRIP WELL HEALTH AND WELLNESS

Privacy Policy

Last Updated: March 26, 2026

1. Introduction

Drip Well Health and Wellness (“Drip Well,” “we,” “us,” or “our”) is committed to protecting your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you:

• Visit our website at dripwell.us
• Book, schedule, or receive our IV therapy or wellness services
• Communicate with us by phone, email, text message, or online form
• Receive marketing or appointment communications from us

By using our website or services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

Personal Identifiers

• Full name, email address, phone number, and mailing address
• Date of birth
• Emergency contact information

Health & Medical Information

• Medical history, current health conditions, and symptoms
• Medications, supplements, and known allergies
• Responses to our medical intake survey
• Treatment records, clinical notes, and visit history
• Lab and testing results

Booking & Payment Information

• Appointment dates, times, and service selections
• Payment method details (processed securely by a third-party payment processor — we do not store full card numbers)
• Purchase and transaction history

Marketing & Communications Data

• Email address and/or mobile phone number if you opt in to receive marketing communications
• Engagement data such as email opens, link clicks, and message delivery status
• Your communication preferences and opt-in/opt-out history

Technical & Website Data

• IP address, browser type, and device information
• Pages visited, time spent on site, and referring URLs
• Data collected through cookies, pixels, and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, administer, and personalize your IV therapy and wellness treatments
• Conduct required medical evaluations prior to treatment
• Communicate appointment confirmations, reminders, and follow-up care instructions
• Send marketing emails and/or text messages to users who have opted in
• Process payments and maintain transaction records
• Improve our website, services, and patient experience
• Comply with applicable legal, regulatory, and licensing obligations
• Respond to your inquiries and customer service requests

4. HIPAA & Protected Health Information

Because we collect and use protected health information (PHI) in connection with medical evaluation and treatment services, we are subject to the Health Insurance Portability and Accountability Act (HIPAA). We maintain appropriate administrative, physical, and technical safeguards to protect your PHI in accordance with HIPAA requirements.

We will not sell your PHI or use it for marketing purposes without your explicit written authorization. A separate Notice of Privacy Practices (HIPAA NPP) is provided to all clients prior to treatment and is available upon request by contacting us at kristi@dripwell.us.

5. How We Share Your Information

We do not sell your personal information. We may share it only in the following limited circumstances:

• Licensed Medical Providers & Nursing Staff: Professionals directly involved in your evaluation and care.
• Compounding Pharmacies: Third-party pharmacies that fulfill and supply your treatment orders.
• Service Providers: Trusted vendors who assist us in operating our business — including our online booking platform, payment processor, and marketing communication platform — all of whom are contractually required to protect your data and may only use it to perform services on our behalf.
• Legal Obligations: When required by law, court order, subpoena, or to protect the safety of our clients, staff, or the public.
• With Your Consent: For any other purpose, only with your explicit prior authorization.

6. Marketing Communications: Email & SMS

Email Marketing

We may send promotional emails to users who have opted in to receive them. All marketing emails include an unsubscribe link. You may opt out at any time by clicking “Unsubscribe” in any marketing email. Please note that transactional messages — such as appointment confirmations, reminders, and post-treatment follow-ups — may still be sent regardless of your marketing email preferences, as they are necessary to provide our services.

SMS / Text Message Marketing

We may send promotional text messages to users who have provided their mobile phone number and given explicit prior written consent to receive SMS communications from us. The following terms apply to our text message program:

• Message frequency varies based on your activity and preferences.
• Message and data rates may apply depending on your mobile carrier and plan.
• Consent to receive text messages is never a condition of purchasing or receiving our services.
• To opt out at any time, reply STOP to any text message from us. You will receive a single confirmation message and no further marketing texts will be sent.
• To request help or more information, reply HELP or contact us at kristi@dripwell.us.

Your mobile number and opt-in status are shared with our third-party marketing communication platform solely for the purpose of delivering messages on our behalf. This platform is contractually prohibited from using your data for any other purpose.

7. Cookies & Tracking Technologies

Our website uses cookies, pixels, and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing communications. These may include:

• Essential cookies necessary for website functionality
• Analytics cookies that help us understand how visitors use our site
• Marketing and retargeting pixels used by our email and SMS marketing platform to track engagement (e.g., email opens, link clicks, website visits following a communication)

You may disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. To opt out of marketing tracking, you may also use the unsubscribe or opt-out mechanisms provided in our communications.

8. Data Retention

We retain personal and health records for the period required by applicable state and federal law. Medical records are generally retained for a minimum of seven (7) years in New Hampshire, or longer if required for legal, compliance, or safety purposes. Non-medical personal data is retained only as long as necessary to fulfill the purposes described in this policy, after which it is securely deleted or anonymized.

9. Your Rights

Depending on applicable law, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of non-medical personal data (note: medical records are subject to mandatory retention requirements under state and federal law)
• Opt out of marketing emails or text messages at any time
• Request a copy of your treatment records

To exercise any of these rights, please contact us at kristi@dripwell.us. We will respond to all requests within a reasonable timeframe and in accordance with applicable law.

10. Data Security

We use industry-standard security measures — including encryption, access controls, and staff training — to protect your personal and health information from unauthorized access, use, or disclosure. While we take reasonable precautions, no method of electronic transmission or storage is completely secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

11. Children’s Privacy

Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18 without verified parental or guardian consent. If you believe we have inadvertently collected information from a minor, please contact us immediately at kristi@dripwell.us and we will promptly delete it.

12. Third-Party Links

Our website may contain links to third-party websites or services. This Privacy Policy applies only to dripwell.us and our direct services. We are not responsible for the privacy practices or content of any third-party sites, and we encourage you to review their privacy policies independently.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will post the updated policy on this page with a revised “Last Updated” date. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact us:

Drip Well Health and Wellness

21 Commerce Park North, Bedford, New Hampshire

Email: jeff@dripwell.us

Website: dripwell.us