Privacy Policy for IV Rehydrate

IV Rehydrate, LLC
Effective Date: January 2026

This Privacy Policy describes how IV Rehydrate, LLC (“IV Rehydrate,” “IVR,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards your personal and health information. This Policy applies to our website, mobile services, communications, and all wellness and clinical services we provide.

1. Scope and Regulatory Framework

IV Rehydrate operates in a healthcare-adjacent environment and complies with applicable privacy and data protection laws, including the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the HITECH Act, and applicable state privacy statutes. Certain information we handle constitutes “Protected Health Information” (“PHI”) and is subject to additional safeguards and rights.

2. Definitions

“Personal Data” means information that identifies or can reasonably be linked to you.
“Protected Health Information (PHI)” means individually identifiable health information governed by HIPAA.
“Clinical Data” includes laboratory orders, specimen identifiers, test results, and healthcare communications.
“Business Associate” means a third party that performs services involving PHI on our behalf under a HIPAA-compliant agreement.

3. Categories of Information We Collect

We may collect and process the following categories of information:
• Identifiers: name, date of birth, address, phone number, email address
• Health Information: medical history, intake forms, symptoms, treatment preferences
• Clinical Data: lab orders, specimen tracking data, results, provider communications
• Payment Data: billing information, transaction records
• Technical Data: IP address, device identifiers, browser type, usage logs
• Communications: emails, messages, call records related to Services

4. Methods of Collection

Information may be collected directly from you, from authorized healthcare providers, from laboratories, through our website or scheduling systems, during in-person services, or from business partners operating on our behalf.

5. Legal Bases for Processing

We process information based on one or more of the following:
• Your consent
• Performance of a contract for Services you request
• Compliance with legal and regulatory obligations
• Legitimate operational interests such as security and quality assurance
• Public health and safety obligations where applicable

6. How We Use Information

We use information to:
• Deliver requested wellness and clinical Services
• Coordinate blood collection, testing, and specimen transport
• Communicate with laboratories and healthcare providers
• Process payments and scheduling
• Maintain records required by law and professional standards
• Improve service quality, training, and security
• Detect and prevent fraud, misuse, or harm

7. Disclosure of Information

We may disclose information to:
• Laboratories and healthcare providers involved in your care
• Business Associates operating under HIPAA-compliant agreements
• Payment processors and administrative vendors
• Government, regulatory, or public health authorities as required by law
• Law enforcement or courts pursuant to legal process

We do not sell PHI or health data.

8. Cookies and Tracking Technologies

Our website may use cookies, pixels, and similar technologies to enhance functionality, analyze usage, and improve performance. These technologies do not collect PHI. You may control cookie settings through your browser preferences.

9. Data Security Safeguards

We implement administrative, physical, and technical safeguards, including:
• Encrypted storage and transmission of sensitive data
• Role-based access controls and authentication
• Workforce privacy and security training
• Routine risk assessments and audits
• Incident detection and response procedures

10. Data Retention

We retain information in accordance with federal and state laws, contractual requirements, and professional standards. Retention periods vary based on the type of data and regulatory obligations. Information is securely destroyed when no longer required.

11. Breach Notification

In the event of a breach of unsecured PHI, we will notify affected individuals and regulatory authorities as required by HIPAA and applicable law, including providing information on the nature of the breach and protective steps you may take.

12. Your Privacy Rights

Subject to applicable law, you have the right to:
• Access your PHI and Personal Data
• Request amendments or corrections
• Request restrictions on certain uses or disclosures
• Receive an accounting of disclosures
• Obtain copies in electronic or paper form
• File a complaint without retaliation

Requests may be submitted to: privacy@ivrehydrate.com

13. Children’s Privacy

Our Services are not directed to children under 13. We do not knowingly collect information from children without appropriate parental or legal guardian consent.

14. Cross-Border Data Transfers

Information may be processed or stored in the United States or other jurisdictions with different data protection laws. By using our Services, you consent to such transfers as necessary to provide Services.

15. Changes to This Policy

We may update this Privacy Policy at any time. Changes will be posted with a revised effective date. Continued use of Services constitutes acceptance of the updated Policy.