Privacy Policy

Effective Date: August 1, 2026

DripHaus Wellness & Beauty ("DripHaus," "we," "us," or "our") respects your privacy and is committed to protecting the personal and health information you share with us. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have. It applies to our website (the "Site"), our online booking system, and the services we provide at our clinic.

The short version: we do not sell your personal information, and we keep your information confidential. The details below explain exactly how.

1. Information We Collect

Information You Provide to Us

• Contact details (name, phone number, email address, mailing address)
• Appointment and booking information submitted through our online scheduling system
• Health history, intake forms, and treatment-related information you provide before or during a consultation or procedure (for example, for TRT, GLP-1/weight optimization, vitamin therapy, or injectable treatments)
• Payment information processed through our booking and payment providers
• Messages, questions, or feedback you send us by phone, email, text, or contact form
• Photos taken for treatment documentation or, with your separate written consent, for marketing purposes

Information Collected Automatically

• Device and browser information, IP address, and general location
• Pages viewed, time on Site, and referring website
• Cookies and similar tracking technologies (see Section 5)

2. How We Use Your Information

We use the information we collect to:

• Schedule, confirm, and manage appointments
• Evaluate your candidacy for a treatment and provide safe, informed care
• Communicate with you about appointments, treatment plans, and follow-up care
• Process payments and maintain business and billing records
• Send appointment reminders and, only with your consent, promotional or educational content
• Improve our Site, services, and client experience
• Comply with legal, licensing, and recordkeeping obligations applicable to a medical aesthetics practice
• Protect against fraud, unauthorized access, and misuse of our systems

3. We Do Not Sell Your Information

DripHaus does not sell, rent, or trade your personal information or health information to third parties for their own marketing or advertising purposes. We do not share your protected health information with outside parties except as described in this policy or as required to provide your care, process payment, or comply with the law.

4. How We Share Information

We only share your information with:

• Service providers who support our operations — including our booking and scheduling platform (Boulevard), payment processors, and website/email hosting providers — solely so they can perform the service we've hired them for. These providers are contractually restricted from using your information for their own purposes.
• Licensed medical staff and clinical personnel involved in evaluating or providing your treatment.
• Legal and safety purposes — if required by law, subpoena, or court order, or if necessary to protect the health or safety of a client, staff member, or the public.
• A successor business in the event of a merger, acquisition, or sale of substantially all assets, in which case your information would remain subject to a policy at least as protective as this one.

We never share before/after photos, testimonials, or treatment details publicly without your specific written authorization.

5. Cookies & Website Analytics

Our Site may use cookies and similar technologies to keep the Site functioning properly, remember your preferences, and understand how visitors use the Site (for example, through analytics tools). You can disable cookies in your browser settings; some features of the Site may not function properly if you do.

6. Protected Health Information & HIPAA

Where DripHaus provides medical services (such as TRT, GLP-1/weight management, vitamin injections, NAD+ therapy, or injectables), certain information you share may be considered Protected Health Information ("PHI") under the Health Insurance Portability and Accountability Act (HIPAA). With respect to PHI, we:

• Use and disclose PHI only for treatment, payment, and healthcare operations, or as otherwise permitted or required by law
• Limit staff access to PHI to what is reasonably necessary for their role
• Maintain physical, technical, and administrative safeguards to protect your records
• Provide a separate Notice of Privacy Practices, available at our clinic and upon request, describing your HIPAA rights in full — including your right to request access to, or a copy of, your records, request corrections, request an accounting of certain disclosures, and file a complaint if you believe your privacy rights have been violated

If you have questions about your HIPAA rights or would like a copy of our Notice of Privacy Practices, contact us using the information below.

7. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, disclosure, alteration, or destruction, including secure storage of records, restricted staff access, and use of reputable third-party platforms for scheduling and payment processing. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain client and health records for as long as required by applicable Texas medical recordkeeping laws and professional standards, and general business/contact information for as long as reasonably necessary to serve you or as required by law, after which it is securely deleted or destroyed.

9. Your Choices & Rights

• You may opt out of marketing emails or texts at any time by using the unsubscribe link, replying "STOP," or contacting us directly.
• You may request access to, or a copy of, your personal and health records.
• You may request corrections to inaccurate information in your file.
• You may withdraw photo/marketing consent at any time going forward.
• You may ask us questions about how your information is used at any time.

10. Children's Privacy

Our services and Site are intended for adults. We do not knowingly collect personal information from anyone under 18 without parental or guardian consent as required for treatment.

11. Third-Party Links

Our Site may link to third-party websites (including our booking platform). We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Effective Date" above will indicate the most recent revision. Continued use of our Site or services after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise any of your rights, please contact us: