Privacy Policy

Effective Date: October 22, 2026

Who we are

The Drip Lab provides mobile IV therapy in the Austin, Texas area. Clinical services are provided by Entwistle Drip Lab Medical PLLC, doing business as The Drip Lab (the "Practice"). The Drip Lab TX LLC (the "Management Company") provides non-clinical business services to the Practice and operates this website. In Part 1, "The Drip Lab," "we," "us," and "our" mean both companies. In Part 2, they mean the Practice.

Part 1: Website Privacy Policy

Part 1 covers information collected through thedriplabtx.com, our online booking, and our job application form. Health information you give us for your care is protected health information. Part 2 explains how it is used and shared and what your rights are, and where the two parts overlap, Part 2 controls.

Information we collect

• When you book. Your name, phone number, email address, date of birth, service address, the services and appointment time you choose, and details for anyone you book for. Our online booking request form runs on Mangomint, our booking and client management platform.
• Health information. Intake answers, consent forms, vital signs, your telehealth exam results and treatment order, and treatment records.
• Telehealth exam. Before your first treatment, a licensed provider examines you by video through our telehealth exam service. That service receives what it needs to set up and complete your exam, such as your name, date of birth, phone number, email, and health history, and sends the provider's decision and order back to us.
• Payment information. Cards are processed and kept on file through the payment service built into our booking platform, so we can take payments and any fee described in our Service Terms. We don't see or store your full card number.
• Messages. When you call, text, or email us, we keep the message and your contact details so we can respond.
• Job applications. If you apply to work with us through the form on this website, we collect what you enter, such as your name, email, phone number, location, license and certification details, experience, availability, and your resume. Applications are submitted through JotForm, our form provider.
• Technical information. Like most websites, our website host automatically receives standard technical information when you visit, such as your IP address, browser type, and the pages you request. It is used to deliver and secure the site.

We don't collect your device's precise location. Your nurse uses the service address you give us.

Cookies and analytics

We use Google Tag Manager to run Google Analytics on every page of this website. Google Tag Manager loads through our own website address (thedriplabtx.com/metrics), which passes its requests on to Google along with your approximate location (country and state). Google Analytics is a Google service that shows us how visitors find and use the site. It records the pages you visit, how you reached the site (for example, from a search engine, an ad, or another website), your device and browser, and your approximate location, which Google works out from your IP address. It may also record actions you take on the site, such as starting a booking, tapping to call, finishing a booking, scrolling, clicking a link to another website, or downloading a file. For a finished booking, that can include the booking's total price.

Google Analytics stores cookies on your device so it can recognize your browser when you come back.

We also advertise on Google, and Google Tag Manager runs the Google Ads tag on every page. It records the pages you visit. If you reached the site from one of our ads, it stores an advertising cookie on your device so Google can tell us whether that visit led to a booking request or a call. We use this only to see which ads work. We don't use it for remarketing or personalized ads.

These tools do not send Google your name, contact details, or the health information you give us, and they do not record what you type into the booking form or our other forms.

The booking form on our booking page is run by Mangomint, our booking platform. It loads from Mangomint's servers inside the page and is also covered by Mangomint's own privacy policy. What you enter there goes to Mangomint and is not sent to our Google Analytics.

To stop Google Analytics from collecting data about your visits, you can install the Google Analytics opt-out browser add-on. You can also block or delete cookies in your browser settings at any time. Google explains how Google uses information from sites or apps that use its services.

We don't use any other analytics, advertising, or session-recording tool on this website. Before we add one, we'll name it here, with what it collects and the pages it runs on.

How we use information

• To schedule and provide your services, including setting up your telehealth exam and sending your nurse
• To send appointment confirmations, reminders, exam and intake links, arrival updates, and receipts
• To take payments and fees
• To send promotional texts or emails, only if you opt in
• To review job applications and contact applicants
• To run, secure, and improve this website and our services
• To comply with the law and protect our rights

How we share information

We do not sell your personal information, and we do not share it with other companies for their own marketing. We share it only as follows:

• With your care team. The nurses and licensed providers involved in your care.
• With service providers. Companies that help us run the business, such as our booking and payment platform, our telehealth exam service, our website host, our job application form provider, and our email and text messaging services. They may use the information only to provide their services to us. Service providers that handle health information for us sign a business associate agreement before they receive it, as federal law requires.
• When the law requires it. For example, to respond to a valid court order or subpoena, or to prevent a serious threat to someone's health or safety.
• If the business changes hands. If the Practice or the Management Company is sold, merged, or reorganized, information may transfer to the new owner, who must protect it as this policy and the law require.

Text messages and email

When you book, we send appointment texts and emails. Promotional texts and emails are sent only if you opt in. Message frequency varies, and message and data rates may apply. Reply STOP to any text to stop texts from us, or HELP for help, and use the unsubscribe link in any email to stop promotional email.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are excluded from all of the sharing described in this policy and will not be shared with any third parties.

Selling data and targeted advertising

We do not sell personal data, including sensitive data such as health information. We do not use personal data for targeted advertising, or for profiling that leads to decisions with legal or similarly significant effects on you. If that ever changes, we will update this policy first, ask for your consent where Texas law requires it, and honor browser opt-out signals such as Global Privacy Control.

Your Texas privacy rights

You can ask us to:

• Confirm whether we process your personal data, and give you access to it
• Correct inaccurate personal data
• Delete personal data you gave us or that we hold about you
• Give you a copy of the personal data you gave us, in a portable format

To make a request, contact our Privacy Officer using the details at the end of this page. We will confirm your identity first, and we will respond within 45 days. If we need more time, we will tell you why within that 45 days, and take no more than 45 more. We may keep information that the law requires us to keep, including medical records. Your rights over your health information are described in Part 2.

If we decline your request, you can appeal by replying to our decision and asking us to reconsider. We will answer your appeal in writing within 60 days. If we deny your appeal, you can file a complaint with the Texas Attorney General.

How we protect and keep information

We use administrative, technical, and physical safeguards suited to the information, and we limit access to the people who need it. No method of sending or storing information is completely secure. We keep information as long as we need it for the purposes above or as the law requires. Medical records are kept for at least seven years after your last treatment, as Texas rules require, and longer when another law or a pending legal matter requires it.

Your choices

• Stop promotional texts or emails at any time, as described above.
• Use your Texas privacy rights, described above.
• Use your rights over your health information, described in Part 2.

Children

Our services are for adults 18 and older, and this website is not meant for children. We do not knowingly collect information from children under 13.

Other websites

Booking, intake forms, and telehealth exams may happen on pages run by our service providers on our behalf, and this policy covers the information we receive through them. Other websites we link to, such as social media, have their own privacy policies.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

Questions

Questions about Part 1 go to our Privacy Officer, using the contact details at the end of this page.

Part 2: Notice of Privacy Practices

Entwistle Drip Lab Medical PLLC d/b/a The Drip Lab

Effective date: October 10, 2026

Our duties

We are required by law to keep your health information private and secure, to give you this notice of our legal duties and privacy practices, to follow the notice currently in effect, and to tell you promptly if a breach may have compromised the privacy or security of your health information.

How we use and share your information

We may use and share your health information without your written authorization to:

• Treat you. For example, sharing your exam results and order with the nurse who treats you, or with the telehealth provider who examines you.
• Get paid. For example, processing your payment for services.
• Run our practice. For example, scheduling, quality review, training, and working with our management company and other business associates who sign agreements to protect your information.
• Contact you. For example, appointment confirmations and reminders, and links to your exam and intake forms.
• Share with people involved in your care. For example, a friend or family member who is with you at your visit, unless you tell us not to. If you can't tell us your preference, for example in an emergency, we may share what we believe is in your best interest.
• Comply with the law. When federal, state, or local law requires it.
• Other purposes the law allows, including public health and safety reporting, preventing a serious threat to health or safety, health oversight agencies, lawsuits and legal proceedings, law enforcement, coroners and medical examiners, organ and tissue donation, workers' compensation, and special government functions such as military and national security.

Uses that require your written permission

We will not use or share your information for marketing, and we will not sell it, without your written authorization. Any other use not described in this notice also requires your written authorization. You may revoke an authorization in writing at any time, except to the extent we already acted on it.

Your rights

You have the right to:

• See or get a copy of your health records, in paper or electronic form. We will provide them within 15 business days of your written request, for a reasonable, cost-based fee.
• Ask us to correct your health records if you believe they are wrong or incomplete
• Ask us to limit what we use or share. We may say no, except that we must agree not to share information with your health plan about services you paid for in full out of pocket.
• Ask us to contact you in a certain way or at a certain place
• Get a list of certain disclosures we made in the past six years
• Get a paper copy of this notice at any time, even if you agreed to get it electronically
• Choose someone to act for you, such as a legal guardian or person with medical power of attorney

Texas law

When Texas law protects your health information more than federal law does, we follow Texas law.

• Electronic disclosure. Your health information may be disclosed electronically. Except for disclosures to another covered entity for treatment, payment, health care operations, or certain insurance functions, or as state or federal law otherwise authorizes or requires, we will get your separate authorization before we disclose your health information electronically.
• Electronic health records. If you ask in writing for your electronic health record, we will provide it in electronic form within 15 business days, unless you agree to another form.
• No sale. Texas law does not allow us to sell your health information, and we don't.

Complaints

If you believe your privacy rights were violated, you may file a complaint with us using the contact information below or with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/hipaa/filing-a-complaint or 1-877-696-6775. We will not retaliate against you for filing a complaint. Complaints about a physician or another licensee of the Texas Medical Board can also go to the board, as explained in our Notice Concerning Complaints.

Changes to this notice

We may change this notice, and the change will apply to all information we have about you. The current notice will be available on our website and on request.

Contact

Privacy Officer
Entwistle Drip Lab Medical PLLC d/b/a The Drip Lab
Phone: (512) 765-3335
Email: info@thedriplabtx.com