OnCall Drip LLC
PRIVACY POLICY
Effective Date: July 2, 2025

This Privacy Policy of OnCall Drip LLC (the “Company,” “we,” “us,” or “our”) describes how your personal information is collected, used, and shared when you use our services (“Services”), such as when you: (a) visit our website at www.oncalldrip.com, or (b) engage with us in any other related way, including sales, marketing, or events. Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services.

WHAT PERSONAL INFORMATION WE COLLECT

When you visit, use, or navigate our Services, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse our website, we collect information about the individual web pages or products that you view, what websites or search terms referred you to our website, and information about how you interact with our website. We refer to this automatically collected information as Device Information.

We collect Device Information using the following technologies:

• Cookies. Cookies are data files that are placed on your device or computer and often include an anonymous unique identifier.

• Log Files. Log files track actions occurring on our website, and collect data including your IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.

Also, when you make a purchase or attempt to make a purchase from us, we collect certain information about you, including your name, billing address, shipping address, payment information (including credit card numbers and security codes), email address, and phone number.
We may collect data necessary to process your payment if you make purchases, such as your payment instrument number and security code associated with your payment instrument. All payment data is stored by _________________________________________ and you may access their privacy policy at ________________________________________.
Collectively, the above is called “Order Information.”

By “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

WHAT LEGAL BASES WE RELY ON TO PROCESS YOUR INFORMATION

We only process your Personal Information when we believe it is necessary and we have a valid legal reason to do so under applicable law, like with your consent, to comply with laws, to provide you with services, to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU, the following section applies to you:

The General Data Protection Regulation (GDPR) requires us to explain the valid legal bases we rely on in order to process your Personal Information. As such, we may rely on the following legal bases to process your Personal Information:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your Personal Information for a specific purpose. You can withdraw your consent any time. If we are relying on your consent to process your Personal Information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us using the contact details in the contact us section below. However, note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.

• Legal Obligations. We may process your Personal Information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

• Vital Interest. We may process your Personal Information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as in situations involving potential threats to the safety of any person.

HOW WE USE YOUR PERSONAL INFORMATION

We use the Order Information that we collect generally to fulfill any orders placed through our website (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

• Communicate with you.

• Screen our orders for potential risk or fraud.

• When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our website.

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above. We also use Google Analytics to help us understand how our customers use our website. For information on how Google uses your information, you can access their privacy policy at https://policies.google.com/privacy?hl=en.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful requests for information we receive, or to otherwise protect our rights.

HIPAA COMPLIANCE

The Company is committed to complying with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations to ensure the confidentiality, integrity, and security of protected health information (PHI). HIPAA establishes national standards for protecting sensitive patient information and imposes obligations on covered entities and their business associates to safeguard PHI.

Collection and Use of Protected Health Information (PHI)
As part of our mobile IV hydration services, we may collect, use, and disclose PHI in accordance with HIPAA requirements. PHI includes, but is not limited to, information regarding a client’s medical history, treatment records, diagnosis, and any other identifiable health data. The PHI we collect is used exclusively for the purpose of providing IV hydration therapy, coordinating care with licensed medical professionals, verifying eligibility for treatment, processing payments, and complying with legal and regulatory requirements.

The Company does not sell, rent, or disclose PHI to third parties for marketing purposes without explicit authorization from the client. Any use or disclosure of PHI outside of the permitted purposes under HIPAA will be made only with the client’s written consent, except as otherwise required or permitted by law.

Patient Rights Under HIPAA
Under HIPAA, clients have the following rights regarding their PHI:

• Right to Access and Request Copies – Clients may request access to their medical records and obtain copies of their PHI.

• Right to Amend Information – If a client believes that their medical records contain incorrect or incomplete information, they may request amendments to their PHI.

• Right to an Accounting of Disclosures – Clients may request a list of disclosures of their PHI made by the Company for purposes other than treatment, payment, or healthcare operations.

• Right to Request Restrictions – Clients may request restrictions on how their PHI is used or disclosed, though the Company may not be required to agree to such restrictions unless legally mandated.

• Right to Confidential Communications – Clients may request that communications regarding their PHI be sent through alternative means or to specific locations to maintain privacy.

• Right to File a Complaint – Clients have the right to file a complaint with the U.S. Department of Health and Human Services (HHS) if they believe their privacy rights have been violated.

Security Measures and Safeguards
The Company employs administrative, technical, and physical safeguards to ensure the confidentiality, integrity, and availability of PHI. We utilize encrypted data storage, secure electronic medical record (EMR) systems, and access controls to prevent unauthorized access to PHI. Additionally, all employees, contractors, and business associates handling PHI are trained in HIPAA compliance and are required to adhere to strict confidentiality obligations.

If you have any questions regarding our HIPAA compliance policies or wish to exercise your HIPAA rights, please contact us via the information in the “CONTACT US” section at the end of this policy.

THIRD-PARTY WEBSITES

To be able to provide our services to you and to run our business, we share data with third parties from the following categories:

• Third parties that are involved in processing purchases. For example, web shop systems, payment service providers, manufacturers, warehouses, order packers, logistics companies, etc.

• Third parties that provide professional services to us. For example, advertising partners, marketing agencies, business consultants, web hosting providers, etc.

• Law enforcement and other government authorities. For example, tax offices and customs.

The Services may link to third-party websites, online services, or mobile applications and/or contain advertisements from third parties that are not affiliated with us and which may link to other websites, services, or applications. Accordingly, we do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. The inclusion of a link to a third-party website, service, or application does not imply an endorsement by us. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this privacy policy. We are not responsible for the content or privacy and security practices and policies of any third parties, including other websites, services, or applications that may be linked to or from the Services. You should review the policies of such third parties and contact them directly to respond to your questions.

TRANSFER OF INFORMATION INTERNATIONALLY

We may transfer, store, and process your information in countries other than your own. If you are accessing our Services from outside this location, then please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your Personal Information in other countries. If you are a resident of the EU, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your Personal Information in accordance with this privacy notice and applicable law.

HOW WE KEEP YOUR INFORMATION SAFE

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any Personal Information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we do our best to protect your Personal Information, transmission of Personal Information to and from our Services is at your own risk. You should only access the Services within a secure environment.

YOUR RIGHTS (GDPR)

In some regions, such as the EU, you have certain rights under applicable data protection laws. These include: the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object, and rights in relation to automated decision-making and profiling. You can make such a request by contacting us in the “Contact Us” section above.

HOW LONG WE KEEP YOUR INFORMATION

We only keep your Personal Information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. No purpose in this notice will require us to keep your Personal Information for longer than the period of time in which users have an account with us.

CHILDREN’S PRIVACY

We do not solicit any Personal Information from children. If you are not 18 or older, you are not authorized to use our website. Parents should be aware that there are parental control tools available online that you can use to prevent your children from submitting information online without parental permission or from accessing material that is harmful to minors.

COOKIES

What are Cookies?
A cookie is a small file with information that your browser stores on your device. Information in this file is typically shared with the owner of the website in addition to potential partners and third parties to that business. The collection of this information may be used in the function of the website and/or to improve your experience.

How we use Cookies.
To give you the best experience possible, we use the following types of cookies:

• Strictly necessary. As a web application, we require certain cookies to run our service.

• Preference. We use preference cookies to help us remember the way you like to use our Services. Some cookies are used to personalize content and present you with a tailored experience. For example, location could be used to give you services and offers in your area.

How to Control your Cookies.
So long as the cookie is not strictly necessary, you may opt in or out of cookie use at any time.

CHANGES

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. If you have questions and/or require more information, do not hesitate to contact us.

CONTACT US

If you have questions or comments about this Privacy Policy, you can contact us as follows:

Email: hello@oncalldrip.com