Privacy Policy

Thank you for visiting https://ivybewell.com (the "Website"). Your privacy is important to us. This Privacy Policy (the "Policy") describes the types of information IVYBE WELLNESS SOLUTIONS, LLC ("IVybe Wellness Solutions, LLC," the "Company," "us," "we," or "our") may collect from you or that you may provide when you visit the Website and the products, features, materials, and services we offer (collectively with the Website, the "Services").

This Policy also describes our policies and procedures for collecting, using, maintaining, protecting, and disclosing that information. This Policy applies to information we collect on the Website and through your use of the Services generally (including when you register for an account), and through communications between you and the Website (including email, text, and other electronic messages). The Company is based in Georgia and serves clients within its service area in Georgia, including Greater Atlanta. Health information collected in connection with clinical services is also subject to applicable health-information laws and the separate Notice of Privacy Practices where HIPAA applies; see Section 10. This Website Policy does not replace that notice.

This Policy does not apply to information collected by third parties, including any websites, services, and applications that you elect to access through the Services. Please review this Policy carefully. This Policy explains our information practices. Accessing the Website does not, by itself, provide consent to marketing messages or an authorization to use or disclose protected health information. Where applicable law requires consent or authorization, it must be obtained separately.

This Policy was last revised on the date noted at the top of this page. We may update this Policy from time to time. If we make material changes, we will post the updated Policy on this page and notify you of such changes by means of an email to the email address specified in your account, a message on the Services, or through a notice on the Website home page. Please check the Policy periodically for updates. Changes do not replace any new consent or authorization required by applicable law.

We receive several types of information about you from various sources, including (A) information and content that you give us; (B) automatically-collected information; and (C) demographic information or other aggregate information.

A. Information and Content That You Give Us

We collect personal information that you knowingly choose to disclose. This may include:

• Personal Information (or Data): Personal information, such as your name, address, email address, phone number, username, password, and any other information you directly provide us on or through the Services. This includes information you provide when you register or create an account, complete a questionnaire or a contest entry form, or make a request for customer service.
• Correspondences: Records and copies of your email messages together with your email address and our responses, if you choose to correspond with us through email, and records of your phone number, phone calls with us, and voice messages, if you choose to correspond with us via phone.
• User Content: Information or content you submit to be published or displayed on public areas of the Services or transmitted to other users of the Services or third parties (collectively, "User Content"). Your User Content is posted and transmitted to others at your own risk. The Company cannot control the actions of other users of the Services with whom you may choose to share your User Content. Therefore, we cannot and do not guarantee that your User Content will not be viewed by unauthorized persons.
• Transaction Information: Information about purchases, payment status, subscriptions, and billing or contact details. Card payments are handled by external payment processors. Those processors collect payment-card details under their own notices; the Company may receive a payment confirmation and limited billing details rather than your full card number.
• Health and Service Information: Information provided through approved clinical intake or care channels may include health history, medications, allergies, symptoms, treatment preferences, provider orders, clinical notes, and relevant test results. This information is sensitive and is subject to the additional protections described in Section 10. Please do not submit sensitive health information in public posts or ordinary marketing forms.
• Search Queries: Your search queries on the Website.

B. Information We Collect Automatically

We may use a variety of technologies to collect certain information about your equipment, browsing actions, and patterns whenever you interact with the Services, including:

• Activity Information: Details of your visits to our Services, including the types of content you view or engage with; the features you use; the actions you take; the people or accounts you interact with; the time, frequency, and duration of your activities; and other information about your use of and actions on the Services.
• Equipment Information: Information about your computer and internet connection, including your computer operating system, IP address, browser type, and browser language.
• Location Information: A service address you provide for a mobile appointment, or approximate location inferred from your IP address, may be used to coordinate Services in Georgia and understand Website use. Precise device location would be collected only when you grant permission for a feature that requires it.

The gathering of this information may be used for maintaining the quality of the Services we provide, as well as providing overall general statistics related to the use of the Services. The technologies we use for this automatic data collection may include:

• Cookies: A cookie is a small data file stored on the hard drive of your computer either for only the duration of your visit on a website ("session cookies") or for a fixed period ("persistent cookies"). Cookies contain information that can later be read by a web server. We may use cookies to provide you with a more personal and interactive experience on the Services.
• Web Beacons: Web beacons (also known as "clear gifs", "pixel tags", "web bugs", and "single-pixel gifs") are small files that are embedded in webpages, applications, and emails. Web beacons allow the Company, for example, to track who has visited those webpages or opened an email, test the effectiveness of our marketing, and compile other related website statistics.
• JavaScripts: JavaScripts are code snippets embedded in websites and applications that facilitate a variety of operations including accelerating the refresh speed of certain functionality or monitoring usage of various online components.
• Entity Tags: Entity Tags are HTTP code mechanisms that allow portions of websites to be stored or "cached" within your browser and validates these caches when the website is opened, accelerating website performance since the web server does not need to send a full response if the content has not changed.
• HTML5 Local Storage: HTML5 local storage allows data from websites to be stored or "cached" within your browser to store and retrieve data in HTML5 pages when the website is revisited.
• Resettable Device Identifiers: Resettable device identifiers (also known as "advertising identifiers") are similar to cookies and are found on many mobile devices and tablets (e.g., the "Identifier for Advertisers" or "IDFA" on Apple iOS devices and the "Google Advertising ID" on Android devices), and certain streaming media devices. Like cookies, resettable device identifiers are used to make online advertising more relevant.

This Policy does not cover the use of tracking technologies by third parties. The Services may contain links, content, advertising, or references to other websites by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies or other tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your personal information or they may collect information about your online activities over time and across different websites. Please be aware that we do not control these third parties' tracking technologies or when and how they may be used. Therefore, the Company does not claim nor accept responsibility for any privacy policies, practices, or procedures of any third party. We encourage you to read the privacy statements and terms and conditions of linked or referenced websites you enter. If you have any questions about an ad or other targeted content, you should contact the responsible provider directly.

C. Demographic Information

We may collect demographic, statistical, or other aggregate information that is about you, but individually does not identify you. Some of this information may be derived from personal information, but it is not personal information and cannot be tied back to you. Examples include aggregate Website visit counts, appointment demand, or age ranges where relevant. Health information is not treated as de-identified merely because direct identifiers have been removed; applicable legal de-identification requirements must be satisfied.

D. Information from Other Sources

We may receive information about you from other sources and add it to our account information. We protect this information according to the practices described in this Policy, plus any additional restrictions imposed by the source of the data. These sources may include a referral you authorize, a scheduling or payment provider involved in your transaction, or information you choose to make publicly available. Any health-information exchange must be authorized or otherwise permitted by applicable law. By gathering additional information about you, we can correct inaccurate information, enhance the security of your transactions, and give you product or service recommendations and special offers that are more likely to interest you.

We may use the information we collect about you in a variety of ways, including:

• To provide the Services and its content to you;
• To respond to comments and questions, and provide customer service;
• To fulfill the purpose for which you provide such information, or fulfill any other purpose disclosed by us when you provide the information;
• To communicate with you about your order, purchase, account, or subscription;
• To inform you about important changes to, or other news about, the Services or any of its features or content;
• To operate, maintain, improve, personalize, and analyze the Services;
• To monitor and analyze trends, usage, and activities for marketing or advertising purposes;
• To detect, prevent, or investigate security breaches, fraud, and other unauthorized or illegal activity;
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
• To maintain appropriate records for internal administrative purposes;
• To allow you to participate in interactive features on the Services;
• To send promotional communications, such as information about features, newsletters, offers, promotions, contests, and events;
• To share information across the Company's products, services, and devices to provide a more tailored and consistent experience on all Company products, services, and devices that you use;
• To develop, test, troubleshoot, and improve new products, services, and features, including by conducting surveys and research, and testing and troubleshooting new products, services, and features;
• In any other way we may describe when you provide the information; and
• For any other purpose with your consent.

General Website-use information or contact details may be used for permitted marketing, subject to your choices and applicable consent requirements. Clinical information and protected health information may not be used or disclosed for advertising merely because you visited the Website or opted in to SMS. Any health-information marketing requires the authorization or other legal basis required by applicable law.

We may disclose aggregated or de-identified information only when disclosure is permitted by applicable law and any required legal de-identification standard has been met. We may disclose personal information only for permitted purposes, including the circumstances below, subject to applicable Georgia and federal law. Disclosures of health information must also satisfy Section 10. None of these circumstances permits sharing SMS opt-in data or mobile numbers with third parties for their independent marketing.

• With subsidiaries and affiliates for business purposes: To our subsidiaries and affiliated companies for purposes of management and analysis, decision-making, and other business purposes.
• When we work with service providers: To service providers, professional advisors, contractors, and other third parties that provide us with support services, such as payment processing, website hosting, information technology, sales, email and postal delivery, location mapping, product and service delivery, or analytics services, and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
• When we become involved in a sale or transfer of the Company: If we become involved with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company's assets (whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding), to business entities or people involved in the negotiation or transfer.
• When we are required by law: To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• When we enforce our rights: To enforce or apply this Policy, our Terms of Use (https://ivybewell.com), and other agreements, including for billing and collection purposes.
• To help protect lawful interests: If we believe disclosure will help us protect the rights, property, or safety of the Company, our users, partners, agents, and others. This includes exchanging information with other companies and organizations for fraud protection, and spam and malware prevention.
• To fulfill the purpose for that information or with your consent: To fulfill the purpose for which you provide the information, for any other purpose disclosed by us when you provide the information, or with your consent.
• When we work with communications providers: To providers that send communications on our behalf under appropriate restrictions, subject to your consent and opt-out choices. They may not use SMS consent data or mobile numbers for their own or another party's marketing. Health information may be disclosed only when permitted by applicable law and any required agreement or authorization is in place.
• Third-party platforms and social media networks: To third-party platforms and social media networks, if you have enabled features or functionality that link the Services to such a platform or network (such as logging into the Services using your account with the third party).

Information that you post on or through the public areas of the Services (e.g., in chat rooms, bulletin boards, and discussion groups) is generally accessible to, and may be collected and used by, others and may result in unsolicited messages or other forms of contact from others. Users of the Services are encouraged to exercise caution when providing personal information about themselves in public or interactive areas.

Service providers may support the functions below. Each provider receives only information relevant to its role, subject to applicable law and contractual safeguards. A provider's general privacy policy does not, by itself, authorize disclosure of protected health information.

Business Email, Documents, and Storage

Google Workspace may support business communications and document management. Any use involving protected health information requires appropriate configuration, eligible services, access controls, and a business associate agreement where HIPAA requires one. Merely using Google Workspace does not establish HIPAA compliance.

Scheduling

Calendly may be used to arrange appointments and collect booking contact details. Scheduling and marketing forms should collect only the information necessary for booking. Detailed clinical intake belongs in an approved clinical channel; a booking platform is not automatically approved for protected health information.

Payments

Stripe may process payments and subscriptions. It handles payment information under its own terms and notices. The Company may receive payment status, transaction identifiers, and limited billing details needed to administer your purchase.

Client Communications and Follow-Up

My Plug Machine may support general client communications, follow-up, and consent records. Any proposed handling of health information requires a separate assessment of the service, configuration, permitted uses, and any required business associate agreement. Marketing consent does not authorize processing clinical information.

Website Hosting, Security, and Operations

Providers supporting the Website may process device information, usage logs, cookies, and information submitted through Website forms to operate and secure the Website. Processing locations depend on each contracted provider's actual practices; the Company's Georgia location does not mean that all provider systems are physically located in Georgia.

Analytics and Advertising, If Enabled

Where analytics or advertising tools are used, they may process general Website usage information, subject to applicable consent requirements and your privacy choices. You may contact us about the tools used and available opt-out options. Protected health information may not be sent to advertising or tracking providers without a lawful basis and any required authorization or agreement. A routine service-provider disclosure is not necessarily a sale of personal information; its legal treatment depends on the actual data flow and applicable law.

Other Clinical Support Providers

Approved clinical support providers may receive information necessary for provider review, clinical documentation, laboratory testing, or care coordination when permitted by applicable law and subject to any required agreements. Their use of health information is also governed by Section 10.

Mechanisms to Control Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Cookies and Other Tracking Technologies

You may be able to set your browser to reject cookies and certain other technologies by adjusting the appropriate settings in your browser. Each browser is different, but many common browsers have preferences that may be adjusted to allow you to either accept or reject cookies and certain other technologies before they are set or installed, or allow you to remove or reject the use or installation of certain technologies altogether. We recommend that you refer to the Help menu in your browser to learn how to modify your browser settings. If you disable or refuse cookies or other tracking technologies, please note that some parts of the Services may become inaccessible or may not function properly.

Promotional Communications from the Company

If you do not wish to have your contact information used by the Company to promote our own or third-party products or services, you can opt out by (i) informing us of your preference at the time you register for an account, complete an order form, sign up for our newsletter, or complete any other form on or through the Services which we collect your data; (ii) modifying your user preferences in your account profile; (iii) following the opt-out instructions in the promotional emails we send you; or (iv) sending us an email stating your request. Please note that if you opt out of receiving promotional communications from us, we may still send you transactional communications, including emails about your account or purchases.

Staff and contracted service providers may use information only for permitted purposes and under appropriate restrictions. Permitted disclosures are described in Sections 5, 10, and 11; this Policy does not promise that no service provider will ever receive information.

Targeted Advertising

If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers' target-audience preferences, you can opt out by modifying your user preferences in your account profile. We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. Many advertising companies that collect information for interest-based advertising are members of the Digital Advertising Alliance or the Network Advertising Initiative, both of which maintain websites where people can opt out of interest-based advertising from their members. To opt out on these pages, visit www.AboutAds.info and www.networkadvertising.org.

Location Information

You may be able to adjust the settings of your device so that information about your physical location is not sent to us or third parties by (a) disabling location services within the device settings; or (b) denying certain websites or applications permission to access location information by changing the relevant preferences and permissions in your device or browser settings.

Voice Transmissions

You may be able to adjust the settings of your device so that your voice transmissions cannot be sent to us or third parties by (a) disabling microphone and speech recognition services within the device settings; or (b) denying certain websites or mobile applications permission to access microphone and speech recognition services by changing the relevant preferences or permissions in your device or browser settings.

How We Respond to Do Not Track Signals

"Do Not Track" is a privacy preference you can set in most web browsers. When you turn on this preference, it sends a signal or message to the websites you visit indicating that you do not wish to be tracked. Do Not Track is not supported consistently across websites. Where applicable law requires honoring a recognized opt-out preference signal, such a signal must be honored. You may also contact us with a privacy request.

You may contact us to request access to, correction of, or deletion of personal information you provided. If an account feature is available, you may also update relevant account details there. We may need to verify your identity before disclosing or changing records and will use verification information only for appropriate verification and security purposes.

Requests are subject to applicable law and legitimate record-retention obligations. We may need to retain clinical, billing, consent, transaction, or legal records even after an account is closed or a deletion request is received. Medical-record access and amendment requests are handled under the rules that apply to those records; they are not automatically governed by Website account controls. Copies of material you intentionally posted publicly may remain in third-party caches or archives.

The Company is based in Georgia. Personal information is handled subject to applicable Georgia law, applicable federal law, and any other mandatory law that applies to a particular person or transaction. Selecting Georgia governing law does not remove privacy protections that cannot lawfully be waived.

You may contact us to ask what information we hold about you, request a correction, request deletion where permitted, or change communication preferences. We will review requests under the law that applies and meet any applicable response deadlines. We may verify identity, explain a denial or limitation, and retain records when retention is legally required or otherwise permitted. These request procedures do not imply that every privacy right or deadline from another state's law is a Georgia statutory right.

If a security incident triggers a notification duty, affected people and any required authorities will be notified as required by applicable Georgia or federal law. Additional mandatory privacy protections will be honored when they apply; they are not replaced by this Policy.

Health history, medications, allergies, symptoms, clinical assessments, treatment records, provider orders, and laboratory results may constitute sensitive health information. Where the Health Insurance Portability and Accountability Act of 1996 (HIPAA) applies, protected health information is governed by HIPAA and its implementing regulations, applicable Georgia law, and the relevant Notice of Privacy Practices. This Website Privacy Policy is not that Notice of Privacy Practices and does not replace any notice or authorization required by law.

Where applicable, the separate Notice of Privacy Practices explains permitted uses and disclosures for treatment, payment, and healthcare operations; other uses and disclosures allowed or required by law; rights concerning access, amendment, and certain disclosures; how to raise privacy concerns; and the provider's legal duties. Uses or disclosures that require a separate authorization will not be authorized merely by Website use, accepting these terms, or opting in to SMS.

Business associates may receive protected health information only when permitted by law and with required agreements and safeguards. Marketing, testimonials, photographs, or disclosures of identifiable health information require the permission or authorization applicable to that particular use. Health information is not public User Content simply because it is submitted electronically.

Please use the clinical communication channels designated by the Company for sensitive information. Ordinary Website contact forms, public comments, marketing tools, or SMS enrollment are not automatically approved for clinical details. To request the applicable Notice of Privacy Practices or raise a privacy concern, contact us using Section 18. Nothing in this Policy limits the right to complain to an appropriate regulator or the obligation to provide a required notice.

Mobile numbers and SMS opt-in or consent data are not sold, rented, or disclosed to third parties or affiliates for their independent marketing or promotional purposes. These data may be provided to contracted messaging or support providers only as necessary to deliver or support the Company's communications, subject to confidentiality and use restrictions, or as otherwise required by law.

SMS consent is used to document your communication choices. It does not authorize a sale of health information, disclosure of clinical information for advertising, or any use of protected health information that requires separate authorization. Other permitted personal-information disclosures remain subject to Sections 5 and 10.

If you optionally opt in to receive text messages from IVYBE WELLNESS SOLUTIONS, LLC:

• Marketing SMS: Periodic updates regarding IV hydration and wellness offers, service announcements, or event updates. Message frequency varies.
• Non-Marketing SMS: Account notifications, appointment reminders, or consultation follow-ups.
• Rates: Message and data rates may apply depending on your wireless provider.
• Opt-Out Instructions: You may opt out of SMS messages at any time by replying STOP to any text message. Reply HELP for assistance or call us at (678) 810-5333.
• Consent is Optional: SMS consent is optional and is not a condition of purchase, submitting a form, or receiving clinical services. Providing a mobile number alone does not constitute marketing consent.
• Clinical Privacy: SMS consent does not authorize the use of an unapproved channel for sensitive health information or replace a HIPAA authorization.

We take reasonable precautions to secure your personal information. We have implemented technical, physical, and administrative security measures designed to reduce the risk of loss, misuse, unauthorized access, disclosure, or modification of your information. We have put in place appropriate physical, electronic, and managerial procedures to safeguard the information we collect. Safeguards may include access controls, secure storage and transmission, staff training, and contractual restrictions appropriate to the information and the system involved. Where HIPAA applies, the applicable privacy, security, and breach-notification requirements must also be satisfied. External payment processors are responsible for their payment systems under their own terms and applicable law.

The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

While we have employed security technologies and procedures to assist in safeguarding your personal information, no system or network can be guaranteed to be 100% secure. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time. Please use designated secure channels for sensitive information. These practical limits do not waive the Company's legal duties or liability that cannot lawfully be waived.

If you choose to visit the Services, your visit and any dispute over privacy are subject to this Policy and our Terms of Use, including permitted limitations on damages, dispute-resolution provisions, and application of Georgia law together with applicable federal law. Neither document removes privacy rights, professional obligations, or legal protections that cannot lawfully be waived.

Website uses Trackers, including cookies, web beacons, and similar technologies, as described in the "Information We Collect Automatically" section above. These Trackers help us provide and improve our Services, remember your preferences, and analyze how you use the Website. You can control and manage cookies through your browser settings. If you disable cookies, some features of the Services may not function properly.

The Website and independent online enrollment are intended for adults age 18 and older. Any clinical services for a minor require appropriate parent or legal-guardian involvement, provider approval, and separate consent under applicable law. Information obtained lawfully for a minor's care is handled as a clinical record and retained as required by law. If we learn that a child has submitted information through the Website without appropriate authorization, we will take action required by applicable law. Please contact us if you believe this has occurred.

By providing your mobile phone number and separately opting in through our Website forms, checkout pages, application forms, keyword sign-up, or another permitted consent method, you agree to receive the automated or non-automated message categories covered by that consent. Marketing consent must be obtained separately where required by applicable law. Our SMS program may include:

• Account alerts and notifications
• Appointment reminders
• Service updates
• Promotional offers and discounts
• Marketing messages
• Product launches and event announcements
• Customer support communications

Message frequency may vary based on your engagement, purchases, and service activity. Consent to receive SMS messages is not a condition of purchase. You may opt out of receiving text messages at any time by replying STOP to any message. After opting out, you may receive one final confirmation text. For help, reply HELP or contact our support team. Message and data rates may apply. Check with your wireless carrier for details. Carriers are not liable for delayed or undelivered messages.

Privacy & Data Use

Mobile information and SMS opt-in or consent data are not shared with third parties or affiliates for their independent marketing or promotional purposes. Limited disclosures to contracted messaging or support providers, or disclosures required by law, are described in Section 11. Health information remains subject to Section 10. The messaging program is subject to applicable federal communications requirements and applicable Georgia law.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Company

IVYBE WELLNESS SOLUTIONS, LLC

Email

info@ivybewell.com

Phone

(678) 810-5333

Website

https://ivybewell.com

Location

Greater Atlanta, Georgia