Privacy Policy

Drip Vitals LLC, doing business as Drip Vitals (“Drip Vitals,” “we,” “us,” or “our”), is a physician-led telehealth medical clinic. We respect the privacy of our patients, prospective patients, website visitors, and users of our patient portal.

This Privacy Policy explains the information we collect, how we use and disclose it, how we protect it, and the choices and rights that may be available to you.

This Privacy Policy applies to dripvitals.com, the Drip Vitals patient portal, electronic intake forms, communications, telehealth services, and other services operated by or on behalf of Drip Vitals.

1. Information We Collect

We may collect information directly from you, automatically through your use of our services, from healthcare professionals, pharmacies, laboratories, service providers, and other lawful sources.

Information may include:

Identity and contact information, such as your name, date of birth, mailing address, email address, telephone number, and other identifiers.

Account information, including usernames, authentication information, account activity, and communication preferences.

Health and medical information, including medical history, current and previous medications, allergies, diagnoses, symptoms, weight, height, body mass index, treatment goals, laboratory results, photographs you provide for clinical purposes, pregnancy information where clinically relevant, and other information necessary to evaluate or provide treatment.

Prescription and treatment information, including medications requested, medications prescribed, dosage information, pharmacy information, refill information, treatment communications, and clinical notes.

Telehealth information, including information exchanged during portal messaging, telephone calls, secure electronic communications, and video consultations.

Transaction information, including products or services purchased, subscription status, transaction amount, payment status, billing history, refunds, and related transaction records.

Payment-card information may be collected and processed directly by our payment processor, such as Square. Drip Vitals may not receive or retain complete card numbers.

Device and website information, which may include IP address, browser type, device identifiers, operating system, referring pages, pages viewed, approximate location, cookie identifiers, and website interactions.

Communications, including emails, SMS messages, telephone communications, support requests, portal messages, and other communications with Drip Vitals.

2. How We Use Information

We may use information to provide medical and telehealth services; establish and maintain patient accounts; verify identity and patient location; evaluate treatment eligibility; communicate with patients; facilitate prescriptions and pharmacy fulfillment; coordinate laboratory or other healthcare services; process payments and subscriptions; provide customer support; maintain medical and administrative records; protect against fraud and misuse; comply with legal and regulatory requirements; improve our services and technology; and operate our business.

Clinical information is used by Dr. Emmanuel Noel Cruz Tancinco and other appropriately licensed healthcare professionals, if applicable, for treatment and related healthcare purposes.

3. Protected Health Information and HIPAA

Certain information collected or maintained by Drip Vitals may constitute Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

When HIPAA applies, Drip Vitals uses and discloses PHI only as permitted or required by applicable law, including for treatment, payment, healthcare operations, and other legally permitted purposes.

Where required, Drip Vitals enters into appropriate agreements with service providers that handle PHI on its behalf.

Information that is not PHI may be subject to other federal or state privacy laws.

Nothing in this Privacy Policy reduces any privacy right available to you under HIPAA or applicable state law.

4. How We May Disclose Information

We may disclose information as reasonably necessary to provide the services you request.

Recipients may include Dr. Emmanuel Noel Cruz Tancinco and other authorized healthcare personnel; independent dispensing pharmacies; laboratories and diagnostic providers; payment processors including Square; patient-portal and electronic-health-record vendors; secure communications providers; hosting, cybersecurity, fraud-prevention and technology vendors; shipping and fulfillment providers where applicable; professional advisers; and governmental or regulatory authorities when required by law.

Independent pharmacies receive information necessary to process and dispense valid prescriptions and provide pharmacy services.

We do not permit third-party vendors to use PHI for their own unrelated advertising purposes where prohibited by law.

5. Advertising, Analytics, Cookies and Tracking Technologies

Our public website may use cookies and similar technologies for functionality, security, analytics, performance measurement, and marketing where permitted by law.

Drip Vitals does not intentionally disclose medical intake information or authenticated patient-portal PHI to advertising platforms for their independent advertising purposes.

Advertising and analytics technologies should not be placed on pages in a manner that unlawfully discloses PHI or protected consumer health data.

Where required, users will be provided appropriate cookie choices, consent mechanisms, or opt-out rights.

6. Communications

Patients may communicate with Drip Vitals through secure patient portal messaging, email, telephone, SMS, and scheduled video consultations.

Electronic communications may involve privacy risks. Patients should use secure portal messaging when communicating sensitive medical information whenever possible.

SMS and ordinary email may not provide the same level of security as a secure patient portal.

7. How We Protect Information

Drip Vitals uses reasonable administrative, physical, and technical safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

These safeguards may include access controls, authentication, encrypted communications where appropriate, secure systems, employee access restrictions, vendor safeguards, monitoring, and security procedures.

No information system can be guaranteed to be completely secure.

8. Retention of Information

We retain medical and business records for the periods required by applicable federal and state law and for legitimate healthcare, legal, regulatory, tax, fraud-prevention, and operational purposes.

Medical-record retention periods may vary by state.

When information is no longer required, we may securely delete, destroy, anonymize, or de-identify it as permitted by law.

9. Your Health Information Rights

Where HIPAA applies, you may have rights to obtain access to your medical records, request an amendment, request confidential communications, request certain restrictions, receive an accounting of certain disclosures, obtain a copy of applicable privacy notices, and complain about privacy practices.

Certain requests may be subject to exceptions or limitations permitted by law.

You will not be retaliated against for exercising a privacy right or filing a complaint.

10. State Privacy Rights

Depending on where you reside, additional rights may apply concerning personal information or consumer health data.

These rights may include access, correction, deletion, portability, withdrawal of consent, restriction of certain processing, or opting out of certain disclosures.

Consumer health data rights are described separately in our Consumer Health Data Privacy Policy.

11. California Residents

California residents may have additional rights under California privacy and medical confidentiality laws.

Where applicable, those rights may include requesting information about certain personal information collected, correcting inaccurate information, requesting deletion, and exercising applicable rights concerning sensitive personal information.

Health information may be subject to HIPAA, the California Confidentiality of Medical Information Act, or other healthcare-specific privacy rules.

Drip Vitals will honor applicable California rights to the extent required by law.

12. Children

Drip Vitals’ services are intended for adults age 18 and older.

We do not knowingly provide Drip Vitals telehealth treatment programs to children through the adult platform.

13. Data Breaches

If a privacy or security incident occurs that requires notification under applicable law, Drip Vitals will provide notifications as required.

14. Third-Party Websites

Our website may contain links to independent pharmacies, laboratories, payment companies, or other third parties.

Their privacy practices are governed by their own policies, and Drip Vitals is not responsible for independent third-party websites.

15. Changes to This Policy

We may update this Privacy Policy when our practices, technology, services, or legal obligations change.

The current version will be posted on our website with the revised effective date.

16. Contact Us

Questions regarding this Privacy Policy or privacy rights may be directed to:

Drip Vitals LLC
33 SW 2nd Ave, Suite 401
Miami, FL 33130
United States

Email: support@dripvitals.com

Phone: (888) 868-9906

Patients may also contact Drip Vitals through their secure patient portal.

If you believe your HIPAA privacy rights have been violated, you may also have the right to submit a complaint to the U.S. Department of Health and Human Services Office for Civil Rights.

See also our Terms of Service, Consumer Health Data Privacy Policy, Telehealth Informed Consent, and Important Safety Information.