THE IVY LOUNGE WELLNESS 1

Privacy Policy

The Ivy Lounge LLC, DBA The Ivy Lounge Wellness 

825 W Royal Ln, Suite 230, Irving, Texas 75039 
Effective Date: May 1, 2026   |   Last Updated: May 1, 2026

1. Introduction 

The Ivy Lounge LLC, doing business as The Ivy Lounge Wellness (“Ivy Lounge,” “we,” “us,” or “our”), respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information about visitors to our website, clients of our wellness services, and members of our membership programs. 

This Policy applies to information collected through ivyloungewellness.com, our online booking system (Jane App), our intake forms, our membership platform, in-person interactions at our clinic, and any communications with us by email, phone, or text. 

Important: The Ivy Lounge Wellness is a cash-pay wellness provider and does not bill health insurance. Depending on the structure of our clinical operations and vendor relationships, certain health privacy laws may apply to us, our clinical providers, or our vendors. Regardless of technical covered-entity status, we treat client health information as confidential and apply privacy and security safeguards designed to protect health information. 

 

2. Information We Collect 

2.1 Information You Provide Directly 
  • Identity information: full name, date of birth, gender, photograph (where applicable). 
  • Contact information: email address, phone number, mailing address, emergency contact details. 
  • Health and wellness information: medical history, current medications, allergies, pre-existing conditions, pregnancy status, prior IV therapy or NAD+ tolerance, self-reported biomarkers, symptoms, treatment goals, and any other information you disclose on our intake forms or to our clinical staff. 
  • Payment information: credit/debit card details and billing address. Card numbers are processed and stored by our payment processor (Jane Payments / Stripe) — we do not store full card numbers on our own servers. 
  • Membership information: tier selection, credit balance, freeze/pause history, guest pass usage, founding member status, and account preferences. 
  • Communications: messages, voicemails, emails, SMS, and any feedback or reviews you send us. 

By providing your mobile number and opting in, you consent to receive appointment-related text messages and, where separately authorized, promotional text messages from Ivy Lounge Wellness. Message and data rates may apply. You may opt-out of promotional texts at any time by replying STOP. Transactional appointments and safety-related messages may still be sent where legally permitted. 

 

2.2 Information Collected Automatically 

When you visit our website, we and our service providers automatically collect: 

  • Device and technical data: IP address, browser type and version, operating system, device identifiers, time zone setting, and screen resolution. 
  • Usage data: pages viewed, links clicked, time spent on pages, referring URL, and search terms used to find us. 
  • Cookies and similar technologies: see Section 9 for details. 

 

2.3 Information from Third Parties 
  • Booking platform: Jane App provides us with appointment data, intake form responses, and payment status. 
  • Marketing platforms: if you interact with our social media accounts (Instagram, Facebook, TikTok) or click on our ads, those platforms may share limited demographic and engagement data with us. 
  • Referrals: if an existing member refers you, we receive their name in connection with your account so we can apply applicable referral credits. 

 

3. How We Use Your Information 

We use your information to: 
  • Provide, schedule, and deliver wellness services, including IV therapy, IM injections, NAD+ protocols, and membership benefits. 
  • Screen for contraindications and ensure treatments are safe for you (e.g., reviewing medication lists, allergy history, pregnancy status). 
  • Process payments, manage your membership, track credits, and apply discounts. 
  • Communicate with you about appointments, results, follow-ups, billing, and membership status. 
  • Send promotional emails, newsletters, and offers — only with your consent, and you can opt out at any time. 
  • Maintain clinical records as required by Texas medical record retention rules and our medical director’s standards of care. 
  • Operate, secure, and improve our website and online services. 
  • Comply with legal obligations, respond to lawful requests, and protect our rights and the safety of clients and staff. 
  • Conduct internal analytics and aggregated, de-identified research to improve our services. 

4. Legal Basis for Processing (EU/UK Visitors)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on the following legal bases under the General Data Protection Regulation (GDPR): 

  • Contract: to deliver the services you have booked, including membership obligations. 
  • Consent: for sensitive health data, marketing communications, and non-essential cookies. You may withdraw consent at any time. 
  • Legitimate interests: to operate and secure our business, prevent fraud, and improve our services, balanced against your privacy rights. 
  • Legal obligation: to comply with tax, health, and regulatory requirements. 
  • Vital interests: in emergencies where we must share health information to protect your life or that of another person. 

 

5. How We Share Your Information 

We do not sell your personal information. We share it only as described below: 

 

5.1 Service Providers 

We share information with vetted third-party vendors that help us operate, including: 

  • Jane App: practice management, scheduling, intake forms, electronic charting, and Jane Payments processing. 
  • Payment processors: Stripe (via Jane Payments) for card processing. 
  • Email and SMS providers: for appointment confirmations, reminders, and (with consent) marketing communications. 
  • Website hosting and analytics: our website host, Google Analytics, and similar services. 
  • Pharmaceutical compounding pharmacies: to fulfill prescriptions written by our Medical Director, where required. 
  • Professional advisors: attorneys, accountants, and insurers, under confidentiality obligations. 

Each provider is contractually obligated to handle your information securely and use it only for the purposes we authorize. 

 

5.2 Medical Director and Clinical Staff 

Our licensed Medical Director and clinical staff (RNs, NPs, and authorized personnel) access your health information as needed to evaluate, approve, and deliver treatment. They are bound by professional confidentiality obligations under Texas law. 

 

5.3 Legal and Safety Disclosures 

We may disclose information when we believe in good faith it is necessary to: 

  • Comply with a subpoena, court order, or other legal process. 
  • Respond to lawful requests from public authorities, including for public health, safety, or national security. 
  • Report suspected abuse, fraud, or threats of harm as required or permitted by law. 
  • Enforce our Terms & Conditions or protect the rights, property, or safety of Ivy Lounge, our clients, or others. 

 

5.4 Business Transfers 

If The Ivy Lounge LLC is involved in a merger, acquisition, asset sale, financing, or bankruptcy, your information may be transferred as part of that transaction. We will notify you and, where required, obtain your consent. 

 

5.5 With Your Consent 

We may share information for other purposes with your explicit consent, such as testimonials with your name or photo, referral acknowledgments, or coordinating care with your outside physician at your request. 

 

6. How Long We Keep Your Information 

We retain personal information for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include: 

Information Type 

Retention Period 

Clinical and medical records 

Minimum 7 years from date of last service (adults), longer for minors per Texas Medical Board rules. 

Membership and account data 

Duration of membership plus 7 years for tax and financial recordkeeping. 

Payment transaction records 

7 years to comply with IRS and Texas tax requirements. 

Marketing list data 

Until you unsubscribe or request deletion. 

Website analytics and cookies 

Up to 26 months (Google Analytics default) or per the specific cookie’s expiration. 

 

7. How We Protect Your Information 

We use reasonable administrative, technical, and physical safeguards to protect your information, including: 

  • Encrypted transmission of data via HTTPS/TLS on our website and booking platform. 
  • Encrypted storage of clinical records within Jane App, which maintains HIPAA-compliant infrastructure. 
  • Restricted access controls — only authorized staff with a need-to-know can view client records. 
  • Strong password policies and multi-factor authentication where supported. 
  • Locked physical storage for any paper records and shredding of documents no longer needed. 
  • Regular review of our practices and prompt response to suspected breaches. 

No method of transmission or storage is 100% secure. If we become aware of a breach affecting your personal information, we will notify you and applicable regulators as required by law. 

Where applicable, we may also provide notice under federal or state health breach notification laws, including laws applicable to personal health records, wellness platforms, or health-related applications. 

 

8. Your Privacy Rights 

Depending on where you live, you may have certain rights regarding your personal information. We honor these rights for all clients, regardless of residency. 

 

8.1 Rights Available to All Clients 
  • Access: request a copy of the personal information we hold about you. 
  • Correction: ask us to fix inaccurate or incomplete information. 
  • Deletion: ask us to delete your information, subject to legal and clinical retention requirements. 
  • Opt-out of marketing: unsubscribe from marketing emails or texts at any time using the link in the message or by contacting us. 
  • Withdraw consent: where we rely on your consent, withdraw it at any time without affecting prior processing. 

 

8.2 Additional Rights for Texas Residents (TDPSA) 

Under the Texas Data Privacy and Security Act, effective July 1, 2024, Texas residents have the right to: 

  • Confirm whether we are processing your personal data and access that data. 
  • Correct inaccuracies in your personal data. 
  • Delete personal data you provided or that we obtained about you. 
  • Obtain a portable copy of personal data you provided. 
  • Opt-out of processing for targeted advertising, sale of personal data, or profiling for decisions with significant effects. 

We process sensitive personal data, including health-related information, only as reasonably necessary to provide requested services, with your consent, or as otherwise permitted by law. 

To exercise these rights, contact us using the details in Section 12. We will respond within 45 days. If we decline your request, you may appeal by replying to our response, and we will reconsider within 60 days. 

 

8.3 Additional Rights for California Residents (CCPA/CPRA) 

Under the California Consumer Privacy Act, California residents have the right to: 

  • Know what categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it. 
  • Delete personal information we have collected, subject to exceptions. 
  • Correct inaccurate personal information. 
  • Opt-out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell personal information in the traditional sense. 
  • Limit the use of sensitive personal information. 
  • Non-discrimination for exercising any of these rights. 

Authorized agents: you may designate an authorized agent to make a request on your behalf. We will require verification of the agent’s authority and your identity. 

 

8.4 Additional Rights for EU/UK/Swiss Residents (GDPR) 

In addition to the rights above, you have the right to: 

  • Restrict or object to processing of your personal data. 
  • Receive personal data in a structured, machine-readable format (data portability). 
  • Lodge a complaint with your local data protection authority. 

We do not currently transfer personal data outside of the United States as a routine matter. If you book services with us from outside the U.S., your data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home country. By using our services, you consent to this transfer. 

 

8.5 How to Exercise Your Rights 

Submit requests to info@ivyloungewellness.com or by mail to the address in Section 12. We will verify your identity before fulfilling the request and respond within the timeframes required by applicable law. 

 

9. Cookies and Tracking Technologies 

Our website uses cookies and similar technologies to operate the site, remember your preferences, analyze traffic, and (with consent) deliver targeted marketing. 

 

9.1 Types of Cookies We Use 
  • Strictly necessary: required for the site to function (e.g., booking, security). Cannot be disabled. 
  • Performance and analytics: help us understand how visitors use the site (e.g., Google Analytics). 
  • Functional: remember preferences and personalize your experience. 
  • Marketing and advertising: used to measure ad performance and (with consent) show relevant ads on other platforms. 

 

9.2 Managing Cookies 

You can manage cookies through your browser settings. Where required by law, we will provide additional consent options for non-essential cookies. 

9.3 Do Not Track 

Our website does not currently respond to “Do Not Track” browser signals, because no industry standard for honoring those signals has been adopted. 

 

10. Children’s Privacy 

Our services are intended for adults 18 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will delete it promptly. Minors aged 13-17 may receive treatment only with documented parental or legal guardian consent and presence at the appointment. 

 

11. Third-Party Websites and Services 

Our website may link to third-party sites (e.g., Jane App, social media, partner brands). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal information. 

 

12. How to Contact Us 

For questions about this Privacy Policy, to exercise your privacy rights, or to report a concern, contact our Privacy Officer: 

 

The Ivy Lounge LLC, DBA The Ivy Lounge Wellness 

Attn: Privacy Officer 

825 W Royal Ln, Suite 230 

Irving, Texas 75039 

Email: info@ivyloungewellness.com 

Phone: +1 469-668-3133 

 

13. Changes to This Policy 

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top. If changes are material (such as new categories of data sharing), we will notify you by email or through a prominent notice on our website before the changes take effect. Your continued use of our services after the effective date constitutes acceptance of the updated Policy. 

 

— END OF PRIVACY POLICY —