On the Go Drip

OTGD+MEDICAL / On The Go Drip

This Privacy Policy describes how OTGD+MEDICAL, doing business as On The Go Drip (“OTGD+MEDICAL,” “On The Go Drip,” “we,” “us,” or “our”), collects, uses, shares, and protects information when you visit onthegodrip.com, use our online services, communicate with us, make a purchase, request an appointment, access our patient portal, complete an online form, or otherwise interact with us.

This Privacy Policy applies to information collected through our website and related online services.

Health information that constitutes protected health information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) is also governed by our Notice of Privacy Practices. If there is a conflict between this Privacy Policy and our Notice of Privacy Practices regarding PHI, the Notice of Privacy Practices controls.

1. Information We Collect

We may collect information that you provide directly to us, information collected automatically when you use our website, and information received from third parties.

Information You Provide Directly

Depending on how you interact with us, we may collect:

• name;
• date of birth;
• mailing address;
• email address;
• telephone number;
• billing and payment information;
• appointment information;
• account or patient portal information;
• health history or health-related information submitted through forms;
• laboratory results, photographs, medical records, or other information you upload;
• prescription or treatment information;
• communications with our staff;
• survey, questionnaire, or assessment responses;
• financing-related information submitted through third-party financing services;
• newsletter or promotional communication preferences;
• SMS/text-message preferences;
• information submitted when purchasing products or services; and
• any other information you choose to provide.

Health Information

Certain information you submit may relate to your health, medical history, symptoms, treatment, prescriptions, laboratory testing, or health care services.

When such information is PHI and is maintained by OTGD+MEDICAL in our capacity as a HIPAA-covered health care provider, our use and disclosure of that information is governed by HIPAA and our Notice of Privacy Practices.

Payment Information

When you make a purchase or payment, payment information may be processed by third-party payment processors.

We may receive limited transaction information, such as payment status, transaction amount, billing name, or the last digits of a payment method. We do not necessarily receive or retain complete payment card information.

Information Collected Automatically

When you visit our website, we and our service providers may automatically collect information such as:

• Internet Protocol (“IP”) address;
• browser type;
• device type;
• operating system;
• pages viewed;
• links clicked;
• referring website;
• date and time of visits;
• approximate geographic location;
• device identifiers;
• cookie identifiers;
• advertising identifiers; and
• information about how you interact with our website.

2. Cookies and Tracking Technologies

We may use cookies and similar technologies, including:

• cookies;
• pixels;
• web beacons;
• analytics tags;
• advertising technologies; and
• similar tracking tools.

These technologies may help us:

• operate and secure our website;
• remember preferences;
• understand website traffic and usage;
• improve site performance;
• measure advertising effectiveness;
• understand how visitors find our website;
• personalize content; and
• support marketing and advertising activities.

We may use services such as Google Analytics, Google Ads, Meta/Facebook technologies, and other analytics or advertising platforms.

Additional information about our use of cookies and tracking technologies is provided in our Cookie Policy.

Health Information and Tracking Technologies

Because OTGD+MEDICAL is a health care provider, we take additional care regarding tracking technologies on pages where health information or individually identifiable information may be collected.

We do not authorize third-party tracking technologies to receive PHI in violation of HIPAA.

Where a third-party vendor creates, receives, maintains, or transmits PHI on our behalf, we will evaluate whether the vendor is acting as a business associate and whether an appropriate Business Associate Agreement or other HIPAA-compliant arrangement is required.

3. How We Use Information

We may use information we collect to:

• provide and administer our website;
• schedule and manage appointments;
• provide health care services;
• communicate with patients and prospective patients;
• respond to inquiries;
• process payments;
• fulfill purchases and orders;
• coordinate laboratory testing, prescriptions, or treatment;
• provide patient portal access;
• manage memberships, programs, partnerships, and subscriptions;
• provide customer service;
• send appointment reminders;
• communicate regarding billing;
• send service-related messages;
• improve our services and website;
• analyze website performance;
• conduct internal business operations;
• prevent fraud and security incidents;
• comply with legal and regulatory requirements;
• maintain appropriate medical and business records; and
• carry out other purposes described at the time information is collected.

4. Marketing Communications

With appropriate permission, we may use contact information to send:

• newsletters;
• educational information;
• announcements;
• service updates;
• promotions;
• special offers; and
• other marketing communications.

You may unsubscribe from email marketing by using the unsubscribe link included in the communication or by contacting us.

SMS/Text Marketing

Consent to receive health care-related text messages does not automatically constitute consent to receive marketing or promotional text messages where separate consent is required by law.

Where required, we will obtain appropriate consent before sending marketing text messages.

Message and data rates may apply.

5. Appointment Requests and Online Forms

Our website may allow visitors to:

• request appointments;
• schedule services;
• complete health questionnaires;
• submit medical information;
• upload documents;
• request consultations; or
• communicate with our practice.

Information submitted for purposes of obtaining health care may become part of your medical record and may be protected by HIPAA.

You should use our secure patient portal when instructed to submit sensitive medical records, laboratory reports, photographs, or other confidential health information.

6. Patient Portal

Our website may provide access or links to a patient portal or other authenticated health care platform.

Information accessed or submitted through authenticated patient systems may include PHI.

We use reasonable safeguards designed to protect such information and require applicable third-party vendors handling PHI on our behalf to comply with appropriate privacy and security obligations.

You are responsible for maintaining the confidentiality of your login credentials and for notifying us if you believe your account has been compromised.

7. Financing Services

Our website may provide links to third-party financing providers.

If you choose to apply for financing, the financing provider may collect information directly from you.

The financing provider’s collection, use, and disclosure of information are governed by its own privacy policy and terms.

OTGD+MEDICAL does not control third-party financing companies’ privacy practices.

8. Online Purchases and E-Commerce

We may offer products, services, memberships, or other purchases through our website.

We may collect information necessary to:

• process orders;
• verify payment;
• arrange delivery or fulfillment;
• communicate about purchases;
• maintain transaction records; and
• provide customer support.

Certain products or services may require clinical review, consultation, prescription authorization, or other health care evaluation before they may be provided.

A completed online purchase does not necessarily guarantee medical eligibility for a treatment, medication, or service.

9. How We Share Information

We may share information with third parties as necessary to operate our business, provide services, or comply with law.

These may include:

• health care providers;
• pharmacies;
• laboratories;
• imaging centers;
• payment processors;
• electronic health record vendors;
• patient portal providers;
• telehealth vendors;
• cloud and technology service providers;
• website hosting providers;
• analytics providers;
• advertising providers;
• shipping or fulfillment providers;
• financing companies;
• professional advisers;
• business associates; and
• government or regulatory authorities when required or permitted by law.

Where PHI is involved, sharing will be conducted in accordance with HIPAA and our Notice of Privacy Practices.

10. Business Associates and Service Providers

Some vendors provide services on our behalf.

When a vendor qualifies as a HIPAA business associate because it creates, receives, maintains, or transmits PHI on our behalf, we require appropriate contractual safeguards consistent with applicable law.

Other service providers may receive non-PHI information necessary to perform services such as analytics, hosting, advertising, payment processing, or website administration.

11. Advertising and Analytics

We may use analytics and advertising tools to understand website activity and evaluate the effectiveness of advertising campaigns.

These tools may use cookies, pixels, or similar technologies.

We take steps designed to prevent impermissible disclosure of PHI to advertising or analytics providers.

Visitors may be able to control certain tracking technologies through:

• browser settings;
• cookie preferences;
• device settings; or
• applicable platform privacy controls.

12. Third-Party Websites and Services

Our website may contain links to websites, services, payment providers, financing providers, pharmacies, laboratories, social media platforms, or other third parties.

We are not responsible for the privacy practices, security practices, content, or policies of third-party websites or services.

You should review the privacy policy of any third party before providing information.

13. Social Media

We may maintain accounts on social media platforms.

Information you post publicly or send through a social media platform may be governed by that platform’s privacy practices.

Do not use public social media comments or direct messages to send sensitive medical information.

Use our secure patient portal or other approved communication channels for personal health information.

14. Information Security

We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet transmission, electronic communication, or electronic storage system can be guaranteed to be completely secure.

15. Data Retention

We retain information for as long as reasonably necessary to:

• provide services;
• maintain medical or business records;
• comply with applicable laws;
• resolve disputes;
• enforce agreements; and
• fulfill legitimate business purposes.

Medical records may be subject to retention requirements that differ from ordinary website information.

16. Your Choices

Depending on the type of information and applicable law, you may have choices regarding:

• marketing emails;
• promotional text messages;
• cookie preferences;
• advertising technologies;
• communication preferences; and
• certain personal information we maintain.

HIPAA rights relating to PHI are described in our Notice of Privacy Practices.

17. Children’s Privacy

Our website is not intended to collect personal information directly from young children without involvement of a parent or legal guardian.

OTGD+MEDICAL generally provides care to minors only in certain circumstances and in accordance with applicable law and practice policies.

If we learn that personal information from a child has been collected improperly, we will take reasonable steps to address the issue.

18. Florida Residents and Other Privacy Rights

Depending on applicable law and the type of information involved, individuals may have certain rights concerning access to, correction of, or deletion of personal information.

Certain health information regulated by HIPAA may be exempt from portions of state consumer privacy laws and instead governed by HIPAA.

Requests concerning PHI should be made pursuant to our Notice of Privacy Practices.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

• our services;
• technology;
• legal requirements;
• business practices; or
• privacy practices.

The revised Privacy Policy will be posted on this website.

Your continued use of the website after an updated policy becomes effective constitutes use of the website subject to the updated policy, to the extent permitted by law.

20. Notice of Privacy Practices

If you are a patient of OTGD+MEDICAL, please also review our Notice of Privacy Practices, which explains how we may use and disclose protected health information and describes your rights under HIPAA.

21. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact:

OTGD+MEDICAL Privacy Office
12574 Flagler Center Blvd, Ste 101
Jacksonville, FL 32258

Phone: 904-544-5010
Fax: 904-414-4550
Email: Info@onthegodrip.com

Website: onthegodrip.com