PRIVACY POLICY
Effective Date: August 3, 2026
Rooted and Replenished LLC, doing business as Rooted & Replenished (“Rooted & Replenished,” “we,” “us,” or “our”), respects your privacy and is committed to protecting the personal and health-related information entrusted to us.
This Privacy Policy explains how we collect, use, maintain, protect, and disclose information when you:
Visit our website at https://rooted-and-replenished.com/;
Request information about our services;
Submit a website form;
Schedule or receive services;
Complete an intake or consent form;
Communicate with us by telephone, email, SMS, MMS, social media, or another method;
Make a payment;
Participate in a promotion; or
Otherwise interact with Rooted & Replenished.
By using our website, submitting information, or receiving services from us, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
The information we collect depends on how you interact with Rooted & Replenished and which services you request.
A. Contact and identifying information
We may collect information such as:
First and last name;
Telephone number;
Email address;
Mailing address;
Billing address;
Service or appointment location;
Date of birth or age;
Emergency-contact information;
Preferred communication method; and
Other identifying or contact information you voluntarily provide.
B. Appointment and service information
We may collect information relating to your requested or completed services, including:
Requested services or treatments;
Appointment dates and times;
Appointment location;
Scheduling preferences;
Travel or access instructions;
Provider assignments;
Intake-form responses;
Consent records;
Appointment confirmations or cancellations;
Previous services received;
Customer-service notes; and
Information you provide when communicating with us about an appointment.
C. Health and wellness information
Because Rooted & Replenished offers mobile IV hydration and wellness services, we may collect health-related information when reasonably necessary to determine eligibility, protect your safety, provide services, coordinate care, or comply with professional and legal requirements.
This information may include:
Current symptoms or health concerns;
Medical history;
Current or past medical conditions;
Allergies;
Medications and supplements;
Pregnancy or breastfeeding status when relevant;
Recent illnesses, procedures, injuries, or hospitalizations;
Previous reactions to treatments or medications;
Vital signs;
Hydration or wellness goals;
Clinical observations;
Treatment selections;
Treatment records;
Adverse reactions;
Follow-up information; and
Other information provided during intake, evaluation, treatment, or follow-up.
Please provide complete and accurate information and update us if your health circumstances change.
D. Payment and transaction information
When you make a payment, payment-card information may be collected and processed directly by a third-party payment processor.
We may receive limited transaction information, including:
Billing name;
Billing address;
Transaction amount;
Transaction date;
Payment status;
Refund information;
Invoice information; and
A partial or tokenized payment-method identifier.
We do not intentionally store complete payment-card numbers outside an authorized payment-processing system.
E. Communications information
We may collect the content and details of communications between you and Rooted & Replenished, including:
Emails;
Text messages;
Telephone-call notes;
Voicemail messages;
Website-form submissions;
Social-media messages;
Customer-support requests;
Reviews;
Testimonials;
Complaints;
Survey responses; and
Communication-preference records.
F. SMS consent information
When you consent to receive text messages, we may collect and retain information documenting that consent, including:
Your mobile telephone number;
The date and time consent was provided;
The website, form, keyword, paper form, verbal process, or other method used to provide consent;
The consent language presented to you;
The message categories you selected;
Your IP address or session information when available;
Message-delivery information;
Opt-out requests;
HELP requests;
Complaint records; and
Records of renewed consent.
G. Website, cookie, and device information
When you use our website, we or our authorized service providers may automatically collect certain technical information, including:
Internet Protocol address;
Browser type;
Device type;
Operating system;
Referring website or page;
Pages viewed;
Links clicked;
Date and time of access;
Approximate location derived from an IP address;
Cookie identifiers;
Advertising identifiers; and
Information about how you interact with the website.
2. How We Collect Information
We may collect information:
Directly from you;
From a parent, guardian, caregiver, or authorized representative;
From our providers, employees, and authorized contractors;
Through our website;
Through scheduling, intake, payment, communication, and customer-management systems;
Through telephone, email, or text communications;
Through social-media platforms;
Through cookies, pixels, and analytics technologies;
From referral partners when authorized;
From medical professionals when authorized or legally permitted;
From publicly available sources; and
As otherwise permitted or required by law.
3. How We Use Information
We may use personal information to:
Respond to inquiries;
Provide information about our services;
Schedule, confirm, modify, or cancel appointments;
Determine geographic and provider availability;
Evaluate whether a requested service may be appropriate;
Conduct intake and eligibility screening;
Provide mobile IV hydration and wellness services;
Protect client and provider safety;
Maintain treatment and service records;
Coordinate treatment or follow-up;
Send appointment reminders;
Send intake-form links;
Provide provider arrival updates;
Respond to customer-service requests;
Communicate information related to an appointment or transaction;
Process payments, refunds, deposits, or authorized charges;
Maintain accounting and transaction records;
Send marketing messages when legally sufficient consent has been provided;
Maintain records of SMS consent and opt-out requests;
Honor communication preferences;
Personalize and improve our website and services;
Measure website, advertising, and campaign performance;
Prevent fraud, unauthorized activity, and security incidents;
Maintain the security and functionality of our systems;
Conduct internal training and quality assurance;
Comply with professional, clinical, legal, licensing, tax, insurance, and accounting requirements;
Establish, exercise, or defend legal claims; and
Carry out other purposes disclosed to you when information is collected.
4. HIPAA Compliance and Health-Information Protection
Rooted & Replenished is committed to protecting the privacy, confidentiality, integrity, and security of health information.
To the extent Rooted & Replenished is acting as a healthcare provider, covered entity, or business associate subject to the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, we maintain privacy and security practices designed to comply with the applicable HIPAA Privacy, Security, and Breach Notification Rules.
When HIPAA applies, we maintain reasonable and appropriate administrative, physical, and technical safeguards designed to protect protected health information and electronic protected health information against unauthorized access, use, alteration, loss, or disclosure.
These safeguards may include:
Limiting health-information access to authorized personnel;
Role-based access controls;
Password and authentication requirements;
Workforce privacy and security training;
Secure storage and transmission practices;
Device and system protections;
Risk assessments;
Security-incident procedures;
Breach-response and notification procedures;
Vendor review and oversight;
Data-minimization practices;
Confidentiality requirements; and
Business associate agreements with applicable service providers that create, receive, maintain, or transmit protected health information on our behalf.
When HIPAA applies, we use and disclose protected health information only as permitted or required by law. Permitted purposes may include treatment, payment, healthcare operations, appointment administration, coordination of care, activities authorized by the individual, public-health activities, and other legally permitted or required purposes.
We do not sell identifiable health information. We do not provide protected health information to advertising platforms for their own advertising or marketing purposes.
Notice of Privacy Practices
When required, Rooted & Replenished will provide a separate HIPAA Notice of Privacy Practices explaining:
How protected health information may be used and disclosed;
Your rights regarding protected health information;
Our legal duties regarding protected health information;
How to request access, corrections, restrictions, or confidential communications; and
How to make a privacy complaint.
A HIPAA Notice of Privacy Practices is separate from this general website Privacy Policy. If this Privacy Policy conflicts with an applicable Notice of Privacy Practices concerning protected health information, the Notice of Privacy Practices will control.
5. Electronic Communications and Sensitive Information
Ordinary email, SMS, MMS, social-media messaging, and website communications may not be encrypted or fully secure.
Do not use ordinary email, text messaging, website chat, or social-media messaging to send:
Payment-card numbers;
Social Security numbers;
Photographs of identification documents;
Detailed medical records;
Complete medical histories; or
Other highly sensitive information,
unless Rooted & Replenished has specifically instructed you to use an approved method.
We may use email or text messages to send appointment information, secure intake-form links, general instructions, payment links, arrival updates, and follow-up communications.
Do not use email, text messages, social media, or website forms to report a medical emergency. Call 911 immediately if you believe you are experiencing an emergency.
6. SMS and MMS Communications
Rooted & Replenished may operate informational, transactional, customer-service, and marketing text-messaging programs.
Types of messages
Depending on your interactions with us and the consent you provide, messages may include:
Responses to inquiries;
Appointment confirmations;
Appointment reminders;
Rescheduling or cancellation notices;
Intake-form reminders;
Provider arrival updates;
Access or location questions;
Payment-related communications;
Customer-service communications;
Post-appointment follow-ups;
Service announcements;
Wellness-related information;
Promotional offers;
Discounts; and
Marketing communications.
Consent
We send recurring marketing or promotional messages only when you have affirmatively consented to receive them.
Marketing consent is not a condition of purchasing goods or services.
Informational or transactional consent may be collected separately from marketing consent. Agreeing to our general Terms and Conditions or Privacy Policy does not, by itself, constitute consent to receive recurring marketing text messages.
Messages may be sent using an automated telephone dialing system, automated technology, or a messaging platform.
Message frequency and charges
Message frequency varies depending on your appointments, inquiries, interactions, preferences, and promotional campaigns.
Message and data rates may apply. Your wireless provider may charge you for sending or receiving SMS or MMS messages. Rooted & Replenished does not control those charges.
Opting out
You may withdraw your consent and opt out of text messages at any time by replying STOP.
We will also honor other reasonable and clear requests communicating that you no longer wish to receive text messages. You may submit such a request by contacting:
Email: [email protected]
Phone: 801-215-9659
We may send one final nonmarketing message confirming that your opt-out request has been processed.
After opting out, you will not receive additional messages covered by the opt-out unless you provide new consent. Opting out of marketing messages does not prevent us from communicating with you through other methods or sending communications that are legally permitted and reasonably necessary to complete a transaction or service you requested.
Help
Reply HELP for assistance, or contact us at:
Email: [email protected]
Phone: 801-215-9659
Resubscribing
After opting out, you may resubscribe by completing a new opt-in process, using an approved opt-in keyword when available, or otherwise providing renewed consent.
Carrier disclaimer
Wireless carriers are not liable for delayed, blocked, misdirected, or undelivered messages. Message delivery is subject to effective transmission by your wireless provider and is not guaranteed.
Mobile-information non-sharing statement
We do not sell, rent, or share mobile telephone numbers, SMS opt-in information, or SMS consent with third parties or affiliates for their own marketing or promotional purposes.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
We may provide mobile information to service providers, telecommunications carriers, aggregators, and platform providers solely as necessary to operate our messaging program, deliver messages, provide customer support, maintain security, or comply with law. These parties may not use your mobile information for their own independent marketing purposes.
All categories of information sharing described in this Privacy Policy exclude text-messaging originator opt-in data and consent. Text-messaging opt-in data and consent will not be shared with third parties for marketing or promotional purposes.
7. How We Disclose Information
We may disclose information in the following circumstances.
A. Healthcare and operational personnel
We may disclose relevant information to authorized individuals involved in providing or supporting requested services, including:
Treating providers;
Medical directors;
Clinical personnel;
Administrative personnel;
Authorized contractors;
Emergency responders;
Referral providers;
Laboratories;
Pharmacies;
Medical suppliers; and
Other individuals or organizations involved in arranging or providing requested services.
Health information will be disclosed only as permitted by applicable law.
B. Service providers
We may use service providers that support our business, such as providers of:
Website hosting;
Scheduling and booking;
Customer relationship management;
Intake and consent forms;
Secure data storage;
SMS, MMS, telephone, and email communications;
Payment processing;
Accounting;
Cybersecurity;
Analytics;
Advertising measurement;
Document management;
Professional consulting; and
Customer support.
Service providers are permitted to access information only as reasonably necessary to provide services to us and are subject to applicable contractual, confidentiality, security, and legal requirements.
When a service provider creates, receives, maintains, or transmits protected health information on our behalf and HIPAA requires it, we require an appropriate business associate agreement.
C. Professional advisers
We may disclose information to attorneys, accountants, auditors, insurers, consultants, compliance professionals, and other advisers when reasonably necessary for legitimate professional or business purposes.
D. Legal and safety purposes
We may disclose information when we reasonably believe disclosure is necessary to:
Comply with applicable law;
Respond to a subpoena, court order, warrant, or lawful government request;
Meet licensing or regulatory obligations;
Protect the health or safety of a client, provider, employee, or another person;
Respond to an emergency;
Investigate fraud or misconduct;
Protect our rights or property;
Enforce an agreement;
Detect or respond to a security incident; or
Establish, exercise, or defend legal claims.
E. Business transactions
Information may be disclosed as part of a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction, subject to applicable legal and confidentiality requirements.
SMS opt-in data and consent may not be used by an acquiring or successor organization for unrelated marketing without legally sufficient consent.
F. With your authorization
We may disclose information when you direct us or provide legally sufficient authorization.
8. Advertising and Analytics Technologies
We may use analytics, advertising, cookies, pixels, tags, or similar technologies on general, publicly accessible portions of our website to:
Understand website traffic;
Measure advertising performance;
Improve the website;
Prevent fraud;
Evaluate marketing campaigns; and
Present relevant advertising.
We do not authorize advertising platforms to use protected health information for their own advertising purposes.
Advertising pixels and similar marketing technologies should not be used on secure intake forms, patient portals, or pages designed to collect protected health information unless their use is legally permitted and appropriately safeguarded.
Depending on applicable law, disclosures of online identifiers or browsing activity to advertising partners may be considered targeted advertising, sharing, or a sale even when money is not exchanged.
You may adjust browser settings, device settings, and any cookie-preference tool made available on our website.
9. Cookies and Similar Technologies
We and our service providers may use:
Essential cookies;
Preference cookies;
Analytics cookies;
Advertising cookies;
Pixels;
Tags;
Local storage; and
Similar technologies.
These technologies may help us:
Operate the website;
Maintain website security;
Remember preferences;
Understand website usage;
Improve services;
Measure advertising;
Detect fraud; and
Maintain website functionality.
Blocking certain cookies may affect the functionality of our website.
10. Data Retention
We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
Providing services;
Maintaining appointment and treatment records;
Documenting consent;
Honoring opt-out requests;
Processing transactions;
Responding to complaints;
Resolving disputes;
Meeting clinical and professional obligations;
Complying with tax, accounting, insurance, licensing, and legal requirements;
Protecting against fraud or security incidents; and
Establishing, exercising, or defending legal claims.
Different types of information may be retained for different periods.
We may retain SMS opt-out records for as long as reasonably necessary to ensure that communication preferences continue to be honored.
11. Data Security
We use reasonable administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
These safeguards may include:
Access controls;
Authentication procedures;
Secure systems;
Workforce training;
Vendor oversight;
Data-minimization practices;
Incident-response procedures;
Physical security measures; and
Security-risk management.
For protected health information subject to HIPAA, our safeguards are designed to comply with applicable HIPAA Privacy and Security Rule requirements.
No website, database, electronic transmission, email system, text-messaging platform, or storage system can be guaranteed completely secure. You should use caution when transmitting sensitive information and use an approved secure method when one is available.
12. Your Privacy and Health-Information Rights
Depending on the information involved, your location, and applicable law, you may have the right to request that we:
Confirm whether we process your personal information;
Provide access to eligible personal information;
Provide a copy of eligible information;
Correct inaccurate personal information;
Delete eligible personal information;
Provide eligible information in a portable format;
Restrict certain uses or disclosures;
Provide an accounting of certain disclosures;
Communicate with you through a particular method or at a particular location;
Opt you out of targeted advertising;
Opt you out of a legally defined sale of personal information;
Withdraw consent when processing is based on consent; or
Explain the categories of information we collect, use, and disclose.
These rights are subject to applicable exceptions, identity-verification requirements, record-retention requirements, and other legal limitations.
Information may not be eligible for deletion or modification when it must be retained for treatment, clinical documentation, legal compliance, fraud prevention, security, accounting, insurance, tax, or other legitimate purposes.
To submit a request, contact:
Email: [email protected]
Phone: 801-215-9659
We may request information reasonably necessary to verify your identity and authority before processing a request.
We will not unlawfully discriminate or retaliate against you for exercising an applicable privacy right.
13. HIPAA Rights and Complaints
When HIPAA applies, you may have rights regarding your protected health information, subject to applicable limitations. These rights may include the right to:
Inspect or obtain a copy of certain health records;
Request a correction or amendment;
Request restrictions on certain uses or disclosures;
Request confidential communications;
Receive an accounting of certain disclosures;
Obtain a copy of an applicable Notice of Privacy Practices; and
Submit a privacy complaint without retaliation.
To ask a question, exercise an applicable right, or submit a privacy complaint, contact:
Rooted and Replenished LLC
Email: [email protected]
Phone: 801-215-9659
You may also have the right to submit a HIPAA complaint directly to the U.S. Department of Health and Human Services Office for Civil Rights.
Rooted & Replenished will not retaliate against anyone for submitting a good-faith privacy complaint.
14. Communication Preferences
Marketing emails
You may unsubscribe from marketing emails using the unsubscribe link included in the email or by contacting us.
You may continue to receive nonmarketing emails concerning appointments, services, transactions, legal notices, or customer-service matters.
Text messages
Reply STOP to opt out of text messages and HELP for assistance.
You may also contact:
Email: [email protected]
Phone: 801-215-9659
Telephone calls
You may ask us not to make marketing calls by telling the caller or contacting us.
15. Children’s Privacy
Our general website is not directed to children under 13, and we do not knowingly collect personal information online directly from a child under 13 without appropriate authorization.
Services for minors may require participation and authorization from a parent or legal guardian. A parent or guardian who believes that a child submitted information without appropriate authorization should contact us.
16. Third-Party Websites and Services
Our website may contain links to third-party websites, scheduling platforms, payment systems, social-media platforms, mapping services, or other external services.
We do not control the independent privacy, security, availability, or content practices of third parties. Their collection and use of information are governed by their own policies and terms.
17. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, practices, technology, or legal obligations.
The updated Privacy Policy will be posted on this page with a revised effective date. When required by law, we will provide additional notice or obtain consent before applying a material change.
18. Contact Us
Questions, privacy requests, or concerns about this Privacy Policy may be directed to:
Rooted and Replenished LLC
Doing business as Rooted & Replenished
Email: [email protected]
Phone: 801-215-9659
Website: https://rooted-and-replenished.com/