Legal
Privacy Policy
Soothe IV Med Spa.
Effective October 20, 2026.
This Privacy Policy explains how Soothe IV Med Spa collects, uses, stores and shares information about you when you visit sootheiv.com, contact us, or use our services, and the choices and rights you have. Health information that is part of your medical record is also covered by our HIPAA Notice of Privacy Practices. If the two ever differ for your health information, the more protective rule applies. Residents of Washington, Nevada and Connecticut should also read our Consumer Health Data Privacy Policy.
Who We Are
Soothe IV Med Spa is operated by two companies: SootheIV Medical CA PC, the professional medical corporation that provides all medical services, and Soothe Therapy Management CA LLC, which provides management and administrative services to the practice. In this policy, “Soothe IV,” “we” and “us” mean both companies. Our services are offered only in the United States.
Information We Collect
Information you give us
- Contact and account details: name, email, mobile number, date of birth, the state where you live, and your shipping or service address.
- Health information: answers to our medical intake (goals, height and weight, medical history, medications, allergies, pregnancy status and similar questions), consent choices, lab results you upload or that we order, telehealth evaluation records, treatment and prescription records, and anything you tell our team about your health.
- Identity verification: a photo of your government-issued ID when you upload one for your telehealth evaluation.
- Messages and calls: what you send us by text, email, website chat or phone, including conversations with our AI assistant. Calls with our AI phone assistant are transcribed and may be recorded.
- Payment information: handled by our payment processor, Stripe. We never see or store your full card number.
Information collected automatically
- Device and usage data: IP address, approximate location derived from it (city or region, never your precise location), browser and device type, pages you view, the site that referred you, and ad click identifiers.
- Cookies, pixels and session recording: see Cookies, Pixels and Session Recording below.
Information from others
- Licensed clinicians who evaluate you, labs that run your tests, and the pharmacy that fills your prescription (for example, results, prescriptions and shipping status).
- Partners who refer you to us, such as a referral code or a click identifier from an affiliate link.
- Advertising and analytics providers, which tell us which ads and campaigns brought visitors to our site.
How We Use Information
- To provide care: telehealth evaluations, lab orders, prescriptions, pharmacy fulfillment, in-home and in-clinic treatment, and follow-up.
- To verify your identity, your age and the state where you are located, so care is provided by a clinician licensed where you live.
- To process payments, memberships and refunds.
- To communicate with you about appointments, your program, shipping, check-ins and billing.
- To send marketing messages, only where you have agreed. You can opt out at any time.
- To run our website, keep it secure, prevent fraud, and understand and improve how it is used.
- To measure our advertising, as described in Cookies, Pixels and Session Recording.
- To meet legal, licensing, tax and recordkeeping obligations.
How We Handle Health Information
- We use and disclose your health information for treatment, payment and health care operations, as our Notice of Privacy Practices describes, and otherwise only with your written authorization or as the law requires.
- Under California’s Confidentiality of Medical Information Act (Civil Code § 56 and following), we do not disclose your medical information without your authorization except where that law permits it.
- We do not sell your health information, and we do not use or disclose it for marketing without your written authorization.
- We never give advertising or analytics companies your health information, intake answers, lab results, ID images or messages, and no third-party tracker runs on our medical intake.
Does Soothe IV share my health information with advertisers? No. Advertising and analytics companies never receive your health information, and no third-party tracker runs on our medical intake. Ad platforms only learn which public pages were visited and, when an ad click leads to a payment, the click identifier and amount, without your name, contact details or health information.
How We Share Information
We share information only with the people and companies below, each for the purpose listed. We do not sell your personal information for money.
- Clinicians: SootheIV Medical CA PC and its licensed medical team, and licensed clinicians in the network of our telehealth partner, Qualiphy, who evaluate patients and prescribe where appropriate.
- Pharmacies: the licensed pharmacy that fills your prescription (Pharmacy Hub or Strive Pharmacy, LegitScript-certified pharmacies in our telehealth partner Qualiphy’s network), which receives your prescription, name, date of birth and shipping address.
- Laboratories: Quest Diagnostics or another lab you use, for lab orders and results.
- Service providers that run our operations: GoHighLevel (patient records, scheduling, text, email, phone and our AI assistant), Google Workspace (secure storage of lab files and ID images), Stripe (payments), Vercel (website hosting) and Cloudflare (website security and spam protection). They may use your information only to provide services to us.
- Advertising and analytics companies: Google, Meta and Pinterest (advertising measurement) and Hotjar (website analytics), as described in the next section.
- Referral and affiliate partners: when you arrive through a partner’s link and buy, we tell that partner or its affiliate network an order reference and the order amount so the partner can be credited. We never send them your name, contact details or health information.
- Legal and safety: when required by law, court order or a licensing or public health authority; to protect the safety of patients and others; or in connection with a sale or reorganization of our business, subject to this policy.
- With your consent: for example, when you ask us to send records to another provider.
Cookies, Pixels and Session Recording
Our website uses cookies and similar tools from these companies:
- Google (Tag Manager, Analytics and Google Ads) to understand site traffic and measure our ads.
- Meta (Facebook and Instagram) and Pinterest to measure our ads.
- Hotjar to see how visitors use our pages, through heatmaps and session recordings. Every form and field is hidden from recordings, and Hotjar does not run on our checkout or medical intake pages.
- GoHighLevel for website chat, forms and referral tracking.
What these companies do and don’t receive. They see the public pages you visit, such as our program pages, and whether you started checkout. They never receive protected health information:
- No third-party tracker runs on our medical intake, where you enter health answers and upload labs or ID.
- We do not send them your name, email, phone number, address or date of birth. Automatic form and button collection is turned off for Meta, and Google is told not to collect user-provided data from our pages.
- The events we send carry only the step of our website you reached and a dollar amount, never the program, dose or anything you typed.
- When an ad click leads to a payment, we report the ad click identifier and the payment amount to that ad platform, so it can measure the ad, without your name, contact details or health information.
Some state laws call this kind of sharing for advertising a “sale,” “sharing” or “targeted advertising.”
Your choices: if your browser sends a Global Privacy Control (GPC) signal, our site does not load the Meta pixel, the Pinterest tag or Hotjar, and tells Google not to use your visit for advertising. You can also block or delete cookies in your browser settings, and opt out of personalized ads at Google Ad Settings and optout.aboutads.info. Our site does not respond to “Do Not Track” browser signals, which have no common standard; we honor GPC instead.
Text Messages, Calls and Email
- When you give us your mobile number and agree, we text you about appointments, your program, shipping and check-ins. Marketing texts are sent only if you agree to them, and agreeing is never a condition of purchase.
- Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help at any time.
- We do not share your mobile number or text-message consent with third parties or affiliates for their marketing.
- Every marketing email has an unsubscribe link. Messages about your care, orders or billing continue after you unsubscribe from marketing.
Our AI Assistants
Our website chat and our phone line are answered first by Ava, an AI assistant. Ava is not a person and not a clinician. She answers general questions about our services and programs, helps you book, and collects the contact details you choose to share.
- Ava does not diagnose, give medical advice, or recommend treatment. Clinical questions are passed to our staff and our licensed medical team.
- You can ask for a person at any time. Type or say “person,” or text us at (949) 229-2574.
- What you share with Ava is stored in our patient communication system and handled under this Privacy Policy and, for health information, our HIPAA Notice of Privacy Practices.
- To see or delete your conversations with Ava, email care@sootheiv.com.
Is the Soothe IV chat or phone assistant a real person? No. Ava is an AI assistant. She can answer general questions and help you book, but she does not diagnose or give medical advice. You can ask for a person at any time, and our team or licensed medical team will follow up.
How Long We Keep Information
- Medical records (intake, labs, ID used for your evaluation, evaluations and prescriptions): for at least as long as state and federal law require, generally at least seven years after your last treatment.
- Payment and tax records: as long as tax and accounting law requires.
- Contact details and marketing preferences: until you ask us to delete them or we no longer need them.
- Website analytics data: according to each provider’s retention settings.
How We Protect Information
We restrict access to personal and health information to staff who need it to do their jobs, send all website data over encrypted (HTTPS) connections, keep lab files and ID images in access-restricted storage, and leave card data to our payment processor. We require vendors who handle protected health information on our behalf — including our patient records and communication platform, our telehealth partner and our pharmacy partners — to sign Business Associate Agreements committing them to HIPAA-level protections. No system is perfectly secure. If a breach affects your information, we will notify you as HIPAA and state law require.
Your Privacy Rights
Wherever you live, you can ask us to:
- Access the personal information we hold about you, and get a copy of your health records (see our Notice of Privacy Practices for health-record rights);
- Correct information that is wrong;
- Delete your information, except records we must keep by law, such as medical records;
- Opt out of marketing, and of the advertising sharing described above (use GPC, or ask us);
- Withdraw a consent you gave us.
How to ask: email care@sootheiv.com with the subject “Privacy Request,” or text (949) 229-2574. We will confirm your identity by matching the details you give us to our records, and we respond within 45 days (we will tell you if we need up to 45 more). You may use an authorized agent, who must show your signed permission. If we decline your request, you can appeal by replying “Appeal” to our answer; we respond to appeals within 45 days, and if we deny the appeal we will tell you how to contact your state attorney general. We will never deny you service, charge you more, or treat you differently for using these rights.
State-Specific Information
California
California residents have the rights listed above to know, access, correct and delete personal information, to opt out of its sale or sharing for cross-context behavioral advertising, and to limit the use of sensitive personal information. In the past 12 months we collected these categories of personal information: identifiers (name, email, phone, address, IP address); customer and commercial records (purchases, memberships); characteristics such as age and sex; internet activity on our site; approximate location; audio (AI phone assistant calls); and sensitive personal information (health information and government ID images). We collected them from the sources and used them for the purposes described above, and disclosed them to the categories of recipients in How We Share Information. We disclosed identifiers and internet activity to advertising companies for measurement, which California may treat as “sharing”; we do not sell personal information for money, and we do not knowingly sell or share the information of anyone under 16. We use sensitive personal information only to provide the services you request and for the other purposes California permits. California medical information is also protected by the Confidentiality of Medical Information Act.
Washington, Nevada and Connecticut
These states give you additional rights over consumer health data. See our Consumer Health Data Privacy Policy.
Other states
If you live in a state with a consumer privacy law (such as Colorado, Oregon, Texas or Virginia), you have the rights that law provides, including to opt out of targeted advertising. Make a request as described in Your Privacy Rights.
Children
Our website and telehealth programs are for adults 18 and older. We do not knowingly collect personal information online from children under 13. Any in-person treatment of a minor requires a parent or guardian, whose information we collect to provide that care. If you believe a child has given us information online, email care@sootheiv.com and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. The effective date above shows the latest version. If we make a material change to how we use or share your information, we will post it here before it takes effect and, where the law requires, ask for your consent.
Contact
Soothe IV Med Spa (SootheIV Medical CA PC and Soothe Therapy Management CA LLC)
Privacy Officer: Ian K. Tseng, M.D.
care@sootheiv.com
(949) 229-2574