Privacy Policy

Alpha IV Therapy ("we", "us", "our") is committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data.

1. Information We Collect

• Contact information: name, email address, phone number, mailing address.
• Health information: date of birth, medical history, current medications, allergies, conditions, and other intake-form responses needed to deliver IV therapy safely.
• Appointment data: services booked, scheduling history, provider assignments, signed consent forms, and visit notes.
• Payment information: processed by our payment provider (Square). We do not store full credit card numbers on our systems.
• Site usage: basic technical data such as browser type, IP address, and pages visited, used only to operate and improve the site.

2. How We Use Your Information

• To provide treatment, including reviewing intake answers and contraindications.
• To schedule, confirm, and remind you about appointments.
• To process payments and issue receipts.
• To send marketing communications only when you have explicitly opted in. You can opt out at any time using the unsubscribe link in any marketing email.
• To comply with legal, regulatory, and medical record-keeping obligations.

Tracking Technologies & Analytics

We use the following third-party tracking and analytics tools to understand how visitors use this site so we can improve it:

• Google Analytics 4 (Measurement ID: G-WG09R4C2NM) — collects page-view, session, device, browser, IP-derived approximate location, and on-site interaction data, including which services are viewed or booked. Google assigns a random identifier to your browser; we do not send Google your name, email address, or phone number through Google Analytics. Data is processed by Google and may be combined with other Google services data per the Google Privacy Policy.
• Google Ads conversion measurement — when you complete a booking, we send Google Ads a conversion signal so we can tell which of our advertising brought you here. To improve matching, the email address and phone number you entered are converted to a one-way SHA-256 hash in your browser before anything is sent; Google receives only those hashes, never the readable values, and uses them solely to match the conversion to a Google account ("Enhanced Conversions"). That signal can also say whether you are a new or returning client; it does not include which service you booked.
• Google Tag Manager (Container ID: GTM-TTVN7WPM) — a tag-management container that loads our analytics scripts. GTM itself does not set tracking cookies.

We do not use Facebook Pixel, LinkedIn Insight, or other social-platform retargeting pixels at this time. If we add any in the future, this policy will be updated.

Your choices

You may opt out of Google Analytics tracking by:

• Installing the official Google Analytics opt-out browser add-on
• Enabling "Do Not Track" or any cookie-blocking extension in your browser
• Clearing your browser cookies for this site

California residents (CCPA)

Under the California Consumer Privacy Act, California residents have the right to know what personal information we collect, request deletion, and opt out of the "sale" of personal information. We do not sell personal information. To exercise these rights, contact us at the email address listed in the Contact section.

3. HIPAA Compliance

As a provider of medical services, Alpha IV Therapy treats your protected health information ("PHI") in accordance with the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and applicable state laws. We maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of PHI. PHI is only accessed by trained staff who need it to deliver care, manage your account, or comply with the law.

4. Third-Party Service Providers

We rely on a small number of vetted third parties to operate the practice. These providers process data on our behalf under contracts that require equivalent protection of your information:

• Supabase — secure database and authentication infrastructure used to store appointment, account, and intake data.
• Square — PCI-compliant payment processing for purchases and memberships (when used).
• SpaKinect — the telehealth service that performs the Good Faith Exam (the medical clearance required once a year before IV therapy). We share the name, contact details and intake answers needed to conduct that exam, and receive its status and expiry back.
• Resend — the service that delivers our transactional email (booking confirmations, reminders, receipts, form links). It processes your email address and the contents of those messages.
• Vagaro — our previous booking platform. Online booking moved to this site on July 3, 2026, but the clinic still uses Vagaro for some scheduling and forms, and appointment records continue to flow from Vagaro into our systems.

Text messages. Appointments booked with us are mirrored into Square Appointments, and Square sends confirmation and reminder texts to the mobile number on your booking. Replies go to the clinic's Square inbox. Standard message and data rates apply. To stop these texts, reply STOP to one of them or call us at (918) 210-7568 and we will remove your number.

We do not sell your personal or health information to any third party.

5. Data Retention

Medical records are retained for the period required by Oklahoma law and applicable federal regulations. Account and marketing-related data are kept only as long as needed for the purposes described above, after which they are securely deleted or de-identified.

6. Your Rights

You have the right to:

• Access the personal and health information we hold about you.
• Request corrections to inaccurate or incomplete information.
• Request deletion of personal data, subject to legal retention requirements.
• Opt out of marketing communications at any time.
• Receive an accounting of certain disclosures of your PHI as required by HIPAA.

To exercise any of these rights, contact us using the information below.

7. Cookies & Tracking

Our website uses essential cookies for site functionality, Google Analytics 4 for aggregate usage analytics, and Google Ads conversion measurement (with browser-hashed contact details, as described under "Tracking Technologies & Analytics" above). We do not use Facebook Pixel or other social-platform retargeting pixels.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be communicated through the website or by email when appropriate.

9. Contact Us

For privacy questions, requests regarding your information, or to exercise any of the rights described above, contact us at: