Privacy Policy

Blue Sky IV PLLC respects your privacy and is committed to protecting personal information, health information, and other information entrusted to us. This Privacy Policy explains how Blue Sky IV PLLC collects, uses, discloses, stores, and protects information when you: • Visit our website; • Request information about our services; • Create or use an online account; • Schedule or reschedule an appointment; • Complete an intake or health questionnaire; • Purchase services or memberships; • Communicate with us by telephone, text message, email, or other electronic means; • Receive mobile IV or wellness services; • Interact with our social-media pages or online advertisements; or • Otherwise interact with Blue Sky IV PLLC. This Privacy Policy should be read together with our Terms & Conditions and, where applicable, our Notice of Privacy Practices for Protected Health Information.

Blue Sky IV PLLC may collect information that constitutes health information or protected health information (“PHI”) when you receive clinical services. If Blue Sky IV PLLC is acting as a HIPAA-covered entity or business associate with respect to particular information, that information will be handled in accordance with applicable HIPAA requirements and our Notice of Privacy Practices, as applicable. Not every piece of information collected through our website is necessarily PHI. For example, information provided merely to browse our website, request general information, or inquire about pricing may be handled as website or consumer information. Where more than one privacy law applies, Blue Sky IV PLLC intends to comply with the applicable legal requirements.

Depending on how you interact with Blue Sky IV PLLC, we may collect the following categories of information. A. Identifying Information This may include: • First and last name; • Date of birth; • Address; • City, state, and ZIP code; • Email address; • Telephone number; • Preferred method of communication; • Emergency contact information; • Identification information where reasonably necessary; • Account or customer identification information. B. Appointment Information We may collect: • Appointment date and time; • Appointment location; • Appointment type; • Service requested; • Provider assigned; • Appointment history; • Cancellation and rescheduling history; • Special access or location instructions; • Information necessary to safely provide mobile services. C. Health and Clinical Information When you seek or receive clinical or wellness services, we may collect information such as: • Medical history; • Current medications; • Allergies and sensitivities; • Relevant diagnoses or conditions; • Vital signs; • Symptoms; • Pregnancy status where clinically relevant; • Relevant laboratory information; • Treatment history; • IV or wellness services received; • Clinical assessments; • Provider documentation; • Adverse reactions or complications; • Follow-up information; • Other information reasonably necessary to determine whether a requested service is appropriate. D. Payment Information We may collect or receive: • Billing name; • Billing address; • Payment status; • Transaction information; • Last four digits of a payment card; • Payment processor identifiers; • Membership or subscription information. Blue Sky IV PLLC generally does not need to retain your complete payment-card number. Payment information may be processed through third-party payment processors. E. Communications We may retain communications you send to us, including: • Emails; • Text messages; • Telephone-call information; • Appointment messages; • Customer-service communications; • Feedback; • Reviews; • Complaints; • Requests for information. F. Website and Device Information When you use our website, we may automatically collect: • IP address; • Browser type; • Device type; • Operating system; • Approximate geographic information; • Pages viewed; • Referring website; • Date and time of access; • Website interaction information; • Cookies and similar technologies. G. Marketing Information If you elect to receive marketing communications, we may collect information concerning: • Marketing preferences; • Promotions received; • Emails opened; • Links clicked; • Text messages received; • Promotional campaign interactions.

Blue Sky IV PLLC may use information for legitimate business, administrative, clinical, and legal purposes, including: Clinical Care To: • Evaluate whether a service is appropriate; • Perform clinical screening; • Provide authorized services; • Document services; • Coordinate care; • Communicate with healthcare professionals when permitted; • Respond to adverse events; • Provide follow-up. Scheduling To: • Schedule appointments; • Confirm appointments; • Send reminders; • Reschedule appointments; • Coordinate mobile-provider travel; • Communicate arrival information; • Manage appointment availability. Payments To: • Process payments; • Process refunds; • Maintain billing records; • Manage memberships; • Address payment disputes; • Prevent fraudulent transactions. Business Operations To: • Operate our business; • Train employees and contractors; • Maintain records; • Conduct quality assurance; • Improve customer experience; • Manage staffing; • Investigate complaints; • Maintain insurance and risk-management records. Communications We may contact you regarding: • Appointments; • Services you requested; • Account information; • Billing; • Safety-related matters; • Clinical follow-up where permitted; • Customer-service matters; • Important changes to our services. Marketing Subject to applicable law and your communication preferences, we may use contact information to send: • Promotions; • Special offers; • Membership information; • New-service announcements; • Educational material; • Company news. You may opt out of marketing communications by following the unsubscribe instructions in the communication or contacting us directly.

If you provide a mobile telephone number, you may receive transactional text messages concerning appointments, scheduling, arrival information, billing, or other services you have requested. Where required, promotional text messages will be sent only in accordance with applicable consent requirements. SMS consent is not shared with third parties. Messaging frequencies may vary. Message and data rates may apply. You may opt out of promotional text messages by following the instructions provided in the message. Opting out of marketing messages does not necessarily stop essential transactional or service-related communications. For assistance, text HELP or visit our website at blueskyivwellness.com Visit blueskyivwellness.com/legal/privacy-policy/ for our Privacy Policy and blueskyivwellness.com/legal/terms-of-service/ for our Terms of Service.

Our website may use cookies, pixels, tags, analytics tools, session technologies, and similar technologies. These technologies may be used to: • Keep the website functioning; • Remember preferences; • Understand website traffic; • Measure advertising performance; • Improve website functionality; • Detect security problems; • Analyze user behavior. Third-party providers may place cookies or similar technologies on our website. Depending on the technology used, third parties may collect information about your interaction with our website. Blue Sky IV PLLC does not intentionally use tracking technologies to collect unnecessary medical information. However, because online advertising and analytics technologies can potentially interact with pages containing health-related information, Blue Sky IV PLLC will configure such technologies to minimize inappropriate disclosure of sensitive information.

Blue Sky IV PLLC may use third-party vendors to support our business, including vendors providing: • Website hosting; • Electronic health records; • Scheduling; • Appointment reminders; • Secure messaging; • Payment processing; • Customer relationship management; • Email; • Text messaging; • Cloud storage; • Information technology; • Cybersecurity; • Analytics; • Accounting; • Legal services; • Insurance; • Marketing. Where required by applicable law, Blue Sky IV PLLC will enter into appropriate agreements with vendors handling PHI, including Business Associate Agreements where applicable.

We may disclose information when reasonably necessary for: • Providing requested services; • Treatment; • Payment; • Health-care operations; • Appointment coordination; • Business operations; • Processing payments; • Preventing fraud; • Maintaining security; • Complying with law; • Responding to legal process; • Protecting the safety of patients, personnel, or the public; • Responding to emergencies; • Managing insurance claims; • Audits and quality assurance; • Regulatory compliance; • Corporate transactions, subject to applicable legal requirements. We may also disclose information when you specifically authorize us to do so.

Blue Sky IV PLLC may disclose information when required or permitted by law, including in response to: • Subpoenas; • Court orders; • Administrative orders; • Law-enforcement requests; • Regulatory investigations; • Mandatory reporting obligations; • Public-health requirements; • Serious threats to health or safety where permitted by law.

Where permitted or required by law, Blue Sky IV PLLC may disclose relevant information when necessary to address an emergency or serious threat to an individual’s health or safety.

Depending upon the applicable privacy law and whether the information constitutes PHI, you may have rights including: • The right to request access to certain health information; • The right to request an amendment; • The right to request restrictions; • The right to receive certain disclosures; • The right to request confidential communications; • The right to receive a copy of the applicable Notice of Privacy Practices; • The right to file a privacy complaint. These rights may be subject to legally permitted limitations.

You may request information concerning personal information that Blue Sky IV PLLC maintains about you, subject to applicable law. You may also request correction of inaccurate contact or account information. Certain information may be retained when required for: • Legal compliance; • Clinical documentation; • Billing; • Accounting; • Fraud prevention; • Dispute resolution; • Insurance; • Regulatory requirements.

Blue Sky IV PLLC maintains administrative, technical, and physical safeguards designed to protect information against unauthorized access, acquisition, use, disclosure, alteration, or destruction. Safeguards may include: • Password controls; • Access restrictions; • Role-based access; • Secure systems; • Encryption where appropriate; • Vendor security controls; • Workforce confidentiality obligations; • Device-security practices; • Physical safeguards; • Security monitoring; • Incident-response procedures. No electronic system can be guaranteed to be completely secure. Illinois law requires applicable data collectors to maintain reasonable security measures for personal information.

If Blue Sky IV PLLC determines that a security incident constitutes a legally reportable breach, Blue Sky IV PLLC will provide notifications required by applicable federal and state law. Illinois law contains specific requirements concerning notification of breaches involving personal information.

Blue Sky IV PLLC retains information for only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. Clinical records may be retained for periods required by applicable health-care laws, regulations, professional requirements, insurance requirements, or litigation holds. Deletion of information may therefore not be immediately possible upon request.

Blue Sky IV PLLC’s website is not intended to knowingly collect personal information from children without appropriate parental or legal authorization. Clinical services for minors may require parent or legal-guardian involvement and additional documentation.

Blue Sky IV PLLC may maintain accounts on social-media platforms. Information submitted through those platforms may be subject to the privacy practices of the applicable social-media company. Patients should not post medical information, photographs, treatment information, or other confidential information through public comments or direct messages unless specifically instructed to do so through an approved secure process. Blue Sky IV PLLC will not treat ordinary social-media messaging as a substitute for secure clinical communication.

Blue Sky IV PLLC may request voluntary reviews or testimonials. We will not publicly identify an individual as a patient or disclose protected health information for marketing purposes without appropriate authorization when such authorization is legally required.

Some browsers provide “Do Not Track” signals. Because there is not a uniform industry standard governing all such signals, our website may not respond to every browser-based Do Not Track mechanism. Where applicable law requires a specific response to an applicable privacy preference signal, Blue Sky IV PLLC will comply with the applicable legal requirement.

Our website may contain links to third-party websites. Blue Sky IV PLLC is not responsible for the privacy practices, security, content, or policies of third-party websites. You should review the privacy policies of those websites before submitting information.

Blue Sky IV PLLC may update this Privacy Policy periodically. When we make material changes, we may: • Update the effective date; • Post the revised policy; • Provide additional notice where required by law. Your continued use of the website after an updated Privacy Policy becomes effective constitutes acceptance of the updated website privacy practices to the extent permitted by law.

Questions concerning this Privacy Policy may be directed to: Blue Sky IV PLLC Telephone: (877) 7BLUSKY Email: connect@blueskyivwellness.com Website: www.blueskyivwellness.com Privacy Contact: Michele Storz

For questions concerning protected health information or the Notice of Privacy Practices: Michele Storz, Administrative Officer Telephone: (877) 7BLUSKY Email: connect@blueskyivwellness.com

This Privacy Policy is effective as of 10-03-26