Privacy Policy

1. Introduction

The Body Shop Spa ("we," "our," or "us") operates the website located at bodyshopspa.info and its associated subdomains (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, use our services, or interact with us through social media platforms including TikTok, Meta (Facebook and Instagram), LinkedIn, and YouTube.

By using our Site or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Site.

2. Information We Collect

Information You Provide Directly

We collect information you voluntarily provide when you:

• Sign up for a membership or service
• Subscribe to our email list or request a free guide
• Submit a contact or inquiry form
• Book an appointment or tour
• Participate in promotions, surveys, or programs

This information may include your name, email address, phone number, date of birth, mailing address, payment information (processed securely through Square), and any notes or messages you submit.

Information Collected Automatically

On approved public marketing pages, and only after you choose the applicable optional category in our Privacy Choices control, our analytics or marketing providers may collect limited technical information, including:

• IP address and approximate geographic location
• Browser type, operating system, and device identifiers
• Approved public page visits and general site-use information
• Limited public-page interaction information, such as a selected public call-to-action

Cookies and Tracking Technologies

Cookies are small data files stored on your device. Essential cookies may be required for the Site to function. Optional analytics and marketing technologies are off by default and are controlled through Privacy Choices. We use:

• Essential cookies — required for the Site to function (e.g., session management, authentication)
• Analytics — Google Analytics and Microsoft Clarity, if you allow Analytics, to measure approved public-page visits and general site use. Clarity is configured with Strict masking.
• Marketing — Meta Pixel, if you allow Marketing, to measure advertising performance on approved public marketing pages.

We do not load these optional tools on member, staff, checkout, payment, application, feedback, or other restricted pages. We remove query strings from page URLs before sending page information to these tools. Meta automatic advanced matching, automatic events, and detailed page or product collection are disabled. You can change or withdraw your choices at any time through the Privacy Choices link in the Site footer; withdrawing optional consent clears known tracking cookies and starts a clean page without optional tools.

Social Media Integrations

We use third-party developer APIs — including the Meta Graph API, TikTok API, LinkedIn API, and YouTube Data API — to schedule, publish, and manage social media content on behalf of our business accounts. These integrations do not grant us access to your personal social media accounts or data unless you explicitly authorize a connection. When you interact with our social media pages or content, those platforms' own privacy policies apply.

3. How We Use Your Information

We use the information we collect to:

• Process memberships, appointments, and payments
• Send transactional communications (receipts, confirmations, billing notices)
• Send marketing emails and SMS messages, where you have opted in
• Deliver free guides, educational content, and promotional offers
• Improve and personalize your experience on our Site
• Analyze usage trends and measure the effectiveness of our marketing
• Schedule and publish content to our social media channels
• Comply with legal obligations and enforce our Terms of Service
• Respond to inquiries, support requests, and feedback

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service providers — third parties that help us operate our business, such as Square (payment processing), GoHighLevel (CRM and SMS), and email delivery services. These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Social media platforms — when we use developer APIs (Meta, TikTok, LinkedIn, YouTube) to publish content, we interact with those platforms under their respective terms and data policies.
• Optional measurement providers — Google Analytics and Microsoft Clarity when you allow Analytics, and Meta Pixel when you allow Marketing. These tools operate only on approved public marketing pages and only after the applicable choice.
• Legal and regulatory authorities — when required by law, court order, or to protect the rights and safety of our business or others.

5. Email Communications

If you provide your email address, you may receive communications from us including membership updates, promotional offers, wellness tips, and educational content. You may unsubscribe at any time by clicking the "unsubscribe" link in any email or by contacting us directly at info@bodyshopspa.info. Transactional emails (such as receipts and account notices) are not subject to opt-out.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Membership records are typically retained for a minimum of seven years for accounting and compliance purposes.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. Payment data is processed through Square's PCI-DSS compliant infrastructure and is never stored on our servers. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal information (subject to legal retention requirements)
• Opt out of marketing communications at any time
• Request a copy of your data in a portable format

To exercise any of these rights, please contact us at info@bodyshopspa.info.

To change optional analytics or marketing choices, use the Privacy Choices link in the Site footer.

9. Children's Privacy

Our Site and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

10. Third-Party Links

Our Site may contain links to third-party websites, including booking platforms and social media pages. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our Site after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: