1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register on our services, express interest in our products, participate in activities, or otherwise contact us. The personal information we collect may include:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Contact preferences
• Billing addresses
• Debit/credit card numbers

Sensitive information

When necessary and with your consent or as otherwise permitted by applicable law, we process health data as a category of sensitive personal information.

Payment data

We may collect data necessary to process your payment, such as your payment instrument number and security code. All payment data is handled and stored by Vagaro. You may view their privacy notice at vagaro.com/pro/privacy-policy.

Information automatically collected

We automatically collect certain information when you visit or navigate our services, including IP address, browser and device characteristics, operating system, language preferences, referring URLs, and other technical information. This information is used for security, operations, and internal analytics.

Information we collect includes log and usage data, device data, and information via cookies and similar technologies. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How do we process your information?

We process your personal information for the following purposes:

• To facilitate account creation and authentication
• To deliver and facilitate our services to you
• To respond to your inquiries and offer support
• To send administrative information and policy updates
• To send marketing and promotional communications (you may opt out at any time)
• To post testimonials on our services
• To evaluate and improve our services, products, and marketing
• To identify usage trends
• To determine the effectiveness of our promotional campaigns
• To comply with our legal obligations

3. When and with whom do we share your personal information?

We may share your data with third-party vendors, service providers, contractors, or agents who perform services on our behalf. Categories of third parties include:

• Ad Networks
• AI Platforms
• Communication & Collaboration Tools
• Data Analytics Services
• Payment Processors
• Sales & Marketing Tools
• Social Networks

We may also share your information in connection with a business transfer (merger, acquisition, or sale of assets), or when using Google Maps Platform APIs.

4. Do we use cookies and other tracking technologies?

We may use cookies and similar tracking technologies (web beacons, pixels) to gather information when you interact with our services for security, analytics, and advertising purposes.

We also permit third parties to use tracking technologies on our services for analytics and advertising, including managing and displaying advertisements tailored to your interests.

Google Analytics

We may share your information with Google Analytics, including Remarketing and Demographics and Interests Reporting features. You may opt out at tools.google.com/dlpage/gaoptout, through optout.networkadvertising.org, or via Ad Settings. For more, visit the Google Privacy & Terms page.

5. Do we offer artificial intelligence-based products?

As part of our services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies. These are provided through third-party AI service providers. Your input, output, and personal information may be shared with and processed by these providers.

You must not use our AI products in any way that violates the terms or policies of any AI service provider. To opt out, log in to your account settings or contact us directly.

6. How long do we keep your information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it. If deletion is not immediately possible (e.g., data stored in backup archives), we will securely store and isolate it from further processing until deletion is possible.

7. How do we keep your information safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

You should only access our services within a secure environment. Transmission of personal information to and from our services is at your own risk.

8. Do we collect information from minors?

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using our services, you represent that you are at least 18 years old.

If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any such data, please contact us at lymphaspaandmassage@gmail.com.

9. What are your privacy rights?

You have the right to withdraw your consent to our processing of your personal information at any time by contacting us. Please note this will not affect the lawfulness of processing before withdrawal.

Account information

To review or change your account information, or to terminate your account, log in to your account settings or contact us. Upon account termination, we will deactivate or delete your information, though we may retain some information as required for legal compliance, fraud prevention, or investigations.

Cookies

You may usually set your browser to remove or reject cookies, though this could affect certain features of our services.

For questions about your privacy rights, email us at lymphaspaandmassage@gmail.com.

10. Controls for do-not-track features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. As no uniform technology standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT browser signals.

California law requires us to let you know how we respond to DNT signals. Because there is currently no industry or legal standard for recognizing DNT signals, we do not respond to them at this time.

11. Do United States residents have specific privacy rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to, correct, copy, or delete your personal information, and to withdraw consent.

Categories of personal information collected

Your rights

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of targeted advertising, sale of personal data, or profiling

How to exercise your rights

Contact us by emailing lymphaspaandmassage@gmail.com, calling 515-587-1911, or submitting a data subject access request.

Appeals

If we decline to take action on your request, you may appeal by emailing us. If your appeal is denied, you may submit a complaint to your state attorney general.

12. Do we make updates to this notice?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this notice. If we make material changes, we may notify you by posting a notice or sending you a notification directly. We encourage you to review this Privacy Notice frequently.

13. How can you contact us about this notice?

If you have questions or comments about this notice, please reach out to us:

14. How can you review, update, or delete the data we collect?

Based on applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

To request to review, update, or delete your personal information, please submit a data subject access request or contact us using the information above.

15. SMS privacy policy

Lympha Spa & Massage respects your privacy. By opting into our SMS messaging service, you agree to the following terms:

Data collection

We collect your name, email address, mailing address, and mobile phone number when you sign up for SMS updates via our website contact form, email, rental agreement, or third-party reservation systems.

Data usage

We use your data solely to communicate via SMS with customer care and marketing messages.

Data security & retention

We protect your data with secure storage measures. We retain your information as long as you are subscribed to our SMS service. You may request deletion at any time.

Terms and conditions

• Message and data rates may apply. Your mobile carrier may charge fees for sending or receiving text messages.
• Messages are recurring; message frequency varies.
• Contact us at 515-587-1911 or lymphaspaandmassage@gmail.com for HELP or to STOP receiving messages.
• Opt-out: Reply or email STOP or CANCEL at any time. You will receive a final confirmation SMS and your number will be removed within 24 hours.
• Send HELP for assistance — you will receive our phone number, email, and website.
• We do not share, sell, rent, or transfer your mobile number to third parties for marketing purposes.
• All sharing mentioned in this policy excludes mobile opt-in and consent; opt-in information is never shared with anyone for any purpose.