Skip to main content

Privacy Policy

Effective date: June 18, 2026

This Privacy Policy explains how Simply Rooted Spa ("Simply Rooted Spa," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit simplyrootedspa.com (the "Website"), subscribe to our emails, book a service, buy a gift card, or otherwise interact with us. This policy does not replace any additional notice presented when information is collected.

Information We Collect

The information we collect depends on how you interact with us and may include:

  • Contact and communications information, such as your name, email address, telephone number, messages, and email subscription preferences.
  • Appointment and service information, such as the service requested, appointment date and time, service history, preferences, and information you choose to provide in connection with a service. This may include information about allergies, sensitivities, health conditions, or accessibility needs when you provide it so that we can safely deliver a requested service.
  • Transaction information, such as purchases, gift-card activity, payment status, and limited payment details made available to us by our payment processor. Payment-card information is processed by Square; we do not receive or store your complete payment-card number on this Website.
  • Website and device information, which our hosting and security providers may automatically receive, such as your IP address, browser and device type, operating system, referring page, pages requested, and the date and time of a request. We do not currently use advertising pixels or a third-party website analytics service on the Website.

Please do not submit sensitive information through the email subscription form. If information is not necessary for us to provide a service, please do not provide it.

How We Use Information

We may use personal information to:

  • Schedule, provide, personalize, and manage spa services;
  • Process transactions, administer gift cards, and maintain business and tax records;
  • Respond to questions and send appointment, service, and account communications;
  • Send updates and promotional emails when you subscribe, and record and honor your communication preferences;
  • Operate, secure, troubleshoot, and improve the Website and our services; and
  • Comply with law, enforce our agreements, and protect our rights, customers, and others.

How We Disclose Information

We may disclose personal information only as reasonably necessary for the purposes described above, including to:

  • Service providers, such as website hosting, security, email, scheduling, payment, gift-card, bookkeeping, and professional-service providers. Vercel hosts the Website. Square provides our appointment, gift-card, payment, and email-marketing tools.
  • Government authorities and other parties when we reasonably believe disclosure is required by law or legal process, or is necessary to protect rights, safety, and property or to investigate fraud or security concerns.
  • A successor or transaction participant in connection with a proposed or completed sale, transfer, merger, financing, reorganization, or similar business transaction, subject to appropriate safeguards.
  • Other parties at your direction or with your consent.

We do not sell personal information for money. We also do not share personal information for cross-context behavioral advertising or use it to target advertisements based on activity across unrelated websites or services.

Square and Other Third-Party Services

Appointment, gift-card, payment, and email-subscription features direct you to or submit information to Square. Square may process information both on our behalf and for its own purposes under its own terms and privacy notices. Please review Square's Privacy Notice for Square Buyer Features. The Website also links to social-media and other third-party websites. Their privacy practices, content, and security are their responsibility, not ours.

Cookies and Tracking Choices

We do not currently use cookies for advertising or third-party analytics on this Website. The Website or its hosting provider may use limited, necessary technologies for security, network management, and basic operation. When you follow a link to or use a Square or social-media service, that third party may use cookies or similar technologies under its own privacy notice.

Because we do not sell personal information, share it for cross-context behavioral advertising, or use targeted-advertising cookies on this Website, we do not currently offer a separate advertising opt-out tool. Browser "Do Not Track" signals do not have a single accepted legal or technical standard. Where required, we treat legally recognized opt-out preference signals, such as Global Privacy Control, as a request to opt out of sale or targeted-advertising uses; we do not currently engage in those uses.

Your Choices and Requests

You may unsubscribe from promotional email by using the unsubscribe link in an email. We may still send non-promotional communications about appointments, purchases, or our ongoing business relationship.

Depending on where you live and subject to applicable exceptions, you may have rights regarding your personal information, such as rights to request access, correction, deletion, or a portable copy, and to appeal a refusal of a request. You may submit a request by emailing us at the address in the Contact Us section. We may need to verify your identity and authority before completing a request. We will not unlawfully discriminate against you for exercising a privacy right. If we deny an appeal, you may contact your state attorney general.

Information held directly by Square is also subject to Square's request process. You can visit Square's privacy request portal.

Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain business, tax, and transaction records, honor communication preferences, resolve disputes, enforce agreements, and meet legal requirements. Retention periods vary based on the type and sensitivity of information, the nature of our relationship, and applicable legal obligations. Square determines the retention of information it controls under its own policies.

Security

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information and the size of our business. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Children's Privacy

The Website and its email subscription are not directed to children under 13, and we do not knowingly collect personal information online from children under 13. A parent or guardian who believes a child has provided personal information through the Website may contact us to request its deletion. Appointments for minors should be arranged by a parent or legal guardian.

Changes to This Policy

We may update this Privacy Policy as our practices or legal obligations change. We will post the revised policy here and update the effective date. If a change materially affects how we use information already collected, we will provide any additional notice or obtain consent required by law.

Contact Us

For questions, privacy requests, or accessibility help with this policy, contact Simply Rooted Spa at simplyrootedspa@gmail.com.