Privacy Policy

Effective Date: August 2, 2026

Legacy Spa & Massage, LLC, doing business as Legacy Spa ("Legacy Spa," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit LegacySpaAndMassage.com, use our online booking features, purchase gift cards or packages, enroll in a membership, communicate with us, or receive services from Legacy Spa.

This Privacy Policy applies to information collected through our website, online booking and account tools, electronic communications, and in connection with our spa operations. It does not replace any treatment consent, consultation form, membership agreement, gift-card terms, or other agreement that may apply to a particular transaction or service.

1. Information We Collect

The information we collect depends on how you interact with us and may include the following categories:

· Contact and account information, such as your name, email address, telephone number, mailing address, date of birth, login credentials, and communication preferences.

· Booking and service information, such as appointment dates and times, selected services, service-provider preferences, visit history, package or membership usage, special requests, and information needed to manage your reservation.

· Transaction information, such as purchases, deposits, gift cards, packages, memberships, discounts, refunds, and payment status. Payment-card information is generally collected and processed by our payment processors; Legacy Spa may receive limited payment details, such as a transaction identifier, card type, expiration information, or the last four digits of a card.

· Consultation or treatment-related information that you voluntarily provide, including allergies, sensitivities, pregnancy status, medical conditions, medications, injuries, treatment preferences, or other information relevant to safely providing a requested spa service.

· Communications and feedback, including emails, text messages, telephone calls, contact-form submissions, reviews, survey responses, complaints, and other communications with us.

· Website and device information, such as Internet Protocol address, browser type, device type, operating system, referring pages, pages viewed, time spent on the website, approximate location derived from an IP address, and interactions with website features.

· Cookie and similar-technology information used to operate the website, remember preferences, understand website performance, prevent fraud, and, when enabled, measure or improve marketing activities.

2. How We Collect Information

We collect information directly from you when you book an appointment, create or use an account, make a purchase, enroll in a membership, complete a form, communicate with us, or visit the spa. We also collect certain information automatically through cookies and similar technologies. In addition, we may receive information from service providers that support our operations, including Squarespace, Meevo, MeevoPay or other payment processors, communication vendors, analytics providers, and gift-card or membership platforms.

3. How We Use Information

We may use personal information to:

· Provide, schedule, personalize, modify, and document appointments and spa services.

· Process deposits, payments, refunds, gift cards, packages, and recurring membership charges.

· Send appointment confirmations, reminders, receipts, account notices, membership communications, and other service-related messages.

· Respond to questions, requests, accessibility needs, complaints, and customer-service matters.

· Communicate about promotions, events, services, packages, gift cards, and memberships when permitted by law and consistent with your communication preferences.

· Operate, secure, analyze, and improve our website, booking experience, services, and business operations.

· Detect, investigate, and prevent fraud, misuse, security incidents, unlawful activity, and violations of our policies or agreements.

· Comply with legal, tax, accounting, licensing, recordkeeping, insurance, and regulatory obligations, and establish or defend legal claims.

4. How We Disclose Information

We may disclose personal information in the following circumstances:

· Service providers. We use vendors to host and maintain our website, manage appointments and client records, process payments, administer gift cards and memberships, send communications, provide analytics, maintain security, and support other business functions. These providers may process information only as needed to provide services to us and subject to their own contractual and legal obligations.

· Professional advisors. We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisors when reasonably necessary for legitimate business or legal purposes.

· Legal and safety purposes. We may disclose information when required by law, subpoena, court order, licensing authority, or governmental request, or when we reasonably believe disclosure is necessary to protect rights, safety, property, guests, service providers, or the public.

· Business transactions. Information may be disclosed or transferred in connection with a merger, financing, sale, reorganization, acquisition, bankruptcy, or transfer of all or part of our business or assets.

· At your direction or with your consent. We may disclose information when you ask us to do so or otherwise authorize the disclosure.

Legacy Spa does not sell personal information for monetary consideration. We do not use consultation or treatment-related information for targeted advertising. We may use online analytics or marketing tools that collect website activity information to measure or improve advertising. Depending on applicable law, some of these activities may be treated as targeted advertising or the sharing of personal information. Where required, we will provide an appropriate opt-out method.

5. Squarespace, Meevo, and Other Third-Party Services

Our website is hosted by Squarespace, and our online booking, appointment, client-management, gift-card, package, membership, and payment functions may be provided through Meevo, MeevoPay, or related providers. When you use an embedded booking tool, follow a link to a third-party page, or submit information through a third-party platform, that provider may collect and process information under its own privacy policy and terms. Legacy Spa is not responsible for the independent privacy or security practices of third parties.

6. Cookies and Similar Technologies

Our Squarespace-hosted website and its service providers may use cookies, pixels, scripts, local storage, and similar technologies. These technologies may be used to keep the website functioning, remember preferences, understand traffic and usage, improve performance, protect against fraud, and measure marketing effectiveness. Depending on the website configuration, cookies may be categorized as necessary, functional, analytics, or marketing cookies.

You may be able to manage nonessential cookies through our cookie banner or through your browser settings. Blocking certain cookies may affect website functionality. Browser-based “Do Not Track” signals are not consistently recognized across the industry. Where applicable law requires recognition of an opt-out preference signal, we will respond as required.

7. Email and Text Messages

We may send transactional or service-related communications, including appointment confirmations, reminders, receipts, schedule changes, account notices, and membership communications. We may also send promotional email or text messages when you have provided the consent required by law or when otherwise legally permitted.

You may unsubscribe from promotional email by using the unsubscribe link in the message. You may opt out of promotional text messages by replying STOP. Reply HELP for assistance. Message frequency varies, and message and data rates may apply. Opting out of promotional messages will not prevent us from sending nonmarketing communications that are reasonably necessary to provide requested services or manage an existing transaction or account.

We do not share mobile telephone numbers, text-message opt-in data, or consent records with third parties or affiliates for their independent marketing or promotional purposes. We may share this information with vendors that provide messaging, customer support, or related services on our behalf.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, or disclosure. We also rely on service providers to maintain safeguards appropriate to the information they process. No method of transmission, payment processing, or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information for as long as reasonably necessary to provide services, maintain our relationship with you, administer memberships, packages, and gift cards, comply with legal and recordkeeping obligations, resolve disputes, enforce agreements, and protect our legitimate business interests. Retention periods vary according to the type of information and the purpose for which it was collected. We may retain deidentified or aggregated information for lawful business purposes.

10. Your Choices and Privacy Rights

Depending on your location and applicable law, you may have the right to request confirmation of whether we process your personal information; access or obtain a copy of that information; correct inaccuracies; request deletion; and opt out of certain sales, targeted advertising, or profiling. These rights may be subject to exceptions, including obligations to maintain transaction, tax, legal, safety, or treatment records.

You may submit a privacy request by contacting us using the information in Section 15 below. We may need to verify your identity before completing a request. If we deny a request and applicable law gives you a right to appeal, you may appeal by replying to our decision or submitting a new request marked “Privacy Appeal.” We will not discriminate against you for exercising a privacy right.

11. Children’s Privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information online from children under 13 without legally required parental consent. Spa services for minors are governed by separate age, consent, supervision, and treatment policies. A parent or legal guardian should contact Legacy Spa before booking a service for a minor.

12. Links to Other Websites

Our website may link to websites or services operated by third parties, including booking, payment, map, social-media, and review platforms. We do not control those services, and this Privacy Policy does not apply to their independent practices. Review the privacy policy of any third-party service before providing personal information.

13. Visitors Outside the United States

Legacy Spa is located in Texas and provides services primarily in the United States. If you access our website from another country, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, services, or legal obligations. The revised policy will be posted on this page with an updated effective date. Material changes may also be communicated through the website or another appropriate method.

15. Contact Us

Questions, privacy requests, or concerns may be directed to:

Legacy Spa & Massage, LLC
DBA Legacy Spa
7121 Bishop Rd, STE 2
Plano, Texas 75024

Email: LegacySpaAndMassage@gmail.com

Telephone: 715-505-1200

Website:LegacySpaAndMassage.com