1. Scope
This Privacy Policy describes the practices of Reboot Float Spa LLC ("Reboot," "we," "us," or "our"), which operates Reboot Float & Cryo Spa locations. It applies when you visit our website, create or use a customer profile, make a purchase or reservation, visit a Reboot location, contact our team, participate in a promotion, or join an email or text messaging program.
Third-party services that you choose to use, including external booking, payment, social-media, and linked websites, may have their own privacy policies. Their practices are governed by those policies.
2. Information we collect
Information you provide
- Contact and profile information: name, email address, phone number, date of birth, selected spa location, account details, and service interests.
- Booking and transaction information: reservations, attendance, purchases, memberships, packages, credits, gift cards, discounts, refunds, and payment status. Payment card details are generally collected directly by our payment processor rather than stored by Reboot.
- Health and safety information: information you voluntarily provide in waivers, intake forms, or conversations about contraindications, accessibility needs, injuries, pregnancy, medications, or other considerations relevant to safely providing a service.
- Communications: emails, text messages, customer-service requests, survey responses, feedback, and notes from interactions with our team. Where enabled and permitted by law, calls may be recorded or transcribed after appropriate notice.
- Consent records: the disclosure shown when you join a messaging program, consent date and source, verification result, opt-in and opt-out activity, selected location, and related security records.
Information collected automatically
When you use our website, we and our service providers may collect IP address, browser and device type, approximate location derived from IP address, pages viewed, links clicked, referring page, dates and times, advertising identifiers, cookie values, and interactions with forms and promotions. We use cookies, pixels, local storage, and similar technologies to operate the site, remember choices, prevent abuse, understand traffic, attribute signups and purchases, and measure advertising.
Information from other sources
We may receive information from our booking and point-of-sale provider, payment processor, communications platforms, analytics and advertising partners, social networks, referral sources, and other vendors supporting our relationship with you. We may combine that information with information already associated with your profile.
3. How we use information
- Provide services, manage reservations, process purchases, and administer memberships, packages, and gift cards.
- Maintain customer profiles and route website leads or follow-up to the location you select.
- Communicate about bookings, purchases, account activity, service changes, safety, and customer support.
- Send requested verification codes and, with appropriate consent, email or SMS marketing.
- Personalize service recommendations, content, and promotions.
- Analyze website and campaign performance, measure conversions, and improve our locations, services, and communications.
- Detect fraud, abuse, security incidents, and technical problems.
- Enforce agreements, keep legally required records, and comply with law.
We do not use health and safety information from waivers or intake forms for targeted advertising.
4. How we disclose information
We may disclose personal information to the following categories of recipients for the purposes described in this policy:
- Service providers: booking and point-of-sale platforms, payment processors, email and SMS providers, phone systems, hosting and database providers, customer relationship tools, analytics providers, security vendors, and professional advisers.
- Advertising and measurement partners: platforms that help measure campaigns, create audiences, limit repeated ads, or deliver more relevant advertising.
- Legal and safety recipients: regulators, courts, law enforcement, insurers, advisers, or others when reasonably necessary to comply with law or protect rights, property, safety, and security.
- Business transaction recipients: parties involved in a financing, merger, acquisition, sale, restructuring, or similar transaction involving all or part of our business.
- At your direction: other parties when you ask us to disclose information or intentionally interact with their services.
We require service providers to use information for the services they provide to us, subject to applicable contractual and legal restrictions.
5. Advertising, analytics, and cookies
We use analytics and advertising technologies, including tools provided by social-media and advertising platforms, to understand visits and measure whether ads lead to signups, purchases, or bookings. These tools may receive device and browsing information, advertising identifiers, contact information transformed through hashing, and event information such as a signup or purchase.
We do not sell personal information for money. Some privacy laws may define certain disclosures for interest-based advertising as a "sale," "sharing," or "targeted advertising." Where those laws apply, you may request that we stop such disclosures by contacting us as described under Your privacy choices. Browser settings can block or delete cookies, although doing so may affect site functionality.
6. Email and SMS privacy
We will not share your Text message opt-in or consent status with any third party for purposes unrelated to providing the messaging service. We may share this data with vendors who help us deliver text messages, including platform providers and phone companies.
When you request a verification code, we use your phone number to send the code and confirm control of the number. Completing verification records your marketing consent and allows us to subscribe the profile to our SMS program. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. We retain consent and opt-out records to document and honor your choices.
You may unsubscribe from marketing emails using the link in an email. Opting out of marketing does not prevent transactional or service-related communications that are necessary to fulfill your requests.
7. Data retention and security
We retain information only for as long as reasonably necessary for the purposes described in this policy. The retention period depends on the relationship and type of information. For example, customer and booking records are retained while an account or relationship is active and for a reasonable period afterward; transaction records are kept as needed for tax, accounting, and dispute purposes; waiver and safety records are kept as needed to document services and protect guests; marketing consent records are kept long enough to demonstrate and honor consent choices; and website data is retained according to operational needs and vendor settings. We may retain information longer when required by law, litigation hold, or a legitimate fraud or security need.
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No transmission or storage system is completely secure, and we cannot guarantee absolute security.
8. Your privacy choices and rights
Depending on where you live and subject to applicable exceptions, you may have the right to:
- Request access to or a copy of personal information we maintain about you.
- Request correction or deletion of personal information.
- Opt out of certain sales, sharing, or targeted advertising.
- Limit certain uses of sensitive personal information.
- Withdraw marketing consent and appeal a denied privacy request where applicable.
To make a request, email info@rebootspa.com with the subject "Privacy Request," or write to the address below. Describe the request and include enough information for us to identify the relevant records. We may need to verify your identity before completing a request. An authorized agent may submit a request where permitted by law, subject to verification of the agent's authority.
We will not discriminate against you for exercising an applicable privacy right. We do not knowingly sell or share personal information of consumers under 16.
9. Children and minors
Our website and marketing programs are not directed to children under 13, and we do not knowingly collect personal information online from children under 13. Guests under 18 may need permission from a parent or legal guardian and may be subject to service-specific age and supervision requirements.
10. Changes to this policy
We may update this policy to reflect changes in our practices, services, or legal obligations. We will post the revised policy and update the effective date. If a change materially affects how we use information already collected, we will provide additional notice when required by law.
11. Contact us
Questions, privacy requests, and concerns may be sent to:
Reboot Float Spa LLC
Attn: Privacy
810 Valencia Street
San Francisco, CA 94110
info@rebootspa.com
This policy applies to Reboot's United States operations and is intended to provide a clear description of our current data practices.