Privacy Policy

This website is operated by Spavia International LLC, the franchisor of Spavia Day Spa. Each Spavia spa is independently owned and operated by a franchisee. When you book, join a membership, purchase a gift card or contact a spa, that spa also receives your information and keeps its own guest records in its booking system, under its own practices.

• Contact and account details: name, email address, phone number, mailing address, date of birth and gender when you book, join a membership, purchase a gift card, enter a giveaway or contact us.
• Visit details: the spa, treatments, specialist preferences, notes you add, and your acceptance of the spa’s booking policies.
• Health information: what you tell us or your spa about health, allergies, pregnancy or physical conditions, used only to provide your treatment safely.
• Payment information: card details you enter are passed to our booking and payment provider to complete your purchase. We do not store full card numbers.
• Messages: what you send through contact forms, chat or email.
• Device and usage information: browser type, IP address, pages visited, links clicked and how you arrived, collected through cookies, similar technologies and our servers.

• To book appointments and process memberships and gift card purchases
• To send confirmations, sign-in codes, receipts and appointment reminders
• To pass your inquiry or booking to the spa you chose
• To send offers and updates, where you have agreed to receive them
• To measure and improve our website and advertising
• To keep the website secure and prevent fraud
• To comply with legal obligations

We do not sell your personal information for money. We share it with the Spavia spa that serves you and with service providers that run parts of our website and business for us, including:

• Mindbody (booking, payments, memberships, gift cards, guest records and the chat assistant on some spa pages)
• Vercel and Upstash (website hosting and data storage)
• Resend (email delivery)
• Google (analytics, advertising measurement and maps)
• Meta (advertising measurement, on the pages of some spas)
• Attentive (text messaging and sign-up forms, at some spas)
• Hownd (offers, at some spas)
• FRED (guest reviews shown on spa pages)

We may also disclose information when the law requires it, to protect the rights and safety of our guests and business, or as part of a sale or transfer of our business.

Our website uses cookies and similar technologies, including Google Analytics, Google Tag Manager and, on some spa pages, the Meta pixel. These tell us which pages are visited and which ads and searches bring guests to us, and let Google and Meta show Spavia ads to people who visited our site. When you complete a booking or purchase, our server may also send Google Analytics a record of it, without your name, email or phone number.

We also set a sign-in cookie when you verify your email for booking (one hour, or 90 days if you choose “Remember me”), and your browser remembers the spa you chose so the site can show it next time. You can clear these at any time in your browser.

You can block or delete cookies in your browser settings, opt out of Google Analytics with Google’s browser add-on, and manage ads in your Google and Meta ad settings. To opt out of our use of your information for targeted advertising, email support@spaviadayspa.com.

Some spa pages offer chat, provided by Mindbody. Chat conversations are recorded and may be answered by an automated assistant, and are kept by Mindbody and the spa so it can follow up with you. Please don’t share health or payment details in chat.

If you give us your phone number, you may receive appointment reminders and, if you agreed, marketing texts. Reply STOP to any text to stop receiving them, or HELP for help. Message and data rates may apply. Every marketing email has an unsubscribe link. Booking, receipt and sign-in messages are sent even if you unsubscribe from marketing.

We keep information only as long as we need it for the purposes above or as the law requires. For example, records of your acceptance of a spa’s booking policies are kept for two years, website security and error records for up to 45 days, and inquiries until they have been answered and are no longer needed. Your spa keeps its guest records in its booking system under its own practices.

We use reasonable safeguards, including encrypted connections, to protect your information. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Depending on where you live, including California, Colorado, Connecticut, Virginia, Texas, Oregon, New Jersey, Minnesota and other states with privacy laws, you may have the right to know what personal information we hold about you, to get a copy, to correct or delete it, and to opt out of its use for targeted advertising or any sale or sharing.

To make a request, email support@spaviadayspa.com. We will verify your request before acting on it, and you may use an authorized agent. We will not treat you differently for using these rights. If we deny your request, you may appeal by replying to our decision. For records a spa keeps, we will pass your request to that spa.

Our website is not directed to children under 13, and we do not knowingly collect their personal information online. Guests under 18 are booked by a parent or guardian (see our Spa Policies).

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “last updated” date.

Questions about this Privacy Policy? Email support@spaviadayspa.com.