Privacy Policy

Maru Head Spa ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our services, or interact with us via text message, email, or other channels.

1. Information We Collect

We may collect the following types of information:

• Contact information: name, phone number, email address, and mailing address.
• Appointment information: service type, date, time, staff preference, and special requests.
• Payment information: payments are processed securely by our payment processor. We do not store your full card number or CVV on our servers.
• Communication records: records of SMS and email interactions, including appointment reminders and customer support communications.
• SMS consent records: timestamps, consent method, and the consent language displayed at the time of opt-in.
• Website usage data: IP address, browser type, device information, and pages visited, collected via cookies and analytics tools where enabled.

2. How We Use Your Information

Your information is used to:

• Confirm, manage, and follow up on appointments.
• Send appointment confirmations, reminders, and post-visit follow-ups.
• Deliver promotional offers and marketing communications (only with your consent).
• Process payments and manage gift cards or memberships where offered.
• Provide customer support and improve our services.
• Comply with legal obligations, including TCPA record-keeping requirements.

3. SMS Data

When you opt in to receive text messages from us, we collect and store your phone number, opt-in status, consent records, message history, and opt-out records.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text messaging platform who assist in delivering our messaging services.

4. Information Sharing

We do not sell your personal information. We may share information only with trusted service providers who assist us in operating our business (payment processing, SMS delivery, analytics), when required by law, or as part of a business transfer.

5. Data Retention & Security

SMS consent records are retained for a minimum of five (5) years in accordance with TCPA record-keeping requirements. Appointment and client records are retained for the duration of our business relationship and a reasonable period thereafter. You may request deletion of your personal data at any time, subject to our legal retention obligations.

We use industry-standard security measures to protect your personal information, including encrypted connections (HTTPS) and restricted access to personal data.

6. Your Privacy Rights

Depending on where you live, you may have the right to know what personal information we hold about you, request its deletion or correction, and opt out of marketing communications. We will not discriminate against you for exercising any of these rights. To exercise them, contact us at hello@maruheadspa.example · +17145550142 · 1640 Newport Blvd, Costa Mesa, CA 92627.

7. Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16.

8. Changes & Contact

We may update this Privacy Policy from time to time; the current version will always be posted on this page. This policy is governed by the laws of the State of California. Questions? Contact Maru Head Spa at hello@maruheadspa.example · +17145550142 · 1640 Newport Blvd, Costa Mesa, CA 92627.