Privacy Policy
Effective date: August 14, 2026
Last updated: August 14, 2026
This Privacy Policy explains how Spa Accelerator collects, uses, discloses, and protects Personal Information when you visit or interact with a website, landing page, funnel, form, scheduling page, checkout page, community, application, campaign, or other digital property that links to this Policy (collectively, the “Digital Properties”). It also explains the choices and privacy rights that may be available to you.
Umbrella Scope
Spa Accelerator is an umbrella brand used for digital properties and offers operated by Spa Accelerator and its applicable affiliate businesses, entities, or brands. When a Digital Property or offer identifies a different operating entity or provides a more specific privacy notice, that specific notice controls to the extent of a conflict.
Who Is Responsible for Your Information
For a particular Digital Property or offer, the controller or business responsible for Personal Information is Spa Accelerator and/or the business identified on that Digital Property, order form, invoice, service agreement, appointment form, or other offer-specific document. In this Policy, “Spa Accelerator,” “we,” “us,” and “our” refer to the applicable operator.
Questions and privacy requests may be sent to the contact details in the “Contact Us” section. We may need to route a request to the specific participating business that holds the relevant information.
Scope and Other Notices
This Policy applies only to Digital Properties and offers that link to it. It does not replace a separate agreement, patient consent, employee notice, applicant notice, or other privacy notice that expressly applies to a particular relationship.
Some participating businesses or affiliates may provide medical, aesthetic, or wellness services. Information maintained by a healthcare provider as protected health information may be governed by a separate Notice of Privacy Practices and applicable health-privacy laws. If that notice conflicts with this Policy regarding protected health information, the healthcare notice controls. Do not submit medical records, government identifiers, or other highly sensitive information through an ordinary website form unless the form specifically requests it and provides an appropriate secure channel.
Personal Information We Collect
“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. It does not include information that applicable law treats as deidentified, aggregated, or publicly available.
Information you provide directly
Identifiers and contact details, such as name, email address, telephone number, postal address, signature, and account credentials.
Professional and business information, such as company, role, industry, business goals, operational information, and information submitted in an application, intake form, questionnaire, or strategy call.
Transaction and commercial information, such as products or services considered or purchased, order details, subscriptions, appointment details, invoices, and billing address. Payment card data is generally collected directly by a payment processor; we do not intend to store complete payment card numbers.
Communications and content, such as messages, support requests, survey responses, reviews, testimonials, call notes, recordings made with notice or consent, files, photos, and other information you choose to submit.
Preferences and marketing choices, including topics of interest, communication preferences, and consent records.
Limited wellness or appointment information when a particular offer requests it. Offer-specific medical or patient information may be governed by an additional notice.
Information collected automatically
Device and network information, such as IP address, browser type, device identifiers, operating system, language, and approximate location derived from IP address.
Usage and activity information, such as pages viewed, links clicked, referring and exit pages, dates and times, session duration, form interactions, video engagement, and campaign attribution.
Cookie and tracking information from cookies, pixels, tags, local storage, software development kits, and similar technologies used for functionality, analytics, security, personalization, and advertising.
Information from other sources
Website, funnel, CRM, scheduling, payment, email, SMS, analytics, advertising, hosting, and community-platform providers.
Social media and professional-network platforms when you interact with our pages or choose to connect an account.
Referral partners, event partners, lead sources, participating brands, and business partners, where permitted by law.
Publicly available sources and information you have made available to the public.
How We Use Personal Information
Provide, operate, maintain, personalize, and improve Digital Properties, offers, products, services, communities, appointments, and events.
Process applications, registrations, transactions, payments, subscriptions, orders, refunds, and account administration.
Respond to inquiries, deliver support, manage relationships, and communicate about requested services.
Send administrative, transactional, educational, and—where permitted—marketing communications by email, telephone, or text message.
Measure performance, understand audiences, conduct research and analytics, troubleshoot, and develop new offers and features.
Personalize content and advertising, measure campaigns, and build audiences for advertising, subject to applicable consent and opt-out rights.
Protect security, prevent fraud and abuse, enforce agreements, resolve disputes, and comply with legal, accounting, tax, licensing, and regulatory obligations.
Support a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction.
Carry out another purpose disclosed when information is collected or with your consent.
Cookies, Analytics, and Interest-Based Advertising
We and our service providers may use cookies and similar technologies to keep Digital Properties functioning, remember preferences, understand use, protect against fraud, measure campaigns, and display or measure advertising. Some advertising technologies may recognize a browser or device over time and across different websites or services.
Where required, we will request consent before using non-essential cookies. You may use an available cookie-preference tool, adjust browser settings, or use controls offered by advertising providers. Blocking cookies may cause some features not to work properly.
Some browsers transmit “Do Not Track” signals. Because there is not a single universally accepted response standard, our Digital Properties may not respond to all such signals. Where required by applicable law, we will process a recognized universal opt-out mechanism, such as Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising for the browser or device that sends the signal.
Email, Telephone, and Text Messages
If you provide contact information, we may send communications related to your inquiry, application, appointment, transaction, account, or requested service. Where you separately consent, we may also send marketing messages, including messages using an automatic telephone dialing system, artificial or prerecorded voice, or automated technology, as permitted by law.
Consent to marketing calls or texts is not a condition of purchase. Message frequency varies. Message and data rates may apply.
Reply STOP to a marketing text to opt out and HELP for help, or contact us using the details below. We will process legally valid revocation requests within the time required by law.
Use the unsubscribe link in a marketing email to stop future marketing emails. We may still send non-marketing messages needed for a transaction, account, appointment, or legal notice.
Mobile opt-in data and consent will not be sold or shared with unaffiliated third parties for their own marketing. We may share it with service providers solely to operate the messaging program, comply with law, or honor your request.
How We Disclose Personal Information
We may disclose Personal Information to the following categories of recipients for the purposes described in this Policy:
Service providers and contractors that support hosting, websites, CRM, communications, customer support, scheduling, payments, accounting, analytics, security, advertising, document storage, events, and professional services.
The participating Spa Accelerator business, affiliate, or brand responsible for the Digital Property or offer, and other participating businesses when needed to fulfill your request, administer shared systems, or provide a disclosed bundled service.
Advertising, social media, and analytics partners that help measure or deliver campaigns, subject to applicable consent and opt-out rights.
Professional advisers, auditors, insurers, lenders, investors, and parties to an actual or proposed business transaction.
Government authorities, regulators, courts, law enforcement, and other parties when we believe disclosure is required by law or reasonably necessary to protect rights, safety, security, or property.
Other parties at your direction, with your consent, or as disclosed when the information is collected.
We do not sell Personal Information for money. However, certain disclosures involving advertising cookies or similar technologies may be considered a “sale,” “sharing,” or use for “targeted advertising” under some state privacy laws. Where those laws apply, you may opt out as described in “Your Privacy Rights and Choices.”
Payments and Sensitive Information
Payment information is generally submitted directly to a payment processor and is subject to that provider’s privacy and security terms. We may receive transaction status, payment method type, billing contact details, and a limited payment token or last four digits.
Unless a Digital Property expressly requests it through an appropriate channel, please do not send Social Security numbers, complete financial account credentials, medical records, biometric identifiers, or other highly sensitive information. If we collect sensitive Personal Information, we use and disclose it only for disclosed purposes, with consent where required, and subject to applicable legal rights.
Data Retention
We retain Personal Information for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain business and transaction records, comply with legal and tax obligations, resolve disputes, enforce agreements, prevent fraud, and protect security. Retention periods vary based on the type and sensitivity of information, the relationship, legal requirements, and operational needs. When information is no longer required, we may delete, deidentify, or aggregate it, subject to backup and archival cycles.
Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of account credentials and notifying us promptly of suspected unauthorized access.
Your Privacy Rights and Choices
Depending on where you live and subject to legal exceptions, you may have the right to:
Confirm whether we process your Personal Information and request access to or a copy of it.
Request correction of inaccurate Personal Information.
Request deletion of Personal Information.
Obtain certain Personal Information in a portable format.
Opt out of sale, sharing, targeted advertising, or certain profiling activities.
Limit certain uses or disclosures of sensitive Personal Information.
Withdraw consent where processing is based on consent, without affecting earlier lawful processing.
Appeal a denial of a request where applicable.
Exercise privacy rights without unlawful discrimination.
To submit a request, email [email protected] with the subject line “Privacy Request,” call 801-214-0321, or write to the mailing address below. Describe the Digital Property or offer involved and the right you wish to exercise. We may verify your identity and request details reasonably necessary to locate the relevant records. An authorized agent may submit a request where permitted by law, subject to proof of authorization and identity verification. If we deny an appealable request, you may appeal by replying to our decision with the subject line “Privacy Appeal.”
We will respond within the period required by applicable law. Certain information may be exempt from a request, including information needed to complete a transaction, detect security incidents, comply with law, protect legal rights, or maintain records required for legitimate business purposes.
Additional Notice for U.S. State Privacy Laws
This section supplements the rest of the Policy for residents of states with comprehensive consumer privacy laws, including California and Utah, when those laws apply to the relevant Spa Accelerator operator.
Categories collected and used
Identifiers and contact information; customer records; commercial and transaction information; internet or electronic-network activity; approximate geolocation; audio, visual, or similar information; professional or employment-related information; inferences; account credentials; payment-related information; and limited health or wellness information when a specific offer requests it.
Sources include you, your device and browser, service providers, participating businesses, advertising and analytics partners, referral sources, social networks, and public sources.
Business and commercial purposes include providing and improving services, processing transactions, communicating, marketing, advertising and measurement, security, fraud prevention, legal compliance, and business administration.
Recipient categories include service providers and contractors, participating businesses, analytics and advertising partners, professional advisers, transaction parties, authorities, and parties you direct us to contact.
California residents
In the preceding 12 months, we may have collected and disclosed for business purposes the categories listed above. We do not knowingly sell or share the Personal Information of consumers under 16. We do not use or disclose sensitive Personal Information for purposes that require a right to limit under California law unless an applicable notice says otherwise. California residents may request to know, access, delete, correct, or opt out of sale or sharing, and may use an authorized agent. If a covered operator engages in sale or sharing, it will provide an applicable opt-out method and honor recognized Global Privacy Control signals as required. California Civil Code section 1798.83 may also permit certain residents to request information about disclosures for direct marketing; submit such requests using the contact details below.
Utah residents
If the Utah Consumer Privacy Act applies to the relevant operator, a Utah consumer may request confirmation and access, deletion, a portable copy of information previously provided, and opt out of sale or targeted advertising. Requests may be submitted using the methods above.
International Visitors
Our operations are based in the United States. If you access a Digital Property from another country, your information may be transferred to, stored in, and processed in the United States and other countries where service providers operate. Those countries may have different data-protection laws.
Where the GDPR, UK GDPR, or a similar law applies, our legal bases may include performance of a contract or steps requested before a contract; legitimate interests in operating, securing, improving, and marketing our services; compliance with legal obligations; and consent. You may have rights to access, correct, erase, restrict or object to processing, receive data portability, withdraw consent, and complain to a supervisory authority. International transfers will use a legally recognized mechanism when required.
Children’s Privacy
The Digital Properties are not directed to children under 13, and we do not knowingly collect Personal Information from a child under 13 without legally required parental consent. Paid offers are generally intended for adults. If you believe a child has provided Personal Information in violation of this section, contact us so we can review and take appropriate action.
Third-Party Sites and Services
Digital Properties may link to or integrate services operated by third parties. Their privacy practices are governed by their own notices, not this Policy. We encourage you to review those notices before providing information. A link or integration does not mean we control or endorse the third party’s privacy or security practices.
Changes to This Policy
We may update this Policy from time to time. The revised version will be posted on a Digital Property with a new “Last updated” date. If required by law, we will provide additional notice or obtain consent. Your continued use after the effective date of an update is subject to the revised Policy, except where applicable law requires a different form of acceptance.
Contact Us
Spa Accelerator Privacy Team
9445 South Union Square, Sandy, Utah 84070, United States
Email: [email protected]
Telephone: 801-214-0321
Please identify the Digital Property, funnel, brand, or offer involved so the request can be directed to the appropriate operator.