Privacy policy.

Who we are

This website is run by Spa Avenue LLC, which does business as Sonder Esthetics and Nail Care, 4580 W University Dr, Suite 134, Prosper, TX 75078. In this policy, “we”, “us” and “our” mean Spa Avenue LLC.

What we collect, and when

When you book an appointment

• Your name, email address and phone number, and the treatment, date and time you choose.
• Your answers to the intake and consent forms for that treatment. Depending on the treatment, these include health information — for example allergies, skin and medical conditions, medications, whether you are pregnant, and your skin history — and whether you agree to us using treatment photos beyond your own file. We ask so we can decide whether a treatment is safe for you.
• A record of what you agreed to. When you tick that you agree to our Policy, our Terms & Conditions or a treatment consent, we keep a copy of the exact wording you saw, the date and time you agreed, the IP address you agreed from and your browser type. We keep this as proof of your agreement, and you can see it in your account under Forms.

When you create an account

• Your email address and a password. Passwords are stored scrambled (hashed); nobody at the studio can read them.
• Anything you add yourself: your name, phone number and billing address.

When you pay a deposit or buy from the shop

• What you ordered, the amount and your billing details.
• Your card details go straight to Square, our payment processor. They never pass through or stay on our website. If you choose to save a card for next time, Square keeps it; we keep only its type, last four digits and expiry date so you can recognise it.

When you are at the studio

• Treatment photos taken to track your progress, kept on your client file.

When you visit the website

• Our hosting provider’s servers log basic technical details of each visit — your IP address, browser, the page requested and the time — to keep the site running and secure.
• Cookies, described below.
• With Google Analytics, how the website is used: pages visited, how you arrived, and your device and approximate location (city level). This tells us which pages help people and which do not. It does not tell us who you are.

How we use it

• To book, confirm, remind you about, reschedule and cancel your appointments.
• To decide, with you, whether a treatment is safe and suitable.
• To take deposits and payments, and to refund them.
• To send you emails about your bookings, orders and account.
• To keep proper client records and proof of your consent.
• To look after the website and keep it secure, and to improve it.
• To meet our legal obligations.

We do not sell your personal information, and we do not use your health information for marketing.

Offers and news

Now and then we send offers and studio news by email or text — only if you have agreed to receive them, by ticking the box at checkout. We keep a note of when you ticked it. You can stop them at any time: untick the box in your account under Account details, use the unsubscribe link in any of our emails, reply STOP to a text, or just tell us. Stopping them does not affect emails about your bookings, orders or account.

Who else handles it

We use a small number of companies to run the studio and this website. Each gets only what it needs for its job:

• Square — processes card payments and refunds, and keeps our appointment calendar and client list. Square receives your name, phone number and email address, your appointments and your payments. It does not receive your intake-form answers.
• Google — our studio calendar is a Google Calendar, which shows each appointment with your name and treatment. Our booking emails are sent through Google’s mail service. Google Analytics measures website use, as above.
• Kinsta — hosts this website and its database.

We may also share information if the law requires it, or to protect the safety of our clients or staff.

How long we keep it

• An account whose email address is never confirmed is deleted automatically after 7 days.
• Your client record — bookings, intake and consent answers, the record of what you agreed to, and treatment photos — is kept for 7 years after your last visit, because we may need it to answer questions about a past treatment.
• Payment and order records are kept as long as tax and accounting rules require.
• Website server logs are kept for a short time by our hosting provider.

What you can do

• See it. Signed in, your account shows your appointments, orders, forms and the record of what you agreed to.
• Correct it. You can change your details in your account, or ask us to.
• Ask for a copy, or ask us to delete it. Email us and we will reply within 45 days. We may need to keep some records — for example proof of consent and payment records — where the law requires it or to settle a question about a past treatment; if so, we will tell you what we kept and why.

Depending on where you live, you may have further rights under your state’s privacy law. Contact us to use them; if we cannot do what you ask, we will explain why, and you may ask us to look at it again.

Cookies

Cookies are small files a website stores in your browser.

• Needed for the site to work — keeping you signed in, remembering your cart and booking during checkout, and protecting the site from abuse. The site cannot work without these.
• Analytics — Google Analytics cookies, which measure how the site is used. You can block them in your browser settings, or with Google’s opt-out add-on at tools.google.com/dlpage/gaoptout.

Keeping it safe

The website uses an encrypted connection (HTTPS). Client records can be seen only by the studio and the people who look after the website for us, each with their own password. No system is perfectly secure, but we take reasonable care, and we will tell you if something goes wrong that affects your information, as the law requires.

Children

This website is for adults. We do not knowingly collect information online from children under 13. Clients under 18 must be booked by, and come with, a parent or legal guardian.

Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change is significant, we will say so on the website or by email.