Privacy Policy

What We Collect

When you book an appointment, we collect your name, email address, and phone number. If you fill out an intake form, we also collect health-related information you provide (conditions, allergies, pressure preferences, and focus areas).

Payment Information

Booking takes no payment and asks for no card. We do not collect or store card details through this website. Payment happens in person at the spa after your session, by card or cash, and any card reader we use is handled by our payment provider — we never see or store your full card number.

How We Use Your Information

• To confirm and manage your appointments
• To send you booking confirmations and intake forms via email
• To prepare your therapist for your session (intake form responses)
• To process payments and enforce our cancellation policy

We do not sell your information. We do not send marketing emails. We do not share your data with anyone other than the services listed below.

Services We Use

• Stripe — payment processing
• Supabase — secure database hosting
• Cal.com — scheduling and availability
• Resend — email delivery
• Vercel — website hosting

Data Retention

We keep your booking and client records for as long as needed to provide our services and comply with legal requirements. Intake form tokens expire after 72 hours. You can request deletion of your data at any time by contacting us.

Contact

If you have questions about this policy or want to request data deletion, email us at booking@obsidianspas.com.