Privacy policy
INNOVITALE SPA
WEBSITE & BUSINESS PRIVACY POLICY
Effective Date: May 29, 2024
Last Reviewed / Updated: March 10, 2026
1. Introduction and Who We Are
This Privacy Policy describes how InnoVitale Spa (operated by Surprise And Delight LLC, "InnoVitale Spa," "we," "our," or "us") collects, uses, discloses, and protects information about you when you:
• Visit our website at www.innovitalespa.com (the "Site")
• Book appointments through our booking platform (Boulevard)
• Purchase products or gift cards through our Site
• Enroll in or use our membership program
• Contact us by phone, email, text, or in person
• Subscribe to our email or SMS marketing communications
• Visit InnoVitale Spa in person at 1032 Dr. M.L.K. Jr Street N, St. Petersburg, FL 33705
By using our Site or services, you acknowledge that you have read this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Site or services.
Our primary contact for privacy matters: frontdesk@innovitalespa.com | 727-346-6740
2. Information We Collect
2.1 Information You Provide Directly
We collect information you voluntarily provide to us, including:
• Contact information: name, email address, phone number, mailing address
• Payment information: credit/debit card number, billing address (processed through Shopify Payments; we do not store full card numbers on our own servers)
• Appointment and booking information: service preferences, appointment history, staff preferences
• Health and wellness information: medical conditions, allergies, pregnancy status, contraindications, skin conditions, medications, and other health details you provide during intake, consultation, or in connection with receiving services
• Account credentials: if you create an account through Boulevard or Shopify
• Communications: messages, emails, and inquiries you send us
• Reviews and testimonials you choose to share
2.2 Information Collected Automatically
When you visit our Site, certain information is collected automatically through cookies, pixels, and similar tracking technologies, including:
• Device and browser information: IP address, browser type and version, operating system, device identifiers
• Usage data: pages visited, time spent on pages, links clicked, referring URLs, exit pages
• Location data: general geographic location derived from your IP address
• Cookie data: see Section 5 (Cookies and Tracking Technologies) for full details
Our Site is hosted on Shopify. Shopify automatically collects certain technical information as part of its platform operations. Please review Shopify's Privacy Policy at https://www.shopify.com/legal/privacy for details on their data practices.
2.3 Information from Third Parties
We may receive information about you from third-party sources, including:
• Boulevard (booking platform): appointment history, intake forms, client notes, membership status
• Google: analytics data, advertising attribution data if you arrive at our Site through a Google Ad
• Klaviyo: email engagement data, subscription preferences
• Payment processors: transaction confirmations and fraud signals
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Providing and Managing Services
• Scheduling, confirming, and managing your spa appointments
• Processing payments and issuing receipts
• Managing your membership, packages, and gift card balances
• Providing treatment services and customizing treatments to your health needs and preferences
• Communicating with you about your appointments, including reminders and follow-ups
3.2 Business Operations
• Maintaining client records and treatment histories
• Enforcing our cancellation and booking policies
• Training staff and maintaining service quality
• Fraud prevention and security
• Complying with legal obligations
3.3 Marketing and Communications
• Sending you email newsletters, promotional offers, and updates about InnoVitale Spa services (with your consent where required)
• Sending SMS text messages about appointments, offers, or spa updates (only with your explicit consent, as described in Section 7)
• Displaying targeted advertising on Google and other platforms based on your interactions with our Site
• Analyzing the effectiveness of our marketing campaigns
You may opt out of marketing communications at any time. See Section 8 (Your Rights and Choices) for details.
3.4 Site Improvement and Analytics
• Understanding how visitors use our Site
• Diagnosing technical issues and improving Site performance
• Measuring advertising effectiveness and return on investment
4. How We Share Your Information
We do not sell your personal information. We share information only as described below:
4.1 Service Providers
We share information with third-party vendors who help us operate our business. These providers are contractually obligated to protect your information and may not use it for their own purposes. Our current service providers include:
|
Provider |
Purpose |
Data Shared |
|
Shopify |
E-commerce platform, online store, and payment processing |
Name, contact info, purchase history, payment data |
|
Boulevard |
Appointment booking, client management, membership |
Name, contact info, appointment history, health intake forms, membership data |
|
Klaviyo |
Email marketing and SMS marketing |
Name, email, phone number, purchase history, email engagement data |
|
Google (Ads & Analytics) |
Website analytics, advertising, and conversion tracking |
IP address, device data, browsing behavior on our Site, advertising identifiers |
|
Shopify Payments / Payment Processors and Boulevard |
Payment processing and fraud prevention |
Payment card data, billing address, transaction data |
|
AI Answering Service and website chatbot |
Automated phone response and call handling |
Name, phone number, appointment-related information provided during calls or chats |
4.2 Legal Requirements
We may disclose your information if required by law, court order, subpoena, or other legal process, or when we believe disclosure is necessary to protect our rights, the safety of others, or to investigate fraud.
4.3 Business Transfers
If InnoVitale Spa is acquired, merged, or sold, your information may be transferred to the acquiring entity as part of that transaction. We will notify you of any such change via email or a notice on our Site.
4.4 With Your Consent
We may share your information for other purposes with your explicit consent.
5. Cookies and Tracking Technologies
5.1 What We Use
Our Site uses cookies and similar tracking technologies. A cookie is a small text file stored on your device. We use the following categories of cookies:
• Strictly Necessary Cookies: Required for the Site to function. These cannot be disabled. Examples: shopping cart cookies, login session cookies, security tokens.
• Functional Cookies: Remember your preferences and settings (e.g., language, saved items).
• Analytics Cookies: Help us understand how visitors use our Site (e.g., Google Analytics). These collect information such as pages visited, time on site, and traffic sources.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our advertising campaigns (e.g., Google Ads conversion tracking, remarketing pixels).
5.2 Third-Party Cookies
Third parties, including Google, may set cookies on your device when you visit our Site. These third parties have their own privacy policies governing their use of cookies. We do not control these third-party cookies.
5.3 Your Choices
You can manage cookie preferences through our cookie consent banner displayed when you first visit the Site. You may also:
• Adjust your browser settings to block or delete cookies (note: this may affect Site functionality)
• Opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout
• Opt out of Google advertising cookies at https://adssettings.google.com
Please note that even if you opt out of certain cookies, you may still see advertisements from us; they just will not be personalized.
6. Health and Wellness Information
In connection with providing spa services, we collect health and wellness information you provide during the intake process, consultations, and service delivery. This may include information about:
• Medical conditions, diagnoses, and medications
• Allergies and skin sensitivities
• Pregnancy or reproductive health status
• Contraindications to specific treatments
• Other physical conditions relevant to your service
We use this information solely to provide you with safe, appropriate, and personalized spa services. This information is accessible to licensed estheticians, massage therapists and nail technicians providing your services, and to management staff for safety and quality purposes.
We do not sell, rent, or disclose your health information to third parties for marketing or advertising purposes. Health intake information is stored securely within our booking platform (Boulevard).
You have the right to request deletion of your health records. Please contact us at frontdesk@innovitalespa.com to make such a request.
7. Text Message (SMS) Communications
If you provide your phone number and consent to SMS communications, we may send you text messages related to:
• Appointment confirmations, reminders, and follow-ups
• Promotional offers and spa updates
• Membership information and renewal notices
Consent: By providing your phone number and submitting a form on our Site or at our spa, and indicating your agreement, you consent to receive SMS messages from InnoVitale Spa. Message and data rates may apply. Message frequency varies.
Opt-Out: You may opt out of SMS messages at any time by replying STOP to any text message we send you.
Help: Reply HELP for more information.
We do not share your phone number with third parties for their own marketing purposes. SMS messages are managed through our booking and marketing platforms.
8. Your Rights and Choices
8.1 All Users
Regardless of where you live, you have the right to:
• Opt out of marketing emails: Click the "unsubscribe" link in any marketing email or contact us at frontdesk@innovitalespa.com
• Opt out of SMS: Reply STOP to any text message
• Request access to or a copy of your personal information
• Request correction of inaccurate information
• Request deletion of your information (subject to legal and operational requirements)
8.2 California Residents
If you are a California resident, you have additional rights under the California Online Privacy Protection Act (CalOPPA) and, if applicable, the California Consumer Privacy Act (CCPA/CPRA):
• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, and the categories of sources from which we collected it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: We do not sell or share your personal information with third parties for their own marketing purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising your California privacy rights.
To exercise your California rights, contact us at: frontdesk@innovitalespa.com or 727-346-6740. We will respond to verifiable requests within 45 days.
9. Children's Privacy
Our Site and services are directed to adults 18 years of age and older. We do not knowingly collect personal information from children under 13. Our spa policies state that guests must be 18 or older, and guests ages 16-17 may receive select services only when accompanied by a parent or guardian.
If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information. If you believe we have collected such information, please contact us at frontdesk@innovitalespa.com.
10. Data Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, or disclosure. Our booking and payment platforms (Boulevard and Shopify) maintain their own security certifications and practices.
However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
11. Data Retention
We retain your personal information for as long as necessary to:
• Provide services you have requested
• Maintain our business records and accounting obligations
• Comply with legal, tax, and regulatory requirements
• Resolve disputes and enforce our agreements
Appointment and service records are generally retained for seven (7) years. Health intake information is retained for seven (7) years You may request deletion of your information by contacting us, and we will honor such requests to the extent permitted by law.
12. Third-Party Links and Platforms
Our Site may contain links to third-party websites, including our booking platform (Boulevard), social media profiles, and other resources. This Privacy Policy applies only to our Site and services. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
Our booking portal at blvd.me/innovitalespa is operated by Boulevard. Please review Boulevard's privacy policy at https://joinblvd.com/privacy-policy for information about how they handle your data.
13. Telephone Communications and AI Services
Our spa uses an automated telephone assistant ("Rosie") to handle incoming calls and answer questions on our website as a chatbot. This service may record or transcribe calls or chats for quality assurance and follow-up purposes.
By calling us or chatting with us, you acknowledge that your call or chat may be handled by an automated system and may be recorded or transcribed. If you do not consent to recording, please inform us at the beginning of the call or choose another contact method (email or in-person).
Call recordings and chat transcripts are stored by our service provider and are used solely for business purposes. We do not use call recordings for marketing profiling.
14. Florida Residents
InnoVitale Spa is located in St. Petersburg, Florida. We comply with applicable Florida privacy and consumer protection laws. Florida residents have the right to request information about the personal data we hold about them and to request corrections or deletions where applicable. To make such a request, contact us at frontdesk@innovitalespa.com.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" at the top of this policy and, where appropriate, notify you by email or by posting a notice on our Site.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Site or services after changes are posted constitutes your acceptance of the updated policy.
16. How to Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
InnoVitale Spa / Surprise And Delight LLC
1032 Dr. M.L.K. Jr Street N
St. Petersburg, FL 33705
Email: frontdesk@innovitalespa.com
Phone: 727-346-6740
Website: www.innovitalespa.com
We will respond to privacy-related requests within 30 days of receipt.
