Privacy Policy

Overview

Legacy Spa (“Legacy Spa,” “we,” “us,” or “our”) is a massage and wellness business located in Houston, Texas. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit thelegacyspa.com, contact us, book or receive services, or communicate with us by phone, email, or SMS/text message.

By using our website or providing your information to Legacy Spa, you agree to the practices described in this Privacy Policy.

Information We Collect

We may collect information through our website, booking forms, contact forms, phone calls, email, SMS/text messages, appointment and scheduling systems, and other interactions with Legacy Spa. This may include:

• Contact details such as your name, phone number, email address, and city.
• Appointment and service details you provide when booking or inquiring.
• Communications you send us, including messages, call details, and preferences (such as your preferred contact method).
• Business or organization details when you submit a corporate, partnership, or team-interest inquiry.
• Consent records, including whether you opted in to receive SMS messages, and the date, time, and source of that consent.
• Website usage information collected automatically through cookies and analytics (see “Cookies & Analytics” below).

How We Use Your Information

Legacy Spa may use the information we collect to:

• Respond to inquiries.
• Schedule and manage appointments.
• Provide massage and wellness services.
• Provide customer support.
• Send appointment confirmations and reminders.
• Make requested or appropriate business-related phone calls.
• Send service-related communications.
• Send promotional or marketing communications when the recipient has provided the required consent.
• Improve Legacy Spa’s services and website.
• Maintain security and comply with applicable laws.

SMS / Text Messaging Privacy

When a customer provides their mobile number and affirmatively opts in to receive SMS communications, Legacy Spa may use that number to send the categories of messages described at the point of consent (for example, appointment confirmations, appointment reminders, scheduling and customer-service communications, service updates, and—where separately authorized—promotional or marketing messages).

The following principles apply to our SMS communications:

• SMS consent is voluntary.
• Consent is not a condition of purchase. Consent to receive marketing SMS messages is not required to purchase any goods or services.
• Message frequency may vary.
• Message and data rates may apply.
• Customers may reply STOP to unsubscribe from applicable SMS communications.
• Customers may reply HELP for assistance, or contact Legacy Spa at info@thelegacyspa.com or (832) 243-8853.
• Legacy Spa will honor applicable opt-out requests.

Mobile Information & Data Protection

Mobile information, including phone numbers and SMS opt-in/consent data, will not be sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes.

SMS opt-in data and consent records are not shared with third parties for unrelated marketing purposes. Information may be disclosed to service providers that help Legacy Spa deliver communications or operate its services, solely as necessary to provide those services and subject to appropriate confidentiality and use restrictions.

SMS opt-in and consent data will not be shared with third parties for their own marketing purposes.

Cookies & Analytics

Our website may use cookies and privacy-conscious analytics to understand general site usage, remember preferences, and improve performance. You can control cookies through your browser settings; disabling cookies may affect some website features.

Third-Party Service Providers

Legacy Spa uses trusted third-party providers to operate our business, including booking and payment providers (such as Vagaro), customer-relationship-management (CRM) systems, communications and SMS platforms, email delivery providers, and analytics services. These providers process information only as needed to provide services to Legacy Spa and are expected to protect your information consistent with this Privacy Policy and applicable law.

Booking & Payment Providers

Appointments are booked through Vagaro. Any information you provide during booking or payment is handled by Vagaro and applicable payment processors under their own terms and privacy practices.

Data Retention

We retain information for as long as necessary to fulfill the purposes described in this Privacy Policy, provide services, maintain records (including consent records), resolve disputes, and comply with legal obligations. When information is no longer needed, we take reasonable steps to delete or de-identify it.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please avoid sending sensitive information (such as medical history, financial account numbers, or government identifiers) through website forms.

Your Choices

You may opt out of marketing SMS messages at any time by replying STOP, and you may contact us to update your preferences. You may also decline promotional communications while continuing to receive service-related messages necessary to fulfill your requests or appointments.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date above reflects the most recent revision. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.

Contact Us

Questions about this Privacy Policy can be directed to Legacy Spa in Houston, Texas at info@thelegacyspa.com or (832) 243-8853.