Privacy Policy
Last updated · July 13, 2026
Avy Spa ("we," "us," or "our") respects your privacy. This policy explains what information we collect when you visit avyspa.com or our spa at 3783 El Camino Real, Palo Alto, CA 94306, how we use it, and the choices you have. By using our website or services, you agree to this policy.
Information We Collect
Information you provide
When you book an appointment, purchase a gift card, or contact us, we may collect:
- Contact details — your name, phone number, and email address
- Booking details — the service you select, appointment date and time, and therapist preferences
- Payment information — processed securely by our payment providers; we do not store your full card number
- Health and comfort notes — any conditions, injuries, allergies, or pregnancy status you choose to share so we can tailor your session safely
Information collected automatically
Like most websites, we and our service providers may use cookies and similar technologies to collect information such as your device type, browser, pages visited, and how you found our site (for example, through Google search). We use this information in aggregated form to understand how visitors use our website; it does not identify you personally.
How We Use Your Information
- To schedule and manage your appointments
- To send booking confirmations, reminders, and updates by text or email
- To process payments and gift card purchases
- To personalize your session and provide it safely
- To respond to your questions and requests
- To improve our website, services, and guest experience
- To comply with legal obligations
Text Messages & Communications
If you provide your phone number, we may send you appointment confirmations and reminders by SMS. Message and data rates may apply. You can opt out of text messages at any time by replying STOP, or by letting us know — you will still receive essential communications about appointments you have already booked, by another method if needed.
We do not send marketing emails or texts without your consent.
What We Don't Do
- We do not sell your personal information
- We do not share your information with third parties for their own marketing purposes
- Any health information you share is used only to provide a safe, comfortable massage experience, and is never used for marketing
When We Share Information
We share your information only with:
- Service providers — trusted platforms we use to run our business, such as online booking, scheduling, payment processing, and website hosting. They may process your information only as needed to provide their services
- Legal requirements — if required by law, court order, or to protect the rights and safety of our guests and staff
Data Retention & Security
We keep your information only as long as needed to provide our services, meet legal and accounting requirements, and maintain your booking history for your convenience. We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is completely secure, but we work with reputable providers and limit access to your information to those who need it.
Cookies & Analytics
Our website may use cookies for basic functionality and analytics. Most browsers let you block or delete cookies in their settings; doing so may affect some website features, such as online booking. Our website is hosted on Squarespace, which may set cookies necessary for the site to function — see Squarespace's privacy policy for details.
Your Privacy Rights
You may contact us at any time to:
- Access or update your contact information
- Opt out of appointment reminders or any communications
- Ask us to delete your contact details
California residents
Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information we collect, request its deletion, and not be discriminated against for exercising these rights. We do not sell personal information, so there is nothing to opt out of in that respect. To exercise any of these rights, contact us using the details below — we will verify your identity and respond within the time required by law.
Children's Privacy
Our website and services are intended for adults. We do not knowingly collect personal information from children under 13. Guests under 18 may receive services only with a parent or guardian's consent and accompaniment.
Third-Party Links
Our website may contain links to other websites, such as Google Maps or our booking platform. This policy applies only to Avy Spa; we encourage you to review the privacy policies of any other sites you visit.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with a new "Last updated" date. Your continued use of our website or services after changes are posted means you accept the updated policy.