Privacy Policy

What this policy covers

It covers information we collect through this site: the contact form, the online booking menu and "My appointments". Clinical information collected during your consultation (medical history, treatment consents) is handled separately, under the laws that apply to medical services and, where applicable, our notice of privacy practices.

Information we collect

• Contact form: your name, phone, email (optional), the service you are interested in, your message, and the consents you check, with their date.
• Online booking: your email (we verify it with a code), first and last name, phone, the services, the professional, the date and time you choose, your notes, and whether it is your first visit.
• Technical data: IP address, browser type and the time of each request. We use them for site security (for example, to limit attempts and prevent fake bookings) and they are kept in security logs.
• Analytics: only if you accept it, Google Analytics records in aggregate the pages visited and approximate device and location data.

We do not need detailed medical information to book. Please do not include it in messages or notes: we will review it with you at your consultation.

How we use your information

• Respond to your request and schedule, confirm or remind you of your appointments.
• Send you the code to verify your email and your appointment confirmation.
• Show you your appointments and membership in "My appointments".
• Protect the site, prevent fraud and abuse, and meet legal obligations.
• Improve the site with analytics, only if you accepted it.
• Send you promotions only if you give separate consent. You can withdraw it at any time.

Text messages (SMS)

If you give us your phone to handle your request, we may call or text you about it and about your appointments. We will only send you promotional messages if you expressly agree in a separate checkbox, which is not a condition of any purchase or booking.

Message frequency varies. Message and data rates from your carrier may apply. Reply STOP to opt out or HELP for help.

We do not sell or share your mobile phone number or your SMS consent with third parties for their own marketing purposes.

Who we share your information with

We do not sell your personal information and we do not share it for targeted advertising. This site does not use social media pixels. We only share it with providers that help us operate, under contract and for these purposes:

• Vercel: hosting of this website.
• Amazon Web Services: hosting of our appointment system.
• GoHighLevel (LeadConnector): our client follow-up system, where contact form requests arrive.
• Resend and SendGrid (Twilio): sending emails (internal notices, verification codes and appointment confirmations).
• Cloudflare (Turnstile): bot check when you confirm a booking.
• Google: Google Analytics and Google Maps, only if you accept them.

If you arrived through the link of someone who recommends us (an affiliate), that person only sees numbers (how many visits, sign-ups and clients they brought and their commission), never your name, email or treatments.

We may also share it when the law requires it, to protect rights and people’s safety, or as part of a sale or reorganization of the business.

Cookies

We use necessary cookies so the site and booking work. Analytics and Google Maps are only turned on if you accept them. Details are in our Cookie Policy, and you can change your choice under "Cookie preferences" at the bottom of every page.

We honor your browser’s Global Privacy Control (GPC) signal: if it is sent, analytics is not turned on.

How long we keep it

• Verification codes and "My appointments" sessions are deleted about one day after they expire.
• Contact form requests are kept while they are useful to serve you and maintain our relationship, then deleted or anonymized.
• Appointments and their history are kept for as long as medical and business record laws require.
• Security logs are kept for a limited time.

Security

We protect your information with encrypted connections (HTTPS), email verification by code, signed communication between the site and our appointment system, and access limited to staff who need it. No system is 100% secure; if an incident affecting your data occurs, we will notify you as Utah law requires.

Your rights and choices

You can ask us to access, correct, delete or receive a copy of your information, and withdraw the consents you gave us. Some state laws (for example, the Utah Consumer Privacy Act) grant these rights to their residents; we handle these requests from anyone, to the extent the law allows (for example, we may have to keep medical records).

Write to us at hello@revivimedspa.com. We will ask you to confirm your identity and respond within 45 days. We will not treat you differently for exercising your rights.

To stop promotional emails use the unsubscribe link; for SMS, reply STOP.

Children

This site is intended for people 18 and older, and online booking is only for them. We do not knowingly collect information from children under 13; if you believe a child gave us their data, contact us and we will delete it.

Links to other sites

If you follow a link to another site (for example, Google Maps), its own privacy policies apply.

Changes to this policy

We may update this policy. We will post the new version here with its date and, if the change is significant, let you know.

Contact

If you have questions about your privacy or want to exercise your rights:

Reviví MedSpa · 8706 S 700 E #102-103, Sandy, UT 84070

Email: hello@revivimedspa.com