What we collect
Online booking is handled by Mindbody, the scheduling system our front desk uses. When you choose Book, you leave this site for our booking page on Mindbody. The name, contact details, appointment, and any card details you enter there are collected by Mindbody for us and kept in our Mindbody account; your Mindbody login itself is handled by Mindbody under its own privacy policy. None of it passes through this website.
When you browse, we record which page you landed on, which site or search you arrived from, and any campaign tags in the link (utm_source and similar). This is stored against a random identifier, not against you.
We do not record your IP address when you browse, and we do not run any third-party analytics, advertising, or tracking script. There is no Google Analytics tag, no advertising pixel, and no session recorder on this site. Where you agree on this site to receive messages from us, we store the IP address and browser that agreement came from alongside it — that record is how we can show you agreed.
The map on our Contact and About pages is Google Maps, shown inside the page. Your browser loads it directly from Google, so Google receives your IP address and may set its own cookies, under Google's privacy policy. We receive nothing from it.
We do not collect health information through this website. Nothing on this site asks for medical history, allergies, medication, or photographs, and you should not type any of that into the chat or a booking note. Health information is taken in person, on paper or in your clinical record, and is handled separately from this site.
Two cookies, both set by this site and readable only by this site. Neither is used for advertising and neither is shared with anyone.
- A visitor identifier — a random value that lets us recognise a repeat visit without knowing who you are. Expires after one year.
- An attribution record — which search or link first brought you here, and which one brought you back most recently. Expires after 90 days.
Staff signing in to the admin system get a third, session cookie. That one is not set for customers.
We also store a note in your browser when you dismiss a promotional message, so the same message does not reappear. That is stored locally in your browser and never sent to us.
The Google map on the Contact and About pages may set Google's own cookies, as described above. This site cannot read them.
Because none of this site's cookies are advertising cookies, it does not show a consent banner. Clearing your cookies removes all of them.
How we use it
To book, confirm, and remind you about appointments. To reach you if we need to move an appointment. To understand which treatments people are looking for and which searches bring them here, so we write about the things people actually want to know.
We do not sell your information, and we do not share it with advertisers or data brokers.
Marketing messages
We only send marketing texts or emails if you have opted in, and opting in is never a condition of booking. Appointment confirmations and reminders are not marketing — you get those because you booked, and they are sent by Mindbody.
Every marketing message includes a way to stop. Reply STOP to a text or use the unsubscribe link in an email, and it takes effect immediately. We keep a permanent record of when consent was given and when it was withdrawn, which is why a withdrawal is recorded rather than erased.
For texts: message frequency varies, and message and data rates may apply. Reply HELP for help. Replying STOP stops every text from our number, because carriers block the number outright; appointment reminders from Mindbody are stopped in Mindbody. The full text-message terms are in our Terms of Service.
Only the service providers needed to run the site and the booking system:
- The company that hosts this website
- The company that hosts our database
- Mindbody, which runs our online booking, appointment confirmations, and reminders
- The provider that sends our own text messages
Each of them processes the data on our instructions and is not permitted to use it for anything else. We will also disclose information where the law requires it.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-message opt-in data and consent are never shared with any third party. The provider that sends our texts processes your number only to deliver them.
Separately, Google receives your IP address when a page with our map loads, as described above. It does so under its own privacy policy, not on our instructions, and it receives nothing you enter on this site.
How long we keep it
Appointment records are kept while you remain a client and for as long afterwards as our record-keeping and insurance obligations require. Browsing and attribution data is kept for 90 days. Consent records are kept permanently, because the burden of proving consent falls on us.
Your choices
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email contact@glowmemedspa.com or call (201) 706-1138 and we will confirm your identity before acting — that check protects you, not us.
Some records we cannot delete on request, specifically consent records and anything we are legally required to retain. We will tell you if that applies and why.
Under 18s
This website is not intended for anyone under 18, and we do not knowingly collect information from anyone under 18. Treatments for minors require a parent or guardian present, arranged by phone rather than through this site.
Changes
If this policy changes, the effective date above changes with it. Material changes affecting how we use information you have already given us will be notified directly, not just posted here.
Contact
Beautti-In, LLC 224 W 35th St, Floor 7, Suite 700 New York, NY 10001
Email: contact@glowmemedspa.com Phone: (201) 706-1138