RosaVita Wellness ("we," "our," "us") operates this website (the "Site"). This Privacy Policy explains what information we collect when you visit the Site or submit a contact or booking form, how we use it, and your rights regarding your information.
1. Information We Collect
When you submit our contact form, we collect your name, email address, phone number (if provided), and the contents of your message.
When you book an appointment, we collect your name, email address, phone number, the service you requested, the date and time you selected, the ZIP code and street address where the session will take place, and any notes you choose to include.
Because we come to you, the address is needed to provide the service and to work out any travel fee. It is not used for anything else.
Health information. The notes field is optional. If you choose to tell us about an injury, a medical condition, a pregnancy, or anything else affecting your treatment, we treat that as sensitive information: it is used only to deliver your session safely, is seen only by your therapist, and is never used for marketing or sold to anyone.
If a deposit is required, your card or PayPal details are entered directly with PayPal and are never seen, handled, or stored by us. We receive only confirmation that the payment succeeded, the amount, and the name and email address PayPal associates with the payer.
When you visit any page, our hosting provider automatically logs your IP address (used for rate-limiting submissions) and standard request metadata such as timestamp and the page requested.
We do not use third-party analytics, advertising pixels, or tracking cookies on this Site.
2. How We Use Your Information
We use the information you submit solely to:
- Respond to your inquiry or booking request;
- Schedule and provide the services you request;
- Reserve your appointment time and send you a calendar invitation;
- Take and, where applicable, refund a deposit;
- Maintain records of services provided; and
- Comply with applicable legal and regulatory requirements, including those of the Florida Department of Health, Board of Massage Therapy.
We do not sell your personal information. We do not share it with third parties for marketing purposes.
3. Service Providers (Subprocessors)
We use the following service providers to operate the Site. They process information only on our behalf and only as needed to perform their service:
- Cloudflare, Inc. — website hosting, database storage (D1), DNS, and email routing for our domain.
- Formspree — used to deliver an email notification to us when a form is submitted.
- Google Fonts — typography served from Google's content delivery network when you load a page.
- Google Calendar — your appointment is written to our calendar so the time is reserved, and Google sends you the invitation. Google therefore receives your name, email address, appointment time, and the address of the session.
- PayPal — processes deposits and any recurring wellness plan. PayPal is the controller of your payment details; its own privacy policy governs how it handles them.
4. Cookies
The Site uses one cookie: an administrator session cookie named session_token, which exists only while an authorized administrator is logged in to our content-management area. It is HTTP-only, same-site, and is not set for ordinary visitors. We do not use marketing or tracking cookies of any kind.
5. Data Retention
We retain contact messages and booking records for twelve (12) months after your most recent interaction, after which they become eligible for deletion. You may request earlier deletion at any time — see Section 7.
6. Children's Privacy
The Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information through the Site, please contact us and we will delete it.
7. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Delete your information ("right to be forgotten");
- Object to certain uses or withdraw consent; and
- Receive a copy of your data in a portable form.
To exercise any of these rights, contact us at hello@rosavitawellness.com. We will respond within 30 days. We will verify your identity before acting on a request.
California residents have additional rights under the California Consumer Privacy Act (CCPA / CPRA). Residents of the European Economic Area and the United Kingdom have rights under the General Data Protection Regulation (GDPR). The same email address handles those requests.
8. Data Security
We use commercially reasonable safeguards: HTTPS for all transmissions, encrypted storage at our hosting provider, hashed session tokens, security headers on every response, and access controls limiting administrator access to data. No method of transmission or storage is 100% secure.
9. Florida Information Protection Act
If we suffer a data breach involving unencrypted personal information of a Florida resident, we will notify affected individuals and the Florida Department of Legal Affairs as required by Florida Statutes section 501.171.
10. Changes to This Policy
We may update this Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be reflected here; please check back periodically.
11. Contact
Email: hello@rosavitawellness.com
Mailing address: Available by appointment — Serving the greater metro area