Privacy Policy

Soho Day Spa ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at sohodayspa.com, use our mobile application, or visit our physical locations in Los Angeles and Buena Park, California.

소호 데이 스파는 고객님의 개인정보 보호를 위해 최선을 다하고 있습니다. 본 개인정보 처리방침은 당사 웹사이트, 모바일 애플리케이션, 또는 캘리포니아 로스앤젤레스 및 부에나 파크 지점 방문 시 수집, 사용, 공개 및 보호하는 정보에 대해 설명합니다.

1. Information We Collect / 수집하는 정보

Personal Information

We may collect personal information that you voluntarily provide when you:

• Create an account or member profile
• Book an appointment
• Make a purchase
• Subscribe to our newsletter
• Contact us with inquiries
• Sign in using third-party services (Google, Apple, Naver)

This information may include:

• Name (English and Korean)
• Email address
• Phone number
• Date of birth
• Mailing address
• Payment information (processed securely through Stripe)
• Treatment preferences and history
• Profile photo (if provided)

Health Information

As a medical spa, we may collect health-related information necessary to provide safe and effective treatments, including:

• Medical history relevant to treatments
• Allergies and sensitivities
• Current medications
• Skin conditions and concerns
• Treatment consent forms

This information is protected under applicable healthcare privacy laws and handled with the highest level of confidentiality.

Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

• IP address
• Browser type and version
• Device type
• Operating system
• Pages visited and time spent
• Referring website
• Cookies and similar technologies

2. How We Use Your Information / 정보 사용 방법

We use the information we collect to:

• Create and manage your account
• Process appointments and transactions
• Provide personalized treatment recommendations
• Send appointment reminders and confirmations
• Process membership benefits, credits, and rewards
• Communicate about promotions and special offers (with your consent)
• Respond to your inquiries and provide customer support
• Improve our website and services
• Comply with legal obligations
• Prevent fraud and ensure security

3. Third-Party Services / 제3자 서비스

We use trusted third-party services to operate our business:

Authentication Providers

You may sign in using:

• Google Sign-In - Subject to Google's Privacy Policy
• Apple Sign-In - Subject to Apple's Privacy Policy
• Naver Sign-In - Subject to Naver's Privacy Policy

When you sign in with these services, we receive your name, email address, and profile picture (if available). We do not receive your password.

Payment Processing

We use Stripe to process payments. Your payment information is transmitted directly to Stripe and is not stored on our servers. Stripe's privacy policy is available at stripe.com/privacy.

Email Communications

We use Resend to send transactional emails (appointment confirmations, password resets, etc.). Your email address is shared with Resend solely for this purpose.

Analytics

We may use analytics services to understand how visitors use our website. This data is anonymized and used to improve our services.

4. Information Sharing / 정보 공유

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted vendors who assist in operating our business (payment processing, email services, etc.)
• Legal Requirements: When required by law or to respond to legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

5. Data Security / 데이터 보안

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for data in transit
• Encrypted storage for sensitive data
• Regular security assessments
• Access controls and authentication
• Employee training on data protection
• Audit logging for sensitive data access

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights / 귀하의 권리

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, please contact us at privacy@sohodayspa.com.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information. We do not sell personal information.

7. Cookies / 쿠키

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Understand how you use our website
• Improve our services

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

8. Data Retention / 데이터 보존

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Treatment records may be retained for longer periods as required by healthcare regulations.

9. Children's Privacy / 아동 개인정보 보호

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers / 국제 데이터 전송

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy / 정책 변경

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

12. Contact Us / 연락처

If you have questions about this Privacy Policy or our data practices, please contact us: