← Lotus & Sage Spa

Privacy Policy

Last updated: January 4, 2026

Who we are

Legal name: Lotus & Sage Spa, LLC
Trading name (DBA): Lotus & Sage Spa
Postal address: 18 Haywood Street, Asheville, NC 28801, USA
Email: privacy@lotusandsagespa.com
Phone: (828) 555-0142

Lotus & Sage Spa, LLC is the business responsible for the personal information described in this policy, and the sender of every message sent under the Lotus & Sage SMS Club.

Scope of this policy

This policy covers lotusandsagespa.com, the booking pages we operate, the information we collect at our front desk in Asheville, and the Lotus & Sage SMS Club text messaging programme. Where a section applies only to text messaging, it says so.

Information we collect

How we use your information

We use the information we collect to:

Our text messaging programme

What we send. If you join the Lotus & Sage SMS Club we send marketing and promotional messages — members-only offers and new treatment announcements. That is the only category we send to that number: no appointment reminders, nothing transactional, and nothing on behalf of another business.

How we got your number. Only from you, and only in one of three places: the SMS Club form on our home page, the SMS Club sign-up page we link to from it, or a paper card you filled in at our front desk. We never add a number to the programme from a booking, a purchase, or a list from anyone else.

How often. Message frequency varies, up to 6 messages per month. Message and data rates may apply.

How to stop. Reply STOP to any message. You can also email help@lotusandsagespa.com or call (828) 555-0142 and we will remove you. Any of those three works on its own; you never have to use a particular one.

Mobile information and SMS consent

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We do share your mobile number with the service providers who actually deliver the messages — our messaging platform, its aggregators, and your wireless carrier — and with nobody else. Those providers may use it only to deliver our messages to you.

We do not rent, buy, or message purchased or shared opt-in lists. Every number in the SMS Club was given to us by the person who holds it.

Where anything else in this policy appears to permit sharing, disclosure or transfer of personal information, this section controls for mobile numbers, text messaging opt-in data and consent. That includes any merger, acquisition, financing or sale of assets: your mobile number and your SMS consent are excluded from any such transfer, and a buyer of this business would have to ask you again.

Cookies and analytics

Our website uses cookies and similar technologies to remember your preferences and measure site traffic. You can disable cookies in your browser settings, though some features may not work as intended. We honour the Global Privacy Control signal: if your browser sends one, we treat it as a request to opt out of any sale or sharing of your personal information.

Sharing your information

We do not sell, rent, share, or otherwise disclose your personal information to third parties for their own marketing. We disclose it only to the service providers who help us run the business — our booking system, our payment processor, our email provider, and the messaging providers named above — and only as much of it as each one needs to do its job.

Data retention

We keep appointment and service records for seven years, and website analytics for twenty-six months. We keep your mobile number and the record of your consent for as long as you are in the SMS Club and for four years after you leave it, because we are required to be able to show when and how you opted in. Email privacy@lotusandsagespa.com or call (828) 555-0142 to ask for a copy of what we hold or to have it deleted.

How we protect your information

Access to customer records is limited to staff who need it, connections to our site and booking system are encrypted, and our providers are contractually required to protect what we send them. No system is perfectly secure, and we do not claim to hold any security certification.

Children's privacy

Our services are not directed to children under 13 and we do not knowingly collect their personal information. You must be at least 18 to join the SMS Club. A parent or guardian who believes we hold information about a child under 13 can email privacy@lotusandsagespa.com; we will confirm and delete it, including any mobile number and consent record, within 30 days.

Your California privacy rights

In the last 12 months we collected the following categories of personal information, as those categories are named in the CCPA:

Where it comes from: from you directly, from your use of our website, and from our booking and payment providers.

Why we collect it: to provide and book treatments, to take payment, to answer you, to improve the site, and — for your mobile number only — to send the text messages you signed up for.

Who we disclose it to: our booking system, payment processor, email provider, analytics provider, and our messaging platform, its aggregators and the wireless carriers. Text messaging originator opt-in data and consent are excluded from every category above and are not disclosed to anyone other than the providers who deliver our messages.

Sale or sharing: in the last 12 months we have not sold or shared any personal information as those terms are defined by the CCPA, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We do not use sensitive personal information for any purpose other than providing the services you asked for. If you submit a "Do Not Sell or Share" request, note that your mobile number and SMS consent were already excluded and remain so regardless of the outcome of that request.

You have the right to know what we collect, to delete it, to correct it, to opt out of its sale or sharing, to limit our use of sensitive personal information, and to not be discriminated against for exercising any of them.

How to exercise them: email privacy@lotusandsagespa.com or call (828) 555-0142 — either one is enough, and you never have to use a web form. We will ask you to confirm two pieces of information we already hold so we know it is you. An authorised agent may make a request on your behalf by sending written permission signed by you to the same address. We answer within 45 days.

If you are in the EEA or the UK

Lotus & Sage Spa, LLC is the controller of your personal information. We rely on your consent for marketing email and text messages, on the performance of a contract for bookings and payment, and on our legitimate interest in running and improving the business for the rest. You may withdraw consent at any time — for text messages, by the same routes listed under "How to stop" above — and doing so does not affect anything we did before you withdrew it. Information is processed in the United States. You may complain to your local supervisory authority. Our privacy contact is privacy@lotusandsagespa.com.

Accessibility

If you need this policy in large print, as plain text, or read aloud, email privacy@lotusandsagespa.com or call (828) 555-0142 and we will provide it at no charge.

Changes to this policy

We may update this policy. When we do, we change the "Last updated" date at the top and, if the change materially affects the text messaging programme, we post a notice on our home page for 30 days before it takes effect. The updated policy applies from the date shown.

SMS terms

The full terms of the Lotus & Sage SMS Club, including the opt-out and help keywords, are on our Terms of Service page.

Contact us

Lotus & Sage Spa, LLC · 18 Haywood Street, Asheville, NC 28801 · privacy@lotusandsagespa.com · (828) 555-0142