Privacy Policy

Introduction

Studio Luna Body Sculpting ("Studio Luna," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your personal information.

This Policy applies to information collected through our website spastudiolunabodysculpting.com, our booking system, in-person at our Daly City studio, and through any other interaction with our services.

Information We Collect

Information you provide directly

• Identity & Contact: Name, email, phone, mailing address
• Appointment: Service interests, preferred times, notes
• Health intake: Medical history relevant to treatment eligibility, contraindications, current medications
• Photos: Before/after photos taken during treatment (only with signed consent)
• Payment: Card information processed via Stripe; financing applications via Affirm
• Communications: Messages sent via email, phone, SMS, or our contact form

Information collected automatically

• IP address, browser type, device information, operating system
• Pages viewed, time on site, referral source
• Cookies and similar technologies (see Cookies section)

Information from third parties

• Affirm (financing eligibility confirmation only — not your loan terms)
• Stripe (payment processing confirmations)
• Google Analytics (aggregated, anonymized usage data)

How We Use Your Information

We use your information for the following purposes:

• Scheduling and providing aesthetic services
• Determining treatment eligibility and contraindications
• Processing payments and managing Affirm financing applications
• Sending appointment confirmations, reminders, and follow-up communications
• Responding to your inquiries
• Improving our services and website
• Complying with legal obligations
• Protecting our rights and the rights of our clients

We Do Not Sell Your Information

Studio Luna does not sell your personal information to third parties for monetary or other valuable consideration. This is a categorical commitment, not a marketing claim.

Sharing & Disclosure

We may share your information with:

Service providers

• Stripe — Payment processing
• Affirm — Financing application processing
• Email service providers — Appointment reminders
• SMS providers — Text appointment reminders
• Hosting providers — Website infrastructure
• Analytics — Anonymized usage data (Google Analytics)

Each of these providers is contractually bound to protect your information and use it only to provide services to Studio Luna.

Legal requirements

We may disclose information when required by law, court order, or to protect our legal rights, the safety of our clients or employees, or to comply with subpoenas, warrants, or other legal process.

Business transfers

If Studio Luna is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different Privacy Policy.

Affirm & Financing

When you apply for Affirm financing through Studio Luna, you authorize Affirm to:

• Perform a soft credit check to determine eligibility (does not impact credit score)
• Perform a hard credit inquiry if you accept loan terms
• Communicate with you regarding your loan

Affirm's privacy practices are governed by Affirm's Privacy Policy, not ours. Studio Luna does not have access to your Affirm loan terms, credit score, or detailed financial information. We only receive confirmation of approval status to complete your transaction.

Studio Luna is not a lender. All loans are made or arranged by Affirm Loan Services, LLC pursuant to a California Financing Law license. Affirm, Inc., NMLS ID 1883087.

Cookies & Tracking

Our website uses cookies and similar technologies for:

• Essential cookies — Required for site functionality (cannot be disabled)
• Analytics cookies — Help us understand site usage (Google Analytics)
• Functional cookies — Remember your preferences

You can control cookies through your browser settings. Disabling some cookies may affect site functionality.

California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA") provide you with the following rights:

Right to know

You can request what categories of personal information we have collected about you, the sources of that information, the purposes for collection, and any third parties with whom we share it.

Right to delete

You can request deletion of personal information we have collected, subject to legal exceptions (e.g., we may need to retain transaction records for tax purposes, or treatment consent forms for liability purposes).

Right to correct

You can request correction of inaccurate personal information.

Right to opt-out of sale or sharing

We do not sell your personal information. You also have the right to opt-out of "sharing" for cross-context behavioral advertising — Studio Luna does not engage in this practice.

Right to non-discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny services, charge different prices, or provide a different level of service based on your exercise of these rights.

How to exercise your rights

To exercise any of these rights, contact us at:

• Email: privacy@spastudiolunabodysculpting.com
• Phone: (415) 347-7149
• Mail: Studio Luna Body Sculpting, Attn: Privacy Officer, 6371 Mission St, Daly City, CA 94014

We will verify your identity before processing requests and respond within 45 days (extendable to 90 days for complex requests).

Health Information

While Studio Luna is not a HIPAA-covered entity in most contexts (we provide non-medical aesthetic services), we treat health information collected during intake with the same care as protected health information:

• Health information is collected only as needed for treatment eligibility
• Access is limited to staff with treatment responsibilities
• Records are stored securely with encryption at rest and in transit
• Health information is never shared with third parties without your explicit consent (except for legal requirements)

See our HIPAA Notice for more detail on how we handle health-related information.

Data Security

We implement appropriate technical and organizational measures to protect your information:

• SSL/TLS encryption for all data transmitted via our website
• Encrypted storage of sensitive information at rest
• Access controls limiting employee data access to job-relevant information
• Regular security reviews and updates
• Secure payment processing via PCI-DSS compliant providers (Stripe)

No system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

Data Retention

We retain personal information only as long as needed for the purposes outlined in this Policy:

• Active client records: Duration of active client relationship
• Treatment consent forms: 7 years (for liability purposes)
• Financial records: As required by California tax law (typically 7 years)
• Marketing communications: Until you unsubscribe
• Website analytics: 14 months (Google Analytics default)

Children's Privacy

Studio Luna services are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If we learn that we have inadvertently collected information from a minor, we will delete it promptly.

Treatment of minors (when permitted) requires parent/guardian consent. Contact us for details.

Policy Updates

We may update this Privacy Policy from time to time. Material changes will be communicated to existing clients via email and posted prominently on our website with the updated effective date.

Continued use of our services after such updates constitutes acceptance of the revised Policy.

Contact Us

Questions about this Privacy Policy or your privacy rights?

• Email: privacy@spastudiolunabodysculpting.com
• Phone: (415) 347-7149
• Mail: Studio Luna Body Sculpting, 6371 Mission St, Daly City, CA 94014