1. Overview

Thank you for choosing Reshape Body Bar. This Privacy Policy explains how Reshape Body Bar, LLC (“Reshape Body Bar,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit reshapebodybar.com (the “Site”), use our mobile application (the “App”), or receive services at any Reshape Body Bar studio location (collectively, the “Services”).

By using our Site, App, or Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Site, App, or Services.

Important Notice: This Privacy Policy contains information about the collection of health-related data. Because we offer services including red light therapy, cryotherapy, and compression/lymphatic therapy, and because we collect health intake information from clients, please read this policy carefully before using our Services.

2. Personal Information We Collect

The information we collect depends on how you interact with our Site, App, or Services. Below is a complete breakdown of the categories of personal information we collect, have collected in the preceding 12 months, and the purposes for which we collect it.

Category	Specific Information	Source & Purpose	Retention
Identifiers	Name, email, phone number, physical address, date of birth	Collected when you create an account, book services, or contact us. Used to provide and manage your Services.	Duration of your account plus applicable legal hold periods
Health & Medical Intake Data	Health history, medical conditions, physical characteristics, contraindications relevant to red light therapy, cryotherapy, and compression/lymphatic therapy	Collected via intake forms before receiving Services. Used solely to ensure your safety and deliver appropriate Services. Not shared with third parties except as required by law.	Duration of client relationship plus applicable legal hold periods
Financial Information	Payment card type, last four digits, billing address, transaction history	Collected when you purchase Services. Processed by our PCI-compliant payment processor. We do not store full card numbers.	As required by applicable financial regulations
Location Data	Device GPS coordinates, IP address, general geographic location when using the App	Collected only with your permission to show nearby studio locations, hours, and promotions.	For as long as necessary to deliver the requested service
Commercial Information	Services purchased, appointment history, membership status, redemptions	Collected automatically at the time of purchase. Used to manage memberships and analyze service quality.	Duration of your account plus applicable legal hold periods
Device & Usage Data	IP address, browser type, operating system, pages visited, session duration, click data	Collected automatically via cookies and similar technologies when you use the Site or App. Used for analytics and service improvement.	Typically 13 months per analytics provider settings
In-Studio Imagery	Video or photographs captured via security cameras (CCTV) on studio premises	Captured for security and safety purposes at studio locations.	Typically 30 days unless required for an active incident
Employment Data	Resume, work history, education, references, contact information	Collected from job applicants only. Used solely to evaluate candidacy.	12 months following conclusion of the hiring process

Geolocation Data (App)

Our App may request permission to access your device’s location to display nearby studio locations, real-time hours, and in-studio promotions. Location data is collected only with your explicit consent. You may revoke this permission at any time through your device’s settings. We do not sell or share your precise location data with third-party advertisers.

Special Notice: Health & Wellness Intake Data

Because our services—red light therapy, cryotherapy, and compression/lymphatic therapy—involve physical contact and physiological effects, we collect health-related intake information prior to your first session and periodically thereafter. This information is used exclusively to determine contraindications, ensure your safety, and customize your service experience. We do not sell this data. We do not use this data for marketing profiling. Access to this data is restricted to trained staff members on a need-to-know basis.

3. How We Use Your Personal Information

We collect and use your personal information only for the purposes described below. We do not use your information for any purpose incompatible with the context in which it was originally collected without first obtaining your consent.

• To provide, manage, and improve the Services, including booking, membership management, and in-studio session delivery.
• To process payments and manage your account.
• To send you booking confirmations, appointment reminders, and service-related communications.
• To contact you about your membership, account status, or changes to our Services.
• To send promotional offers, newsletters, and marketing communications—only if you have opted in. You may opt out at any time.
• To personalize your experience based on your service history and preferences.
• To improve the safety and efficacy of our services by reviewing health intake data.
• To analyze usage of the Site and App for performance improvements and bug resolution.
• To maintain studio security through CCTV monitoring.
• To comply with applicable laws, regulations, and legal processes.
• To detect, investigate, and prevent fraudulent or unauthorized activity.
• To evaluate employment applications, where applicable.

4. How We Share Your Personal Information

We do not sell your personal information. We share your information only in the following limited circumstances:

• Third-Party Service Providers. Service Providers.

We may share information with trusted vendors who support our operations—including appointment scheduling platforms, payment processors, email marketing tools, analytics providers, and IT support. These vendors are contractually bound to use your information only as directed by us and to maintain appropriate security safeguards.

• Business Transfers. We may share information in connection with a merger, acquisition, asset sale, or corporate restructuring. You will be notified if your personal information becomes subject to a different privacy policy as a result of such a transaction.

• Legal Compliance & Safety. We may disclose your information to law enforcement, regulatory agencies, or courts when required by law, subpoena, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

• No Sale or Third-Party Marketing. We do not share your personal information with third parties for their own direct marketing purposes unless you have given us explicit permission to do so.

5. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies on our Site and App to enhance your experience and analyze how our Services are used.

Our Cookies

We use session and persistent cookies to remember your preferences, keep you logged in, and analyze site traffic. You can configure your browser to refuse cookies or alert you when cookies are sent. Note that disabling cookies may affect the functionality of certain features on our Site.

Third-Party Cookies

Some functionality on our Site is powered by third-party services (such as analytics or advertising platforms) that may set their own cookies and track your behavior across websites. We do not control these third-party tracking technologies. You may opt out of interest-based advertising by visiting the Digital Advertising Alliance at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

Do Not Track

Our Site does not currently respond to browser-level “Do Not Track” (DNT) signals. If this changes, we will update this policy accordingly.

6. How We Protect Your Information

We implement administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls restricted to authorized personnel, and secure storage practices for health intake data.

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If you have reason to believe your information has been compromised, please contact us immediately at the address listed in Section 14.

7. Children’s Privacy

Our Site, App, and Services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from children under the age of 13. If you are under 16, you may not use our Services without the direct supervision of a parent or legal guardian. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete it promptly. To report a concern, contact us at the address in Section 14.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, to maintain your account, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Health intake data is retained for the duration of your client relationship and any applicable statute of limitations for liability purposes. When information is no longer required, we securely delete or de-identify it.

9. Marketing Communications

If you opt in to receive marketing communications from us, you may opt out at any time by clicking the “unsubscribe” link in any marketing email, adjusting your preferences in your Reshape Body Bar account, or contacting us directly. Opting out of marketing emails does not opt you out of transactional or account-related communications (such as booking confirmations or membership notices). Opting out of one channel (e.g., email) does not automatically opt you out of other channels (e.g., SMS) if you opted in to them separately.

10. Privacy Rights – United States Residents

Residents of California, Virginia, Colorado, Connecticut, Utah, and Nevada may have the following rights under applicable state law. We will honor requests to the extent required by law and make good-faith efforts in all other cases.

• Know what personal information we collect, use, disclose, and share.
• Request access to and a copy of your personal information.
• Request correction of inaccurate personal information.
• Request deletion of your personal information, subject to certain exceptions.
• Opt out of the sale or sharing of your personal information (we do not sell your data).
• Opt out of targeted advertising using your personal information.
• Limit the use and disclosure of sensitive personal information, including health data.
• Not be discriminated against for exercising any of the above rights.

To submit a privacy request, contact us at: privacy@reshapebodybar.com. We will respond within 45 days of receiving your request. If your request is complex, we may extend this period by an additional 45 days and will notify you of the extension.

If you disagree with our response to your request, you may appeal by sending a written explanation with supporting documentation to privacy@reshapebodybar.com. We will review all appeals in good faith.

11. International Visitors

Our Services are operated in the United States. If you are accessing our Site, App, or Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using our Services, you consent to this transfer.

If you are located in the European Union, European Economic Area, or the United Kingdom, you may have additional rights under the General Data Protection Regulation (GDPR) or equivalent legislation, including the right to be informed, the right of access, the right to rectification, the right to erasure, the right to data portability, and the right to object to processing. To exercise these rights, contact us at privacy@reshapebodybar.com.

12. Third-Party Links and Services

Our Site or App may contain links to third-party websites, services, or social media platforms. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party site you visit before submitting personal information.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you via email or in-app notification. Your continued use of our Site, App, or Services following any update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

14. How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Reshape Body Bar

Email: privacy@reshapebodybar.com

Website: reshapebodybar.com

When submitting a privacy request, please include your full name, email address, and a description of your request so we can respond promptly.

15. Terms of Service

Your use of our Site, App, and Services is also governed by our Terms of Service, available at reshapebodybar.com/terms-of-service.