Privacy Policy.

ECLAT AESTHETICA LLC (“éclat Spa & Wellness,” “we,” “us,” or “our”) operates this website and provides medical aesthetic and wellness services in Phoenix, Arizona. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with us.

We collect information in the following ways:

• Information you provide, such as your name, email address, phone number, and any message details, when you submit a contact, consultation, or booking request, buy a gift card, sign up for communications, or otherwise reach out to us.
• Information collected automatically, such as your IP address, browser type, device information, pages viewed, and referring URLs, gathered through cookies and similar technologies as you use the site.
• Information from third parties, such as the analytics, advertising, scheduling, or social-media platforms we use to operate and promote the business.

We do not ask for health or medical information through this website, and we ask you not to send any. Our contact form requests your name, your contact details, a general service you are curious about, and whatever you choose to write in the message box, and it reaches us by ordinary email, which is not a secure channel. If your question involves your health, your skin, a medication, or a treatment you have had or are considering, please call us instead, or raise it at your consultation, and we will take it from there.

If you do send health details through the form anyway, we will not ignore them and we will not treat them casually. Any medical or treatment information you share with us in the course of care is handled under our clinical privacy practices, not this website policy.

We use the information we collect to:

• Respond to your inquiries and schedule consultations or appointments.
• Provide, maintain, and improve our website and services.
• Send you administrative messages and, where permitted, marketing communications you can opt out of at any time.
• Measure and analyze site traffic, usage, and performance.
• Measure how well our advertising works, such as which ads lead people to tap to call us, send us a form, or book.
• Detect, prevent, and address security issues, fraud, or technical problems.
• Comply with legal obligations and enforce our terms.

We do not sell your personal information. We may share it with:

• Service providers who perform functions on our behalf, under agreements that limit their use of the data. Today these are: Vercel (website hosting and privacy-friendly visitor analytics), Google (Google Analytics, Google Tag Manager, and Google Ads measurement), Google Workspace (our email, where the messages and website form submissions you send us arrive), Google Maps (the embedded map on our contact and area pages), Mangomint (booking, scheduling, gift-card sales, and live chat), Resend (delivery of the emails our website forms send us), Adobe Fonts (fonts served on our pages), Bugsnag and Cloudinary (error monitoring and images used by our booking provider's booking and chat tools), and Cherry (patient financing; its widget loads on our payment-plans page and runs Cherry's own analytics there, and you share your details with Cherry only if you apply).
• Professional advisors, such as lawyers and accountants, where reasonably necessary.
• Authorities or other parties when required by law, legal process, or to protect rights, safety, and property.
• A successor entity in connection with a merger, acquisition, financing, or sale of assets.

Online booking, scheduling, and payments are powered by Mangomint, a third-party salon and spa platform. Our booking button opens Mangomint's own booking page or an overlay containing it, so from the moment it opens you are entering information directly into Mangomint's systems, not ours. What you enter there (your name, contact details, the services you select, appointment times, and any payment details) is collected and processed by Mangomint and its own payment provider to complete your booking.

When you finish booking online, Mangomint sends you back to a confirmation page on our site, and the web address it uses carries the booking's total and an appointment reference number. Our hosting provider's request logs record that address, as they record every page request, but our site removes both values from the address before any analytics or advertising tag reads the page. Only the total is reported, as described under “Cookies and analytics” below; the appointment reference is never sent to Google or to any other analytics or advertising service.

Gift cards are sold through Mangomint as well. The button on our gift-cards page opens Mangomint's gift-card checkout, either as its own page or in an overlay on ours, and what you enter there (the amount, your name and email address, the recipient's name and email address, your message, the date to send it, and your payment details) is collected and processed by Mangomint and its payment provider to complete the purchase and deliver the gift card.

We receive booking and client information from Mangomint to manage your appointments and our relationship with you. This website never receives or stores your payment card number. Mangomint's handling of your information is governed by its own privacy policy at mangomint.com/legal/privacy-policy.

If you choose to pay over time through Cherry, you apply directly with Cherry Technologies, Inc. on its own application, whether you open it from a link we share or from a device in our studio. What you enter there (your identity, contact, and financial details) is collected and processed by Cherry and its lending partners, not by this website. We receive only what is needed to complete your purchase, such as whether a plan was approved and the amount applied to it. Cherry's handling of your information is governed by its privacy policy at withcherry.com/privacy.

We use cookies and similar technologies (such as browser local and session storage) to keep the site functioning, remember your preferences (for example, that you dismissed an announcement), and understand how the site is used.

We use Google Analytics 4, a service of Google LLC, to measure site traffic, usage, and performance. It sets cookies on this site whose names begin with “_ga” and collects information such as your device and browser type, approximate location, the pages you view, and which links you click, including when you click a button that opens our booking tool. Google processes this under its own policies. To learn how Google uses data from sites that use its services, visit policies.google.com/technologies/partner-sites. You can opt out of Google Analytics with Google's browser add-on, available at tools.google.com/dlpage/gaoptout.

When you finish booking online, Mangomint brings you back to a confirmation page on our site (see “Booking and payment processing” above). That page tells Google that a booking was completed and gives its total list price in U.S. dollars. It never sends the appointment reference, the services you booked, or your name or contact details.

Our Google Analytics property is linked to Google Ads so we can see which advertising brings people to the site and what they do once they arrive. Because of that link, what Google Analytics records about your visit is also sent to Google's advertising domain: the address and title of each page you view, details of what you do there (for example, which treatment page you looked at), and your browser's analytics identifier, which is a randomly generated number rather than your name. Tapping to call us, opening our booking tool, sending one of our website forms, and completing an online booking are each reported to Google Ads with the address and title of the page you were on, and Google Ads counts them as results of our advertising when they follow one of our ads.

Our site also loads Google Tag Manager, a Google service for running tags like these. Through it, Google's own Google Ads tag and conversion linker run on every page, and a Google Ads conversion tag reports each completed online booking. Google's tags set cookies and browser storage on this site whose names begin with “_gcl_”. They hold an identifier that Google Ads uses to connect what happens on our site with our advertising and, if your visit starts from one of our Google ads, the identifier of that ad click, so Google Ads can tie what you do here to the ad you clicked. These cookies last about 90 days.

When a visit starts from one of our Google ads, our site also notes that single fact in your browser's session storage, which clears when you close the tab, so that a form you send us from our site can tell us the visit began with an ad. The note never includes the ad click's identifier.

We have Google Signals and ad personalization switched off. With Signals off, Google Analytics does not link your visit to your Google account; with ad personalization off, what our site sends to Google is marked so that it is not used to personalize the ads you see. Neither setting stops Google Ads from tying your actions here to an ad you clicked, as described above. You can limit advertising personalization across Google's services at myadcenter.google.com.

We also use Vercel Analytics, provided by our hosting company, to count page views. It is served from our own domain rather than a third-party one, sets no cookies, and does not track you across sites or build a profile of you. It records the page you viewed, a coarse location, and your device and browser type.

Our pages also load fonts from Adobe Fonts, and our booking provider's booking and chat tools use Bugsnag to report technical errors and Cloudinary to serve images. These receive your IP address and browser details as a necessary part of delivering or diagnosing the page, and each processes that data under its own policy.

Our payment-plans page also loads Cherry's own widget and a Google font when you open it, whether or not you apply. Both receive your IP address and browser details as part of delivering the page. The widget also runs Cherry's own analytics, including Segment, an analytics service: it tells Cherry how the widget is used on our page (for example, when it and its payment calculator load, and the amount shown in that calculator) and stores randomly generated identifiers in your browser's local storage. Cherry processes this under its own privacy policy at withcherry.com/privacy.

You can control cookies through your browser settings. Disabling some cookies may affect how the site works.

Our site offers a live chat window provided by Mangomint. When you open it, anything you type (along with your message history, the page you were on, and your browser and device details) is transmitted to and stored by Mangomint so our team can read and reply to it. Chat is not encrypted end to end, and it is not part of a medical record.

Please do not type medical, health, or treatment details into the chat. It is intended for general questions such as hours, directions, pricing, and booking. If your question involves your health, your skin, a medication, or a treatment you have had or are considering, call us at (480) 903-4544 or raise it at your consultation, and we will take it from there.

Opening the chat is entirely your choice, and you can close it at any time. Mangomint's handling of chat content is governed by its privacy policy at mangomint.com/legal/privacy-policy.

We keep personal information only as long as needed for the purposes described in this policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. After that, we delete or de-identify it.

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, to opt out of certain processing, and not to be discriminated against for exercising these rights. To make a request, contact us using the details below; we will verify and respond as required by applicable law.

California residents: You may request the categories and specific pieces of personal information we have collected, request deletion, and opt out of any “sale” or “sharing” of personal information as those terms are defined under California law. We do not sell personal information.

You can opt out of marketing emails at any time using the unsubscribe link in those messages.

Text messages: we send marketing texts only if you have separately agreed to receive them. Consent to texts is its own choice — it is never a condition of booking or purchasing anything, and agreeing to emails does not opt you into texts. Reply STOP to any message to stop receiving them, or contact us using the details below. Message frequency varies, and message and data rates may apply.

Our website may link to third-party sites or services we do not control. This policy does not apply to those sites, and we encourage you to review their privacy practices.

Our website is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be posted on this page, and your continued use of the site means you accept the updated policy.

If you have questions or requests about this Privacy Policy or your information, contact us at info@eclatazmedspa.com, by phone at (480) 903-4544, or by mail at 13637 N Tatum Blvd, Suite 11, Phoenix, AZ 85032.