Privacy Policy

Effective Date: November 1, 2026  |  Last Updated: November 1, 2026

This Privacy Policy describes how Zodiac Body Sculpting ("we," "us," or "our"), a body sculpting and wellness services business located in Santa Paula, California, collects, uses, discloses, and protects the personal information of individuals ("you" or "your") who visit our website at zodiacbodysculpting.com, contact us through our online forms, or otherwise interact with our business. We are committed to protecting your privacy and complying with all applicable federal and California state privacy laws, including the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA"), and the California Online Privacy Protection Act ("CalOPPA").

Please read this Privacy Policy carefully. By using our website or services, you agree to the practices described herein. If you do not agree, please discontinue use of our website immediately.

1. Information We Collect

We collect personal information in the following categories:

1.1 Information You Provide Directly

• •Contact information: your name, email address, and phone number submitted through our contact or booking forms.
• •Appointment and service inquiries: information you share regarding the services you are interested in, your body concerns, and any relevant health context you voluntarily disclose in your message.
• •Communication records: the content of emails, messages, or inquiries you send to us.

1.2 Information Collected Automatically

• •Log data: your IP address, browser type, operating system, referring URLs, pages viewed, and the date and time of your visit.
• •Cookies and similar tracking technologies: session cookies and persistent cookies used to maintain your session, remember preferences, and analyze site traffic. See Section 7 for details.
• •Analytics data: aggregated and anonymized behavioral data collected through Google Analytics 4 and Google Tag Manager regarding how visitors navigate and interact with our website.

1.3 Information We Do Not Collect

We do not collect payment card numbers, bank account information, Social Security numbers, government-issued identification numbers, or protected health information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA). Our services are non-medical aesthetic services; however, if you voluntarily share health-related information in a contact form, that information is treated as sensitive personal information under the CPRA.

2. How We Use Your Information

We use the information we collect for the following purposes:

• •To respond to your inquiries, questions, and appointment requests.
• •To schedule and confirm service appointments via our booking system.
• •To communicate with you about your booking, our services, promotions, and updates (with your consent where required by law).
• •To improve our website content, user experience, and service offerings.
• •To analyze traffic patterns and measure the effectiveness of our marketing through Google Analytics 4.
• •To comply with applicable legal obligations.
• •To protect the security and integrity of our website and business operations.

We do not sell your personal information to third parties. We do not use your information for automated decision-making or profiling in any manner that produces legal or similarly significant effects.

3. Legal Basis for Processing (California Residents)

Under the CCPA/CPRA, we process your personal information on the following legal bases:

• •Performance of a contract or pre-contractual steps: to respond to service inquiries and schedule appointments.
• •Legitimate business interests: to operate and improve our website, analyze traffic, and protect against fraud.
• •Compliance with legal obligations: to comply with applicable California and federal law.
• •Consent: where required, such as for certain marketing communications. You may withdraw consent at any time.

4. Sharing of Your Information

We do not sell your personal information. We may share your information in limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers who assist us in operating our website and delivering our services. These providers are contractually obligated to use your information only for the purposes for which it was disclosed and in accordance with this Privacy Policy. Our current service providers include:

• •Google LLC (Google Analytics 4, Google Tag Manager, Google Ads) — analytics and advertising. Google Privacy Policy: policies.google.com/privacy
• •Clerk, Inc. (Clerk Auth) — user authentication for account holders. Clerk Privacy Policy: clerk.com/privacy
• •EmailJS — contact form message delivery.
• •Cal.com — appointment booking and scheduling.
• •Vercel, Inc. — website hosting and infrastructure.

4.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

5. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

5.1 Right to Know

You have the right to request that we disclose: (a) the categories and specific pieces of personal information we have collected about you; (b) the categories of sources from which personal information is collected; (c) the business or commercial purpose for collecting personal information; and (d) the categories of third parties with whom we share personal information.

5.2 Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law (such as completing a transaction, detecting security incidents, or complying with legal obligations).

5.3 Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

5.4 Right to Opt-Out of Sale or Sharing

We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm this at any time.

5.5 Right to Limit Use of Sensitive Personal Information

To the extent we collect sensitive personal information (such as health-related details you voluntarily provide), you have the right to limit our use of that information to purposes necessary to perform our services.

5.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your California privacy rights. We will not deny you services, charge you different prices, or provide a lower quality of service because you exercised your rights under the CCPA/CPRA.

5.7 How to Submit a Request

To exercise any of the rights described above, please submit a verifiable consumer request to us by email at contact@zodiacbodysculpting.com. We will respond to verifiable requests within 45 days as required by California law. We may need to verify your identity before processing your request.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Contact form submissions and booking inquiries are retained for a period not to exceed 24 months unless a longer retention period is required by law or necessary for ongoing business relationship management. Analytics data is retained in accordance with Google Analytics 4 default retention settings.

7. Cookies and Tracking Technologies

Our website uses the following types of cookies:

• •Essential cookies: required for the website to function properly, including session management and authentication through Clerk.
• •Analytics cookies: placed by Google Analytics 4 via Google Tag Manager to collect aggregated data about site traffic and user behavior. These cookies do not identify you personally.
• •Preference cookies: used to remember your language preference (English or Spanish).

You may disable cookies through your browser settings; however, doing so may limit certain functionality of the website. Our website does not currently respond to Do Not Track signals from browsers, but we honor opt-out requests submitted directly to us.

8. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete that information. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at contact@zodiacbodysculpting.com.

9. Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our website is hosted on Vercel and served over HTTPS with TLS encryption. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites, including our booking platform, social media pages, and other resources. This Privacy Policy does not apply to those third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or by prominent notice on our website. Your continued use of our website following the posting of changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

This Privacy Policy was prepared in accordance with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the California Online Privacy Protection Act (CalOPPA), and applicable federal privacy standards. Effective November 1, 2026.