Privacy Policy Privacy Policy Header Graphic

PRIVACY POLICY / NOTICE TO CALIFORNIA CONSUMERS

Glen Ivy Hot Springs (GIHS) has developed this California Privacy Policy out of respect for the privacy of our members and guests at GIHS and visitors to our Website. This policy describes the personal information we collect, use, and disclose about individual members, guests, and Website visitors who are California residents. This policy applies to California residents who are natural persons; it does not apply to any entities (whether business, non-profit or governmental).

GIHS does NOT and will not sell your personal information in exchange for monetary consideration. 

Whenever you communicate, interact or do business with us, whether online or at GIHS, we will be collecting personal information from you or about you in the course of our interaction or dealings with you.  Likewise, whenever you visit our Website, we will collect some information from you automatically simply by you visiting and navigating through the site, and some voluntarily when you submit information to request information, products, or services, or when you sign up for our newsletter. Through our Website, we will collect information that can identify you and/or your activity.

GIHS may collect the following categories of personal information about you based on your specific transactions and interactions with the GIHS or its website. For each category of information, the business purposes for which we use the information are referenced next to category.

Personal Identifiers & Contact Information
Name, alias, address, phone number, email address, birthday
  • To process and submit membership applications, guest applications, treatments, and other appointments
  • To maintain contact information of members and guests for promotions, events, targeted advertising, or in case we need to contact you for any reasons
  • Responding to inquiries through Website; and
  • Verifying age and responding to consumer requests.

Protected Classifications
Gender, pregnancy
  • To ensure staff are apprised of any special needs or conditions when providing treatments

Health Information
Health and physical history, allergic reactions
  • To ensure staff are apprised of any special needs or conditions when providing treatments

Commercial Transactional Data
Records of products or services provided, purchasing history, financing transactions
  • To process, complete, and maintain records of transactions and treatments
  • To provide targeted advertising

Biometric Data
Voice recordings of customer calls recorded
  • For training and quality assurance
  • To respond to consumer inquiries, request for information, Customer Support online, phone calls, and in-store inquiries

Internet Activity
Date and time of your visit to this Website; webpages visited; links clicked on the Website; browser ID; browser type; device ID; operating system; form information downloaded; domain name from which our site was accessed; and cookies
  • Improving the Website experience for all visitors;
  • Understanding the demographics of our Website visitors;
  • Operating and maintaining the Website;
  • Detecting security incidents;
  • Debugging to identify and repair errors that impair existing intended functionality of the Website;
  • Protecting against malicious or illegal activity and prosecuting those responsible
  • Verifying and responding to consumer requests

Geolocation Data
IP address
  • Improving the Website experience for all visitors;
  • Understanding the demographics of our Website visitors;
  • Operating and maintaining the Website;
  • Detecting security incidents;
  • Debugging to identify and repair errors that impair existing intended functionality of the Website;
  • Protecting against malicious or illegal activity and prosecuting those responsible
  • Verifying and responding to consumer requests.

Mobile Device Data
Information collected when you navigate, access or use any of our websites via mobile device, including device type, software type
  • Improving the Website experience for all visitors;
  • Understanding the demographics of our Website visitors;
  • Operating and maintaining the Website;
  • Detecting security incidents;
  • Debugging to identify and repair errors that impair existing intended functionality of the Website;
  • Protecting against malicious or illegal activity and prosecuting those responsible
  • Verifying and responding to consumer requests.

 

How we protect the information that we collect:

The protection of the information that we collect is of the utmost importance to us and we take every reasonable measure to ensure that protection, including:

  • We keep automatically collected data and voluntarily collected data separate at all times.
  • We use internal encryption on all data stores that house voluntarily captured data.
  • We use commercially reasonable tools and techniques to protect against unauthorized access to our systems.
  • We restrict access to private information to those who need such access in the course of their duties for us.

About your personal information:

Third-party vendors

GIHC may use other companies and individuals to perform certain functions on our behalf. Examples include administering e-mail services and running special promotions. Such parties only have access to the personal information needed to perform these functions and may not use or store the information for any other purpose. You will never receive unsolicited e-mail messages from vendors working on our behalf.

Business transfers:

In the event GIHC sells or transfers a particular portion of its business assets, consumer information may be one of the business assets transferred as part of the transaction. If substantially all of the assets of the GIHS are acquired, consumer information may be transferred as part of the acquisition.

Compliance with law/safety:

GIHC may disclose specific personal information based on a good faith belief that such disclosure is necessary to comply with or conform to the law or that such disclosure is necessary to protect its members, guests, or users of our Website, the site itself, or the public.

About our Website:

Use of cookies and other tracking technologies

Cookies are small files that a Website may transfer to a user’s computer that reside there for either the duration of the browsing session (session cookies) or on a permanent (until deleted) basis (persistent cookies) that may be used to identify a user, a user’s machine, or a user’s behavior. We make use of cookies under the following circumstances and for the following reasons:

  • Compile data about site traffic to offer a better Website experience
  • Understand and save visitor preferences for future visits

Do Not Track (DNT) is a privacy preference that users can set if they do not want web services to collect information about their online activity. However, there is currently no universal standard for sending and receiving DNT signals. Due to this lack of universal standard, it would be impossible for us to promise that we comply with all known and unknown DNT standards.

Therefore, we do not respond to DNT signals or other mechanisms that provide a choice regarding the collection of personal information about activities over time and across different Web sites or online services. If a universal standard for DNT becomes available, we may revisit our DNT Policy.

External links:

Our website contain links to other sites. GIHC is not responsible for the privacy practices or the content of such websites. To help ensure the protection of your privacy, we recommend that you review the privacy policy of any site you visit via a link from our website.

Your Rights as a California Consumer:

If you are a California resident, you have the following rights:

  1. Right to Know. The right to request, up to 2 times in a 12-month period, that we identify to you (1) the categories of personal information we have collected, disclosed or sold about you in the last 12 months, (2) the categories of sources from which the personal information was collected, (3) the business purpose for which we use this information, and (4) the categories of third parties with whom we share or have shared your personal information in the last 12 months;
  2. Right to Access. The right to request, up to 2 times in a 12-month period, that we provide you access to or disclose to you, free of charge, the specific pieces of personal information we have collected about you in the last 12 months;
  3. Right to Delete. The right to request, up to 2 times in a 12-month period, that we delete personal information that we collected from you, subject to certain exceptions;
  4. Right to Opt-Out. The right to opt-out of the sale of your personal information to third parties (however, GIHC does not sell your personal information);
  5. The right to designate an authorized agent to submit one of the above requests on your behalf. See below for how you can designate an authorized agent; and
  6. The right to not be discriminated against in receiving different or less favorable pricing, service or financial incentive for exercising any of the above rights.

You can submit any of the above 4 types of consumer requests by any of the 2 options below:

  1. Submit an online request at [email protected]
  2. Call our privacy line at 951-667-4833.

How we will verify that it is really you submitting the request:

When you submit a Right to Know, Right to Access, or Right to Delete consumer request through one of the methods provided above, we will ask you to provide some information in order to verify your identity and respond to your request. Specifically, we will ask you to verify information that can be used to link your identity to particular records in our possession, which depends on the nature of your relationship and interaction with us. For example, we may need you to provide your name, address, email, phone number, last 4 digits of your SSN and your date of birth. If your sole interaction with us was as a website visitor, then in order to verify your identify, we will need to ask you to provide your name, email, phone number, IP address, device ID, browser ID, and/or cookie ID.

Responding to your Right to Know, Right to Access, and Right to Delete requests

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 45 days or 90 days total from the date we receive your request), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding our receipt of your verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

If You Have an Authorized Agent:

You can have an Authorized Agent submit a request on your behalf if you both come into a California store and provide proof of identity with a driver’s license or passport and provide your consent via mail in form for the Authorized Agent to complete your verifiable consumer request.

Questions About the Policy

If you have any questions about this privacy policy, email [email protected] or call our privacy line at 951-667-4833.

**This policy was last updated March 6, 2020.