Legal

Privacy Policy

How we handle your personal information

Version 1.0 Effective: June 14, 2026 View all versions →

TL;DR — We only ever collect your name, email, phone, and address, and only to book and run your appointments (plus our newsletter if you opt in). Payments go through Square — we never see or store your card number. You can ask us to delete your data anytime; we anonymize it (keeping only a non-identifying booking record for our accounts). We use only essential cookies and never sell your data.

Spalicious Fun Bar ("we," "our," or "us"), located at 1048 Yonge Street, Toronto, ON M4W 2L4, respects your privacy. This policy explains what we collect, why, and your choices. It is written in plain language; each section opens with a short TL;DR summary.

1. Information We Collect

TL;DR — Only four things: name, email, phone, address. Nothing else.

We collect only the personal information we need to serve you:

  • Full name
  • Email address
  • Phone number
  • Address (used for at-home / mobile appointments and travel distance)

That is the complete list. We do not collect financial information ourselves (see Payments below), and we do not run advertising or tracking profiles on you.

2. Why We Use Your Information

TL;DR — To book, confirm, and deliver your appointments, and to contact you about them. Newsletters only if you opt in.

We use your information solely to:

  • Schedule, confirm, and manage your appointments;
  • Send you appointment confirmations, reminders, and changes;
  • Coordinate at-home / mobile service and calculate any travel surcharge;
  • Respond to your enquiries and provide customer support;
  • Send our newsletter — only if you have opted in (see Section 3);
  • Meet our legal, tax, and record-keeping obligations.

We do not sell, rent, or trade your personal information, and we do not share it for anyone else's marketing.

3. Newsletters & Marketing

TL;DR — Off by default. You are only added if you tick the box, and you can unsubscribe anytime.

Marketing emails (our newsletter, offers) are opt-in and off by default. We will not add you unless you expressly choose to subscribe. Every marketing email includes a one-click unsubscribe link, and you can ask us to remove you at any time. Appointment-related messages (confirmations, reminders) are not marketing and are sent as part of providing the service you requested.

4. Payments

TL;DR — Square handles all card payments. We never see or store your card number — only a secure token.

All card payments and any card-on-file are handled by Square, Inc. Your full card number never reaches our systems; we store at most a secure reference (token) provided by Square so we can process an authorized payment (for example, a cancellation fee where applicable). Square's handling of card data is governed by Square's own privacy policy.

5. Cookies

TL;DR — Only essential cookies. No analytics, no advertising, no tracking.

We use only strictly-necessary cookies required for the site to function (such as the staff login session and a small flag remembering you have seen our cookie notice). We do not use analytics, advertising, or cross-site tracking cookies. Full details are in our Cookie Policy.

6. How We Store & Protect Your Information

TL;DR — Kept on our own systems, access limited to staff who need it, protected with reasonable safeguards.

Your information is stored on our own systems with access limited to authorized staff who need it to do their job. We apply reasonable technical and organizational safeguards. No system is perfectly secure, but we take all reasonable steps to protect your information from unauthorized access, disclosure, or loss.

7. How Long We Keep It

TL;DR — While you are a client and as long as the law requires; then we anonymize.

We keep your personal information while you are an active client and for as long as we are required to for legal, tax, and accounting purposes. When it is no longer needed, or when you ask us to delete it, we anonymize it as described next.

8. Your Rights — Access, Correction & Deletion

TL;DR — Ask anytime to see, fix, or delete your data. "Delete" means we anonymize you: your name/email/phone/address are removed, and only a non-identifying booking record remains for our accounts.

You may ask us at any time to access, correct, or delete your personal information. When you request deletion, we anonymize rather than erase outright: we remove your personal identifiers (name, email, phone, address) and retain only a non-identifying record — a unique anonymized id linked to each booking's date and time, the services provided, and the amounts charged. We keep this anonymized record for legitimate financial, tax, and legal record-keeping; it can no longer be used to identify you.

To make a request, contact us using the details in Section 12. We will respond within 30 days.

9. Third-Party Services

TL;DR — The only third party is Square, for payments. We are not responsible for their practices.

The only third-party processor we use is Square, Inc. (payments). When you provide card details, they are handled by Square under Square's own privacy policy. We are not responsible for the data practices of third-party platforms.

10. Children's Privacy

TL;DR — Our site isn't aimed at children under 13, and we don't knowingly collect their data.

Our website is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will promptly anonymize or remove it.

11. Changes to This Policy

TL;DR — We may update this policy anytime; every version is dated, kept forever, and viewable on the site.

We may amend this Privacy Policy at any time. The version and effective date shown at the top always reflect the current policy. We keep every prior version and make them available on our Document History page.

12. Contact Us

TL;DR — Email or call us with any privacy question or request.