Privacy Policy
Privacy Policy
Last updated: August 31, 2025
1) Who we are
This Privacy Policy explains how [The Recovery Room, LLC] (“The Recovery Room,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards personal information when you visit therecoveryroomcookeville.com, create an account, purchase memberships or credits, schedule services via our online booking tool (Vagaro), or communicate with us online/offline.
Contact: [email protected]
442 West Main Street Suite B Cookeville, TN 38506
2) What we collect
We collect information directly from you, automatically from your device, and from service providers.
A. You provide
- Identity & contact: name, email, phone, address.
- Account & booking: preferred appointment times, service history, membership status.
- Payment: processed by our Vagaro system. We do not store full card numbers.
- Health & preferences: wellness goals, comfort and temperature preferences, and self-reported contraindications (e.g., pregnancy status, skin sensitivity, hypertension). We only collect what we need to operate safely.
- Communications: emails, texts (with consent), support requests, reviews.
B. Collected automatically
- Usage & device data: IP address, browser type, pages viewed, and interactions.
- Cookies & similar tech: for site functionality, analytics (Google Analytics 4, Google Tag Manager), session replay/UX diagnostics (Microsoft Clarity), and advertising/remarketing where enabled. You can manage preferences via our cookie banner and browser settings.
C. From partners
Booking platform Vagaro, payment processors, email/SMS providers, and marketing/analytics vendors supply limited data to help us confirm payments, prevent fraud, send confirmations, and measure performance.
3) How we use information
- Provide services: schedule, confirm, reschedule/cancel, and fulfill appointments and memberships.
- Process payments & prevent fraud.
- Safety & suitability: consider self-reported wellness information to help avoid contraindicated sessions.
- Customer support & communications: confirmations, reminders, receipts, service updates.
- Marketing (with your choices): newsletters, offers, remarketing. You can opt-out anytime.
- Improve our site & services: analytics, diagnostics, debugging, and quality assurance.
- Legal/compliance: recordkeeping, enforcing terms, and responding to lawful requests.
4) Legal bases (if applicable outside the U.S.)
Where required, we rely on your consent, our legitimate interests (running and improving a local wellness studio), and contract performance (bookings/memberships).
5) Health information & HIPAA
The Recovery Room is a wellness studio and does not bill health plans or act as a HIPAA “covered entity.” HIPAA generally applies to health plans, certain clearinghouses, and healthcare providers that conduct standard electronic transactions (e.g., insurance billing). We still protect any wellness information you share with us and treat it as confidential under this policy.
6) Tennessee privacy rights (TIPA)
The Tennessee Information Protection Act (TIPA) took effect July 1, 2025. It applies to businesses meeting specific thresholds (e.g., $25M+ revenue and certain consumer-count criteria). If we ever meet those thresholds, Tennessee consumers will have rights to access, correct, delete, and obtain copies of certain data, and to opt out of targeted advertising, sale of personal information, and some profiling. Regardless of strict applicability, we voluntarily honor reasonable access, correction, deletion, and opt-out requests as described in Section 10.
7) Sharing information
We share limited data with:
- Service providers: hosting (WP Engine), website tools (WordPress/Elementor), booking (Vagaro), payments (Vagaro), email/SMS platforms, analytics/UX tools (GA4, GTM, Microsoft Clarity), and security vendors—only as needed to provide services, under contract.
- Legal & safety: to comply with law, enforce our terms, or protect rights/safety.
- Business transfers: in a merger, financing, or sale of assets, your info may transfer.
We do not sell personal information in the traditional sense. If we use advertising cookies that could be considered a “sale” or “targeted advertising,” you can opt out via our cookie banner or by emailing us (see Section 10).
8) Data retention
- Client accounts & booking records: typically retained while active and for up to 7 years after your last visit (for tax, accounting, and safety recordkeeping), unless longer is required or shorter is requested and permitted.
- Marketing contacts: until you unsubscribe or we prune inactive lists.
- Analytics cookies/events: per tool defaults (e.g., GA4 standard retention).
9) Security
We use administrative, technical, and physical safeguards appropriate to our size and risk profile (HTTPS, access controls, least-privilege administrative access, vendor due diligence). No method is 100% secure.
10) Your choices & rights
- Access/Correction/Deletion: Email [email protected] to request a copy, correction, or deletion of your information (subject to legal retention needs).
- Marketing opt-out: Use unsubscribe links or email us.
- SMS consent: We only text with your prior express consent; reply STOP to opt out.
- Cookies: Adjust cookie banner settings and browser controls.
- Targeted ads/“sale”: Opt out via our cookie banner or email us (we will honor TIPA-like requests even if TIPA does not formally apply).
11) Children
Our services and website are not directed to children under 13. We do not knowingly collect personal information from children under 13 online.
12) Breach notification (Tennessee)
If a data breach materially compromises the security, confidentiality, or integrity of personal information, we will notify affected Tennessee residents without unreasonable delay and no later than 45 days after discovery, unless law enforcement requests a delay.
13) Third-party links
Our site may link to third-party sites. Their privacy practices are their own.
14) Changes
We may update this policy periodically. We’ll revise the “Last updated” date and, when required, provide additional notice. See examples of industry practice in similar studios.
15) Contact us
Questions or requests: [email protected]
or mail at:
442 West Main St. Suite B Cookeville, TN 38506