Effective Date: 10/28/2025
Esprit Medispa, Inc.

What this policy covers:

This policy explains how we collect, use, and share your information for marketing communications (email, SMS, push, and similar).

Information we collect

• Contact details: name, email address, phone number.
• Marketing preferences & interactions: email opens/clicks, SMS engagement, campaign attribution, device/browser info (via cookies or pixels).
• Order/booking context (if applicable): basic purchase/appointment info to personalize messages.
• User-provided content: replies to our emails/texts, survey responses.

How we collect it

• Directly from you (sign-up forms, checkout, bookings, event QR codes).
• Automatically via cookies/pixels when you open our emails or visit our site.
• From our service providers (e.g., email/SMS platforms) to measure performance.

Why we use it (purposes)

• Send marketing communications you sign up for (news, product drops, promotions, events).
• Personalize content and frequency based on your preferences and interactions.
• Analyze performance and improve our campaigns.
• Maintain compliance (consent records, opt-out handling, deliverability).

Legal bases (EU/UK users)

We rely on consent for sending marketing messages and legitimate interests for analytics and frequency capping. You can withdraw consent at any time.

How to opt out / manage preferences

• Email: click “Unsubscribe” in any email or contact us at espmedispa@gmail.com
• SMS: reply STOP to cancel, HELP for help.
• Preferences: update your settings via links in our messages or email espmedispa@gmail.com
  
  Opting out of marketing will not affect important transactional or service messages (e.g., appointment reminders).

Disclosures & “sale/share” of data

We share data with service providers (e.g., email/SMS platforms, CRM, analytics, consent-management tools) solely to perform services for us and under contract.

• We do not sell personal information for monetary consideration.

Data retention

We keep marketing data while you remain subscribed and for a reasonable period afterward to maintain suppression lists and comply with law. We delete or de-identify data when no longer needed.

Your rights

Depending on where you live, you may have rights to access, correct, delete, opt out of targeted advertising/“sale/share,” or limit certain uses of sensitive data.

• California residents (CCPA/CPRA): To exercise rights (access/know, correct, delete, opt-out of sale/share), contact [espmedispa@gmail.com/213-999-7274]. We will verify your request and respond within required timelines.
• EU/UK residents (GDPR): You may withdraw consent, object, request access/erasure, or portability via espmedispa@gmail.com. You may also lodge a complaint with your supervisory authority.

Cookies & tracking

We (and our providers) use cookies and similar technologies to measure campaign performance and personalize content. Manage cookies via your browser settings.

Children

Our marketing programs are not directed to children under 13 (US) or 16 (EU), and we do not knowingly collect their data for marketing.

Security

We use reasonable technical and organizational safeguards to protect your information. No method of transmission is 100% secure.

Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new effective date.

Contact us

Questions about this policy or your data rights? Contact Esprit Medispa team at espmedispa@gmail.com, or 213-999-7274.