Privacy Policy

The Brooklyn Spa, Fort Hamilton Parkway, Brooklyn, New York. If you have a question about anything on this page, write to mybrooklynspa@gmail.com and a person will answer it.

When you book, or write to us through the site: your name, telephone number and email address, the day and time you would like, how many guests are coming, and anything you tell us in a note.

When you agree to our Waiver & House Rules: the fact that you agreed, the moment you did, and the IP address the agreement came from. That record is how an electronic signature is evidenced, which is the only reason we keep it.

When you pay: the amount, the method, and a record of the transaction. If you pay by Zelle, the screenshot you upload as proof of it.

When you simply visit: page views, counted by Vercel Analytics without cookies and without identifying you.

Your card number. Card payments are handled end to end by Stripe, on Stripe's own form, and the details never reach our servers at any point. We are told whether the payment succeeded and nothing more.

To take your booking and confirm it, to reach you about it, to take payment for it, and to keep the ordinary business records we are required to keep. We do not use it for anything else.

Only the services that make the booking work, and each sees only the part it needs: Supabase stores our database and uploaded files; Vercel hosts the site; Stripe takes card payments; Resend sends our email; WhatsApp, which is Meta, carries our messages when you choose that; Google Calendar holds the appointment in the owner's own calendar.

We do not sell your information. We do not share it for advertising. We do not hand it to anyone else, except where the law requires it of us.

Booking and payment records for as long as accounting and tax require. Enquiries that never became a booking are cleared out periodically. Ask us to delete what we hold about you and we will, apart from anything we are obliged to keep.

Write to mybrooklynspa@gmail.com and you can ask what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop messaging you. None of it costs anything and none of it needs a reason.

The spa is for adults. Guests under 18 are admitted only under the supervision of a parent or legal guardian, as the Waiver & House Rules set out. We do not knowingly collect information from a child directly; if you believe we have, write to us and we will remove it.

If this policy changes, the date at the top changes with it.