top of page

Privacy Policy

1. Introduction
Grotto LLC (“Grotto”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information we collect through our website, services, and business operations. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you have under California law.

 

2. What Information We Collect
We may collect the following categories of personal information when you visit or interact with our website, purchase memberships or services, sign up for our newsletter, fill out forms, or otherwise engage with our services:

 

CategoryExamples:

* Identifiers: Name, email address, mailing address, phone number

* Commercial Information: Records of products or services purchased, membership choices, payment information

* Internet or Other Network Activity: IP address, browser type, pages viewed, referral pages, browsing history, cookies, usage data

*Geolocation Data: Approximate location based on IP address if you permit it

*Other InformationInformation you provide directly (e.g., feedback, preferences)

 

We do not collect more sensitive personal information (e.g. Social Security numbers, health data, precise geolocation beyond what IP provides) except if required for payment or regulatory compliance.

 

3. How We Use Your Information
We use personal information for purposes such as:

  • Providing, maintaining, and improving our services (e.g. processing membership purchases, scheduling spa treatments)

  • Communicating with you (e.g. email confirmations, updates, promotional materials if you opt in)

  • Personalizing your experience (e.g. preferences, service suggestions)

  • Security, fraud prevention, and legal compliance

 

4. Sharing and Disclosure
We may share your information with:

  • Third-party service providers who help us run our business (payment processors, email services, website hosting, etc.)

  • As required by law (e.g. subpoenas, government requests, legal processes)

  • With your consent or instruction

We do not sell your personal information, and we do not share it for cross-context behavioral advertising (unless you opt in where required). If that changes, we will provide you with a “Do Not Sell or Share My Personal Information” link or mechanism.

 

5. Your Privacy Rights Under California Law
If you are a resident of California, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These may include:

  • Right to Know / Access: You can request what personal information we have collected about you, where we got it, what we use it for, and whether it has been shared or sold.

  • Right to Delete: You can request deletion of your personal information in certain circumstances.

  • Right to Correct: You can correct inaccurate information we hold.

  • Right to Opt-Out: If we ever sell or share your personal information (as defined under CA law), you have the right to opt out.

  • Right to Limit: For sensitive personal information (if we collect any), you may have the right to limit certain uses and disclosures.

  • Right to Non-Discrimination: You have the right not to be discriminated against for exercising any of these rights.

To exercise any of these rights, you can contact us via email at [insert email] or via phone at [insert phone number]. We may need to verify your identity before responding.

 

6. Cookies and Tracking Technologies
We (and our service providers) use cookies and similar technologies to:

  • Analyze usage of our website

  • Enable certain functionality (login, remember preferences)

  • Optimize our site and marketing

You may choose to disable cookies through your browser settings, though note that certain aspects of our site may not function properly if cookies are disabled.

 

7. Data Security
We employ reasonable administrative, technical, and physical measures designed to safeguard the personal information we collect. While no data system can be 100% secure, we are committed to protecting your data.

 

8. Data Retention
We keep your personal information only for as long as needed for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

 

9. Children’s Privacy
Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware we have collected information from a child under 16, we will take steps to delete it.

 

10. Changes to this Policy
We may update this Privacy Policy from time to time. Whenever we do, we will revise the “Effective Date” at the top. We encourage you to review this page periodically for changes.

 

11. Contact Us
If you have questions, concerns, or requests related to your personal information or this Privacy Policy, please contact us:

Grotto LLC
89 Broadway, Fairfax CA

415.662.3844
bathe@grottofairfax.com

​

12. Additional California-Specific Legal Notices

  • Your California residents’ rights under CalOPPA, including the right to see and change their personal information.

  • The “Shine the Light” law (CA Civil Code § 1798.83): upon request, we will provide information about how we share your personal information with third parties for marketing.

  • If applicable, a conspicuous “Do Not Sell or Share My Personal Information” link if we engage in that activity.

bottom of page