Privacy information

Reservations and gifts

We collect the contact, appointment, gift-recipient, and optional gift-note information you submit so Rewind can take payment, reserve or redeem a visit, send confirmations, and support the booking. Stripe handles card checkout; this application stores payment references and status, not full card details. Authorized staff and configured service providers may process the information needed for those operations.

Optional advertising measurement

Meta and Google advertising tags are off until you select “Accept optional tags” on an acquisition page. If you accept, those browser tags may measure page visits and reservation steps. For a reservation, our server may also send Meta an InitiateCheckout or Purchase event with a random booking identifier, ad-attribution fields, and email and phone transformed with SHA-256 hashing. Technical request details, such as a user-agent value, may also be included. The event reports the amount collected at reservation, not the full service price.

If you decline or have not chosen, the application does not schedule or send those optional server-side Meta events and does not load the Meta or Google browser tags. The preference present when a Stripe checkout is created controls server-side measurement for that reservation. You can change your choice using “Privacy choices” on the home, offer, or booking page. The preference cookie stores only a versioned granted-or-declined value.

Operational security

The public write endpoints require same-origin JSON requests and are designed to reject oversized or malformed input. Production launch also requires an operator attestation that edge rate and bot controls were verified; the application attestation does not itself provide or replace those edge controls.

Questions

Contact Rewind Head Spa at info@rewindheadspa.com or (425) 761-4603 with questions about a reservation or how its information is handled.