PRIVACY POLICY

Last Updated: September 27, 2026

1. Introduction

This Privacy Policy describes how Lovewood LLC, doing business as Buffalo Baths ("Buffalo Baths," "we," "us," or "our") collects, uses, discloses, and otherwise handles personal information when you:

  • visit our website;

  • make or manage a reservation;

  • make a purchase;

  • complete a Guest Intake Form;

  • execute the Guest Participation Agreement;

  • communicate with Buffalo Baths;

  • visit the Buffalo Baths facilities; or

  • otherwise interact with us.

Collectively, these interactions are referred to as the "Services."

Please read this Privacy Policy carefully. By using the Services or voluntarily providing personal information to Buffalo Baths, you acknowledge the practices described in this Privacy Policy.

2. Information We Collect

The personal information Buffalo Baths collects depends on how you interact with us.

A. Contact Information

We may collect:

  • name;

  • preferred name;

  • email address;

  • telephone number; and

  • other contact information voluntarily provided.

B. Reservation Information

We may collect:

  • reservation dates and times;

  • number of guests;

  • service selections;

  • booking preferences;

  • reservation history; and

  • other information reasonably necessary to administer a reservation.

C. Transaction Information

We may collect information concerning reservations, purchases, refunds, credits, gift certificates, packages, or other transactions.

D. Payment Information

Payments may be processed through third-party payment processors. Depending on the system used, Buffalo Baths may receive transaction information such as the amount, payment status, payment method, or partial payment identifiers without receiving or storing complete payment-card information.

E. Guest Agreement Information

Buffalo Baths may collect and retain information contained in or associated with a signed Guest Agreement, including the guest's:

  • name;

  • signature;

  • date;

  • email;

  • telephone number; and

  • emergency-contact information.

The existing Guest Agreement expressly collects those categories at signature.

F. Guest Intake Information

Buffalo Baths may collect information that you provide through an intake form, including information relating to:

  • accessibility needs;

  • allergies or sensitivities;

  • preferences;

  • safety concerns; or

  • other circumstances relevant to your visit.

G. Health-Related Information Voluntarily Provided by Guests

Buffalo Baths is not a healthcare provider and does not seek to obtain comprehensive medical histories.

The Guest Agreement requires guests to independently evaluate their health and ability to participate and identifies health circumstances that may make consultation with a physician appropriate.

A guest may nevertheless voluntarily provide health-related information when the guest believes it is relevant to:

  • an accessibility or accommodation request;

  • an allergy or sensitivity;

  • a health or safety concern; or

  • another circumstance affecting the guest's visit.

Please provide only information reasonably relevant to the purpose for which you are providing it.

H. Communications

We may collect information contained in emails, messages, inquiries, complaints, feedback, customer-service requests, or other communications with Buffalo Baths.

I. Marketing Preferences

If Buffalo Baths offers newsletters or other promotional communications, we may collect your contact information and communication preferences.

3. Information Collected Automatically

The Buffalo Baths Website and service providers supporting it may automatically collect information concerning your device and use of the Website. Depending on the technologies actually used, this may include:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • approximate location derived from an IP address;

  • referring website;

  • pages visited;

  • links selected;

  • date and time of visits;

  • Website navigation or usage information; and

  • cookie or similar identifiers.

4. Cookies and Similar Technologies

The Buffalo Baths Website and certain third-party service providers may use cookies and similar technologies to operate their services, maintain security, remember preferences, and understand Website traffic and performance.

Buffalo Baths currently uses Squarespace to host and operate the Website and for email communications. Squarespace may use cookies and similar technologies in connection with these services.

Buffalo Baths also uses third-party platforms to provide certain services, including Goldie for reservations, scheduling, payments, SMS messages and reminders, and certain automated email communications; Stripe to process payments; and HappyWaiver to manage participant waivers. When you interact with these services, those providers may use cookies or similar technologies and collect information in accordance with their own privacy practices.

Most browsers allow users to control or disable cookies through their browser settings. Disabling certain cookies may affect the functionality of the Website or third-party services used in connection with Buffalo Baths.

5. Information Received from Third Parties

Buffalo Baths may receive information from third parties involved in providing its Services, including:

  • booking and reservation platforms;

  • payment processors;

  • Website providers;

  • email and communication services;

  • analytics providers, if used;

  • social media platforms; and

  • other vendors supporting Buffalo Baths operations.

Third parties may separately collect and process information under their own privacy policies.

6. How Buffalo Baths Uses Personal Information

Buffalo Baths may use personal information to:

  • administer reservations;

  • provide Services;

  • process transactions;

  • send confirmations and reminders;

  • communicate with guests;

  • administer Guest Agreements and intake forms;

  • respond to accessibility or accommodation requests;

  • respond to questions, concerns, complaints, or feedback;

  • facilitate guest and Facility safety;

  • respond to emergencies;

  • maintain appropriate business records;

  • protect Buffalo Baths, guests, personnel, neighbors, and property;

  • prevent fraud, unlawful conduct, misuse, or security incidents;

  • operate and improve the Website;

  • enforce Buffalo Baths agreements and policies;

  • comply with legal obligations;

  • establish, exercise, or defend legal claims;

  • provide marketing communications when permitted by law; and

  • perform another purpose disclosed at the time information is collected or authorized by you.

7. Sensitive Information and Data Minimization

Buffalo Baths seeks to limit collection of sensitive personal information to information reasonably necessary for its operations.

Buffalo Baths does not require guests to provide a comprehensive medical history as part of its standard intake process.

The Guest Agreement instead allocates responsibility to the guest to independently evaluate their health and ability to participate.

When voluntarily providing health, accessibility, allergy, sensitivity, or similar information, guests should provide only information reasonably necessary for Buffalo Baths to understand and address the relevant concern.

Buffalo Baths may use voluntarily provided sensitive information to:

  • respond to the guest's request;

  • facilitate reasonable accommodations;

  • administer a reservation or visit;

  • address a health or safety concern;

  • respond to an emergency;

  • comply with legal obligations; or

  • establish or defend legal claims.

Providing health-related information to Buffalo Baths does not establish a healthcare provider-patient relationship and does not constitute a request for medical advice.

8. How Buffalo Baths Discloses Personal Information

Buffalo Baths may disclose personal information as described below.

A. Service Providers

Buffalo Baths may disclose information to vendors that perform services on its behalf, including:

  • booking services;

  • payment processors;

  • Website providers;

  • email and communication services;

  • technology providers;

  • analytics providers, if used;

  • professional advisors; and

  • other operational vendors.

B. Emergency and Safety Disclosures

Buffalo Baths may disclose personal information when reasonably necessary to respond to a medical or other emergency, including disclosures to emergency medical services, law enforcement, or other responders. This is consistent with the Guest Agreement's emergency medical authorization.

C. Legal Purposes

Buffalo Baths may disclose personal information when reasonably necessary to:

  • comply with law;

  • respond to valid legal process;

  • respond to governmental or regulatory requests;

  • investigate unlawful conduct or security incidents;

  • protect rights, safety, or property;

  • enforce agreements or policies; or

  • establish, exercise, or defend legal claims.

D. Business Transactions

Information may be disclosed or transferred as part of a merger, acquisition, reorganization, financing, sale of assets, or similar transaction involving Lovewood LLC or Buffalo Baths.

E. With Consent or Direction

Buffalo Baths may disclose information when you authorize or direct it to do so.

9. Payment Processing

Buffalo Baths may use third-party payment processors. Payment information submitted directly to an independent processor is subject to that provider's privacy and security practices.

10. Marketing Communications

If you subscribe to marketing communications, Buffalo Baths may send information concerning its services, events, updates, or promotions.

You may unsubscribe from promotional email communications using the unsubscribe mechanism provided in the message.

Buffalo Baths may continue sending transactional or administrative communications concerning reservations, safety matters, transactions, policies, or other aspects of your relationship with Buffalo Baths.

11. Data Retention

Buffalo Baths may retain different categories of information for different periods on operational, legal, tax, insurance, safety, and dispute resolution needsRelevant purposes may include:

  • administering Services;

  • maintaining reservation and transaction records;

  • maintaining signed Guest Agreements;

  • maintaining intake documentation;

  • complying with legal, accounting, insurance, or regulatory obligations;

  • resolving disputes;

  • enforcing agreements; and

  • establishing or defending legal claims.

Retention periods may differ depending on the nature and purpose of the information. When information is no longer reasonably necessary, Buffalo Baths may delete, destroy, or deidentify it in accordance with applicable law and its practices.

12. Data Security

Buffalo Baths uses reasonable administrative, technical, organizational, and physical safeguards designed to protect personal information.

No electronic transmission or storage system can be guaranteed to be completely secure. Buffalo Baths therefore cannot guarantee the absolute security of personal information.

If Buffalo Baths becomes aware of a security incident involving personal information, it will take reasonable steps to investigate and respond and will provide any notifications required by applicable law.

13. Photography and Recording

The Guest Agreement contains Buffalo Baths' guest photography and privacy rules. Among other things, guests may not photograph, record, livestream, or otherwise capture images or audio of other guests without permission, and Buffalo Baths will not use identifiable photographs or videos of guests for promotional purposes without guest consent except as otherwise permitted by law.

This Privacy Policy does not alter those rules.

14. Third-Party Websites and Services

The Buffalo Baths Website may contain links to or integrations with independently operated third-party services.

This Privacy Policy does not control information independently collected by those third parties. We encourage users to review the privacy practices of third-party services they use.

15. Minors

Eligibility for use of Buffalo Baths facilities is governed by the Guest Agreement. The Guest Agreement generally requires guests to be at least twenty-one (21) years old, while permitting a person under twenty-one to use the Facilities only when expressly authorized by Facility policy and accompanied by a parent or legal guardian. Buffalo Baths does not knowingly solicit personal information from children in violation of applicable law.

16. Privacy Choices

Depending on the circumstances and applicable law, you may:

  • unsubscribe from promotional emails;

  • manage cookies through available browser or Website controls;

  • request correction of inaccurate contact information;

  • ask Buffalo Baths questions concerning information you previously provided; or

  • request deletion of personal information, subject to information Buffalo Baths may lawfully retain.

Buffalo Baths will honor privacy rights required by applicable law.

17. Sale of Personal Information

Buffalo Baths does not sell personal information or use personal information for targeted advertising. 

18. Changes to This Privacy Policy

Buffalo Baths may periodically revise this Privacy Policy to reflect changes in its Services, technologies, business practices, or legal requirements.

The current version will identify its "Last Updated" date.

19. Contact Us

Questions concerning this Privacy Policy or Buffalo Baths' privacy practices may be directed to:

Lovewood LLC
d/b/a Buffalo Baths
Portland, Oregon
hello@buffalobaths.spa