Privacy Policy

Last Updated: February 2026

This Privacy Policy describes how Knot Springs, operated by Bob’s Spa LLC (“Company,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information of visitors and customers who use knotsprings.com (the “Website”).

This Policy is intended to comply with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

1. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked to an individual or household (“Personal Information”).

Categories of Personal Information Collected

We may collect the following categories:

  • Identifiers
    Name, email address, phone number, billing address, IP address

  • Commercial Information
    Booking history, membership status, gift card purchases, retail purchases

  • Financial Information
    Payment method details (processed securely through third-party payment processors; we do not store full credit card numbers)

  • Internet or Network Activity
    IP address, browser type, device information, pages viewed, interactions with the Website

  • Geolocation Data
    General location inferred from IP address

  • Customer Communications
    Messages, inquiries, reviews, or feedback submitted to us

We do not knowingly collect personal information from children under 13.

2. Sources of Personal Information

We collect Personal Information from:

  • You directly (when you make a booking, purchase, or contact us)

  • Automatically (via cookies and similar technologies)

  • Service providers (payment processors, booking platforms, analytics providers)

3. How We Use Personal Information

We use Personal Information to:

  • Process bookings, memberships, gift cards, and retail sales

  • Provide and manage services

  • Communicate with you about your account or purchases

  • Improve Website functionality and user experience

  • Detect security incidents and prevent fraud

  • Comply with legal obligations

We do not use Personal Information for purposes materially different from those disclosed without your consent.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable core Website functionality

  • Analyze usage and performance

  • Improve services and user experience

You may control cookies through your browser settings. Disabling cookies may affect Website functionality.

5. Disclosure of Personal Information

We may disclose Personal Information to:

  • Service Providers
    Payment processors, booking software, email platforms, analytics providers

  • Legal and Compliance
    When required by law or to protect rights, safety, or property

  • Business Transfers
    In connection with a merger, sale, or acquisition

We do not sell Personal Information.

6. Sale or Sharing of Personal Information

Under California law, “selling” or “sharing” includes disclosure for cross-context behavioral advertising.

  • We do not sell Personal Information

  • We do not share Personal Information for cross-context behavioral advertising

If this changes, we will update this Policy and provide required opt-out mechanisms.

7. Sensitive Personal Information

We do not use or disclose Sensitive Personal Information for purposes beyond those permitted by the CPRA.

8. Data Retention

We retain Personal Information only for as long as reasonably necessary to:

  • Fulfill the purposes described in this Policy

  • Comply with legal, accounting, or regulatory obligations

9. Your California Privacy Rights

If you are a California resident, you have the right to:

  • Know what Personal Information we collect, use, and disclose

  • Access your Personal Information

  • Delete your Personal Information (subject to legal exceptions)

  • Correct inaccurate Personal Information

  • Opt Out of sale or sharing (if applicable)

  • Limit the use of Sensitive Personal Information (if applicable)

  • Not be discriminated against for exercising your rights

10. How to Exercise Your Rights

You may submit a request by:

  • Emailing us at: [Insert Privacy Email]

We may need to verify your identity before processing your request.

You may use an authorized agent to submit requests on your behalf, as permitted by law.

11. Response Timing

We aim to respond to verified consumer requests within 45 days, as required by law. If additional time is needed, we will notify you.

12. Security

We use reasonable administrative, technical, and physical safeguards to protect Personal Information. However, no method of transmission or storage is completely secure.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted with a revised “Last Updated” date.

14. Contact Information

If you have questions about this Privacy Policy or your privacy rights, contact us at:

Knot Springs
Operated by Bob’s Spa LLC
Website: https://knotsprings.com
Email: hello@knotsprings.com