Privacy Policy

1. Scope

This Privacy Policy applies to personal information we collect from:

• prospective members and website visitors;
• current and former members;
• authorized persons added to a membership;
• appointment-based clients, if we offer appointment-based services;
• people who call, text, email, chat with, or submit a form to us;
• people who leave reviews or testimonials; and
• any other individuals who interact with our Services.

This Privacy Policy does not replace notices given when we collect information, in a Member Agreement, in an application or health declaration, or in separate terms for a specific service. If one of those documents conflicts with this Privacy Policy on a specific point, the more specific document controls for that point.

This Privacy Policy does not apply to employees or contractors acting as workers. They receive a separate notice.

2. Information We Collect

We collect the following categories of personal information, depending on how you interact with us.

A. Information you provide directly

• name, email address, mobile or other phone number, and mailing or billing address
• date of birth or confirmation that you are 18 or older
• the membership plan you choose
• the name, email address, and phone number of an authorized person you add to a 12-session membership, and that person's own application information
• booking, scheduling, and session history
• payment information, which our payment processor collects and handles (we do not store full card numbers on our own systems)
• your answers on the application and health declaration, including whether you confirm you are okay to use the Studio Reset services, and any medical conditions, implanted devices, pregnancy, seizure or light-sensitivity history, or other health facts you tell us (see Section 8)
• written clearance from a healthcare provider, if we ask for it
• emergency contact information and essential medical details you choose to give us
• signed Member Agreements and acknowledgments
• communication preferences and consent selections
• form responses, chat transcripts, comments, reviews, testimonials, and messages
• photos or videos you voluntarily share or authorize us to use
• records you submit with a request, inquiry, or complaint

B. Information collected automatically

When you use our website, forms, or booking system, we and our vendors may collect:

• IP address, browser type, device identifiers, and operating system
• pages viewed, links clicked, and time on page
• referral URL
• approximate location derived from your IP address
• session activity and timestamps
• cookies, pixels, tags, and similar technologies

C. Information collected through the studio and our systems

• digital key and door access events logged by our access system, VIZpin, including the date, time, and key used to unlock the studio
• booking start and end times
• footage from the security camera outside the studio entrance (see Section 7)
• incident, damage, or safety reports
• recordings, transcripts, and summaries of calls, texts, and chats handled by our staff or our AI assistants (see Sections 4 and 16)

D. Information from third parties

We may receive information from:

• our customer relationship management platform, HighLevel (GoHighLevel), and the booking, forms, and messaging tools it provides
• our payment processor, Stripe
• our access system, VIZpin
• phone, text, email, chat, and voice AI vendors
• advertising and analytics providers
• social media platforms, review sites, and referral sources
• publicly available sources

E. Sensitive information

Some of this information is sensitive under certain laws. That includes health information, scheduling details that show when you will be at a specific place, financial account information, and government-issued identifiers if we use them to verify age. We collect and use sensitive information only as reasonably necessary to provide the Services safely, as the law permits, and with your consent where the law requires it.

We do not collect biometric identifiers such as fingerprints or facial geometry, for studio access or any other purpose. If that changes, we will update this Privacy Policy and obtain any consent the law requires before we begin.

3. How We Use Personal Information

We use personal information to:

• review your application and decide whether to approve your membership and your digital key
• create and manage your membership account
• schedule, confirm, remind you of, and manage bookings and track the sessions in your account
• provide secure digital access and confirm that only approved members and authorized persons enter
• screen for safety concerns and help you use the studio's equipment appropriately
• process enrollment fees, recurring membership billing, failed-payment retries, refunds, and adjustments
• respond to inquiries and requests
• send confirmations, reminders, account notices, and follow-ups
• maintain the safety and security of the studio, members, and property
• prevent fraud, unauthorized access, and misuse of keys or memberships
• comply with legal obligations and respond to lawful requests
• run internal reporting, analytics, and service improvement
• tell you about memberships, services, promotions, and events, where the law allows and subject to your consent choices
• place calls and send messages as described in Section 4, subject to consent and opt-out rules

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. A person reviews every membership, key, and billing decision that materially affects you.

4. Calls, Texts, AI Voice, and Voicemail

If you give us a phone number, we may contact you at that number, subject to your consent choices and applicable law.

These communications may include:

• application and membership follow-up
• booking confirmations, reminders, and cancellation notices
• door access and digital key instructions
• billing, renewal, and failed-payment notices
• safety, maintenance, closure, or emergency notices
• promotional messages, only if you have given separate consent where the law requires it

They may be sent or placed by:

• Studio Reset staff;
• our service providers acting for us;
• automated dialing and messaging technology;
• prerecorded or artificial voice technology;
• our AI voice assistant, "Jade," who answers the studio phone and can book and cancel sessions and send you links by text;
• our AI text and web-chat assistant; and
• voicemail messages.

We do not use every method in every case. Where the law requires consent, we ask for it first. Consent is not a condition of purchase or service.

Call recording and transcription

Calls with us, including calls answered by the AI voice assistant, may be recorded, transcribed, and summarized for quality assurance, booking accuracy, training, and record keeping. Washington law requires the consent of all parties to record a private conversation. If a call is recorded, we tell you at the start of the call, and by continuing the call you consent to the recording. If you do not want to be recorded, tell us and we will help you another way, such as by email or text.

Opt-out and revocation of consent

You may opt out of text messages at any time by replying STOP. You may also revoke consent to calls or texts, including automated, prerecorded, and AI-generated voice communications, by any reasonable method that clearly communicates your request. You can do this by contacting us at the details in Section 19.

We honor opt-out and revocation requests as the law requires. We may treat a request to stop one category of communication as a request to stop similar non-emergency automated communications to that number.

If you opt out of marketing messages, we may still send messages the law permits, such as booking confirmations, door access instructions, billing notices, safety alerts, and legally required notices.

5. Consent Records

Where we rely on consent for communications or data practices, we keep records of:

• the form, page, checkbox, keyword, or signed document where consent was collected;
• the date and time of consent;
• the wording presented when you consented;
• the phone number or email address provided;
• IP address and other submission data; and
• later preference changes and opt-out requests.

We keep these records for compliance, audit, dispute-resolution, and business continuity purposes.

6. Cookies, Analytics, and Advertising

We and our service providers use cookies and similar technologies to:

• remember preferences;
• measure traffic and campaign performance;
• understand how people use the website;
• improve design and function;
• support security and troubleshooting; and
• deliver or measure advertising, where used.

You can manage cookies in your browser settings. Some browsers send a "Do Not Track" signal. There is no uniform industry standard for these signals, so our Services may not respond to them in every case. Where the law requires, we honor recognized opt-out preference signals such as the Global Privacy Control.

We may use analytics and advertising tools, such as Google Analytics or Meta Pixel, that collect browsing information over time and across websites. Where the law requires, we give additional notice and choices.

We do not place advertising pixels or trackers on pages where you enter health information, and we do not use health information for targeted advertising.

7. Studio Access, Cameras, and Facility Records

Studio Reset is a private, self-guided studio that members enter with a digital key, often with no staff present. To protect members and property:

• Access logs. VIZpin records when the studio is unlocked and which key was used. We use these records to confirm that only approved members enter, to investigate unauthorized access or damage, and to respond to safety incidents.
• Security camera. One security camera watches the outside of the studio entrance and records activity at the door. Once you enter, you have privacy and peace: there are no cameras inside the studio, the suite, the restroom, or anywhere members change clothing. We post a sign where the camera operates. Footage is kept for a limited time and reviewed only for security, safety, incident investigation, or as the law requires.
• Safety records. If an injury, safety incident, or emergency occurs, we may write an incident report that includes your name, contact details, what happened, and the emergency response.

We do not use camera footage or access logs for marketing, and we do not sell them.

8. Consumer Health Data Privacy Policy

This section is our Consumer Health Data Privacy Policy under the Washington My Health My Data Act (chapter 19.373 RCW) and similar laws in other states. It covers "consumer health data," which means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status.

A. Consumer health data we collect

Depending on how you use the Services, we collect:

• your answer to the health declaration on the application, which asks you to confirm that you are okay to use the Studio Reset services;
• health conditions you tell us about, including heart conditions, seizures or light sensitivity, pregnancy, and pacemakers or other implanted devices;
• written clearance from your healthcare provider, if we ask for it because of a condition you reported;
• emergency contact and essential medical details you choose to give us, such as medications;
• your wellness goals; and
• information about which studio services you use and how often, such as red light therapy, infrared, PEMF, the vibration platform, chair massage, and guided meditation.

We collect this information from you. We do not buy consumer health data, and we do not infer health information from your online browsing.

B. Why we collect it

We collect and use consumer health data only to:

• decide whether you may safely use the studio, and review your application;
• provide, schedule, and personalize the services you ask for;
• respond to emergencies and document safety incidents;
• keep records the law requires or that we need to defend legal claims; and
• communicate with you about the services you use.

C. Your consent

By checking the health declaration, submitting an application, or sending us health information, you consent to our collecting and using that information for the purposes in this Section. We collect only what we need to provide the services you request. We ask for your separate, specific consent before we share consumer health data for any other purpose, and we do not sell it.

D. Sharing and the third parties involved

We share consumer health data only with:

• HighLevel (GoHighLevel), the platform that stores your application and forms and runs our messaging, as our processor;
• the studio owner and the staff or contractors who need it to approve memberships and keys and to support your services;
• emergency responders or medical providers if you have a medical emergency; and
• professional advisors, insurers, and legal authorities when the law requires or to defend legal claims.

Each service provider that handles consumer health data for us is bound by contract to use it only for our purposes.

We do not sell consumer health data. We do not share consumer health data with third parties for their own marketing. We do not use consumer health data for targeted advertising.

We do not use a geofence around any location that provides health care services, and we do not use a geofence to identify or track you or send you messages based on your health.

E. Your consumer health data rights

You have the right to:

• confirm whether we collect, share, or sell your consumer health data, and access it, including a list of all third parties and affiliates with which we have shared or sold it and their contact information;
• withdraw your consent to our collection and sharing of your consumer health data;
• ask us to delete your consumer health data; and
• not be discriminated against for using these rights.

To use these rights, contact us at the details in Section 19. We respond within 45 days. We may extend that period once by another 45 days where reasonably necessary, and we will tell you why. When you ask us to delete, we delete the data from our active systems and tell our processors to delete it, and we delete archived and backup copies within six months after we verify your request.

If we deny your request, you may appeal by contacting us and saying you want to appeal. We respond to appeals within 45 days. If we deny your appeal, you may contact the Washington State Attorney General at www.atg.wa.gov to submit a complaint.

If you withdraw consent or ask us to delete your health declaration, we may no longer be able to approve your membership or let you use certain equipment safely.

F. HIPAA

Studio Reset is a wellness studio. It is not a health care provider or health plan and is not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). This Privacy Policy and state law protect the health information you share with us, not HIPAA.

9. Children's Privacy

Studio Reset memberships and services are for adults 18 and older. An authorized person added to a membership must also be 18 or older. Our Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. We never knowingly collect personal information online from a child under 13.

If you believe a minor gave us personal information, contact us and we will delete it as the law requires.

10. Disclosing Personal Information

We may disclose personal information to:

• service providers and contractors that help us host our website, run our forms and booking system, control studio access, process payments, send communications, provide analytics, store records, secure our systems, and operate the Services, including HighLevel (GoHighLevel), Stripe, and VIZpin;
• communications vendors that deliver calls, texts, AI voice and chat, email, and related tools for us;
• affiliated businesses under common ownership with Majestic Wellness LLC, where the law and this Privacy Policy allow;
• professional advisors such as attorneys, accountants, auditors, insurers, and consultants;
• emergency responders and medical providers in a medical emergency at the studio;
• government authorities, courts, law enforcement, or regulators when required or permitted by law;
• parties to an actual or proposed merger, financing, reorganization, asset sale, or similar transaction; and
• other parties at your direction or with your consent.

We do not sell or share your personal information. We disclose it only to the recipients above and only for the purposes in this Privacy Policy. We do not sell personal information for money, and we do not share it with third parties for their own marketing.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Some privacy laws define "sale," "sharing," or "targeted advertising" broadly. If our use of advertising or analytics tools falls within those definitions under applicable law, we will give the notices and rights the law requires.

11. Data Retention

We keep personal information as long as reasonably necessary for the purposes in this Privacy Policy, including to:

• provide services and communications;
• keep membership, billing, booking, and application records;
• meet legal, tax, accounting, insurance, and regulatory duties;
• resolve disputes and defend legal claims;
• enforce agreements; and
• keep safety, audit, and compliance records.

As a general guide:

• Membership, billing, and agreement records are kept for the life of your membership plus the period that statutes of limitation and tax law require.
• Health declarations and related forms are kept while you are an active member and for the period needed to defend claims. We then delete or de-identify them.
• Security camera footage from the entrance camera is kept for up to 30 days on a rolling basis unless we preserve it for an incident, claim, or legal request.
• Door access logs are kept for a limited period for security.
• Call recordings, transcripts, and AI conversation summaries are kept as long as needed to serve you, keep accurate records, and meet legal duties.
• Consent and opt-out records are kept as long as needed to show compliance.

Retention periods vary by type of data, legal requirement, and operating need. When personal information is no longer reasonably necessary, we delete, de-identify, or securely dispose of it as the law requires.

12. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. These include access controls, encryption in transit, vendor review, and limiting access to people who need it. Payment card information is handled by PCI-DSS compliant payment processors.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You must keep your booking account and digital key secure. Never share your key or credentials with anyone, including friends and family. Only the authorized person on your membership may use a key of their own, and only after the studio owner approves it.

If a data breach affects your personal information, we will notify you and the proper authorities as the law requires.

13. Your Privacy Rights

Depending on your state and subject to legal exceptions, you may have the right to:

• know whether we process your personal information;
• access the personal information we hold about you;
• ask us to correct inaccurate personal information;
• ask us to delete personal information;
• obtain a copy of certain personal information in a portable format;
• opt out of certain profiling, targeted advertising, sale, or sharing, where applicable;
• limit the use or disclosure of sensitive personal information, where applicable;
• appeal a denial of a privacy request, where the law requires; and
• not be discriminated against for using your privacy rights.

Wherever you live, you may always:

• update your contact information and communication preferences by contacting us;
• opt out of marketing email using the unsubscribe link;
• opt out of text messages by replying STOP; and
• ask for a copy of the application, agreement, and acknowledgment documents you signed.

To use your rights, contact us at the details in Section 19. We may need to verify your identity and authority first. You may use an authorized agent, and we may ask for proof of the agent's authority. We respond within the time the law requires, generally 45 days.

Some rights may not apply to information we must keep for legal, safety, billing, or dispute-resolution reasons.

14. State-Specific Disclosures

Washington residents

Your consumer health data rights under the Washington My Health My Data Act are in Section 8. Washington's rule that all parties must consent to recording a private conversation is addressed in Section 4.

California residents

If the California Consumer Privacy Act applies to us, California residents have the rights in Section 13, including the right to know, delete, correct, and opt out of sale or sharing, and the right to limit the use of sensitive personal information. In the last 12 months we collected the categories of personal information in Section 2 for the purposes in Section 3 and disclosed them to the recipients in Section 10. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We have no actual knowledge that we sell or share the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes beyond those the CCPA allows.

Nevada residents

We do not sell covered information as Nevada law defines it. Nevada residents may ask us to opt out of any future sale by contacting us.

Residents of other states

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and other states with comprehensive privacy laws may have the rights in Section 13 to the extent those laws apply to us. If your state gives you rights not fully described here, contact us and we will give you the notice for your state.

15. Text Message Program Disclosures

Studio Reset offers SMS and MMS messaging for appointment, account, and service texts, such as booking confirmations and reminders, door access and account notices, billing notices, and customer service replies. We send promotional texts only if you give separate consent. By giving your mobile number and opting in, you agree to receive these messages from Studio Reset and its service providers at that number.

Where we offer an SMS or MMS messaging program:

• message frequency may vary
• message and data rates may apply
• consent is not a condition of purchase or service
• reply STOP to opt out
• reply HELP for help, where supported
• wireless carriers are not liable for delayed or undelivered messages

After you reply STOP, you receive one final confirmation message and no more messages from that program unless you opt in again. You can also opt out by contacting us at the details in Section 19. Opting out of promotional messages does not stop service messages such as booking confirmations, access instructions, and billing notices unless you ask us to stop those too.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted.

We may use third-party messaging platforms to operate these programs.

16. AI and Automated Communications

We use automation, including AI tools, to support communications, scheduling, message routing, reminders, chat help, call answering, and related operations. In particular, we use:

• An AI voice assistant, "Jade." She answers the studio phone, answers questions about memberships and services, books and cancels sessions, and sends links by text. She identifies herself as automated where the law requires. You can ask for a person at any time.
• An AI text and web-chat assistant on our website and messaging channels that answers questions and helps with booking.
• Automated reminders and follow-ups by text, email, or phone.

The AI assistants may record, transcribe, and summarize conversations as described in Section 4. We store those records and summaries in our customer relationship management platform, HighLevel (GoHighLevel), and with our communications vendors. We use them to complete your request, improve service quality, and keep accurate records.

AI assistants do not give medical advice. Direct health questions to a qualified health care professional. We do not use AI by itself to make legally significant decisions about individuals. A person reviews every membership, key, or billing decision that materially affects you.

17. Third-Party Links

Our Services may link to or work with third-party websites, booking and payment tools, maps, calendars, videos, review platforms, or social media features. We are not responsible for the privacy, security, or content practices of third parties. Review their privacy policies before you use them.

18. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date and take any other steps the law requires. That may include telling active members by email or text before a material change takes effect. If you keep using the Services after a change takes effect, the updated Privacy Policy applies to you, to the extent the law allows. For material changes to how we handle consumer health data, we will obtain your consent where the law requires it.

19. Contact Us

For questions about this Privacy Policy, to use your privacy rights, or to submit a consumer health data request, contact us:

Majestic Wellness LLC, doing business as Studio Reset
Attn: Privacy
23 E Crawford St
Deer Park, WA 99006

• Email: admin@mystudioreset.com
• Phone: (509) 300-5575
• Website: https://mystudioreset.com