Privacy notice

About this notice

This notice explains what RESTŌR Rewards collects and why. It sits alongside RESTŌR Medical Spa’s Privacy Policy, which continues to apply. It covers two groups of people, who are treated differently: partners, and the people partners refer.

If you are a partner

What is collected: your name, email address, phone number, date of birth, business name if you give one, the kind of partner you are, a password if you set one, which is stored only in a form that cannot be read back, and the messages you send RESTŌR through the portal.

We ask for your date of birth to set up your RESTŌR patient record and to confirm you are 18 or over.

What is recorded as you use it: when your link or QR code is opened, and how many times.

Why: to run your account, to work out your thank-yous, to release them, and to contact you about them.

What you see: for each person you sent, their first name and last initial and whether they booked, came in or joined, and your thank-yous. You never see a treatment, a price paid, or any health detail.

If a partner referred you

What is collected: when you book or buy at RESTŌR through a partner’s link or QR code, the booking carries that partner’s code. RESTŌR’s clinic system, Decoda Health, tells the portal, and the portal keeps your name, email address and phone number as given in that booking, the partner whose link you used, and whether you booked, came in or joined.

Two small files in your browser. Opening a partner’s link stores one file recording whose link it was, for 60 days, and another holding a random number so a visit is counted once, for 180 days. Neither holds your name or contact details, and both can be cleared in your browser at any time.

A check against clinic records. Your email address and phone number are checked against RESTŌR’s clinic records to see whether you are new to RESTŌR. A person at RESTŌR reads the answer. It is never shown to the partner.

What the partner is told about you: your first name and last initial, and whether you booked, came in or joined. Nothing else. Not what you booked, not what you were treated for, not what you paid.

Your care is unaffected. Being referred changes nothing about your treatment, your privacy in the clinic, or your relationship with RESTŌR.

Who else sees this information

RESTŌR uses a small number of providers to run the portal:

• Decoda Health, RESTŌR’s clinic and booking system, where consultations and memberships are confirmed
• Cloudflare, which hosts the portal and stores its data
• Resend, which sends the portal’s email
• ActiveCampaign, RESTŌR’s marketing system, which receives a referred person’s name, email address and phone number. [CONFIRM: whether a referred person can decline this, and how.]

None of them receives information for their own marketing. RESTŌR does not sell or rent personal information.

Text messages

RESTŌR Rewards does not send text messages. Any text you receive from RESTŌR comes from RESTŌR Medical Spa under its own consent, and is covered by RESTŌR Medical Spa’s Privacy Policy.

How long information is kept

Partner accounts and their records are kept while the account is open, and afterwards for as long as RESTŌR needs them for tax and accounting. Referral records are kept for the same period. [CONFIRM: the period.]

Your choices

You can ask RESTŌR what it holds about you, ask for it to be corrected or deleted, or ask to stop receiving the portal’s email. Partners can switch off most emails themselves on their Account page.

Refusing to provide information may mean RESTŌR cannot run your account or confirm a referral.

Health information

Where information RESTŌR holds is protected health information, RESTŌR’s obligations under HIPAA and its Notice of Privacy Practices apply to it, and this notice does not reduce them. [CONFIRM WITH COUNSEL: whether checking a referred person’s contact details against clinic records, and telling a partner that a named person booked, came in or joined, engages HIPAA.]

Questions

Partners can write to RESTŌR from the Messages tab in the portal. Anybody can call 720.524.8429.