Legal
Privacy Policy
Effective April 1, 2026
1. Information We Collect
We may collect the following types of personal information when you book an appointment, visit our website, create a membership, or contact us:
- Contact Information: Name, email address, phone number, and mailing address.
- Appointment Data: Service history, appointment dates, preferences, and technician assignments.
- Health Information: Skin conditions, allergies, medications, and health disclosures provided before MedSpa treatments (collected via consent forms).
- Payment Information: Credit/debit card details processed securely through our third-party payment processor. We do not store full card numbers on our servers.
- Website Data: IP address, browser type, pages visited, and cookies (see Section 6).
- Communications: Messages sent through our contact form, chat widget, email, or phone.
2. How We Use Your Information
We use your personal information to:
- Schedule and manage your appointments.
- Process payments and issue receipts.
- Provide safe, personalized treatments (especially for MedSpa services requiring health history).
- Manage your membership account, billing, and loyalty points.
- Send appointment reminders, confirmations, and follow-up communications.
- Send promotional offers, newsletters, and updates (only with your consent; you may opt out at any time).
- Improve our services, website, and guest experience.
- Comply with legal and regulatory requirements.
3. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your data with:
- Service Providers: Our booking platform, payment processor, email service, and CRM system — all bound by confidentiality agreements.
- Legal Authorities: If required by law, subpoena, or to protect the rights and safety of Lumi, our guests, or others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
4. Data Security
We implement industry-standard security measures including encryption, secure servers, and access controls to protect your personal information. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal information (subject to legal retention requirements).
- Opt out of marketing communications at any time.
- Withdraw consent for data processing where consent is the legal basis.
To exercise any of these rights, contact us at info@luminailsandmedspa.com.
6. Cookies & Tracking
Our website uses cookies and similar technologies to enhance your browsing experience. These include:
- Essential Cookies: Required for site functionality (e.g., session management, popup display preferences).
- Analytics Cookies: Help us understand how visitors interact with our website so we can improve the experience.
- Marketing Cookies: Used to deliver relevant advertisements (only with your consent).
You can manage cookie preferences through your browser settings. Disabling cookies may affect site functionality.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Health records related to MedSpa treatments are retained in accordance with Illinois state regulations.
8. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. MedSpa services require clients to be at least 18 years of age (or have parental consent for select services).
9. Third-Party Links
Our website may contain links to third-party websites (e.g., Instagram, booking platforms). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. Continued use of our services constitutes acceptance of the updated policy.
11. Contact Us
For questions, concerns, or requests regarding this Privacy Policy:
Email: info@luminailsandmedspa.com
Phone: 1-833-814-LUMI
Address: 2111 S. Wabash Avenue, Chicago, IL 60616