Privacy Policy
Effective Date: 20 May 2026
At Vistara Spa, we respect your privacy and are committed to protecting the personal information you provide when visiting our website, creating an account, purchasing our skincare and wellness products, or contacting us.
This Privacy Policy explains what information we collect, how we use it, when we may share it, and how we work with third-party service providers, including payment processors such as Stripe and Square.
1. Information We Collect
Depending on how you interact with our website, we may collect:
- Full name
- Email address
- Phone number
- Billing address
- Shipping address
- Account information
- Order and purchase information
- Product and transaction details
- Customer-service communications
- Information submitted through forms
- Newsletter subscription information
We may also automatically collect certain technical information, including IP address, browser type, device information, pages viewed, referring website, and general website activity.
2. Payment Information
Vistara Spa uses trusted third-party payment processors, which may include Stripe and Square, to securely process payments.
When you make a purchase, payment-related information may be collected and processed by the applicable payment processor. Depending on the payment method and checkout experience, this may include:
- Card or payment method information
- Name associated with the payment method
- Billing address
- Shipping address
- Transaction amount
- Transaction date
- Payment status
- Order information
- Refund or chargeback information
- Information required to help detect or prevent fraudulent transactions
Stripe and Square may process payment and transaction information in accordance with their own privacy policies and applicable laws.
Vistara Spa does not intentionally request or store your full payment card details outside the payment-processing systems used to complete your transaction.
For more information, please review the payment processor’s privacy information:
3. How We Use Your Information
We may use collected information to:
- Process and fulfill orders
- Process payments
- Confirm and manage transactions
- Arrange shipping and delivery
- Provide refunds, returns, and exchanges
- Send order confirmations and shipping updates
- Provide customer support
- Manage customer accounts
- Improve our website and services
- Prevent fraud and unauthorized transactions
- Maintain website security
- Send marketing communications where permitted
- Comply with applicable legal and regulatory requirements
4. Payment Security and Fraud Prevention
Our payment processors may use transaction and technical information to authenticate payments, detect suspicious activity, prevent fraud, and protect customers and merchants.
For example, Stripe states that transaction information may be used to process payments, authenticate payment methods, prevent fraud, and handle disputes.
Square similarly processes transaction information when providing payment-processing services on behalf of sellers.
5. Cookies and Similar Technologies
Our website may use cookies, pixels, analytics tools, and similar technologies to:
- Keep the website functioning properly
- Remember shopping-cart or account information
- Understand website usage
- Improve website performance
- Provide a better shopping experience
- Help prevent fraud and unauthorized activity
- Measure marketing performance
You may manage cookies through your browser settings. Disabling certain cookies may affect some website functionality.
6. Sharing Your Information
We do not sell your personal information for money.
We may share information with trusted service providers when necessary to operate our business, including:
- Stripe
- Square
- Payment and financial service providers
- Shipping and delivery companies
- Website hosting providers
- E-commerce and technology providers
- Customer-support providers
- Analytics providers
- Marketing service providers
- Fraud-prevention and security providers
Information shared with these providers is limited to what is reasonably necessary for them to provide their services.
We may also disclose information when required by law, legal process, court order, governmental authority, or when necessary to protect our rights, customers, website, or business.
7. Shipping and Order Fulfillment
To fulfill your order, we may share necessary information with shipping and delivery providers.
This may include:
- Name
- Shipping address
- Phone number
- Email address
- Order details
This information is used to process and deliver your purchase and provide related customer-service support.
8. Refunds, Returns, and Chargebacks
When you request a refund, return, cancellation, or payment dispute, we may process information related to the original transaction.
Payment processors such as Stripe and Square may receive and process transaction information necessary to complete refunds, manage disputes, or investigate potentially unauthorized transactions. Stripe specifically describes processing refund and chargeback information as part of transaction data.
9. Marketing Communications
If you subscribe to our newsletter or otherwise provide appropriate consent, we may send you:
- New product announcements
- Special offers
- Promotional information
- Skincare tips
- Wellness tips
- Product recommendations
- Vistara Spa updates
You can unsubscribe from promotional emails at any time by clicking the unsubscribe link in the email or contacting us.
Transactional communications, such as order confirmations and shipping updates, may still be sent when necessary to complete your purchase.
10. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, misuse, alteration, disclosure, or destruction.
Payment transactions are handled through payment-processing services designed to provide secure payment processing.
However, no website, online transmission, or electronic storage system can be guaranteed to be completely secure.
11. Data Retention
We retain personal information only for as long as reasonably necessary for purposes such as:
- Completing transactions
- Providing customer support
- Maintaining business records
- Processing refunds and returns
- Preventing fraud
- Resolving disputes
- Complying with legal and accounting obligations
Payment processors may retain certain transaction information according to their own policies and legal obligations.
12. Your Privacy Rights
Depending on your location and applicable privacy laws, you may have rights to:
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion of certain personal information
- Withdraw consent where processing is based on consent
- Opt out of marketing communications
- Ask how your information is collected and used
- Request information about certain disclosures of your personal information
To submit a privacy request, contact us using the information provided below.
We may need to verify your identity before completing certain requests.
13. Third-Party Services and Links
Our website may use or link to third-party services, including payment processors, shipping providers, analytics services, social-media platforms, and other technology providers.
Third-party services operate under their own privacy policies and terms.
Your use of a third-party payment service may be subject to that provider’s privacy practices in addition to this Privacy Policy.
14. Children’s Privacy
Vistara Spa’s website is not intended for children who are not legally permitted to make purchases or provide personal information without appropriate authorization.
We do not knowingly collect personal information from children in violation of applicable law.
If you believe that a child has provided personal information to us improperly, please contact us.
15. International Data Processing
Vistara Spa is located in Canada, and our service providers may process or store information in Canada, the United States, or other jurisdictions where they operate.
For example, payment processors may process transaction information in jurisdictions necessary to provide payment services, prevent fraud, comply with legal requirements, or facilitate transactions. Stripe describes international transfers and processing by affiliates and service providers in its privacy materials.
Where required by applicable law, we take appropriate measures for international transfers of personal information.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, payment services, technology, or applicable legal requirements.
Any updates will be posted on this page with a revised Last Updated date.
17. Contact Us
If you have questions about this Privacy Policy or how Vistara Spa handles personal information, please contact us.
Vistara Spa
123 Main Street
Vancouver, British Columbia V6A 0J5
Canada
