Privacy Policy

Effective Date: May 2, 2026

Company Name: Carved by the River LLC

Also Trading As: Carved by the River, The Restorative Wellness Studio

Introduction

Carved by the River LLC ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website, book an appointment through Acuity Scheduling, and make payments through Square.

This policy includes the specific disclosures and consumer rights required for residents of the Commonwealth of Virginia under the Virginia Consumer Data Protection Act (VCDPA).

1. Information We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal data:

  • Personal Identifiers: Name, email address, phone number, and mailing address.

  • Booking Information: Appointment dates, times, and any specific notes or information provided during the booking process through Acuity Scheduling.

  • Payment Information: Transaction data and financial information processed securely through Square. (Note: We do not store credit card numbers on our own servers).

  • Website Usage Data: Information about how you interact with our website, including your IP address, browser type, and interactions on the site (collected via Squarespace).

  • Sensitive Personal Data: Health and wellness history, mental or physical health diagnoses, or specific preferences necessary to provide our wellness services safely.

2. Purpose for Processing Data

We only collect and process personal data that is adequate, relevant, and reasonably necessary. We use your personal data for the following purposes:

  • Managing Bookings: To process and manage your schedule through Acuity.

  • Processing Payments: To securely handle transactions using Square.

  • Communication: To send appointment confirmations, reminders, respond to your inquiries, and provide marketing communications (only with your explicit consent).

  • Service Provision: To provide the restorative wellness services you requested and keep a record of your wellness history.

  • Analytics and Improvement: To analyze website traffic and improve user experience using Squarespace analytics.

3. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information for monetary consideration. We may share the categories of personal data listed in Section 1 with the following third-party service providers:

  • Squarespace: Our website hosting and analytics platform. Please visit Squarespace Privacy Policy for more information regarding privacy.

  • Acuity Scheduling: Our scheduling software provider that stores your booking and contact details. Please visit Squarespace Privacy Policy for more information.

  • Square: Our third-party payment processor. Please visit Square Consumer Privacy Policy for more information.

  • Legal and Compliance Providers: Third parties to whom we are required by law or subpoena to disclose information.

4. Targeted Advertising

We do not process your personal data for targeted advertising. Should this practice change, we will update this policy and provide Virginia residents with the option to opt-out.

5. Data Security and Minimization

We implement reasonable administrative, technical, and physical security measures appropriate to the volume and nature of the data to protect your personal information against unauthorized access, alteration, disclosure, or destruction. We only retain the data for as long as is necessary to fulfill the purposes outlined in this policy.

6. Virginia Consumer Data Protection Act (VCDPA) Rights

If you are a resident of the Commonwealth of Virginia, you have the following rights regarding the personal data we process:

  • Right to Confirm and Access: Confirm whether we are processing your personal data and access that data.

  • Right to Correct Inaccuracies: Correct inaccuracies in your personal data, taking into account the nature and purpose of processing.

  • Right to Delete: Request the deletion of personal data provided by or obtained about you.

  • Right to Data Portability: Obtain a copy of your personal data in a portable and readily usable format.

  • Right to Opt-Out: Opt-out of the processing of personal data for targeted advertising.

To exercise these rights, please contact us using the information in Section 10. We will respond to your request within 45 days, free of charge up to twice annually (we may request additional information to verify your identity).

7. Appeals Process

If we decline to take action on a VCDPA consumer rights request, you have the right to appeal our decision within a reasonable period.

  • How to Appeal: Contact us at the email address provided in Section 10 with the subject line "VCDPA Appeal Request" and explain the reason for the appeal along with your initial request details.

  • Timeline: We will inform you in writing of any action taken or not taken in response to the appeal within 60 days, including a written explanation of the reasons for our decision.

8. Sensitive Data and Minor Protections

  • Sensitive Data Consent: Under the VCDPA, we will not process your sensitive personal data (such as health and wellness history) without obtaining your affirmative, freely given consent (usually obtained via our intake forms).

  • Children's Privacy: Our services are not directed to individuals under the age of 16. If we become aware that we have collected personal data from a known child under 16 without appropriate parental or guardian consent in compliance with the Children's Online Privacy Protection Act (COPPA), we will take steps to delete the information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices or legal obligations. The "Effective Date" at the top will be updated accordingly.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your VCDPA rights, please reach out to us at:

  • Business Name: Carved by the River LLC (DBA Carved by the River, The Restorative Wellness Studio)

  • Email: privacy@carvedbytheriver.com

  • Phone:

  • Mailing Address: