Privacy Policy

The Bluffs Med Spa & Massage · Last updated: June 15, 2026


The Bluffs Med Spa & Massage ("we," "us," or "our") operates the The Bluffs mobile application. This page informs you of our policies regarding the collection, use, and disclosure of personal information when you use our app.

Information We Collect

When you book an appointment through the app, we collect your name, email address, and phone number. This information is used solely to create your patient record and complete your booking through our scheduling system (Prospyr).

If you enable push notifications, we store a device token associated with your device. This token is used only to send you notifications from The Bluffs Med Spa & Massage. We do not share device tokens with third parties.

How We Use Your Information

We use the information we collect to:

Push Notifications

With your permission, we may send push notifications to your device regarding promotions, appointment availability, and announcements. You can disable push notifications at any time through your device settings.

Third-Party Services

We use Prospyr (prospyrmed.com) to manage appointments and patient records. When you book an appointment, your name, email, and phone number are shared with Prospyr in order to complete your booking. Please review Prospyr's privacy policy at prospyrmed.com for information on how they handle your data.

Data Security

We take reasonable measures to protect your personal information. All data is transmitted over secure HTTPS connections. We do not store payment information. Any payment processing is handled directly by Prospyr's secure payment system.

Data Retention

We retain your personal information only for as long as needed to provide our services and operate our business. Your name, email, phone number, and appointment records are kept for as long as you use the app or remain a client of The Bluffs Med Spa & Massage. Device tokens for push notifications are kept until you disable notifications or uninstall the app. We may retain some information longer where required by law or for legitimate business purposes such as record keeping and dispute resolution. When information is no longer needed, we delete it.

Data Deletion

You can request deletion of your personal data at any time by emailing us at paul@thebluffs.com. After we receive your request, we will delete your personal information within 30 days, except where we are required to keep it to meet legal obligations. Because appointments are managed through Prospyr, we will also request deletion of your information from Prospyr on your behalf. You can review Prospyr's privacy practices at prospyrmed.com.

Children's Privacy

Our app is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.

Contact Us

If you have any questions about this privacy policy, please contact us at:
The Bluffs Med Spa & Massage
paul@thebluffs.com