Privacy Policy

1. Who We Are

K-ARI LLC ("K-ARI," "we," "us," or "our") operates K-ARI Korean Skincare facial spa locations in Utah and Idaho. Our principal place of business is 632 N 2000 W, Lindon, UT 84042. You can reach us at team@k-ari.com.

2. Information We Collect

When you book an appointment or interact with our website, we collect the following categories of personal information:

• Identification data: your full name, phone number, and email address.
• Payment data: credit or debit card information. We do not store raw card numbers on our servers. Card data is processed and stored securely by Square, Inc. (our payment processor). See Section 4.
• Appointment data: your chosen location, services, enhancements, preferred date and time, and any special requests or notes you provide.
• Usage data: standard web server logs (IP address, browser type, referring page) collected automatically when you visit our site.
• Ratings: After a visit you can rate your service. Managers see ratings to help our team. We delete written comments after 12 months.

3. How We Use Your Information

We use the information we collect to:

• Schedule, confirm, and manage your appointment.
• Send confirmation and reminder communications.
• Process payments and, where selected, save a card on file for future visits.
• Respond to your questions or requests.
• Improve our services and website.
• Comply with legal obligations.

We do not sell your personal information to third parties.

4. Square and Boulevard (Payments and Booking)

All payment card transactions are processed by Square, Inc. Square's hosted card fields capture your card details directly in your browser and transmit them to Square's servers over an encrypted connection. K-ARI never receives or stores your raw card number, CVV, or expiration date. Square's handling of your payment information is governed by Square's Privacy Policy.

When you choose to save a card on file, that card is stored in Square's secure vault, not on K-ARI's systems.

Some bookings are handled through Boulevard, our booking software. When you book through Boulevard, it receives the details needed to schedule your appointment (such as your name, phone, email and the service you choose).

5. How We Share Your Information

We share your information only as necessary to operate our services:

• Square, Inc. — payment processing, card storage and booking.
• Boulevard — appointment booking.
• Our text-message provider — to send appointment texts you asked for.
• Quo — our phone and text-message provider.
• Retell AI — our AI phone assistant.
• Service providers — hosting (Vercel, Inc.) and email delivery, solely to power our website and communications.
• Legal requirements — if required by law, court order, or to protect our rights.

No mobile details or personally identifiable information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties.

6. Text Messaging (SMS)

When you provide your phone number to K-ARI — when booking an appointment, joining our waitlist, or otherwise contacting us — you consent to receive text messages from K-ARI about your appointments and, where you have opted in, about promotions and offers. Message frequency varies. Message and data rates may apply. Reply HELP for help, or reply STOP or UNSUBSCRIBE at any time to opt out.

Your consent to receive text messages is not a condition of purchase. As stated above, no mobile details or personally identifiable information will be shared with third parties or affiliates for marketing or promotional purposes.

7. Data Retention

We retain your personal information for as long as necessary to provide services, resolve disputes, and comply with our legal obligations — typically no longer than three (3) years after your last appointment. Payment records may be retained longer where required by tax or accounting law.

Purchases: if you buy products after your visit, we keep a record of the products and what you paid for 4 years for tax and refund purposes. Square, our payment company, keeps its own record of your payment.

Phone calls. Calls to K-ARI may be recorded, and we tell you at the start of the call. Our phone provider, Quo, keeps call recordings, voicemails and call transcripts for as long as we use its service, and deletes them about 30 days after we stop. If our AI phone assistant answers your call, its provider, Retell AI, keeps the recording and transcript for 365 days and then deletes them. We use recordings to help customers, train our team and check quality. We don't sell them. Questions? Email team@k-ari.com.

8. Your Rights (Utah Consumer Privacy Act)

If you are a Utah resident, you have the right to:

• Know what personal data we hold about you.
• Request a copy of your personal data.
• Request deletion of your personal data, subject to legal retention requirements.
• Opt out of the sale of your personal data (we do not sell personal data).

To exercise any of these rights, email us at team@k-ari.com with the subject line "Privacy Request." We will respond within 45 days as required by the UCPA.

9. Cookies and Tracking

We use a few tools to run and improve our website: Google Analytics (to count visits and see which pages are used; it sets cookies), Vercel Web Analytics (site speed and visits), Vimeo (our videos) and Boulevard (booking). We don't use advertising pixels, and we don't sell your information or share it for targeted ads. You can block cookies in your browser settings, or use Google's opt-out tool at tools.google.com/dlpage/gaoptout.

10. Security

We take reasonable technical and organizational measures to protect your information, including HTTPS encryption for all data in transit. However, no method of transmission over the internet is completely secure. Payment security is further protected by Square's PCI DSS-compliant infrastructure.

11. Children's Privacy

Our website is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at team@k-ari.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

K-ARI LLC
632 N 2000 W
Lindon, UT 84042
team@k-ari.com
(385) 338-3123