Privacy Policy

Last updated: October 9, 2026

Head Spa Locator (“we”, “us”) operates headspalocator.com (the “Website”), a free directory that helps people find head spas and scalp-care treatments across the United States. This policy explains what personal information we collect, why, who we share it with, and the choices you have.

You can browse the Website without creating an account. An account is only needed to post a review.

1. Information we collect

If you choose to sign in with Google, Google shares the following with us, and only this:

Your name
Your email address
Your profile photo URL

We do not receive your Google password and we do not request access to your Gmail, contacts, calendar, Drive, or any other Google data.

1.2 Content you submit

Reviews you post about a head spa (rating, title, text). Your name and profile photo are shown publicly next to your review.
Edit suggestions for a listing, including the email address you give us so we can follow up.
Business listing requests from spa owners or staff: business details, contact name, email and phone, and any photos you upload.
Messages you send through our contact form (name, email, message).

If you subscribe to our newsletter, we collect your email address. You’ll receive a confirmation email and every newsletter includes an unsubscribe link.

1.4 Usage and device information

Analytics: We use Google Analytics to understand how visitors use the Website (pages viewed, approximate location, device and browser type, how you arrived). This data is aggregated and not used to identify you.
Security: Our hosting provider processes your IP address and basic request information to deliver pages and to protect our forms from spam and abuse (Cloudflare Turnstile).

2. How we use your information

To create and manage your account and show your name and photo with reviews you post.
To publish reviews and keep listings accurate (including reviewing edit suggestions and listing requests).
To reply to messages and listing requests, and to send account-related or moderation notices.
To send the newsletter, only if you subscribed.
To measure and improve the Website, and to prevent spam, fraud and abuse.
To show advertising that helps keep the Website free (see section 4).

Google user data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, the name, email address and profile photo we receive through Sign in with Google are used only to provide your account and show your identity on reviews you post. We do not sell this data, use it for advertising, use it to train AI models, or transfer it to anyone except the service providers listed in section 5 that help us run the Website, as required by law, or with your consent.

3. Information about businesses

Listings contain publicly available business information (name, address, phone, website, hours, photos, ratings) collected from sources such as Google Maps business profiles and the businesses’ own websites, or provided by the business. Listing descriptions may be drafted with the help of AI and are reviewed before publishing. Business owners can request corrections or removal at any time by contacting us.

4. Cookies and advertising

We and our partners use cookies and similar technologies:

Essential: to keep you signed in.
Analytics: Google Analytics cookies, as described above.
Advertising: We use Google AdSense to show ads. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on your visits to this site and/or other sites on the Internet. You can opt out of personalized advertising by visiting Google Ads Settings or www.aboutads.info. Learn more about how Google uses information from sites that use its services.
Affiliate partners: Some pages show sponsored offers from partners through Rakuten Advertising. When an offer is shown or you click it, Rakuten may set cookies to count the view and, if you buy, to credit us with a commission. See Rakuten Advertising’s privacy policy.

You can block or delete cookies in your browser settings; some features (like staying signed in) may stop working.

We do not sell or rent your personal information. We share it only with service providers that process it on our behalf, under their own privacy and security commitments:

Provider	Purpose
Supabase	Database and account (sign-in) hosting
Cloudflare	Website hosting, content delivery, image storage, spam protection
Google	Sign in with Google, Google Analytics, Google AdSense, Google Maps
Mailchimp (Intuit)	Newsletter delivery
Resend	Sending emails such as replies and notifications

Reviews you post (with your name and profile photo) are public. We may also disclose information if required by law or to protect the rights and safety of our users or others.

6. Data retention

Account data is kept while your account exists. If you delete your account, we delete your profile and reviews.
Messages, suggestions and listing requests are kept as long as needed to handle them and for our records, then deleted.
Newsletter data is kept until you unsubscribe.
Analytics data is retained according to Google Analytics retention settings (14 months).

7. Your rights and choices

You can ask us to access, correct, or delete your personal information, or to delete your account, by emailing contact@headspalocator.com. You can also remove Head Spa Locator’s access to your Google account at any time from your Google Account permissions.

California residents: you have the right to know what personal information we collect and how we use it, to request deletion, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising beyond the AdSense cookies described in section 4, which you can opt out of as described there.

8. Security

We use encryption in transit (HTTPS), access controls and database-level security rules to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and limit access to those who need it.

9. Children’s privacy

The Website is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We’ll change the “Last updated” date above and, for significant changes, post a notice on the Website.

11. Contact us

Questions or requests about this Privacy Policy: contact@headspalocator.com