Privacy policy
Last updated: November 2, 2026
In short
- We collect what you give us when you book, buy or send us a message, keep a simple record of your visits, and learn how people use our website.
- We use it to book and run your visits, take payments, answer you, ask how your visit went, and improve our website and ads.
- We never sell your personal information. We share it only with the companies that help us run our bookings, payments, website and email, and with our advertising partners as described below.
- We use your health details and the notes you add to a booking only to look after you at your visit, and they never go to our advertising partners.
- You can turn off our advertising and analytics tools at any time with "Ad settings" at the bottom of every page, and stop our after-visit and offer emails with the link in each one.
Who we are
Nu-u Float Studio & Health Bar is a float studio and health spa in Brantford, Ontario. We're responsible for the personal information collected through this website and our bookings, and our owner oversees how it's handled.
Information we collect
When you book online, we collect your name, mobile number and email address, the service and time you choose, any note you add for us, and whether you'd like offers from us. We may also ask you to fill in a waiver or other form before your visit, online through Square or on paper at the studio, and it can include health details. When you buy a membership, package or gift card, your contact and payment details go to Square: through Square's secure checkout, or for a membership, through Square's card form on our memberships page, where the card goes straight to Square and we never see or keep the card number, and for a gift card, the name and email address of the person you're giving it to. When you send us a message, the form collects your name, email address, your phone number if you add it, and your message. When you tell us how your visit went through the private link in our email, your message comes to our inbox.
When you visit, this website, the companies that run it and the tools described below collect technical information such as your IP address, browser and device type, the pages you view, and how you found us (for example a search, an ad or another website), to run the site, keep it secure and see which ads and pages bring in bookings.
Our booking and contact forms are protected by Cloudflare Turnstile, a spam check. It runs when you reach the last step of a booking or start filling in our contact form, and Cloudflare then receives your IP address and details your browser sends about itself. Cloudflare uses them to tell people apart from spam bots, not to identify or profile you.
We also keep a simple record for each client, linked to your client profile in Square:
- How you first found us, such as a search, an ad or another website, when the website can tell
- Your bookings, whether made on this website, at the desk, by phone or on Square's own pages
- Your visits
- The emails we've sent you after a visit, and your email choices
How we use it
We use your information to:
- Book your appointments and look after you when you visit
- Take payment for memberships, packages and gift cards
- Answer your messages
- Email you after a visit to ask how it went
- Send you offers and news: by email when you tick the box as you book, and by text or email when you send us a message through our contact form, as the form says. You can stop them at any time by replying STOP to a text, using the unsubscribe link in an email, or asking us
- Measure which of our ads bring in bookings and purchases, and show our ads to people who've visited our website (see "Cookies, ads and analytics" below)
- Understand how people use our website, so we can improve it
- Keep the website and its forms secure and free of spam
Who we share it with
We never sell your personal information. We'll ask you before using it for anything not described here. We share it only with:
- Square, which runs our bookings, payments, gift cards, client profiles and online waivers. Your booking and any note you add go to Square, which sends your confirmation and reminders (squareup.com/ca/en/legal/general/privacy), and to our studio's email inbox so we can prepare for your visit.
- The companies that run our website and email. Cloudflare hosts the website, keeps our client records and runs the forms' spam check, Cloudflare Turnstile (cloudflare.com/privacypolicy). Resend delivers the website's emails (resend.com/legal/privacy-policy). Google provides our business email (policies.google.com/privacy). KD Digital builds and looks after these systems for us (kd.digital/privacy). Each uses your information only to provide its service to us.
- Meta and Google, our advertising partners (see "Cookies, ads and analytics" below). When you book, or buy a membership or package, through our website, the website's server sends them a scrambled (hashed) copy of your contact details, such as your email address and phone number, with the booking's or purchase's value, so we can see which ads lead to real visits. It may also tell them when you come in for a visit you booked on the website. Meta also gets your IP address, your browser and the kind of service, such as float or massage. From the website's server, Google gets only the scrambled contact details, the value and which of its ads you clicked, if any. Neither ever gets your health details, the notes you add to a booking, or the names of the services you book. If ads are off when you book or buy, none of this is sent. If you turn them off later, tell us and we'll stop telling them about your visits.
- Authorities, when the law requires it.
Cookies, ads and analytics
We and our partners use cookies and similar technologies to understand how people find and use our website, measure which of our ads bring in bookings and purchases, and show our ads to people who've visited, matched to the kind of service they looked at, such as floats, massage or facials, and never to a health condition. Each partner may recognize your browser and connect your visits to an account you have with them, under its own privacy policy. These tools never get your health details or your booking notes, and the private pages that show your booking, your email choices or your message after a visit never use them.
You can turn these tools off at any time with "Ad settings" at the bottom of every page. It takes effect right away, and if it's off when you book or buy, the website's server doesn't send that booking or purchase to Meta and Google either. Your choice applies to the browser you're using and is remembered for up to a year, and the website works the same either way. You can also change your ad preferences in your Facebook, Instagram or Google account, block cookies in your browser, or opt out of interest-based ads from many companies at youradchoices.ca.
A few things stay on either way. The website's own cookies remember your choice and note how you found us, Cloudflare's spam check still protects the booking and contact forms, and the website counts which pages and booking steps are used, so we know which ads and pages bring in bookings. None of this holds your contact details or follows you to other websites.
Unless you turn them off, the website uses:
- Meta's advertising tools for Facebook and Instagram (facebook.com/privacy/policy)
- Google Analytics and Google Ads (policies.google.com/technologies/partner-sites)
- Microsoft Clarity, which records how visitors scroll, click and move through our pages, as heatmaps and replays, so we can improve them. What you type on this website, and the booking details it shows back to you, are hidden from these recordings (privacy.microsoft.com/privacystatement)
Where it's stored
The companies that help us may store and process your information in the United States and other countries where they operate. While it's there, it's subject to their laws and may be accessed by their courts, law enforcement and national security authorities.
How we protect it
We protect your information with safeguards suited to how sensitive it is, such as encrypted connections, protected sign-in to our systems, and access limited to the people who need it to serve you.
How long we keep it
We keep our own client records until two years after your last visit, booking or change to your email choices, and then delete them. After that we keep only a coded marker of your email address and client number, so we never ask you twice for a review and your email choices keep working. Your bookings, payments and client profile in Square are kept under Square's policy and for as long as the law requires us to keep business records. Meta, Google and Microsoft keep what their tools collect under their own policies.
Clients under 18
Some of our clients are young athletes under 18. Clients 16 and older can book for themselves. If your child is under 16, please book for them: put their name on the booking with your own mobile number and email. Our texts and emails then come to you, and the contact details our advertising partners receive are yours.
If you're 16 or 17 and book through our website, you can turn off our advertising tools at any time with "Ad settings" at the bottom of every page. Bookings made by phone or at the studio are never shared with our advertising partners.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll make that clear on the website.
Contact us
For any privacy question or request, such as a copy of the information we hold about you or having it deleted, email or call us using the details below.
If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Nu-u Float Studio & Health Bar
200 Grand River Avenue, Brantford ON N3T 4X9