Privacy Policy
Pia Esthetics Day Spa · Total Image Care, Inc. · Effective August 15, 2026
The short version
- We do not sell or rent personal information for money.
- Optional analytics and marketing technologies stay off until you allow them.
- We do not send customer-entered information to analytics or advertising providers.
- You can reject optional tracking or change your selection at any time through Your Privacy Choices.
- We honor supported Global Privacy Control signals as requests to opt out of the sale or sharing of personal information.
- We do not share mobile opt-in information with third parties for their marketing or promotional purposes.
Who we are and what this policy covers
Pia Esthetics Day Spa is operated by Total Image Care, Inc. In this policy, “Pia,” “we,” “us” and “our” refer to Total Image Care, Inc. doing business as Pia Esthetics Day Spa.
This policy applies to bypia.com and to Pia-controlled booking, shopping, account, form and online services that link to this policy. A third-party website or service has its own privacy practices when it displays a separate privacy policy.
Information we collect
Depending on how you interact with us, we may collect the following categories of information:
Information you provide
- Contact information: name, email address, telephone number, mailing or billing address and communication preferences.
- Appointment and customer information: requested and completed services, appointment dates, staff preferences, notes needed to provide or administer a service, cancellations, attendance and customer-service history.
- Purchase and gift-card information: items purchased, transaction amount, billing details, gift-card sender and recipient information, delivery details and transaction history.
- Account information: username, password credentials stored in protected form and account preferences.
- Communications: messages, inquiries, feedback and attachments you send through our forms, email, telephone, text messaging or social media.
- Reviews and user submissions: ratings, review text, display name and other content you choose to submit for publication.
- Employment information: resume, work history, qualifications, availability and other information submitted with a job application.
- Marketing preferences: email or text-message subscriptions, consent records, opt-out requests and related timestamps.
Payment information
Payment card information is collected and stored by our payment processor. Pia may receive a payment token, card type, last four digits, billing address, transaction identifier and payment status. We do not store full payment-card numbers or card security codes on our own servers.
Information collected automatically
- IP address and general location inferred from it
- browser, device and operating-system information
- requested pages, referring page, date, time and similar server-log information
- cookie or device identifiers
- site interactions and diagnostic information when you permit analytics
- advertising interactions when you permit marketing technologies
We do not permit analytics or advertising tools to receive information entered into payment, booking, contact, employment or account fields.
Operational service providers receive only the information reasonably needed to perform requested functions. For example, Helcim processes payments, SignalWire processes requested text messages and our email-delivery provider processes requested email. These providers are not permitted to use that information for their own marketing.
How we use information
We use personal information to:
- provide, schedule and administer appointments and services
- process purchases, payments, refunds and gift cards
- create and maintain customer accounts
- send confirmations, reminders and service-related communications
- respond to questions, accessibility requests and customer-service matters
- send marketing messages when you have requested them
- maintain consent and opt-out records
- publish reviews or other content you submit for publication
- review employment applications
- secure, troubleshoot and improve our websites and systems
- measure website use and advertising only when you permit the relevant category
- detect fraud, abuse and security incidents
- maintain records and comply with tax, accounting, licensing and other legal obligations
- establish, exercise or defend legal claims
We do not use customer records, appointment details, payment information, private messages or job-application information for targeted advertising.
Cookies and similar technologies
We use three categories:
Strictly necessary
These technologies support security, fraud prevention, shopping-cart functions, account sessions and storage of your privacy choices. They cannot be switched off through our privacy controls because the requested feature would not work without them.
Analytics
When you allow analytics, Google Analytics, Google Tag Manager and Microsoft Clarity may receive online identifiers, device information and interaction data so we can understand how the site performs and how visitors use it.
Marketing
When you allow marketing, Meta Pixel and similar advertising technologies may receive online identifiers and browsing or advertising interaction data so we can measure and personalize advertising.
You can select Accept all, Reject all or Manage choices in the cookie banner. You may change your decision later through Your Privacy Choices in the footer. Your selection is stored on your device for 180 days. Clearing browser storage or changing browsers or devices may cause us to ask again.
Do we sell or share personal information?
We do not sell or rent personal information for money.
When you permit marketing technologies, online identifiers and browsing or advertising interaction data may be disclosed to advertising providers. Some privacy laws define those disclosures as “selling” or “sharing” personal information even when no money changes hands.
You may stop this processing through Your Privacy Choices, the Do Not Sell or Share My Personal Information page or a supported Global Privacy Control signal. We do not knowingly sell or share the personal information of anyone under 16.
When we disclose information
We may disclose personal information to:
- Service providers that support hosting, security, booking, payments, email, text messaging, customer support and other business operations. They may use the information only to provide the contracted service or as permitted by law.
- Analytics and advertising providers only when you permit the relevant optional category.
- Professional advisers such as accountants, insurers and attorneys when reasonably necessary.
- Government authorities or other parties when required by law or reasonably necessary to protect rights, safety, systems or property.
- A successor organization in connection with a merger, financing, reorganization or sale of some or all of the business, subject to applicable privacy obligations.
Our service providers include Helcim for payment processing, Amazon Web Services for email delivery, SignalWire for text-message delivery, Google for analytics and tag management, Microsoft for Clarity analytics, Meta for advertising measurement and Google reCAPTCHA for abuse prevention. The providers used may change as our systems change.
Mobile phone and text-message information
No mobile information will be shared with third parties or affiliates for their marketing or promotional purposes.
Text-messaging originator opt-in data and consent will not be shared with third parties, except service providers that help us deliver the messages you requested and are prohibited from using that information for their own marketing.
Consent to receive marketing text messages is not a condition of purchasing a service. You may reply STOP to cancel marketing texts or HELP for assistance. Message frequency varies. Message and data rates may apply.
We send marketing email only when you have requested it or when otherwise permitted by law. Each marketing email includes an unsubscribe link. We may retain a minimal suppression record after an opt-out so we can honor the request.
Emails may contain standard measurement technology that reports delivery, opens or link interactions. Where consent is required, this measurement follows your applicable privacy choice.
Retention
We keep personal information only for as long as reasonably necessary for the purpose described in this policy, including:
- privacy choices on your device: 180 days
- ordinary web and security logs: up to 90 days, unless needed longer for a security investigation
- contact inquiries: up to 24 months after the matter is resolved
- customer and appointment records: up to 6 years after the last appointment
- accounting and transaction records: up to 7 years
- unsuccessful employment applications: up to 2 years after the position closes
- marketing subscription information: until you opt out, followed by a minimal suppression record
- SMS and email consent evidence: up to 5 years after the last communication or withdrawal of consent
- public reviews: while published or until removed under our policies
We may retain information longer when required by law or reasonably necessary for a chargeback, security incident, investigation, litigation hold or legal claim. When retention ends, we delete, deidentify or securely dispose of the information.
Your privacy rights
Depending on where you live and which law applies, you may have the right to:
- confirm whether we process your personal information
- access or receive a copy of it
- correct inaccurate information
- request deletion
- opt out of targeted advertising or the sale or sharing of personal information
- withdraw consent for optional processing
- appeal the denial of a privacy request
You may submit a request by:
- using our Privacy Request form, selecting Privacy Request
- emailing terms@bypia.com with the subject Privacy Request
- calling 813.831.2418
- using our Contact Us form
- mailing Pia Esthetics Day Spa, Privacy Request, 3210 W Bay to Bay Blvd, Tampa, FL 33629
Describe the right you want to exercise and provide enough information for us to locate the relevant records. We may ask for reasonable verification before disclosing, correcting or deleting information. An authorized agent may submit a request when permitted by law. To appeal a decision, use the same method and write “Privacy Appeal.”
We will not discriminate against you for exercising a privacy right. Certain information may be retained when an exception applies, such as completing a transaction, maintaining required records, protecting security or establishing a legal claim.
Global Privacy Control
If your browser sends a supported Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of personal information for that browser or device. The status appears in our privacy-choice dashboard.
Security
We use administrative, technical and physical safeguards designed to protect personal information. These include encrypted connections, access restrictions and service providers selected to support secure processing. No system can guarantee absolute security.
Children
Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without legally valid parental permission. If you believe a child has submitted personal information, contact us so we can review and delete it when appropriate.
External links
Our website links to external websites and social-media services. Their privacy policies govern information they collect on their services. A link does not make Pia responsible for another organization’s privacy practices.
Changes to this policy
We may update this policy as our services, technology or legal obligations change. We will post the revised policy with a new effective date. If a change materially affects how we use information already collected, we will provide any additional notice or choice required by law.
Contact us
Total Image Care, Inc. d/b/a Pia Esthetics Day Spa3210 W Bay to Bay Blvd
Tampa, FL 33629
813.831.2418
terms@bypia.com · Subject: Privacy Request