Privacy Policy

Tre Lux Wellness Lounge respects your privacy and protects personal information collected at our Lisle, Illinois studio; this policy explains what we collect, how we use it, your rights under Illinois law (including BIPA), and when HIPAA may apply.

Introduction

Tre Lux Wellness Lounge (located in Lisle, Illinois) is committed to safeguarding client privacy. This policy applies to information collected in‑person, via our website, booking systems, and communications.

Information We Collect

Contact & booking details: name, email, phone, appointment history.
Payment information: processed via secure third‑party payment processors.
Health & treatment information: medical history, allergies, treatment notes (may be Protected Health Information (PHI) when linked to medical providers).
Biometric data: only if used (e.g., facial scans, fingerprints); we will not collect biometrics without written notice and consent as required by Illinois law.

How We Use Your Information

To schedule and provide services, process payments, and maintain treatment records.
To communicate appointment reminders, updates, and promotions (with opt‑out options).
To improve services and for internal training.
To comply with legal obligations and respond to lawful requests.

Biometric Data and BIPA (Illinois Biometric Information Privacy Act)

If we collect biometric identifiers or information, we will provide written notice, state the purpose and retention period, and obtain written consent before collection.
We maintain a publicly available retention and destruction policy for biometric data and will permanently destroy biometric identifiers when the purpose is satisfied or within three years of the last interaction, whichever comes first.

Health Information and HIPAA

Some services may generate PHI; when we act as a healthcare provider or work with medical professionals, HIPAA protections and breach notification rules may apply. We implement administrative, physical, and technical safeguards for PHI.

Sharing & Disclosure

We do not sell personal or biometric information.
We may share data with trusted service providers (booking platforms, payment processors) under contracts that require confidentiality and security.
We will disclose information when required by law or to protect rights and safety.

Security Measures

We use industry‑standard security controls (encryption, access controls) to protect data and require vendors to do the same. In the event of a breach, we will follow applicable notification laws.

Your Rights

Access, correction, and deletion of personal data where applicable.
Right to refuse or withdraw consent for biometric collection.
For PHI, you may request restrictions or copies as allowed under HIPAA.

Data Retention & Changes

We retain records as needed for treatment, legal, and business purposes; biometric data retention follows BIPA timelines.
We may update this policy; changes take effect when posted.

For privacy questions or to exercise your rights, email info@treluxwellness.com or write to Tre Lux Wellness Lounge 4513 Lincoln Ave #105, Lisle, IL 60532, Lisle, IL. For legal questions about biometric or health privacy, consult the Illinois Biometric Information Privacy Act and HIPAA resources.