U.S. State Supplemental Privacy Notice
TABLE OF CONTENTS
1. Personal Information We Collect and Why We Collect It
2. How Long We Keep Your Information
3. How We Disclose Personal Information
4. Additional Information for California, Colorado, and Connecticut Residents
a. How We Sell and Share Personal Information
b. Submitting Requests Relating to Your Personal Information
f. California’s “Shine the Light” Law
g. Notice of Financial Incentive
a. Additional Disclosures of Personal Data
b. Submitting Requests Relating to Your Personal Data
II. MEF CALIFORNIA JOB APPLICANT NOTICE
1. Personal Information We Collect and Why We Collect It
2. How Long We Keep Your Personal Information
3. Disclosures of California Applicant Personal Information
4. Submitting Requests Relating to Your Personal Information
Effective Date: January 1, 2025
This U.S. State Supplemental Privacy Notice supplements our Massage Envy Privacy Policy and describes information practices relating to California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, Oregon, Texas, Utah, and Virginia, residents. . If you interact with Massage Envy® as a consumer or customer or business-to-business contact, please visit the section titled “Consumer Privacy Notice”. If you are a California resident applying for a position with Massage Envy Franchising, LLC, please visit the section titled “MEF Job Applicants”.
I. CONSUMER PRIVACY NOTICE
This Consumer Privacy Notice (“Consumer Notice”) supplements our Massage Envy Privacy Policy and describes how Massage Envy Franchising, LLC and/or ME SPE Franchising, LLC (collectively, “MEF, LLC” “us,” “we,” or “our”) process Personal Information of consumers in California, and, including visitors to the www.massageenvy.com website (the “Website”), the Massage Envy® Mobile Application (the “Mobile Application”), the Massage Envy® In-Store Forms Application (the “In-Store Application”), and Google Forms created by MEF, LLC (the “Forms”), (the Mobile Application, In-Store Application, and Forms are collectively the “Applications”), and the independently owned and operated Massage Envy® franchised locations. In the event of a conflict between this Consumer Notice and any other MEF, LLC policy, notice, or statement, this Consumer Notice will prevail as to California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, Oregon, Texas, Utah, and Virginia consumers.
1. Personal Information We Collect and Why We Collect It
“Personal Information” or “Personal Data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal Information does not include information that is publicly available, de-identified, or aggregated.
We may collect and we have collected, within the past 12 months, the following categories of Personal Information about consumers. Personal Information we collect about you may vary depending on the nature of your interactions with us and may not include all of the examples listed below.
|
Category of Consumer Personal Information |
Categories of Sources from which Consumer Personal Information Collected |
Purposes for Collection |
|
Identifiers, including real name, nickname, security question, online alias (e.g., username, screenname, etc.), postal address, unique personal identifier, telephone number, online identifier, IP address, and/or email address |
|
We may use “Identifiers” for the following purposes: (i) to fulfill or meet the reason you provided the information (for example, if you provide your information to purchase a service); (ii) to provide, support, personalize, and develop our Website, products, and services; (iii) to create, maintain, customize, and secure your account with us; (iv) to process your requests; (v) to provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses; (vi) to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website, third-party sites, and via email or text message (with your consent, where required by law); (vii) to help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business; (viii) for testing, research, analysis, and product development, including to develop and improve our Website, products, and services; (ix) to respond to law enforcement requests, and as required by applicable law, court order, or governmental regulations; (x) as described to you when collecting your Personal Information; (xi) to protect the rights and interests of us and/or our independently owned and operated franchisees, such as to resolve any disputes, to enforce this Consumer Notice, or any other policy, to protect the rights or property of another, or to prevent harm; (xii) to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of MEF, LLC’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by MEF, LLC about our Website users is among the assets transferred; (xiii) to evaluate prospective franchisees; or (xiv) for any other purpose, with your consent. |
|
Personal information described in Cal. Civ. Code § 1798.80(e), including name, signature, credit card number, debit card number, or other financial information, medical information |
|
We may use “Personal information described in Cal. Civ. Code § 1798.80(e)” for the following purposes: (i) to fulfill or meet the reason you provided the information (for example, if you provide your information to purchase a service); (ii) to create, maintain, customize, and secure your account with us; (iii) to process your requests, purchases, transactions, and payments and prevent transactional fraud; (iv) to provide you with support and to respond to your inquiries, including to investigate and address your concerns, and monitor and improve our responses; (v) to respond to law enforcement requests, and as required by applicable law, court order, or governmental regulations; (vi) as described to you when collecting your Personal Information; (vii) to protect the rights and interests of us and/or our independently owned and operated franchisees, such as to resolve any disputes, to enforce this Consumer Notice or any other policy, to protect the rights or property of another, or to prevent harm; (viii) to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of MEF, LLC’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by MEF, LLC about our Website users is among the assets transferred; (ix) to evaluate prospective franchisees; or (x) for any other purpose, with your consent. |
|
Characteristics of protected classifications under California or federal law, including age, birth month, birth year, marital status, gender, physical or mental condition |
|
We may use “Characteristics of protected classification” for the following purposes: (i) to fulfill or meet the reason the consumer provided the information; (ii) to process your requests; (iii) to respond to law enforcement requests, and as required by applicable law, court order, or governmental regulations; (iv) as described to you when collecting your Personal Information; (v) to protect the rights and interests of us and/or our independently owned and operated franchisees, such as to resolve any disputes, to enforce this Consumer Notice or any other notice, to protect the rights or property of another, or to prevent harm; or (vi) for any other purpose, with your consent. |
|
Commercial information, including records of personal property, products or services purchased, obtained or considered, or other consuming histories or tendencies |
|
We may use “Commercial information” for the following purposes: (i) to fulfill or meet the reason the consumer provided the information, including to process your payment and facilitate delivery; (ii) to provide, support, personalize, and develop our Website, products, and services; (iii) to process your requests, purchases, transactions, and payments and prevent transactional fraud; (iv) to provide you with support and to respond to your inquiries, including to investigate and address your concerns, and monitor and improve our responses; (v) to deliver content as well as product and service offerings relevant to your interests, including targeted offers and ads through our Website, third-party sites, and via email or text message (with your consent, where required by law); (vi) for testing, research, analysis, and product development, including to develop and improve our Website, products, and services; (vii) to respond to law enforcement requests, and as required by applicable law, court order, or governmental regulations; (viii) as described to you when collecting your Personal Information; (ix) to protect the rights and interests of us and/or our independently owned and operated franchisees, such as to resolve any disputes, to enforce this Consumer Notice or any other policy, to protect the rights or property of another, or to prevent harm; (x) to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of MEF, LLC’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by MEF, LLC about our Website users is among the assets transferred; or (xi) for any other purpose, with your consent |
|
Internet or other electronic network activity information, including Internet or other similar activity, browsing history, search history, information on a consumer's interaction with a website, application logs, device data and registration, social media account information, or advertisements |
|
We may use “Internet or other electronic network activity information” for the following purposes: (i) to provide, support, personalize, and develop our Website, products, and services; (ii) to create, maintain, customize, and secure your account with us; (iii) to deliver content as well as product and service offerings relevant to your interests, including targeted offers and ads through our Website, third-party sites, and via email or text message (with your consent, where required by law); (iv) to help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business; (v) for testing, research, analysis, and product development, including to develop and improve our Website, products, and services; (vi) as described to you when collecting your Personal Information; (vii) to protect the rights and interests of us and/or our independently owned and operated franchisees, such as to resolve any disputes, to enforce this Consumer Notice or any other policy, to protect the rights or property of another, or to prevent harm; (viii) to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of MEF, LLC’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by MEF, LLC about our Website users is among the assets transferred; or (ix) for any other purpose, with your consent |
|
Geolocation data |
|
We may use “Geolocation data” for the following purposes: (i) to fulfill or meet the reason the consumer provided the information. If you provide your Personal Information to purchase a product or service, we will use that information to process your request; (ii) to facilitate locating a Massage Envy® franchise location and to improve your customer experience; or (iii) for any other purpose, with your consent. |
|
Sensory data such as recordings of customer voicemails or similar information |
|
We may use “Sensory Data” for the following purposes: (i) to research, resolve issues, and improve our customers’ experience, as well as for fraud prevention purposes; or (ii) for any other purpose, with your consent. |
|
Inferences used to create a profile reflecting the consumer’s preferences, and characteristics |
|
We may use “Inferences” for the following purposes: (i) to provide, support, personalize, and develop our Website, products, and services; (ii) to deliver content as well as product and service offerings relevant to your interests, including targeted offers and ads through our Website, third-party sites, and via email or text message (with your consent, where required by law); or (iii) to evaluate prospective franchisees; |
|
Sensitive Personal Information such as precise geolocation, and health information If you provide consent for our use to process sensitive personal information, you may be able to withdraw your consent under applicable law. |
|
We may use “Sensitive Personal Information” for the following purposes: (i) to facilitate locating a Massage Envy franchise location®; (ii) to provide the services to you; and (iii) to improve your customer experience. |
|
Personal Information About a Child Under the Age of 13, such as the age of the child and services received. |
|
We may use “Personal Information About a Child Under the Age of 13” for the following purposes: to provide the requested services. |
We also may collect some Personal Information that does not directly fit within one of the categories defined above. For example, we collect the content of communications you send to us. Unless otherwise specified, the sources of this Personal Information, the purposes for which we use it, and the categories of persons to which we disclose it are the same as those listed for Commercial Information.
2. How Long We Keep Your Personal Information
We keep the categories of Personal Information described above for as long as is necessary for the purposes described in this Notice or otherwise authorized by law. This generally means holding the information for as long as one of the following apply:
- Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information;
- Your Personal Information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Information was collected;
- The information is reasonably required to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or
- We are otherwise required or permitted to keep your information by applicable laws or regulations.
Where information is used for more than one purpose, we will retain it until the purpose with the latest period expires. For more information about our retention policies, please contact us using the contact details below.
3. How We Disclose Personal Information
The chart below shows the categories of Personal Information we have disclosed to our service providers and contractors for a business or commercial purpose during the last 12 months.
|
Category of Personal Information or Sensitive Personal Information |
Categories of Recipients to Which the Information Was Disclosed |
Purposes for Disclosure |
|
Identifiers |
• Parents, affiliates, and subsidiaries • Data aggregators • Business partners • Website development and hosting providers • Mobile application development and hosting providers • Email platform providers • Cloud hosting platform providers • Independent franchise owners • Marketing analytics and advertising companies • Other service providers |
• Ensuring security and integrity of Personal Information • Debugging to identify and repair errors that impair existing intended functionality • Short-term, transient use, including, but not limited to, non-personalized advertising • Performing services (including processing, maintain, or collecting Personal Information) on our behalf • Providing advertising and marketing services • Detecting or protecting against malicious, deceptive, fraudulent, or illegal activity • For internal use by the service provider
|
|
Personal Information described in Cal. Civ. Code § 1798.80(e) |
• Parents, affiliates, and subsidiaries • Data aggregators • Business partners • Website development and hosting providers • Mobile application development and hosting providers • Email platform providers • Cloud hosting platform providers • Independent franchise owners • Marketing analytics and advertising companies • Other service providers |
• Ensuring security and integrity of Personal Information • Short-term, transient use, including, but not limited to, non-personalized advertising • Performing services (including processing, maintain, or collecting Personal Information) on our behalf • Providing advertising and marketing services (except for cross-context behavioral advertising) • For internal use by the service provider |
|
Characteristics of protected classifications |
• Parents, affiliates, and subsidiaries • Data aggregators • Business partners • Website development and hosting providers • Mobile application development and hosting providers • Email platform providers • Cloud hosting platform providers • Independent franchise owners • Marketing analytics and advertising companies • Other service providers
|
• Short-term, transient use, including, but not limited to, non-personalized advertising • Performing services (including processing, maintain, or collecting Personal Information) on our behalf • Providing advertising and marketing services (except for cross-context behavioral advertising) • For internal use by the service provider |
|
Commercial information |
• Parents, affiliates, and subsidiaries • Data aggregators • Business partners • Email platform providers • Cloud hosting platform providers • Independent franchise owners • Marketing analytics and advertising companies • Other service providers |
• Auditing related to ad impressions • Short-term, transient use, including, but not limited to, non-personalized advertising • Performing services (including processing, maintain, or collecting Personal Information) on our behalf • Providing advertising and marketing services (except for cross-context behavioral advertising) • Detecting or protecting against malicious, deceptive, fraudulent or illegal activity • For internal use by the service provider |
|
Internet or other electronic network activity information |
• Parents, affiliates, and subsidiaries • Data aggregators • Business partners • Website development and hosting providers • Mobile application development and hosting providers • Cloud hosting platform providers • Marketing analytics and advertising companies • Other service providers |
• Auditing related to ad impressions • Ensuring security and integrity of Personal Information • Debugging to identify and repair errors that impair existing intended functionality • Short-term, transient use, including, but not limited to, non-personalized advertising • Performing services (including processing, maintain, or collecting Personal Information) on our behalf • Providing advertising and marketing services (except for cross-context behavioral advertising) • Detecting or protecting against malicious, deceptive, fraudulent or illegal activity • For internal use by the service provider |
|
Geolocation data |
• Parents, affiliates, and subsidiaries • Data aggregators • Business partners • Website development and hosting providers • Mobile application development and hosting providers • Email platform providers • Cloud hosting platform providers • Marketing analytics and advertising companies • Other service providers
|
• Short-term, transient use, including, but not limited to, non-personalized advertising • Performing services (including processing, maintain, or collecting Personal Information) on our behalf • For internal use by the service provider |
|
Sensory Data |
• Other service providers |
• Short-term, transient use, including, but not limited to, non-personalized advertising • Performing services (including processing, maintain, or collecting Personal Information) on our behalf • For internal use by the service provider |
|
Inferences |
• Parents, affiliates, and subsidiaries • Data aggregators • Business partners • Email platform providers • Cloud hosting platform providers • Marketing analytics and advertising companies • Other service providers
|
• Short-term, transient use, including, but not limited to, non-personalized advertising • Performing services (including processing, maintain, or collecting Personal Information) on our behalf • Providing advertising and marketing services (except for cross-context behavioral advertising) • For internal use by the service provider |
|
Sensitive Personal Information |
• Parents, affiliates, and subsidiaries • Data aggregators • Business partners • Email platform providers • Cloud hosting platform providers • Independent franchise owners • Marketing analytics and advertising companies • Other service providers
|
• Auditing related to ad impressions • Short-term, transient use, including, but not limited to, non-personalized advertising • Performing services (including processing, maintain, or collecting Personal Information) on our behalf • Providing advertising and marketing services (except for cross-context behavioral advertising) • For internal use by the service provider |
| Personal Information About a Child Under the Age of 13
|
• Parents, affiliates, and subsidiaries • Data aggregators • Business partners • Email platform providers • Cloud hosting platform providers • Independent franchise owners • Marketing analytics and advertising companies • Other service providers |
• Auditing related to ad impressions • Short-term, transient use, including, but not limited to, non-personalized advertising • Performing services (including processing, maintain, or collecting Personal Information) on our behalf • Providing advertising and marketing services (except for cross-context behavioral advertising) • For internal use by the service provider |
4. Additional Information for California, Connecticut, and Colorado Residents
Terms defined in the California, Connecticut, and Colorado privacy laws that are used in this Section 4 shall have the same meaning as in the applicable state laws as they apply to residents of those states.
A. How We Sell Personal Information and Share for Targeted Advertising
A “sale” of Personal Information does not necessarily involve an exchange of money. Instead, the term also includes disclosures of Personal Information to third parties under circumstances where the third parties may use the information for their own purposes.
The chart below shows the categories of Personal Information we have sold or shared with third parties for targeted or cross-context behavioral advertising. We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.
|
Category of Personal Information or Sensitive Personal Information |
Sold? |
Shared for Targeted or Cross-Context Behavioral Advertising? |
Categories of Third Parties to which the Information Was Sold or Shared |
Purposes for Selling / Sharing for Targeted Advertising |
|
Identifiers |
Yes |
Yes |
Affiliated companies, marketing, advertising, or social media companies |
Analytics, Advertising |
|
Personal Characteristics |
Yes |
Yes |
Affiliated companies, marketing, advertising, or social media companies |
Analytics, Advertising |
|
Internet or Other Electronic Network Activity Information |
Yes |
Yes |
Affiliated companies, marketing, advertising, or social media companies |
Analytics, Advertising |
B. Submitting Requests Relating to Your Personal Information
You may have certain privacy rights relating to your Personal Information as described below. To exercise any of these rights, please submit a request through our Consumer Portal, or call us at 1-866-690-9108.
Once we receive a request to know, correct, or to delete, we must verify your identity before we can respond.
You may be required to provide the following information for verification purposes:
- Your first and last name;
- Your email address; and
- Your telephone number.
If you are a California resident, you may use an authorized agent to submit a request to know, to correct, to delete, to limit, or to opt-out. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the authorized agent to provide either (1) a power of attorney; or (2) proof of your written permission. In addition to proof of your written permission, we may require you to verify your own identity and directly confirm that you provided the agent permission to submit the request. An authorized agent is either a natural person or a business entity registered with the California Secretary of State that a consumer has authorized to act on his or her behalf.
If you are a Colorado resident, you may use an authorized agent (a person or entity acting on your behalf) to submit a request to opt-out out of our processing of Personal Information for the purposes of targeted advertising, selling, or profiling. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the authorized agent to provide either (1) a power of attorney; or (2) proof of your written permission. In addition to proof of your written permission, we may require you to verify your own identity and directly confirm that you provided the agent permission to submit the request.
Depending on your state of residency, you may be able to exercise certain privacy rights related to the Personal Information we maintain.
Right to Know (California Only). You may have the right to know the categories of Personal Information we have collected about you, which includes:
(1) The categories of sources from which the Personal Information was collected;
(2) Our business or commercial purposes for collecting, selling, or sharing Personal Information;
(3) The categories of recipients to which we disclose Personal Information;
(4) The categories of Personal Information that we sold, and for each category identified, the categories of third parties to which we sold that particular category of Personal Information; and
(5) The categories of Personal Information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of Personal Information.
Right to Access and Data Portability Personal Information. A copy of the specific pieces of Personal Information we have collected about you. You may also request that we send the copy of the Personal Information you provided to us in a portable format.
Right to Delete Your Personal Information. You have the right to request that we delete Personal Information we collected from you, subject to certain exceptions.
Right to Correct Inaccurate Information. If you believe that the Personal Information we maintain about you is inaccurate, you have the right to request that we correct that information.
Right to Opt Out of Sales of Personal Information and Sharing for Targeted Advertising. You have the right to opt out of the sale of your Personal Information, and to request that we do not share your Personal Information for targeted or cross-context behavioral advertising. Some of the ways we use tracking technologies for advertising and marketing may be considered a “sale” or “share” and may allow you the right to opt out of this use of your Personal Information. To opt out of the “sale” or “sharing” of Personal Information through tracking technologies for the purposes of targeted or cross-context behavioral advertising, please click here. If you wish to opt-out of the offline sale of your Personal Information, you may submit an opt-out request by clicking on the following link: Do Not Sell or Share My Personal Information. You may also opt out of targeted advertising / non-monetary “sales” of Personal Information through an opt-out preference signal, such as the Global Privacy Control. If you choose to use a browser-based opt-out signal, you will need to turn it on for each browser you use.
Right to Limit Use and Disclosure of Sensitive Personal Information (California Only). We do not use or disclose Sensitive Personal Information for purposes to which the right to limit use and disclosure applies under the California privacy law.
Right to Appeal (Colorado and Connecticut Only). Sometimes we are unable to process requests relating to your Personal Information, in which case, your request will be denied. If you believe that we have denied your privacy rights request in error, you may appeal for reconsideration of your request using our webform or toll-free phone number.
Right to Non-Discrimination for the Exercise of Your Privacy Rights. You will not receive discriminatory treatment from us, if you choose to exercise any of your privacy rights.
F. California’s “Shine the Light” Law
Subject to certain limits under California Civil Code section 1798.83, California residents may ask MEF, LLC to provide them with: (1) a list of certain categories of Personal Information that we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year; and (2) the identity of those third parties. California residents may make one (1) request per calendar year.
To make this request, you may contact MEF, LLC at the mail or email address listed in the “Contact Us for More Information” section below. In your request, please state that you are a California resident and provide a current California address for our response. Please allow up to thirty (30) calendar days for a response. MEF, LLC reserves its right not to respond to such requests submitted to addresses other than those specified in the “Contact Us for More Information” section below.
G. Notice of Financial Incentive
At this time, we do not offer any financial incentives or price or service differences that relate to our collection, retention, or use of your Personal Information. However, if this changes, we will provide a written description of the material terms of the financial incentive or price or service difference to you in a written Notice of Financial Incentive, and you will only be enrolled as a participant if you affirmatively opt-in to the program. You may revoke your opt-in consent at any time. The Notice of Financial Incentive will explain the processes for opting-in to participate and revoking your consent (opting-out).
5. Additional Information for Delaware, Iowa, Nebraska, Montana, New Hampshire, Oregon, Texas, Utah, and Virginia Residents
Terms defined in the Montana, Oregon, Texas, Utah and Virginia privacy laws that are used in this Section 5 shall have the same meaning as in the applicable state laws as they apply to residents of those states.
A. Additional Disclosures of Personal Data
Targeted Advertising. We may process your Personal Data for targeted advertising. To opt out, please click here.
Sales of Personal Data. We do not sell your Personal Data for monetary consideration.
B. Submitting Requests Relating to Your Personal Data
Depending on your state of residency, you may have the right to submit certain requests relating to your Personal Data as described below. To exercise any of these rights, please submit a request through our Consumer Portal, or call us at 1-866-690-9108.
If you choose to exercise any of the privacy rights described below, you will not receive discriminatory treatment from us. This means that we will not deny providing our products or services to you, charge you different prices, or provide a different level or quality of products or services to you unless those differences are related to the value of your Personal Data.
Once we receive a request to know, to correct, or to delete, we must authenticate your identity before we can respond.
You may be required to provide the following information for authentication purposes:
- Your first and last name;
- Your email address; and
- Your telephone number.
If you submit either a request to access the Personal Data collected about you, or a request to delete sensitive, irreplaceable, or otherwise valuable Personal Information, you will be required to provide a signed declaration affirming your identity. The declaration is included on the online Consumer Request to Know Form and online Consumer Request to Delete Form, which you can access via the Consumer Portal.
Depending on your state of residency, you may be able to exercise certain privacy rights related to the Personal Data we maintain.
Right to Access and Data Portability. You have the right to confirm whether we are processing your Personal Data, to access your Personal Data, and to obtain a copy of Personal Data. You may also request that we send the copy of the Personal Data you provided to us in a portable format.
Right to Correct (Delaware, Montana, Nebraska, New Hampshire Oregon, Texas, and Virginia Only). You have the right to request that we correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and our purposes for processing it.
Right to Delete. You have the right to request that we delete your Personal Data.
Right to Opt Out. You have the right to opt out of the following uses of your Personal Data: (1) targeted advertising; (2) the sale of Personal Data; and (3) profiling in furtherance of decisions that produce legal or similarly significant effects. To opt out, please click here.
Right to Withdraw Consent. You have the right to withdraw a previously given consent for processing your Sensitive Personal Data for a specific purpose.
Right to Appeal (Delaware, Iowa, Montana, Nebraska, New Hampshire, Oregon, Texas, and Virginia Only). Sometimes we are unable to process requests relating to your Personal Data, in which case, your request will be denied. If you believe we denied your privacy rights request in error, you may appeal for reconsideration of your request using our webform or toll-free phone number.
Please note that if you make a privacy rights request, we will retain the Personal Data submitted in connection with your request for recordkeeping purposes.
6. How to Contact Us
If you have any questions about how we handle your Personal Information, please contact us at:
| Phone: | 1-866-690-9108 | ||
| Email: | privacy@massageenvy.com | ||
| Mail: | Massage Envy Franchising, LLC Attention: Guest Relations 14350 N. 87th Street, Ste. 200 Scottsdale, AZ 85260 |
II. MEF CALIFORNIA JOB APPLICANT NOTICE
MEF provides this California Applicant Privacy Notice (“MEF Job Applicant Notice”) to explain our practices regarding the collection of Personal Information of California MEF job applicants through our job application process, including our careers website, corporatecareers-massageenvy.icims.com (the “Job Portal”). This MEF Job Applicant Notice explains what Personal Information we collect about California applicants, why we collect it, how we use and share it, and the rights you have relating to your Personal Information under the California Consumer Privacy Act, as modified by the California Privacy Rights Act of 2020 (the “CCPA”). This MEF Job Applicant Notice applies to those applicants applying for a position with MEF, LLC and not with an independently owned and operated Massage Envy® franchised locations. If you are applying for a position with an independently owned and operated Massage Envy® franchised location, please contact the independently owned and operated Massage Envy® franchised location for their data practices.
As used in this MEF Job Applicant Notice, the term “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal Information does not include information that is publicly available, de-identified, or aggregated.
1. Personal Information We Collect and Why We Collect It
We may collect and we have collected, within the past 12 months, Personal Information about job applicants as follows:
|
Category of Applicant Personal Information |
Categories of Sources from which Applicant Personal Information was Collected |
Purposes for Collection |
|
Identifiers including real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, driver’s license number, or other similar identifiers |
|
We may use “Identifiers” for the following purposes: (i) to maintain your application records; (ii) to assess your eligibility for employment; (iii) to communicate with you regarding your application; (iv) to comply with applicable laws and regulations; (v) to detect and prevent fraud against you and/or us; (vi) as described to you when collecting your Personal Information; or (vii) for any other purpose, with your consent. |
|
Personal Information described in Cal. Civ. Code § 1798.80(e), including your name, signature, social security number, date of birth, address, telephone number, driver’s license or state identification card number, education, employment, and employment history |
|
We may use “Personal information described in Cal. Civ. Code § 1798.80(e) for the following purposes: (i) to maintain your application records; (ii) to assess your eligibility for employment; (iii) to communicate with you regarding your application; (iv) to comply with applicable laws and regulations; (v) as described to you when collecting your Personal Information; or (vi) for any other purpose, with your consent. |
|
Internet or other electronic network activity information, including browsing history, search history, and information regarding your interactions with our websites, applications, or advertisements |
|
We may use “Internet or other electronic networking activity information” for the following purposes: (i) to facilitate your use of our Job Portal; (ii) to provide you with tailored recommendations, and updates; (iii) to show you relevant ads while you are browsing the internet or using social media; (iv) to improve our Job Portal, set default options, and provide you with a better application experience; (v) to protect the security of our Job Portal; (vi) to detect and prevent fraud against you and/or us; (vii) as described to you when collecting your Personal Information; or (viii) for any other purpose, with your consent. |
|
Sensory data, including photographs and videos of you, and audio recordings as may relate to your application |
|
We may use “Sensory data” for the following purposes” (i) to manage the security of our premises and systems; (ii) to carry out video interviews; (iii) as described to you when collecting your Personal Information; or (iv) for any other purpose, with your consent. |
|
Professional or employment-related information, including: Skills, qualifications, work experience, references, recommendations, and other information included in a resume, CV, application form, or cover letter; Answers to behavioral or other screening questions in an application or interview; Information contained in any personal webpages or documents you choose to share with us; Information relating to professional licenses, training, disciplinary actions, and membership in professional organizations |
|
We may use “Professional or employment-related information” for the following purposes: (i) to open and maintain your application records; (ii) to assess your eligibility for employment; (iii) to comply with applicable laws and regulations; (iv) to detect and prevent fraud against you and/or us; (v) as described to you when collecting your Personal Information; or (vi) for any other purpose, with your consent. |
|
Inferences used to create a profile reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes |
|
We may use “Inferences” for the following purposes: (i) to assess your eligibility for employment; (ii) to manage the security of our premises and systems; or (iii) to detect and prevent fraud against you and/or us |
|
Sensitive Personal Information, including Social security, driver’s license, state identification card, or passport number, health information |
|
We may use certain “Sensitive Personal Information” for the following purposes: (i) to assess your eligibility for employment; (ii) to comply with applicable laws and regulations; (iii) to manage the security of our premises and systems; (iv) as described to you when collecting your Personal Information; or (v) for any other purpose, with your consent. |
We may collect the following information about you, which does not directly fall within the categories listed in the CCPA:
- Citizenship, immigration, visa status, and work authorization information (including information from related documents, such as your passport, driver’s license, or other identification, proof of residence, and proof of authorization to work in the United States);
- Languages spoken; or
- Criminal records information, including results of background checks obtained through government agencies such as the US Federal Bureau of Investigation.
Unless otherwise specified, the sources of this Personal Information, the purposes for which we use it, and the categories of persons to which we disclose it are the same as those listed for Professional or Employment-Related Information.
2. How Long We Keep Your Personal Information
We keep the categories of Personal Information described above for as long as is necessary for the purposes described in this Notice or otherwise authorized by law. This generally means holding the information for as long as one of the following apply:
- Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information;
- Your Personal Information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Information was collected;
- The information is reasonably required to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or
- We are otherwise required or permitted to keep your information by applicable laws or regulations.
Where information is used for more than one purpose, we will retain it until the purpose with the latest period expires. For more information about our retention policies, please contact us using the contact details below.
3. Disclosures of California Applicant Personal Information
Under California law, a “sale” of Personal Information does not necessarily involve an exchange of money. Instead, the term also includes disclosures of Personal Information to third parties under circumstances where the third parties may use the information for their own purposes.
The two charts below show the categories of Personal Information we have sold, shared with third parties for cross-context behavioral advertising, or disclosed to our service providers and contractors for a business or commercial purpose during the last 12 months. We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.
|
Sales and Sharing of Personal Information |
||||
|
Category of Personal Information or Sensitive Personal Information |
Sold? |
Shared for Cross-Context Behavioral Advertising? |
Categories of Third Parties to which the Information Was Sold or Shared |
Purposes for Selling / Sharing |
|
Internet or Other Electronic Network Activity Information |
Yes |
Yes |
Marketing, advertising, or social media companies |
Advertising |
|
Disclosure for a Business or Commercial Purpose |
|||
|
Category of Personal Information or Sensitive Personal Information |
Categories of Recipients to which the Information was Disclosed |
Purposes for Disclosure |
|
|
Personal Information |
|||
|
|
Identifiers |
• Service providers that help us to run our business • Governmental authorities |
• To maintain your application records • To assess your eligibility for employment • To communicate with you regarding your application • To comply with applicable laws and regulations • To detect and prevent fraud against you and/or us |
|
Personal Information described in Cal. Civ. Code § 1798.80(e) |
• Service providers that help us to run our business • Governmental authorities |
• To maintain your application records • To assess your eligibility for employment • To communicate with you regarding your application • To comply with applicable laws and regulations • To manage the security of our premises and systems • To detect and prevent fraud against you and/or us |
|
|
Internet or other electronic network activity information |
• Service providers that help us to run our business |
• To facilitate your use of our website • To provide you with tailored recommendations, and updates • To improve our website, set default options, and provide you with a better application experience • To protect the security of our website • To detect and prevent fraud against you and/or us |
|
|
Sensory Data |
• Service providers that help us to run our business |
• To manage the security of our premises and systems |
|
|
Professional or employment-related information |
• Service providers that help us to run our business • Governmental authorities |
• To maintain your application records • To assess your eligibility for employment • To comply with applicable laws and regulations |
|
|
Inferences |
• Service providers that help us to run our business |
• To assess your eligibility for employment • To manage the security of our premises and systems • To detect and prevent fraud against you and/or us |
|
|
|
Sensitive Personal Information |
• Service providers that help us to run our business • Governmental authorities |
• To assess your eligibility for employment • To comply with applicable laws and regulations |
4. Submitting Requests Relating to Your Personal Information
If you are a resident of California, you have the right to submit certain requests relating to your Personal Information as described below. To exercise any of these rights, please submit a request via email at peopleoperations@massageenvy.com or call us at 1-866-690-9108. We will confirm receipt of a request from you within ten (10) business days. This confirmation will provide information about how we will process the request, including a description of our verification process and an approximation of when we will send you a substantive response.
We will respond to a verifiable request to know, delete, or correct within forty-five (45) calendar days. If we cannot respond in that time, we will notify you in writing that we need an additional forty-five (45) calendar days and explain the reason for the needed additional time.
We will act upon an opt-out request or a request to limit as soon as commercially reasonable, but no later than fifteen (15) business days from the date we receive the request.
If we cannot comply with your request, we will explain why. If you have requested to know specific Personal Information we collected, we will provide that information to you via mail or email.
We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why and provide you with a cost estimate before completing the request.
Once we receive a request to know, correct, or to delete, we must verify your identity before we can respond.
You may be required to provide the following information for verification purposes:
- Your first and last name;
- Your email address; and
- Your telephone number.
An authorized agent is either a natural person or a business entity registered with the California Secretary of State that a consumer has authorized to act on his or her behalf.
You may use an authorized agent to submit a request to know, to correct, to delete, to limit, or to opt-out. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the authorized agent to provide either: (1) a power of attorney; or (2) proof of your written permission. In addition to proof of your written permission, we may require you to verify your own identity and directly confirm that you provided the agent permission to submit the request.
C. Your California Applicant Privacy Rights
Right to Know. You have the right to know what Personal Information we have collected about you, which includes:
(1) The categories of Personal Information we have collected about you, including:
a. The categories of sources from which the Personal Information was collected;
b. Our business or commercial purposes for collecting, disclosing (or selling or sharing, if applicable) Personal Information;
c. The categories of recipients to which we disclose Personal Information;
d. The categories of Personal Information that we sold, and for each category identified, the categories of third parties to which we sold that particular category of Personal Information; and
e. The categories of Personal Information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of Personal Information
(2) The specific pieces of Personal Information we have collected about you.
Right to Delete Your Personal Information. You have the right to request that we delete Personal Information we collected from you, subject to certain exceptions.
Right to Correct Inaccurate Information. If you believe that the Personal Information we maintain about you is inaccurate, you have the right to request that we correct that information.
Right to Opt Out of Sales and Sharing of Personal Information. You have the right to opt out of the sale of your Personal Information, and to request that we do not share your Personal Information for cross-context behavioral advertising. Some of the ways we use tracking technologies for advertising and marketing may be considered a “sale” or “share” under the CCPA. To opt out of the “sale” or “sharing” of Personal Information through tracking technologies, please click here. If you choose to use the Global Privacy Control (GPC) browser signal, or any other opt-out preference signal, you will be opted out of online, cookie-based sales or sharing of Personal Information, and will need to activate the signal for each browser you use. If you are a California consumer and wish to opt-out of the offline sale of your Personal Information, you may submit an opt-out request by clicking on the following link: Do Not Sell or Share My Personal Information.
Right to Limit Use and Disclosure of Sensitive Personal Information. We do not use or disclose Sensitive Personal Information for purposes to which the right to limit use and disclosure applies under the CCPA.
Right to Non-Discrimination for the Exercise of Your Privacy Rights. If you choose to exercise any of your privacy rights under the CCPA, you also have the right not to receive discriminatory treatment by us, including retaliation against you as a job applicant.
5. How to Contact Us
If you have any questions about how MEF, LLC handles your Personal Information as an applicant, please contact us at:
| Phone: | 1-480-366-4100 | ||
| Email: | peopleoperations@massageenvy.com | ||
| Mail: | Massage Envy Franchising, LLC Attention: Stacey Wallquist 14350 N. 87th Street, Ste. 200 Scottsdale, AZ 85260 |
Last Updated on: January 1, 2025