Privacy Policy
ReGEN Wellness Lab
Effective Date: March 20, 2026 | Last Updated: March 20, 2026
NOTE: Pennsylvania Compliance Notice: This policy has been drafted to align with (1) Pennsylvania's
Breach of Personal Information Notification Act (BPINA), as amended by Senate Bill 824 (effective
September 26, 2024), and (2) Pennsylvania House Bill 78 (Consumer Data Privacy Act), which passed the
PA House and is pending Senate approval as of March 2026. We recommend annual legal review to stay
current with any changes.
​
ReGEN Wellness Lab ("we," "us," or "our") is committed to protecting the privacy of our clients and
website visitors. This Privacy Policy explains what personal information we collect, how we use it,
how we protect it, and your rights regarding that information. By using our services, booking an
appointment, or visiting our website, you agree to the practices described in this policy.
1. Information We Collect
We collect the following categories of personal information when you interact with ReGEN Wellness
Lab. In accordance with Pennsylvania's data minimization principles, we only collect information that
is reasonably necessary to provide our services.
• Name and Contact Information: Full name, email address, phone number, and mailing address —
collected when you register, book an appointment, or contact us.
• Payment Information: Credit card and billing details processed securely at the time of purchase
or membership enrollment. We do not store full card numbers on our systems.
• Sensitive Health and Intake Information: Health history, medical conditions, contraindications,
injuries, and signed waivers collected prior to using wellness modalities (red light therapy, cold
plunge, infrared sauna, compression, etc.) to ensure your safety. This is classified as "sensitive
data" under applicable Pennsylvania law and is handled with heightened care.
• Booking and Usage Data: Appointment history, service selections, membership plan details,
session frequency, and studio visit records.
• Website Usage Data: Browser type, device information, pages visited, referral source, and IP
address collected automatically when you visit our website.
2. Sensitive Data and Consent
Under Pennsylvania privacy law, health and medical information is classified as "sensitive data."
Before we collect your health intake information, we will obtain your explicit, informed consent. You
have the right to withdraw this consent at any time. If consent is withdrawn, we may not be able to
provide certain services that require a safety screening.
ReGEN Wellness Lab Privacy Policy — Pennsylvania Compliant
Health intake forms and waivers are used solely to provide safe and appropriate wellness services.
This information is kept strictly confidential, is not shared with any third party except where
required by law or in the event of a medical emergency, and is accessible only to authorized staff
members.
3. How We Use Your Information
We use your personal information only for the purposes disclosed at the time of collection, which
include:
• Scheduling and managing appointments and memberships
• Processing payments and sending billing confirmations
• Assessing health intake forms to provide safe and appropriate services
• Communicating with you about bookings, promotions, and studio updates
• Complying with legal obligations and maintaining accurate business records
• Improving our website, services, and overall client experience
• Sending marketing communications (with your consent — you may opt out at any time)
• Responding to your requests, complaints, or inquiries
We will not use your personal information for any purpose that is materially different from those
listed above without first obtaining your consent.
4. Third-Party Service Providers
We share information only as necessary to operate our business. The following third-party platforms
may process your personal data on our behalf as data processors:
• Wix (wix.com): Powers our website and point-of-sale system. Wix may collect website usage
data and process payments through Wix POS. See Wix's Privacy Policy at wix.com/about/privacy.
• Social Media Platforms (Facebook, Instagram, TikTok): We maintain business pages and may run
advertising campaigns. These platforms may use tracking pixels or cookies when you interact
with our content. Each platform has its own privacy policy governing that data.
• Email Marketing Provider: We may use a third-party email service to send newsletters and
promotional messages to clients who have opted in to receive communications.
We do not sell, rent, or trade your personal information to any third parties for their own marketing
or commercial purposes. When we share data with service providers, we require them to process it
only on our behalf and in accordance with our instructions.
​
​
5. Cookies, Tracking, and Targeted Advertising
Our website uses cookies and similar tracking technologies to improve your browsing
experience,analyze site traffic, and support advertising campaigns on social media platforms
including Facebook, Instagram, and TikTok.
Opt-Out of Targeted Advertising: You have the right to opt out of the use of your personal data for
targeted advertising purposes. To exercise this right, please contact us at the email address listed in
Section 11, or adjust your preferences using a Global Privacy Control (GPC) signal in your browser. We
will honor valid opt-out signals in accordance with applicable Pennsylvania law.
You may also adjust cookie preferences through your browser settings at any time. Note that
disabling cookies may affect certain website functionality.
6. Data Minimization
We are committed to collecting and retaining only the personal information that is reasonably
necessary to provide the specific services you request. We do not collect personal data
speculatively or in excess of what is needed. When data is no longer necessary for the purpose for
which it was collected, we will securely delete or de-identify it.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this
policy and to comply with applicable legal and tax obligations:
Data Type Retention Period
Booking records and appointment history 3 years minimum
Health intake forms and waivers 3 years minimum (or as required by law)
Payment records 7 years (tax compliance)
Website usage / cookie data Up to 12 months
Marketing opt-in/opt-out records Duration of relationship + 3 years
​
You may request early deletion of your data at any time (see Section 9).
8. Data Security and Breach Notification
We take reasonable administrative, technical, and physical measures to protect your personal
information from unauthorized access, loss, misuse, or disclosure. Payment information is processed
through secure, PCI-compliant payment systems. Access to sensitive data is limited to authorized
staff with a need to know.
Data Breach Notification (Pennsylvania BPINA): In the event of a data breach that compromises your
personal information in unencrypted form, we will notify affected Pennsylvania residents without
unreasonable delay (generally within 60 days of confirming the breach). If more than 500
Pennsylvania residents are affected, we will also notify the Pennsylvania Attorney General's Office
concurrently with individual notifications, as required by the Breach of Personal Information
Notification Act (BPINA), as amended by Senate Bill 824 (2024).
If a breach involves your Social Security number, bank account number, or driver's license number,
we will provide you with access to a free credit report and 12 months of credit monitoring services
at no cost to you, as required by Pennsylvania law.
While we take data security seriously, no method of transmission over the internet is 100% secure
and we cannot guarantee absolute security.
9. Your Pennsylvania Privacy Rights
As a Pennsylvania resident, you have the following rights regarding your personal information. These
rights align with Pennsylvania's existing privacy law and are being prepared for compliance with the
Pennsylvania Consumer Data Privacy Act (HB 78) currently pending in the state Senate:
• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request that inaccurate or incomplete information be corrected.
• Right to Deletion: Request that we delete your personal data, subject to legal retention
obligations.
• Right to Data Portability: Request a copy of your data in a commonly used, machine-readable
format.
• Right to Opt-Out of Targeted Advertising: Request that we stop using your data for targeted
advertising or profiling.
• Right to Withdraw Consent: Withdraw consent to the processing of sensitive health data at any
time. We will cease processing within 15 days of receiving your request.
• Right to Non-Discrimination: We will not deny you services, charge different prices, or treat you
differently for exercising any of these rights.
• Right to Appeal: If we deny your request, you have the right to appeal our decision. Submit your
appeal to the contact address in Section 11 and we will respond within a reasonable timeframe.
TIMELINE: Response Timeline: We will respond to all valid privacy rights requests within 45 days of
receipt, as required by Pennsylvania law. We may extend this period by an additional 45 days if
reasonably necessary, in which case we will notify you of the extension and reason within the initial
45-day window. Rights requests may be submitted free of charge up to twice per year.
To submit a privacy rights request, please contact us using the information in Section 11.
10. Children's Privacy
Our services are intended for adults 18 years of age and older. We do not knowingly collect personal
information from individuals under the age of 18. If you believe we have inadvertently collected such
information, please contact us immediately and we will promptly delete it. We do not engage in
targeted advertising directed at individuals under the age of 16.
ReGEN Wellness Lab Privacy Policy — Pennsylvania Compliant
​
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, business
operations, or applicable legal requirements — including any final enactment of Pennsylvania's
Consumer Data Privacy Act (HB 78). When we make material changes, we will update the "Last
Updated" date at the top of this document and, where appropriate, notify you by email or a notice
on our website. We encourage you to review this policy periodically.
12. Contact Us and Submit Privacy Requests
For questions about this Privacy Policy, to exercise your privacy rights, or to submit a data rights
request, please contact us:
ReGEN Wellness Lab
Erie, Pennsylvania
Email: info@regenwellnesslab.com
Website: www.regenwellnesslab.com
ReGEN Wellness Lab | Erie, Pennsylvania | regenwellnesslab.com