Privacy Policy

Last updated: August 27, 2026

This Privacy Policy explains how Body Studio Wellness LLC ("MedSpa Blueprint," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit medspablueprint.co (the "Site"), purchase our courses and digital products, book coaching, join our community, subscribe to our emails, or use MedSpa Blueprint AI (together, the "Services").

If you do not agree with this Policy, please do not use the Services.

1. Who we are and how to reach us

Body Studio Wellness LLC 7901 4th St N STE 300, St. Petersburg, FL 33702, USA Privacy enquiries: notify@medspablueprint.ai General support: notify@medspablueprint.ai

We are the controller of the personal information described in this Policy.

2. Information we collect

Information you give us directly

Identity and contact information — name, email address, postal address, telephone number.
Account information — username, password, profile details, and your progress through courses.
Purchase information — the products you buy, order history, billing address, and the last four digits and card type of your payment method. We do not receive or store your full payment card number. Payments are processed by our payment providers (see Section 5).
Form submissions — information you provide through waitlists, applications, quizzes, assessments, surveys, and contact forms, including the franchise application and coaching applications.
Communications — emails, messages, support requests, comments, and community posts.
Booking information — scheduling details for coaching sessions and consultations.
MedSpa Blueprint AI inputs — see Section 3 and our separate AI Privacy Notice.

Information collected automatically

Device and usage data — IP address, browser type and version, operating system, device identifiers, referring URL, pages viewed, time spent, and clicks.
Cookies and similar technologies — see our Cookie Policy.
Email engagement — whether you opened an email and which links you clicked.

Information from other sources

Payment providers, who confirm whether a transaction succeeded.
Advertising and analytics partners, where you have consented to such tracking.
Affiliates and referral partners, who may pass your details when you click their link.

We do not knowingly purchase or rent marketing lists.

3. How we use your information

Purpose	Examples
Deliver what you bought	Grant course access, run coaching bookings, provide MedSpa Blueprint AI, host the community
Process payments	Charge you, manage payment plans, issue receipts, handle disputes
Support you	Answer questions, resolve technical problems, act on your requests
Communicate	Send transactional emails, service notices, and — where permitted — marketing emails
Improve the Services	Understand which pages and products work, fix errors, develop new offerings
Advertise	Measure campaigns and, where you have consented, show you relevant ads
Comply and protect	Meet legal obligations, enforce our terms, prevent fraud and abuse, establish or defend legal claims

We do not sell your personal information for money. Depending on your state, the use of advertising cookies may be treated as "sharing" or "targeted advertising", see Section 8 for how to opt out.

We do not use your personal information to train third-party general-purpose AI models.

4. Marketing communications

If you buy from us, join a waitlist, download a resource, or otherwise opt in, we may send you marketing emails about our products and services.

You can opt out at any time by clicking "unsubscribe" in any marketing email, or by emailing notify@medspablueprint.ai. We honour opt-out requests promptly. You will still receive transactional messages — receipts, course access, booking confirmations, and important service notices — because these are not marketing.

We send marketing only about the products and services you signed up to hear about. We do not repurpose information collected for one purpose to market something unrelated without your separate agreement.

5. When we share information

We share personal information only as described here.

Service providers acting on our behalf

Website, course, and community platform providers: which host the Site, our courses, our checkout, and our email system.
Payment processors: Stripe and/or PayPal, which process card and account payments under their own privacy policies.
Email and scheduling tools used to deliver and book our Services.
Analytics providers, such as Google Analytics.
Advertising platforms, such as Meta, where you have consented.
Professional advisers: lawyers, accountants, and auditors, under duties of confidentiality.

Affiliated businesses. We may share limited information with businesses affiliated with us where you have engaged with those businesses or consented.

Legal and safety. We may disclose information where required by law, valid legal process, or to protect the rights, property, or safety of any person.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

We do not share your personal information with third parties for their own independent marketing.

6. International data transfers

We operate in the United States, and our service providers may process data in the United States and elsewhere. If you provide information to us from outside the United States, that information will be transferred to and processed in the United States, where privacy laws may differ from those in your country and may not offer the same protections.

Where we transfer personal information internationally, we rely on appropriate safeguards, including contractual protections with our service providers.

Wherever you are located, you may exercise the rights described in Section 8 by contacting notify@medspablueprint.ai. Where the law of your country grants you additional rights — including an unconditional right to require us to stop using your data for direct marketing — we will honour those rights.

7. How long we keep information

We keep personal information for as long as needed for the purposes described in this Policy.

Account and course access records, for as long as your account is active, plus a reasonable period afterwards.
Transaction and tax records, generally seven years, as required by law.
Marketing contact records, until you unsubscribe, plus a suppression record so we do not contact you again.
Support correspondence, generally three years.

When we no longer need information, we delete it or de-identify it.

8. Your privacy rights

All users. You may ask us to access, correct, delete, or provide a copy of your personal information, and you may object to or restrict certain uses. Contact notify@medspablueprint.ai. We will verify your identity before acting, and we will not discriminate against you for exercising your rights.

Residents of US states with comprehensive privacy laws — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as those laws take effect — additionally have the right to:

Know what personal information we collect, use, and disclose.
Delete personal information we hold about you, subject to exceptions.
Correct inaccurate personal information.
Obtain a portable copy of your personal information.
Opt out of targeted advertising and of any "sale" or "sharing" of personal information as those terms are defined in your state's law.
Appeal a decision we make about your request. If we deny a request, our response will explain how to appeal.

To opt out of targeted advertising, use the cookie preferences control on the Site, or email notify@medspablueprint.ai with the subject line "Opt Out of Targeted Advertising." We also honour Global Privacy Control (GPC) signals sent by your browser.

California residents may designate an authorised agent to make requests. We do not knowingly sell or share the personal information of consumers under 16.

Residents of the EEA or United Kingdom. Where GDPR or UK GDPR applies, our legal bases are: performance of a contract (delivering what you bought), legitimate interests (improving and securing the Services, and direct marketing to existing customers), consent (advertising cookies and, where required, marketing email), and legal obligation (tax and accounting records). You have the right to lodge a complaint with your supervisory authority.

Residents of other countries. See Section 6. Where your national law grants you rights beyond those described above, we will honour them on request.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and reliance on established platform and payment providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account password confidential.

If a breach affecting your personal information occurs, we will notify you and any relevant regulator as required by applicable law.

10. Children

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact notify@medspablueprint.ai and we will delete it.

11. Third-party sites

The Site links to websites we do not control, including bodystudioskincare.com, bscpeptides.com, scheduling tools, and social media. This Policy does not apply to those sites. Review their privacy policies before providing information to them.

12. Changes to this Policy

We may update this Policy from time to time. We will post the revised version here with a new "Last updated" date. If changes are material, we will provide additional notice, such as by email or a prominent notice on the Site. Your continued use of the Services after an update means you accept the revised Policy.