Last updated: October 12, 2026
Snake River Pool & Spa of Idaho, LLC (“Snake River Pool & Spa”, “SRPS”, “we”, “us” or “our”) sells and services hot tubs, swim spas, saunas and pools. We have showrooms in Boise, Meridian, Nampa, Twin Falls and Hailey, Idaho. Our website is https://thespateam.com (the “Site”). This policy explains what personal information we collect, how we use it, who receives it, how long we keep it, and the choices you have.
What changed in this version. This version replaces the policy dated September 1, 2026. It now covers text messaging, phone calls and call recording, and our staff app. It lists the tools found on the Site when this version was written, including Google Analytics 4 and Google Ads Enhanced Conversions, and explains that Google’s advertising-measurement tag may receive automatically detected contact details from submitted forms. Google hashes the fields it designates for hashing before they are sent. Those tools are on when you arrive, and this version no longer says that the cookie notice, a “Do Not Sell or Share” link or a Global Privacy Control signal switches them off. It no longer gives a fixed number of years for keeping records. It no longer says that the companies we use are barred from using information for their own purposes; some do, as Who we share information with explains. It no longer lists encrypted storage, access controls or monitoring as security measures, or says how card numbers are handled. It no longer has separate sections for California or for the EEA, the UK and Switzerland; the requests anyone can make are under Your choices.
This policy covers:
It does not cover websites and services run by other companies that we link to, such as a lender’s application page, Google Maps or social media sites. It also does not describe the records we keep as an employer about our staff and job applicants, apart from what the staff app handles.
Text messaging is also covered by our SMS/MMS Privacy Policy and our SMS/MMS Terms of Service.
When you visit or submit a form on the Site, the tools described in Tools on our website collect:
We receive information about you from:
We use personal information to:
The program. Our text messaging program is called Customer Care SMS/MMS. It is registered with the mobile carriers under the name Snake River Pool and Spa, LLC. That is the same company as Snake River Pool & Spa of Idaho, LLC.
How texts start. Texts between you and us start in one of four ways:
Your consent. The texting question on our forms is a Yes / No choice. Yes is not selected for you, and choosing No does not opt you in. Agreeing to texts is not a condition of buying anything. We do not use purchased, rented or third-party lead lists.
What we send. Customer care messages only. They are about your requests, quotes, appointments, orders, deliveries, installations, service work and support conversations, information you asked for, and requests for feedback after a service visit. We do not send marketing or promotional texts. We do not use texting for unsolicited advertising, third-party promotions or messages unrelated to your dealings with us.
How often, and what it costs. Message frequency varies with your requests, appointments, orders and service needs. Message and data rates may apply.
How to stop, and how to get help. Reply STOP to any text from us to opt out. STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, REVOKE and OPTOUT work too. You may get one message confirming your opt-out. After that we do not text that number unless you opt in again. To opt in again, text START to the number that texted you. For help, reply HELP or INFO, call (208) 468-8827 or email [email protected]. You can also call or email us to ask us to stop texting you.
Who handles your texts. Our staff read and answer texts in our company messaging tools, including the SRPS Aurora staff app. Twilio delivers the texts. A copy of each text, and of any photo or attachment sent with it, is kept in HubSpot, our customer-records system. A copy of each text is also posted in our company Slack workspace so that our team can see it and respond. Our texting database, and the photos and attachments sent by text, are stored with DigitalOcean. Telephone carriers carry the messages. We use customer text-message content and the consent records kept in our texting system to communicate with you about the customer care matters above and to run the program. We do not use that content or those stored consent records for advertising. A mobile number or other contact detail entered into a form on the Site is handled separately as described below.
Website-form advertising measurement. We do not sell or rent mobile phone numbers or use customer text-message content for advertising. When a Site form generates a Google Analytics event, Google Analytics may receive form-event details such as the form’s name, identifier, source, type and submission status. The public tag configuration does not show email addresses, phone numbers, names or postal addresses as parameters of those GA4 form-event tags. Separately, when the Site’s browser-recognized form-submit trigger fires, Google Ads Enhanced Conversions is configured to detect email addresses, phone numbers, names and postal-address fields automatically. The public tag configuration does not exclude particular form elements from that detection. This may include the same phone number a person uses for texting. Google says it hashes email addresses, phone numbers, names and street addresses with SHA-256 before they are sent, but does not hash country, state, city or ZIP code. The public container is not configured to send customer text-message content or the form’s Yes / No SMS consent choice through these Google tags. See Tools on our website.
Records. We keep SMS/MMS consent and messaging preference records as needed to run the program, document consent, honor opt-out requests, meet legal and carrier requirements, resolve disputes and keep business records.
More detail. Our SMS/MMS Privacy Policy and SMS/MMS Terms of Service also apply to text messaging.
Call details. When you call us or we call you, our phone system and the telephone carriers handle your phone number, any caller ID name sent with the call, the date, time and length of the call, and the team member on the call. We may match your number to your customer record so that the team member can see who is calling. When our own server sends a call alert to a team member’s iPhone or iPad, it also logs the call: the number, the name, the time and whether the call was answered.
Recording. Calls between our team and outside phone numbers are recorded automatically by our company phone system (3CX). Managers may also listen to calls while they are happening. We use recordings for quality and training, for record-keeping, and to help resolve disputes.
Transcripts and summaries. Our own in-house system makes written transcripts and summaries of recorded calls. It runs on a server we rent from DigitalOcean and uses Google BigQuery. We do not send call recordings to an outside AI company.
Calls from our ads. We use Google Ads to report which of our ads lead to phone calls. Google receives information about calls made from those ads.
How calls reach our team. Team members answer on desk phones or in our staff app, SRPS Aurora. Either way, the call runs through our company phone system.
We do not sell your personal information for money. We share it in the ways described here and in Tools on our website.
The main ones are:
These companies handle information under their own terms and privacy policies. Some of them also use information for their own purposes: Google and Microsoft for advertising, through the tools on the Site, and others for purposes such as keeping their services secure and improving their own products. See Tools on our website and “Artificial intelligence” below.
We do not sell or rent mobile phone numbers. We do not give customer text-message content or the consent records stored in our texting system to advertising companies, except that service providers help us deliver and manage texts and customer support, and we disclose records where the law requires it. Site forms are handled separately: Google Analytics may receive form-event details, and Google Ads Enhanced Conversions may automatically collect contact fields when the Site’s browser-recognized form-submit trigger fires. This can include the same phone number a person uses for texting. Google says it hashes email addresses, phone numbers, names and street addresses before they are sent, but does not hash country, state, city or ZIP code. The public container is not configured to send the form’s Yes / No SMS consent choice through these Google tags. See Tools on our website.
The Site uses tools from other companies. They load when you open a page. For visitors in the United States they are switched on from the first page view. The Site does not wait for you to agree.
The tools found on the Site when this version was written are:
Some product pages load pictures from storage at Amazon Web Services. Your browser sends your IP address there to fetch them.
What this means. Nobody pays us for your information. But Google and Microsoft collect information through these tools for measurement, advertising and their other stated purposes, and HubSpot may use what its tracking code collects to improve its own products. These companies may collect information about what you do online over time and across different websites. Some state privacy laws call that a “sale” or “sharing” of personal information, or “targeted advertising”. Google receives the GA4 event information and the Enhanced Conversions contact data described above. We do not sell or rent mobile phone numbers or give customer text-message content or the consent records stored in our texting system to advertising companies. However, Google Ads may automatically collect a phone number or other contact detail entered into a Site form, including the same phone number a person uses for texting.
How to limit these tools. The Site shows a cookie notice, and some pages have a “Cookie Settings” button from HubSpot. The choices they offer may not switch off the tools listed above. The Site is not set up to act on “Do Not Track” or Global Privacy Control signals from your browser. What you can do:
We do not use your personal information to train artificial-intelligence (AI) models. Some of the outside companies whose tools we use (see Who we share information with) may use the information they collect or handle for us to run and improve their own services. Under their own terms, that can include training their own machine-learning or AI models.
Our own in-house system uses AI to make the transcripts and summaries of recorded calls described under Phone calls.
We do not have a fixed period after which we delete information. We keep personal information for as long as we have a business or legal reason to keep it. This applies to inquiries, text conversations, call history and the logs our systems keep, among other records.
The reasons we keep a record include:
The companies behind the tools on the Site keep what their tools collect for the periods in their own policies.
You can ask us to delete your information at any time (see Your choices). Information we delete may remain in backup copies for a time.
We use reasonable safeguards designed to protect personal information. No way of sending or storing information is completely secure, and we cannot promise that unauthorized access will never happen.
What you should know:
Your choices
Your information. Wherever you live, you can ask us to:
How to ask. Email [email protected], call (208) 468-8827, or write to the address under Contact us. We may ask for details that let us match you to our records and check that the request is yours. We may need to keep some information. Examples are records of a purchase, service or warranty, records the law requires us to keep, and your text opt-out (so that we keep honoring it). We do not treat anyone worse for making a request.
State privacy laws. Several U.S. states have privacy laws that give their residents rights like these. They also give a right to opt out of targeted advertising and of the “sale” of personal information. Most of those laws apply only to businesses above a certain size. We believe we are below the size thresholds in California’s law. Whether or not one of these laws applies to us, we answer requests from anyone, as described above. We do not sell personal information for money. To limit advertising tools on the Site, see Tools on our website.
The Site, our text messaging program and our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it. SRPS Aurora is used only by our staff.
We operate in the United States, and the Site, our showrooms and our services are intended for customers in the United States. If you contact us from another country, your information will be processed in the United States and in other countries where our service providers operate.
We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page and describe material changes on this page.
What it is and who may use it. SRPS Aurora is our staff app for Android, iPhone, iPad, Apple Watch and Wear OS. Staff use it for customer texts, phone calls, email, calendar, Slack, pre-owned spa listings, a map and team games. The watch apps provide call and text controls through the paired phone; call audio stays on the phone or its audio route. Only our staff may use it, signed in with a Microsoft work account. It cannot create accounts, has no guest mode, is distributed privately and is not for children. In this section, “you” means a staff member.
Who publishes it. The app is published on the App Store under the developer account of Chris Rechenmacher, on behalf of Snake River Pool & Spa of Idaho, LLC, and on Google Play under the developer name Snake River Pool and Spa. Snake River Pool & Spa of Idaho, LLC is responsible for the app and for the information it handles.
Information about staff. The app and our server handle your name, work email address and Microsoft account ID; your extension, department and phone-line sign-in; what you write and send; your voice on calls; and, on iPhone and iPad, the device’s call-alert address (push token), device type, system version and app version. Our server also records when you first and last used the app or the texting inbox, and may keep a record of calls you ask it to place. Each customer text you send is stored with your name and work email address, and our texting reports count texts per team member. If you connect Slack, our server keeps your Slack user ID, name and an encrypted key. Game scores are shown by name to signed-in staff, and weekly winners may be posted in a company Slack channel. We use this to run the app and find faults. We do not sell it or use it for advertising.
Information about customers. The names, mobile numbers, texts, photos, contact records, caller details, call audio, emails and map addresses that staff work with. We use these as the rest of this policy describes.
Device permissions.
On Android the app also uses permissions that need no prompt: internet access and network status; its own calling account with Android; keeping the “ready for calls” service running (also after a restart); showing an incoming call on a locked screen and switching the screen off at your ear; call sound and vibration; and the fingerprint or face check above. Microsoft’s sign-in library, which is built into the app, also declares NFC for its security-key component. The app’s own code does not use NFC. The app receives only the photos you pick. It does not ask for location, contacts, call history, text messages, Bluetooth or an advertising identifier. You can turn permissions off in your device settings.
Services the app talks to.
The outside companies named here handle the information under their own terms and privacy policies. We rely on the security and privacy commitments in those terms to give the information the same protection this policy describes.
Calls. Calls in the app go through the company phone system, which records them like any other company call (see Phone calls). The app itself stores no call audio. The connection between the app and the phone system is not encrypted. That covers your phone-line sign-in, the numbers you dial and call audio. Other internet traffic between the app and the services above uses HTTPS. Watch call and conversation details travel over Apple’s or Google’s paired-device transport between the phone and watch.
On your device. On Android phones, iPhone, iPad and Wear OS, displayed texts, emails, calendar entries and Slack messages stay in memory only. When you send a text from Wear OS, the paired Android phone temporarily keeps the signed request, including the customer number or conversation reference and message, in the app’s private, backup-disabled work queue while it completes a bounded send or retry. The request is removed when that work finishes or finally fails, and sign-out or an account change cancels and purges the queue. Apple Watch temporarily stores a short-expiring display snapshot with call status and a limited set of recent-conversation details. That snapshot is kept in protected Application Support storage with complete file protection, is excluded from backups, and is removed when it expires, the account signs out or changes, or the paired connection is removed. Microsoft’s sign-in library keeps your Microsoft sign-in on the phone or tablet. The phone or tablet’s protected storage holds the app’s pass for our server, its copy of your phone-line password, recent contacts and draft listings. The app does not encrypt these ordinary phone or tablet app files: the recent-calls list; draft photos; on Android, the other phone-line settings (such as your extension and the phone system’s address); and on iPhone and iPad, the calling component’s settings file, which also holds your phone-line sign-in.
Signing out removes your Microsoft sign-in, the app’s pass for our server, your extension and the phone-line sign-in the app stores, the contacts and recent-calls lists, the pre-owned pairing on the device, watch call-and-conversation projections, the Android phone’s temporary Wear OS text queue, and photos and unsent texts in memory. It asks before deleting draft listings. If a different person signs in, the previous person’s items are removed first, except drafts. On iPhone and iPad, signing out also asks our server to stop call alerts to the device. An alert that still arrives is shown without the caller’s name or number and ended.
Signing out leaves game records, a few app settings, calls already in the iPhone’s own Phone app, the web browser’s saved sign-ins, the device’s entry on the pre-owned listings website, and your Slack connection on our server. On iPhone and iPad it also leaves the call-alert address and the calling component’s settings file, which may still hold phone-line details.
No advertising or tracking. The app has no advertising and no advertising identifier, and it does not track you across other companies’ apps or websites. It has no analytics or crash-reporting kit of its own. Google’s map component in the Android app reports to Google by itself, as described above. This page opens in your web browser, where Tools on our website applies.
Your account and your information. Our Microsoft administrator creates and removes your work account; the app cannot. Removing the account stops new sign-ins. It does not by itself delete what our server holds: your staff record, phone-line record, call-alert registration, Slack connection and game scores. These have no fixed deletion schedule (see How long we keep information). To ask us to remove them, or to ask what we hold, email [email protected]. Your name stays on customer texts you sent. To withdraw your permission, turn off a device permission, or sign out and then delete the app. You can review the app’s Microsoft access at https://myapps.microsoft.com.
If you have questions, or want to make a request about your information, contact us:
Our staff can use the same contact details for questions about SRPS Aurora.