Privacy Policy

Last updated: September 1, 2026

Snake River Pool & Spa, LLC (“Snake River Pool & Spa,” “we,” “us,” or “our”) operates the website https://thespateam.com (the “Site”) and the retail showrooms located in Boise, Meridian, Nampa, Twin Falls, and Hailey, Idaho. This Privacy Policy explains what information we collect about you, how we use it, who we share it with, and the choices you have regarding your information. By using the Site or our services you agree to this Privacy Policy.

1. Information We Collect

1.1 Information you provide directly

• Contact and lead information — when you submit a web form, request a quote, book a service, subscribe to updates, or contact us through live chat, we collect your name, email address, phone number, mailing address, and any additional information you choose to share (e.g., product interests, service history, message contents).
• Purchase and financing information — when you place an order or apply for financing through the Site, we collect billing and shipping addresses, order details, purchase history, and, where applicable, information required to route your financing application to a third-party lender. We do not store full payment card numbers on our servers; those are handled by our PCI-compliant payment processors.
• Account information — if you create a customer account, we store your username, hashed password, and preferences.
• SMS/MMS opt-in — if you opt in to text messages, we collect your mobile number and consent record. See our SMS/MMS Terms of Service for full details on messaging.

1.2 Information collected automatically

• Device and browser data — IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, time spent on pages, and click paths.
• Cookies and similar technologies — we and our service providers set first-party and third-party cookies, web beacons, pixels, and local storage entries for essential functionality, analytics, advertising, and personalization. See Section 5 for details and your choices.
• Location data — approximate geographic location derived from your IP address. If you enable precise location on your device for a specific feature (e.g., store finder), we may collect that too.

1.3 Information from third parties

We receive information about you from third parties including advertising networks (Google Ads, Meta), analytics providers (Google Analytics), our customer relationship management platform (HubSpot), our e-commerce platform (WooCommerce and its integrations), our SMS delivery vendor, our financing partners, and public sources such as Google Business Profile reviews.

2. How We Use Your Information

• To provide, operate, and improve the Site and our services.
• To fulfill orders, schedule deliveries and installations, complete service work, and communicate with you about appointments, orders, and support requests.
• To respond to your inquiries, quotes, and customer support requests.
• To send you marketing communications (email, SMS if opted in, direct mail) about products, promotions, and services. You may opt out at any time (see Section 8).
• To personalize your experience on the Site, remember your preferences, and show you more relevant content and ads.
• To measure and analyze site performance, campaign effectiveness, and conversion metrics.
• To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
• To comply with legal obligations, resolve disputes, and enforce our agreements.

3. Legal Bases (EEA/UK Residents)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal information under one or more of the following legal bases: (a) performance of a contract to which you are a party, (b) your consent (which you may withdraw at any time), (c) our legitimate interests in operating and improving our business, provided those interests are not overridden by your rights, or (d) compliance with a legal obligation.

4. How We Share Your Information

We share your information only in the categories below. We do not sell your personal information for money.

• Service providers — vendors who process data on our behalf and are contractually restricted from using it for their own purposes. Categories include: hosting and infrastructure (Amazon Web Services, Cloudflare); e-commerce (WooCommerce); CRM and marketing automation (HubSpot); analytics (Google Analytics 4); advertising (Google Ads, Meta); email delivery (SMTP2GO); SMS delivery (our messaging vendor); payment processing (Stripe and card processors used by our financing partners); and Google Cloud Platform services.
• Financing partners — when you submit a financing application we share the application data with the lender you selected.
• Manufacturers and warranty providers — when a service call, warranty claim, or delivery requires it, we share the minimum information necessary with the relevant manufacturer (Caldera Spas, Hot Spring, Olhausen, Brunswick, and others).
• Advertising partners — we share pseudonymous identifiers (such as hashed emails or click IDs) with advertising platforms so we can measure conversions and show ads to relevant audiences. Under some U.S. state laws this activity is considered a “sale” or “sharing” of personal information; see Section 7 for your rights and opt-out options.
• Legal and safety — if required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect the rights, property, or safety of Snake River Pool & Spa, our customers, or the public.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
• With your consent — in any other case where you direct us to share your information.

5. Cookies, Analytics, and Advertising

The Site uses cookies and similar technologies for essential functionality, analytics, and advertising. Third-party services active on the Site may include:

• Google Analytics 4 and Google Tag Manager — usage measurement and event tracking.
• Google Ads, Meta Pixel, and other advertising pixels — conversion measurement and audience building.
• HubSpot — form tracking, lead attribution, and marketing automation.
• Cookie consent management — a cookie banner records your preferences and controls which non-essential cookies fire.

You can manage cookies through your browser settings, our on-site cookie banner (where present), or the opt-out tools listed in Section 7. Disabling essential cookies may break parts of the Site.

6. Data Retention

We retain personal information for as long as is reasonably necessary to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Typical retention periods:

• Lead and inquiry data: 7 years, or until you request deletion.
• Order and warranty records: 7 years for tax and warranty support.
• Marketing preferences and opt-out records: retained indefinitely so we honor your choice.
• Website analytics: up to 26 months by default in Google Analytics.
• SMS consent and opt-out records: retained indefinitely for compliance.

7. Your Privacy Rights

7.1 All users

You may request access to, correction of, or deletion of your personal information by contacting us using the details in Section 11. We will respond within the timeframes required by applicable law.

7.2 California residents (CCPA/CPRA)

If you are a California resident, you have the right to (a) know what personal information we have collected about you and the categories of sources, purposes, and third parties with whom we share it, (b) request deletion of your personal information, (c) request correction of inaccurate personal information, (d) opt out of the “sale” or “sharing” of your personal information (including for cross-context behavioral advertising), and (e) limit our use of sensitive personal information. We do not use or disclose sensitive personal information for purposes that require the right to limit under the CPRA. To exercise these rights, contact us at [email protected] or use the “Do Not Sell or Share My Personal Information” link where available on the Site. We will not discriminate against you for exercising your rights.

7.3 EEA, UK, and Switzerland residents (GDPR/UK GDPR)

You have the right to access, rectify, erase, restrict processing of, port, and object to processing of your personal information, and to withdraw consent at any time. You also have the right to lodge a complaint with your supervisory authority.

7.4 Other U.S. state rights

Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws have similar rights to access, delete, correct, and opt out of targeted advertising and sales, subject to each state’s specific definitions and thresholds.

7.5 Opt-outs

• Email marketing: click the unsubscribe link in any marketing email, or contact us.
• SMS: reply STOP to any message from us.
• Advertising cookies: use the Google Analytics opt-out, the DAA WebChoices tool, or your browser’s Global Privacy Control setting, which we honor as an opt-out signal on the Site.

8. Children’s Privacy

The Site is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect your personal information, including TLS encryption in transit, encrypted storage for sensitive fields, access controls, and monitoring. No system can guarantee absolute security; we cannot promise that unauthorized access, use, or disclosure will never occur.

10. International Data Transfers

We are based in the United States. If you are outside the United States, you understand that we will process your personal information in the United States and in other countries where our service providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

11. Contact Us

If you have questions or want to exercise a privacy right, contact us:

Snake River Pool & Spa, LLC
Attn: Privacy
1340 S Orchard St
Boise, ID 83705
Email: [email protected]
Phone: (208) 468-8827

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will be highlighted on the Site or communicated to you if you have an account. Your continued use of the Site after the effective date constitutes your acceptance of the updated Policy.