Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.

Information We Collect

We collect information you provide directly to us when using our spa massage services. This includes personal information necessary for appointment scheduling, service delivery, and customer care.

Personal Information

  • Name, email address, and phone number for appointment booking
  • Health information relevant to massage therapy services
  • Payment information for service transactions
  • Communication preferences and service history
  • Feedback and reviews about our services

Automatically Collected Information

When you visit our website, we may automatically collect certain technical information including your IP address, browser type, device information, and website usage patterns through cookies and similar technologies.

How We Use Your Information

We use the collected information for legitimate business purposes related to providing exceptional spa and massage services:

  • Scheduling and managing your appointments
  • Providing personalized massage therapy services
  • Processing payments and maintaining transaction records
  • Communicating about appointments, services, and promotions
  • Improving our services based on customer feedback
  • Ensuring health and safety compliance
  • Maintaining business records and analytics

Data Protection and Security

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

Technical Safeguards: We use encryption, secure servers, and access controls to protect your data. Payment information is processed through secure, PCI-compliant systems.

  • Regular security assessments and updates
  • Staff training on data protection protocols
  • Limited access to personal information on a need-to-know basis
  • Secure storage of physical and electronic records
  • Regular data backup and recovery procedures

Your Rights and Choices

Under applicable privacy laws, including GDPR, you have several rights regarding your personal information:

Access and Portability

You have the right to request access to your personal information and receive a copy of the data we hold about you in a portable format.

Correction and Updates

You may request correction of inaccurate personal information or update your details at any time by contacting our staff.

Deletion and Erasure

You have the right to request deletion of your personal information, subject to legal and business requirements for record retention.

Processing Restrictions

You may request restrictions on how we process your personal information in certain circumstances.

Marketing Communications

You can opt out of marketing communications at any time while still receiving essential service-related communications.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:

  • With your explicit consent
  • To comply with legal obligations or court orders
  • With service providers who assist in business operations under strict confidentiality agreements
  • In case of business transfer, merger, or acquisition
  • To protect our rights, property, or safety, or that of our customers

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Health-related information may be retained longer as required by applicable healthcare regulations.

When personal information is no longer needed, we securely delete or anonymize it according to our data retention schedule and applicable legal requirements.

International Data Transfers

If we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your data according to applicable privacy laws and regulations.

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable laws. We will notify you of material changes through our website or direct communication. Your continued use of our services after such updates constitutes acceptance of the revised policy.

This Privacy Policy is effective as of the date of publication and governs our collection, use, and protection of your personal information.