Introduction
At White Orchid Spa, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book our services, or visit our spa.
By using our services, you agree to the collection and use of information in accordance with this policy. We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
Our Commitment
We treat your personal information with the same care and confidentiality that we provide in our spa services. Your trust is important to us.
Information We Collect
We collect several types of information for various purposes to provide and improve our services to you:
Personal Information
- Contact Information: Your name, email address, phone number, and postal address.
- Booking Information: Appointment details, treatment preferences, and special requests.
- Payment Information: Credit/debit card details, billing address, and transaction history.
- Health Information: Medical conditions, allergies, or health concerns relevant to your treatments (collected with your consent).
- Demographic Information: Age, gender, and preferences to personalize your spa experience.
Automatically Collected Information
- Usage Data: How you access and use our website, including IP address, browser type, pages visited, and time spent.
- Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track activity on our website and hold certain information.
- Device Information: Information about the device you use to access our services, including device type, operating system, and unique device identifiers.
How We Use Your Information
We use the collected information for various purposes:
| Purpose | Description |
|---|---|
| Service Provision | To process bookings, provide treatments, and manage appointments. |
| Communication | To send appointment confirmations, reminders, and service updates. |
| Personalization | To tailor treatments and recommendations based on your preferences and history. |
| Payment Processing | To process transactions and manage billing. |
| Marketing | To send promotional offers, newsletters, and updates (with your consent). |
| Improvement | To analyze usage patterns and improve our services and website. |
| Compliance | To comply with legal obligations and protect our legal rights. |
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- Service Providers: With trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.
- Legal Requirements: When required by law or to respond to legal process, protect our rights, or ensure the safety of our customers or the public.
- Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- With Your Consent: We may disclose your personal information for any other purpose with your explicit consent.
Confidentiality Assurance
All our staff members are trained in data protection and confidentiality. Your personal and health information is accessed only by authorized personnel who need it to perform their duties.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- Encryption of sensitive data during transmission and storage
- Regular security assessments and vulnerability testing
- Access controls and authentication procedures
- Secure payment processing systems
- Regular staff training on data protection
- Physical security measures at our spa locations
While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. No method of transmission over the Internet or electronic storage is 100% secure.
Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal information:
- Right to Access: You have the right to request copies of your personal information.
- Right to Rectification: You have the right to request correction of any information you believe is inaccurate or incomplete.
- Right to Erasure: You have the right to request that we delete your personal information, under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information, under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal information, under certain conditions.
- Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
If you would like to exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.
Types of Cookies We Use:
- Essential Cookies: Necessary for the website to function properly.
- Analytics Cookies: Help us understand how visitors interact with our website.
- Preference Cookies: Remember your preferences and settings.
- Marketing Cookies: Used to deliver relevant advertisements and measure their effectiveness.
Third-Party Websites
Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.
If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
When we no longer need to use your information, we will remove it from our systems and records or take steps to anonymize it so that you can no longer be identified from it.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, your personal information, or if you wish to exercise your data protection rights, please contact us:
- Data Protection Officer: Privacy Team
- Email: privacy@whiteorchidspa.com
- Phone: +91 9311794500
- Address: Gurgaon Sector 46, Gurgaon, India
- Hours: Monday to Sunday, 10:00 AM - 9:00 PM
We aim to respond to all privacy-related inquiries within 7 business days.
Last Updated
This Privacy Policy was last updated on January 1, 2025. We recommend reviewing this page periodically for any changes.