Privacy Policy

Privacy Policy for Wellness Spa

Introduction

Welcome to https://wellness-spa.storysurge.net (hereafter referred to as “Wellness Spa,” “we,” or “our”). We are dedicated to maintaining a transparent and secure online environment for our users, ensuring their privacy is respected at all times. This Privacy Policy outlines our practices regarding the collection, handling, and protection of personal data in compliance with various international privacy laws, including but not limited to:

  • Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
  • Quebec Law 25 on the protection of personal information in the private sector
  • General Data Protection Regulation (GDPR) of the European Union (EU)
  • General Data Protection Law (LGPD) of Brazil
  • California Consumer Privacy Act (CCPA/CPRA), California, USA
  • Colorado Privacy Act (CPA), Colorado, USA
  • Utah Consumer Sales Practice Act (UCPA), Utah, USA
  • Connecticut Personal Data Protection Act (CTDPA), Connecticut, USA
  • Virginia Consumer Data Protection Act (VCDPA), Virginia, USA
  • Protection of Personal Information Act (POPIA), South Africa

Scope

This Privacy Policy is applicable to all aspects of our online presence, including but not limited to:

Please be aware that this policy does not extend to third-party platforms, websites, applications, or services that you access through links on our site. These external entities have their own privacy policies, and we encourage you to review them before providing any personal information.

Processing Activities

This Privacy Policy outlines the practices related to:

  • Using our Applications and Services: As an authorized user, when you interact with our applications, access services, or utilize our products.
  • Website Visits: When you visit our websites, we collect data as described in the following sections.
  • Communications: If you choose to receive newsletters, emails, calls, or SMS from us, we will process your contact information accordingly.

Personal Data Collection

We may gather various types of personal data about our users, including:

  • Account Information: Details related to your user account creation and management.
  • Payment Information: Credit card details and billing addresses used for transactions.
  • Financial Information: Banking information for direct debit or electronic payments.
  • Purchase Information: Details of products or services you have purchased from us.
  • Mobile Device Identifiers: Unique device IDs, IP addresses, and mobile carrier information.
  • Location Data: GPS coordinates or other location-based services data when you interact with our location-enabled services.
  • Feedback: Your reviews, ratings, and comments about our products and services.
  • Social Media Information: Data from social media platforms when users choose to log in through these accounts.
  • Product Information: Details of products viewed, added to carts, or purchased on our e-commerce platform.

We collect this data through various means: user input forms, account settings, order processes, automated tracking technologies (like cookies and device fingerprinting), and third-party service providers.

Cookies

We employ cookies to enhance your experience on our websites and for analytics purposes:

  • Strictly Necessary Cookies: These ensure basic functions like login, session management, and website navigation.
  • Preference Cookies: Used to remember user preferences and settings, such as language selection.
  • Analytics Cookies: Help us understand user behavior, provide insights, and improve our services.

Users can manage non-essential cookies through our Cookie Manager, allowing them to control their tracking preferences.

Retention and Deletion

We retain personal data only for as long as necessary or required by law. The specific retention periods vary depending on the type of data and the purpose for which it was collected:

  • Financial and transaction data is retained for a period consistent with tax laws (e.g., 7 years).
  • Account information is kept until the user’s account is inactive for an extended period.
  • Analytics data may be anonymized and aggregated after a certain time for research and operational purposes.

Once the retention period has elapsed, or when data is no longer required, we securely delete or anonymize the data to ensure complete privacy.

Security Measures

We implement robust security measures to safeguard your personal data:

  • Encryption: We use encryption protocols to protect data during transmission and storage.
  • Secure Third-Party Processing: We engage reputable third-party service providers who adhere to strict data protection standards.
  • Access Controls: Only authorized personnel have access to sensitive data, and they are bound by confidentiality agreements.

Children’s Privacy

Wellness Spa does not knowingly collect or solicit personal information from children under the age of 18. Our services are intended for adults only, and we encourage parents to supervise their children’s online activities.

Your Rights and Choices

In accordance with applicable privacy laws, you have certain rights regarding your personal data:

  • Access and Correction: You can request access to the personal data we hold about you and ask for corrections if it is inaccurate or incomplete.
  • Data Deletion (Right to Erasure): In some jurisdictions, you have the right to request the deletion of your personal information under certain circumstances.
  • Data Portability: You may be entitled to receive your personal data in a structured, commonly used format and transfer it to another controller.
  • Object to Processing: You can object to the processing of your data for specific or all purposes, unless we have compelling legitimate grounds to continue.
  • Withdraw Consent: If you have consented to data processing, you can withdraw your consent at any time.

To exercise these rights, please contact our Data Protection Officer using the details provided below.

Contact Information

If you have questions about this Privacy Policy or your personal data, please reach out to us:

We regularly review and update our Privacy Policy to reflect changes in our practices and applicable laws. Any modifications will be posted on this page with an updated revision date. We encourage users to review this policy periodically to stay informed about how we protect their personal information.